last executing test programs: 2m39.090758191s ago: executing program 0 (id=888): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0xfe, 0x6}, {0x30, 0x1, 0x3, 0xfffff038}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 2m38.910258091s ago: executing program 0 (id=889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x331, 0x70bd25, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404400c}, 0x0) 2m38.786021137s ago: executing program 0 (id=890): r0 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000580)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) 2m38.710343921s ago: executing program 0 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m38.612273606s ago: executing program 0 (id=892): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="200e0400000055dc21f7"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 2m38.188035858s ago: executing program 0 (id=897): r0 = userfaultfd(0x80801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) flock(r0, 0x1) 2m37.794545999s ago: executing program 32 (id=897): r0 = userfaultfd(0x80801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) flock(r0, 0x1) 1m58.930529948s ago: executing program 1 (id=1268): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000cc0)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)="27050200000000000600002fb96d02000000000000008100", 0x18}], 0x1}, 0x20000000) 1m58.774905656s ago: executing program 1 (id=1270): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000580)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000780)=0x7f) 1m58.51597044s ago: executing program 1 (id=1275): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000024c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x10000000000001}}], [], 0x6b}}) 1m58.298748031s ago: executing program 1 (id=1279): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 1m57.667040524s ago: executing program 1 (id=1288): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x4, 0x0, &(0x7f00000003c0)) 1m57.147908551s ago: executing program 1 (id=1296): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1m56.859558617s ago: executing program 33 (id=1296): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 5.703149012s ago: executing program 4 (id=2399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4010) 5.482943893s ago: executing program 4 (id=2403): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) splice(r0, 0x0, r1, 0x0, 0x9aa7, 0x0) 5.293202654s ago: executing program 4 (id=2405): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x1, 0x2, {0x3, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) 5.044602836s ago: executing program 4 (id=2406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4.766558261s ago: executing program 4 (id=2409): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xed, 0x0, 0x4, 0x0, 0x1, 0x6}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0) 3.222906282s ago: executing program 4 (id=2417): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x20, 0x21, 0x2, {0x2, 0xb}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x0, 0xf, 0x81, "fe87c643e86e693b87d2134d0d0469a2f02ca914ca54bcc858c03cfd79247ac3afcc205905b235fba94c6d8717ea627b7547c8fe2575a51c10833d77c357cada8fe0846544234aecb981bbc8602a71daf01c8058e7578bf14f44b1091465e5c190dee7701997892f6210021d0125ec5701ade49cb8bfa42d8322bcc7c8237176cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x5}, 0x0}) 2.239547233s ago: executing program 2 (id=2423): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 2.023058734s ago: executing program 2 (id=2425): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "9a96944a5e6a8e8b9a61fd102c2bf04c688d7ddf41d61d869cda17d692990b6d05c7b559aeaf3180ba4095a5786bfd130e6118a2cd9b95d40448502d3b4cf5e9569c00998dcdb4e976f6368ea17bc56c463b9a909c8da23befb494e91c96066d8ff0cfbee66853696640d1d9c40e076276d68a1d5c3ab1941417d0b07c649e54ea9d78e5f06b072de9912b7e548c35e3f20180b3d71cc783252131b984e559126f72fc35137bc368571509b819bdf8645581bac4233ed104e2381e0760e479a9f0821e3acfa31d8ef625fcdabb9515e71a88fcaee1c18e39cca29ae42c227d2013ccc7627dd55ed98410ae506ac910fbd68688f797f9206542e6683f4374d9b1"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) 1.848585213s ago: executing program 2 (id=2426): socket(0x2, 0x3, 0x100) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4091, 0xffb}], 0x1, 0x6, 0x0) 1.693791481s ago: executing program 2 (id=2428): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000001240)=0x6, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000001080)) 1.641183024s ago: executing program 3 (id=2429): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) 1.628946885s ago: executing program 2 (id=2430): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800012, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.15585687s ago: executing program 2 (id=2432): syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x4004000, &(0x7f00000001c0)={[{@qnoenforce}, {@nodiscard}, {@nouuid}, {@usrquota}, {@inode32}, {@gquota}, {@lazytime}, {@usrquota}, {@gqnoenforce}, {@nodiscard}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x2000000000010002, 0x0) 1.079938563s ago: executing program 3 (id=2434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001400000018000180140002006e657464657673696d3000000000040008000d000800000005000b000900000008000a00cc"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 834.307287ms ago: executing program 5 (id=2435): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) 787.339029ms ago: executing program 5 (id=2436): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100) 655.669536ms ago: executing program 3 (id=2437): r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f000001f600)=""/105, 0x69, &(0x7f0000000240)={&(0x7f000001f680)={'crc32-generic\x00'}}) 483.956565ms ago: executing program 3 (id=2438): r0 = fsopen(&(0x7f000001f980)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 479.834385ms ago: executing program 5 (id=2439): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x4, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xa010100}, "0dfd11c20c4a77be"}}}}}, 0x0) 394.523319ms ago: executing program 3 (id=2440): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x8, {0x0, 0x0, 0x0, 0xe08, 0xfff, 0x0, 0x0, 0x0, 0x20, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f03f4c72a9c848552b3e8772fd29f35239d200", "24431a1e77a68e234f000000000000000010e200000000000000000000000200"}}) 327.322753ms ago: executing program 5 (id=2441): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 235.536027ms ago: executing program 5 (id=2442): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0xffffffffffffffff) 234.696287ms ago: executing program 3 (id=2443): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004014, &(0x7f0000000040)={[{@abort}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file1\x00') 0s ago: executing program 5 (id=2444): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) flistxattr(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ayer [ 218.402838][ T9211] comedi comedi3: comedi_test: 4 microvolt, 1 microsecond waveform attached [ 218.679581][ T9220] [U]  [ 218.717378][ T9223] team_slave_0: entered promiscuous mode [ 218.723609][ T9223] team_slave_1: entered promiscuous mode [ 218.763516][ T9223] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.783131][ T9223] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 218.827350][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 219.086246][ T9237] loop1: detected capacity change from 0 to 64 [ 219.246161][ T9237] overlayfs: upper fs needs to support d_type. [ 219.341818][ T9237] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 219.376788][ T9237] overlayfs: failed to set xattr on upper [ 219.406090][ T9237] overlayfs: ...falling back to redirect_dir=nofollow. [ 219.439555][ T9237] overlayfs: ...falling back to index=off. [ 219.445908][ T9237] overlayfs: ...falling back to uuid=null. [ 219.640132][ T9252] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1286'. [ 219.668114][ T5768] Bad inode number on dev loop1: 4160749571 is out of range [ 219.688757][ T5768] Bad inode number on dev loop1: 4160749571 is out of range [ 220.227328][ T1120] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.251759][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 220.327901][ T5083] Bluetooth: hci2: command tx timeout [ 220.341037][ T1120] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.444549][ T1120] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.609553][ T1120] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.211984][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.223537][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.236252][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.260646][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.268922][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.278940][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.439031][ T9276] loop4: detected capacity change from 0 to 32768 [ 221.523064][ T9276] JBD2: Ignoring recovery information on journal [ 221.627808][ T9276] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 221.788900][ T9301] netlink: 'syz.2.1304': attribute type 5 has an invalid length. [ 221.798174][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 222.048045][ T8158] ocfs2: Unmounting device (7,4) on (node local) [ 222.413126][ T9287] chnl_net:caif_netlink_parms(): no params data found [ 222.608693][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 222.834689][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.842105][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.849921][ T9287] bridge_slave_0: entered allmulticast mode [ 222.865540][ T9287] bridge_slave_0: entered promiscuous mode [ 222.891845][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.905394][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.917606][ T9287] bridge_slave_1: entered allmulticast mode [ 222.925283][ T9287] bridge_slave_1: entered promiscuous mode [ 222.939695][ T1120] hsr_slave_0: left promiscuous mode [ 222.946275][ T1120] hsr_slave_1: left promiscuous mode [ 222.953221][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.961261][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.968846][ T789] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 222.979137][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.997062][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.998134][ T5810] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 223.014952][ T1120] bridge_slave_1: left allmulticast mode [ 223.020954][ T1120] bridge_slave_1: left promiscuous mode [ 223.026786][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.055423][ T1120] bridge_slave_0: left allmulticast mode [ 223.061595][ T1120] bridge_slave_0: left promiscuous mode [ 223.068962][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.110841][ T1120] veth1_macvtap: left promiscuous mode [ 223.116677][ T1120] veth0_macvtap: left promiscuous mode [ 223.123074][ T1120] veth1_vlan: left promiscuous mode [ 223.128646][ T1120] veth0_vlan: left promiscuous mode [ 223.167719][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 223.185965][ T789] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.207496][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 223.213364][ T789] usb 3-1: config 0 has no interface number 0 [ 223.219242][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.237574][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.252215][ T789] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 223.263473][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.288394][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.296918][ T789] usb 3-1: Product: syz [ 223.299824][ T5810] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.323126][ T789] usb 3-1: Manufacturer: syz [ 223.328181][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.338613][ T5810] usb 4-1: config 0 descriptor?? [ 223.355862][ T789] usb 3-1: SerialNumber: syz [ 223.367332][ T5083] Bluetooth: hci0: command tx timeout [ 223.380553][ T789] usb 3-1: config 0 descriptor?? [ 223.389113][ T789] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 223.407918][ T789] usb 3-1: selecting invalid altsetting 1 [ 223.413714][ T789] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 223.440947][ T789] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 223.465324][ T789] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 223.484729][ T789] usb 3-1: media controller created [ 223.527864][ T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.607440][ T789] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 223.629352][ T789] zl10353_read_register: readreg error (reg=127, ret==-71) [ 223.649324][ T789] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 223.766744][ T789] usb 3-1: USB disconnect, device number 14 [ 223.811600][ T5810] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max [ 223.831061][ T5810] microsoft 0003:045E:07DA.0019: unsupported Resolution Multiplier 0 [ 223.889775][ T5810] microsoft 0003:045E:07DA.0019: implement() called with n (152) > 32! (kworker/1:5) [ 224.012796][ T5810] microsoft 0003:045E:07DA.0019: No inputs registered, leaving [ 224.047695][ T5810] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 224.067688][ T5810] microsoft 0003:045E:07DA.0019: no inputs found [ 224.080359][ T5810] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 224.114533][ T5810] usb 4-1: USB disconnect, device number 11 [ 224.152085][ T9342] fido_id[9342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 224.638077][ T1120] team0 (unregistering): Port device team_slave_1 removed [ 224.723452][ T1120] team0 (unregistering): Port device team_slave_0 removed [ 224.737048][ T5840] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 224.826614][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.913251][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.958361][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 224.968695][ T5840] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.980091][ T5840] usb 3-1: config 0 has no interface number 0 [ 225.015012][ T5840] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 225.024378][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.048291][ T5840] usb 3-1: Product: syz [ 225.052547][ T5840] usb 3-1: Manufacturer: syz [ 225.057272][ T5840] usb 3-1: SerialNumber: syz [ 225.075726][ T5840] usb 3-1: config 0 descriptor?? [ 225.104624][ T5840] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 225.118671][ T9348] loop3: detected capacity change from 0 to 32768 [ 225.119810][ T5840] usb 3-1: selecting invalid altsetting 1 [ 225.140203][ T5840] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 225.170212][ T5840] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.202314][ T5840] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 225.222901][ T9348] (syz.3.1316,9348,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 225.239473][ T9348] (syz.3.1316,9348,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 225.248715][ T5840] usb 3-1: media controller created [ 225.304051][ T9348] JBD2: Ignoring recovery information on journal [ 225.305509][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.340642][ T9346] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 225.418394][ T9348] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 225.454430][ T5083] Bluetooth: hci0: command tx timeout [ 225.510100][ T5840] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 225.525183][ T5840] zl10353_read_register: readreg error (reg=127, ret==-71) [ 225.533374][ T5840] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 225.627083][ T5840] usb 3-1: USB disconnect, device number 15 [ 225.807243][ T9348] (syz.3.1316,9348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 225.849410][ T9348] (syz.3.1316,9348,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 225.862944][ T9348] (syz.3.1316,9348,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 225.902090][ T9348] (syz.3.1316,9348,0):ocfs2_quota_read:201 ERROR: status = -5 [ 225.928835][ T9348] __quota_error: 3 callbacks suppressed [ 225.928852][ T9348] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 4 [ 225.959915][ T9348] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 226.009264][ T9348] (syz.3.1316,9348,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 226.035889][ T1120] bond0 (unregistering): Released all slaves [ 226.066629][ T9348] (syz.3.1316,9348,0):ocfs2_mknod:314 ERROR: status = -5 [ 226.114720][ T9348] (syz.3.1316,9348,0):ocfs2_mknod:502 ERROR: status = -5 [ 226.157035][ T9348] (syz.3.1316,9348,0):ocfs2_create:676 ERROR: status = -5 [ 226.370379][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 226.414017][ T9287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.471097][ T9287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.629976][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 226.649326][ T9287] team0: Port device team_slave_0 added [ 226.705455][ T9287] team0: Port device team_slave_1 added [ 226.841828][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.870433][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.917923][ T9287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.954522][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.981442][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.024612][ T9369] loop2: detected capacity change from 0 to 2048 [ 227.031650][ T9287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.096001][ T9369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.153872][ T1120] IPVS: stop unused estimator thread 0... [ 227.218541][ T9287] hsr_slave_0: entered promiscuous mode [ 227.247977][ T9287] hsr_slave_1: entered promiscuous mode [ 227.262766][ T9287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.278207][ T9287] Cannot create hsr debugfs directory [ 227.508308][ T9381] loop4: detected capacity change from 0 to 2048 [ 227.527154][ T5083] Bluetooth: hci0: command tx timeout [ 227.614488][ T9386] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.806501][ T9392] loop3: detected capacity change from 0 to 256 [ 227.841370][ T9392] exfat: Deprecated parameter 'namecase' [ 227.906464][ T9386] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 227.948235][ T9392] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 227.967413][ T9386] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 228.044288][ T9386] Remounting filesystem read-only [ 228.049071][ T27] audit: type=1326 audit(1776901160.273:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.1333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x0 [ 228.093040][ T8158] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 228.103686][ T8158] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 228.124021][ T27] audit: type=1400 audit(1776901160.313:205): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 228.239248][ T9287] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.265013][ T8158] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 228.289077][ T8158] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 228.301780][ T8158] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 228.325294][ T9287] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.360649][ T9287] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.367215][ T8158] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 228.367396][ T8158] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 228.367415][ T8158] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 228.367433][ T8158] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 228.368073][ T8158] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 228.429345][ T9287] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.465766][ T8158] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 228.485014][ T8158] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 228.504925][ T8158] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 228.531005][ T8158] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 228.568590][ T8158] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 228.575433][ T8158] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 228.607744][ T8158] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 228.615125][ T8158] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 228.644370][ T8158] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 228.712192][ T9287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.802915][ T9287] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.846766][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.854017][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.939237][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.946529][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.618610][ T5083] Bluetooth: hci0: command tx timeout [ 229.804463][ T9412] loop3: detected capacity change from 0 to 32768 [ 229.954142][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.612927][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1348'. [ 231.038598][ T9287] veth0_vlan: entered promiscuous mode [ 231.083359][ T9475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1352'. [ 231.094095][ T9287] veth1_vlan: entered promiscuous mode [ 231.192819][ T9287] veth0_macvtap: entered promiscuous mode [ 231.224281][ T9287] veth1_macvtap: entered promiscuous mode [ 231.295235][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.322385][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.355364][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.385509][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.412524][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.435451][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.481116][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.530921][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.557959][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.587551][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.627371][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.647537][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.677169][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.695931][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.743195][ T9287] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.779431][ T9287] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.797285][ T9287] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.806104][ T9287] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.901165][ T9497] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1359'. [ 231.921580][ T9497] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1359'. [ 232.113704][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.141201][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.254626][ T9500] loop2: detected capacity change from 0 to 8192 [ 232.265389][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.285656][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.321268][ T9500] REISERFS warning (device loop2): super-6510 reiserfs_parse_options: journal device was already specified to be ./file0 [ 233.137176][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 233.337511][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 233.360566][ T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 233.388209][ T23] usb 4-1: config 0 has no interface number 0 [ 233.399637][ T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 233.417205][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.432977][ T23] usb 4-1: Product: syz [ 233.447162][ T23] usb 4-1: Manufacturer: syz [ 233.451974][ T23] usb 4-1: SerialNumber: syz [ 233.464034][ T23] usb 4-1: config 0 descriptor?? [ 233.482793][ T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 233.707724][ T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 233.724713][ T9529] loop2: detected capacity change from 0 to 32768 [ 233.758672][ T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 233.778254][ T9529] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1367 (9529) [ 233.835549][ T9529] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.878453][ T9529] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 233.919248][ T9529] BTRFS info (device loop2): using free space tree [ 234.135952][ T9529] BTRFS info (device loop2): enabling ssd optimizations [ 234.153740][ T9529] BTRFS info (device loop2): auto enabling async discard [ 234.199902][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 234.211321][ T5810] usb 4-1: USB disconnect, device number 12 [ 234.247994][ T5810] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 234.328286][ T5810] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 234.368221][ T5810] quatech2 4-1:0.51: device disconnected [ 234.561079][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.755145][ T6409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (6409) [ 235.585342][ T9596] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.644251][ T9598] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 236.516483][ T9631] loop4: detected capacity change from 0 to 8 [ 237.143208][ T9649] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1397'. [ 237.187206][ T9649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'. [ 237.351885][ T9653] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 237.381255][ T9653] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 237.395651][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1400'. [ 237.414333][ T9653] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 237.432692][ T9653] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 237.467081][ T27] audit: type=1326 audit(1776901169.693:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 237.469540][ T9653] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 237.524635][ T27] audit: type=1326 audit(1776901169.693:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 237.577926][ T9653] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 237.585464][ T9653] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 237.604991][ T27] audit: type=1326 audit(1776901169.733:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd1d35d04e code=0x7ffc0000 [ 237.637388][ T9653] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 237.658653][ T9653] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 237.689473][ T9653] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 237.709346][ T27] audit: type=1326 audit(1776901169.733:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd1d35d04e code=0x7ffc0000 [ 237.733135][ T9653] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 237.760856][ T9653] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 237.795098][ T9653] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 237.809305][ T27] audit: type=1326 audit(1776901169.733:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 237.838854][ T9653] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 237.856546][ T9653] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 237.866824][ T27] audit: type=1326 audit(1776901169.733:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 237.897551][ T9653] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 237.913445][ T9653] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 237.927137][ T9653] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 237.942130][ T27] audit: type=1326 audit(1776901169.733:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 237.975566][ T9653] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 237.985762][ T9653] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 238.006922][ T9653] comedi comedi3: 8255: I/O port conflict (0x40,4) [ 238.022973][ T27] audit: type=1326 audit(1776901169.733:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.2.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 238.056135][ T9653] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 238.066280][ T9653] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 238.086589][ T9653] comedi comedi3: 8255: I/O port conflict (0x8000003,4) [ 238.094107][ T27] audit: type=1326 audit(1776901169.983:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.4.1404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f287239c819 code=0x0 [ 238.776076][ T5810] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 238.968161][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 238.975698][ T5810] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.994740][ T5810] usb 6-1: config 179 has no interface number 0 [ 239.007195][ T5810] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 239.030824][ T5810] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 239.042324][ T5810] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.054470][ T5810] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 239.087980][ T5810] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 239.139087][ T5810] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 239.177830][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.213687][ T9686] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 239.402457][ T9692] loop2: detected capacity change from 0 to 32768 [ 239.436547][ T9692] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 239.539365][ T9692] XFS (loop2): Ending clean mount [ 239.568991][ T9692] XFS (loop2): Quotacheck needed: Please wait. [ 239.729235][ T9692] XFS (loop2): Quotacheck: Done. [ 239.903949][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.103208][ T9] usb 6-1: USB disconnect, device number 2 [ 240.103213][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 240.103329][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 240.298754][ T9735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1428'. [ 240.387867][ T9739] loop4: detected capacity change from 0 to 128 [ 240.487432][ T5770] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 240.557362][ T9739] EXT4-fs (loop4): Test dummy encryption mode enabled [ 240.576309][ T9739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 240.585743][ T9739] System zones: 1-3, 19-19, 35-36 [ 240.599627][ T9739] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 240.620350][ T9739] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.687126][ T5770] usb 4-1: Using ep0 maxpacket: 8 [ 240.701056][ T5770] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 240.715075][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.723210][ T5770] usb 4-1: Product: syz [ 240.730513][ T5770] usb 4-1: Manufacturer: syz [ 240.735163][ T5770] usb 4-1: SerialNumber: syz [ 240.814522][ T8158] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.205528][ T5770] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 241.221394][ T9762] can0: slcan on ptm0. [ 241.256486][ T5770] mxuport: probe of 4-1:254.0 failed with error -5 [ 241.351633][ T9760] can0 (unregistered): slcan off ptm0. [ 241.460950][ T5770] usb 4-1: USB disconnect, device number 13 [ 241.848390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.190441][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1450'. [ 242.363858][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.381980][ T9808] Bluetooth: MGMT ver 1.22 [ 242.389372][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.402941][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.424513][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.436122][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.451267][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.461596][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.473643][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.251347][ T9840] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 244.070375][ T9832] loop5: detected capacity change from 0 to 32768 [ 244.137796][ T9832] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 244.242581][ T9832] (syz.5.1461,9832,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 244.271079][ T9832] (syz.5.1461,9832,0):ocfs2_trim_mainbm:7610 ERROR: status = -12 [ 244.316232][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 244.467795][ T9872] tipc: Started in network mode [ 244.477969][ T9872] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 244.527168][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 244.543319][ T9872] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 244.568625][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.592193][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.597824][ T9872] tipc: Enabled bearer , priority 10 [ 244.624591][ T9287] ocfs2: Unmounting device (7,5) on (node local) [ 244.637796][ T9878] CUSE: unknown device info "" [ 244.643058][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 244.656388][ T9878] CUSE: unknown device info "" [ 244.674193][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 244.684847][ T9878] CUSE: unknown device info "" [ 244.704879][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.718249][ T9878] CUSE: unknown device info "" [ 244.728471][ T9878] CUSE: unknown device info "ÿ" [ 244.738594][ T9878] CUSE: unknown device info "" [ 244.744933][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 244.767128][ T9878] CUSE: unknown device info "" [ 244.772189][ T23] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.801441][ T9878] CUSE: unknown device info "ÿ" [ 244.818466][ T23] usb 4-1: Manufacturer: syz [ 244.823755][ T9878] CUSE: DEVNAME unspecified [ 244.846166][ T23] usb 4-1: config 0 descriptor?? [ 245.247082][ T23] rc_core: IR keymap rc-hauppauge not found [ 245.265130][ T23] Registered IR keymap rc-empty [ 245.293517][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.337254][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.389956][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 245.424188][ T9895] mmap: syz.2.1480 (9895): VmData 37584896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 245.428163][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 245.472633][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.537669][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.589053][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.631801][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.667345][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.708487][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.717549][ T789] tipc: Node number set to 1 [ 245.763128][ T9905] netlink: 'syz.4.1485': attribute type 2 has an invalid length. [ 245.781290][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.817242][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.857150][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.888762][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 245.953885][ T23] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 245.990456][ T23] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 246.025007][ T9913] netlink: 'syz.2.1489': attribute type 10 has an invalid length. [ 246.041053][ T23] usb 4-1: USB disconnect, device number 14 [ 246.181456][ T9913] vlan0: entered allmulticast mode [ 246.186806][ T9913] veth0_vlan: entered allmulticast mode [ 246.195630][ T9913] team0: Port device vlan0 added [ 246.563550][ T9925] fuse: Invalid rootmode [ 247.005427][ T9939] loop4: detected capacity change from 0 to 64 [ 247.249041][ T9922] loop2: detected capacity change from 0 to 32768 [ 247.321521][ T9949] ALSA: mixer_oss: invalid OSS volume 'GAIÅ' [ 247.368351][ T5083] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 247.377213][ T5083] Bluetooth: hci2: Injecting HCI hardware error event [ 247.386213][ T5083] Bluetooth: hci2: hardware error 0x00 [ 247.991739][ T9969] loop5: detected capacity change from 0 to 8 [ 248.128500][ T9969] SQUASHFS error: xz decompression failed, data probably corrupt [ 248.157456][ T9969] SQUASHFS error: Failed to read block 0x108: -5 [ 248.171649][ T9969] SQUASHFS error: Unable to read metadata cache entry [106] [ 248.198758][ T9969] SQUASHFS error: Unable to read inode 0x11f [ 248.903033][ T9997] openvswitch: netlink: Actions may not be safe on all matching packets [ 249.270104][T10010] loop3: detected capacity change from 0 to 4096 [ 249.412932][T10020] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.617144][ T5083] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 249.996253][T10041] netem: invalid attributes len -24 [ 250.258378][T10046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.264995][T10046] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 250.494618][T10046] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.561835][T10046] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 250.697046][T10046] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 250.972508][T10052] loop2: detected capacity change from 0 to 32768 [ 251.042214][T10052] JBD2: Ignoring recovery information on journal [ 251.224639][T10052] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 251.504916][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 252.083802][T10093] loop2: detected capacity change from 0 to 4096 [ 252.178108][T10098] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.224019][T10097] loop3: detected capacity change from 0 to 256 [ 252.260326][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 252.316704][T10097] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 252.567152][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.877129][ T5839] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 253.107167][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 253.114577][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.136357][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.167374][ T5839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.197359][ T5839] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.227037][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.264974][ T5839] usb 6-1: config 0 descriptor?? [ 253.302139][T10130] loop3: detected capacity change from 0 to 4096 [ 253.321267][T10130] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 253.489095][T10130] ntfs3: loop3: failed to convert "c46c" to maccenteuro [ 253.730129][ T5839] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 253.754643][ T5839] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 253.777645][ T5839] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001A/input/input10 [ 253.824154][ T5839] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 254.094117][ T23] usb 6-1: USB disconnect, device number 3 [ 254.327476][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 254.648445][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.934145][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 255.350840][T10198] loop4: detected capacity change from 0 to 512 [ 255.380352][T10198] EXT4-fs: Ignoring removed bh option [ 255.431408][T10198] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 255.533863][T10198] EXT4-fs (loop4): 1 truncate cleaned up [ 255.602966][T10198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.683216][T10175] loop3: detected capacity change from 0 to 32768 [ 255.697232][ T27] audit: type=1800 audit(1776901187.923:215): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1587" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 255.761725][T10211] loop5: detected capacity change from 0 to 128 [ 255.795976][T10211] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 255.825103][T10175] JBD2: Ignoring recovery information on journal [ 255.861391][ T8158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.935104][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.967617][T10217] loop2: detected capacity change from 0 to 64 [ 256.003979][T10211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.053137][T10175] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 256.286073][ T27] audit: type=1800 audit(1776901188.513:216): pid=10217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1594" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 256.565757][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 256.578202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.727106][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 257.487346][T10259] loop3: detected capacity change from 0 to 256 [ 258.128071][T10278] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1615'. [ 258.184153][T10278] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1615'. [ 258.514454][T10261] loop2: detected capacity change from 0 to 32768 [ 258.582672][T10261] non-latin1 character 0xffff found in JFS file name [ 258.607372][T10261] mount with iocharset=utf8 to access [ 258.623528][T10292] macsec1: entered promiscuous mode [ 258.640385][T10292] macsec1: entered allmulticast mode [ 259.008207][T10275] loop4: detected capacity change from 0 to 32768 [ 259.137145][ T789] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 259.337428][ T789] usb 6-1: Using ep0 maxpacket: 16 [ 259.359015][ T789] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 259.392599][ T789] usb 6-1: config 127 has no interface number 0 [ 259.407268][ T789] usb 6-1: config 127 interface 124 has no altsetting 0 [ 259.437767][ T789] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 259.460670][ T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.480863][ T789] usb 6-1: Product: syz [ 259.494065][T10316] loop2: detected capacity change from 0 to 64 [ 259.507044][ T789] usb 6-1: Manufacturer: syz [ 259.517634][ T789] usb 6-1: SerialNumber: syz [ 259.800225][T10322] loop4: detected capacity change from 0 to 512 [ 259.887732][T10322] EXT4-fs (loop4): orphan cleanup on readonly fs [ 259.932838][T10322] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 260.022296][T10322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 260.065956][T10322] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1629: Failed to acquire dquot type 1 [ 260.102208][T10322] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 260.153251][T10322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 260.195060][T10322] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1629: Failed to acquire dquot type 1 [ 260.226180][T10322] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1629: bg 0: block 248: padding at end of block bitmap is not set [ 260.241871][T10322] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 260.280505][T10322] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 260.292523][T10322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 260.314023][T10322] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1629: Failed to acquire dquot type 1 [ 260.329990][T10322] EXT4-fs (loop4): 1 orphan inode deleted [ 260.337770][ T789] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 260.369591][T10322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.418038][ T5810] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 260.521542][ T8158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.611306][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 260.641032][ T5810] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.685858][ T5810] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.708833][ T5810] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 260.737483][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.769877][ T5810] usb 4-1: config 0 descriptor?? [ 260.822038][ T789] usb 6-1: failed to restore interface 124 altsetting 11 (error=-71) [ 260.896106][ T789] usb 6-1: USB disconnect, device number 4 [ 261.234250][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0xe [ 261.245514][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.259355][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.277824][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.288845][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.296021][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.313697][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.326219][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.342877][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.360445][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.383705][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.400982][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.413803][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.432038][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.447102][ T5810] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 261.462302][ T5810] logitech 0003:046D:C24F.001B: hidraw0: USB HID v0.0a Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0 [ 261.477720][ T5810] logitech 0003:046D:C24F.001B: no inputs found [ 261.507969][ T5810] usb 4-1: USB disconnect, device number 15 [ 261.703225][T10367] fido_id[10367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 262.245306][T10384] overlayfs: missing 'lowerdir' [ 262.454114][T10394] loop3: detected capacity change from 0 to 512 [ 262.512275][T10394] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1656: iget: bad i_size value: 38620345925642 [ 262.539037][T10394] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1656: couldn't read orphan inode 15 (err -117) [ 262.553150][T10394] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.679970][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 262.759234][T10398] ALSA: seq fatal error: cannot create timer (-19) [ 262.939174][T10413] netlink: 'syz.3.1663': attribute type 1 has an invalid length. [ 263.042641][T10416] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 263.050102][T10416] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 263.056647][T10416] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 263.536692][T10433] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1671'. [ 263.552725][T10433] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1671'. [ 264.294926][T10437] loop5: detected capacity change from 0 to 40427 [ 264.298479][T10439] loop3: detected capacity change from 0 to 32768 [ 264.314363][T10437] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 264.330000][T10437] F2FS-fs (loop5): invalid crc value [ 264.347503][T10437] F2FS-fs (loop5): Found nat_bits in checkpoint [ 264.482424][T10437] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 264.620155][ T27] audit: type=1800 audit(1776901196.853:217): pid=10437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1672" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 264.717907][ T9287] syz-executor: attempt to access beyond end of device [ 264.717907][ T9287] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 264.739208][ T9287] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 266.051211][T10468] loop2: detected capacity change from 0 to 32768 [ 266.172711][T10468] JBD2: Ignoring recovery information on journal [ 266.247219][T10474] loop3: detected capacity change from 0 to 32768 [ 266.319431][T10474] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 266.352881][T10468] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 266.597898][T10474] XFS (loop3): Ending clean mount [ 266.694838][T10500] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 266.719799][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 266.722561][T10500] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 266.757976][T10500] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 266.807580][T10500] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 266.827559][T10500] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 266.835233][T10502] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.1697'. [ 266.854884][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 266.864302][T10500] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 266.887602][T10500] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 266.894207][T10500] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 266.924332][T10500] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 266.942714][T10500] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 266.966914][T10500] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 266.993591][T10500] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 267.623904][T10522] netlink: 'syz.2.1706': attribute type 1 has an invalid length. [ 267.728318][ T23] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 267.938180][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.960630][ T23] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 267.980242][ T23] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 268.007113][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.028207][ T23] usb 6-1: config 0 descriptor?? [ 268.049021][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 268.055746][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 268.096255][T10539] loop2: detected capacity change from 0 to 1024 [ 268.104400][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 268.120353][T10539] EXT4-fs: Ignoring removed bh option [ 268.170352][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 268.192803][ T23] usb 6-1: media controller created [ 268.216147][T10539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.241166][T10546] trusted_key: encrypted_key: insufficient parameters specified [ 268.251792][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.310986][ T27] audit: type=1326 audit(1776901200.543:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.4.1717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x0 [ 268.366765][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 268.383872][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 268.455913][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 268.492897][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 268.517580][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 268.551231][ T23] usb 6-1: USB disconnect, device number 5 [ 268.562497][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.638734][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 268.820384][T10557] netlink: 'syz.3.1720': attribute type 5 has an invalid length. [ 270.478739][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1746'. [ 271.247233][T10631] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 272.494020][T10658] loop5: detected capacity change from 0 to 1024 [ 272.538512][T10658] EXT4-fs: Ignoring removed bh option [ 272.581036][T10658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.798685][ T9287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.903105][T10669] loop5: detected capacity change from 0 to 64 [ 273.194726][T10678] loop5: detected capacity change from 0 to 512 [ 273.202421][T10678] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.431502][T10682] loop2: detected capacity change from 0 to 164 [ 273.953604][T10694] loop5: detected capacity change from 0 to 2048 [ 273.990680][T10694] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 274.056017][T10694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.149675][T10680] loop3: detected capacity change from 0 to 32768 [ 274.217438][T10680] JBD2: Ignoring recovery information on journal [ 274.437515][T10680] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 274.556132][T10680] (syz.3.1776,10680,1):ocfs2_remount:630 ERROR: Cannot change data mode on remount [ 274.786219][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 275.047246][ T5839] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 275.249060][ T5839] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 275.277452][ T5839] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 275.286402][ T5839] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 275.322208][ T5839] usb 3-1: config 220 has no interface number 2 [ 275.340079][ T5839] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 275.395138][ T5839] usb 3-1: config 220 interface 0 has no altsetting 0 [ 275.412809][ T5839] usb 3-1: config 220 interface 76 has no altsetting 0 [ 275.427568][ T5839] usb 3-1: config 220 interface 1 has no altsetting 0 [ 275.467481][ T5839] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 275.476608][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.490500][ T5839] usb 3-1: Product: syz [ 275.496911][ T5839] usb 3-1: Manufacturer: syz [ 275.502086][ T5839] usb 3-1: SerialNumber: syz [ 275.509837][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1805'. [ 275.703664][ T27] audit: type=1326 audit(1776901207.933:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 275.726183][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.754763][ T5839] usb 3-1: selecting invalid altsetting 0 [ 275.772686][ T5839] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 275.781334][ T27] audit: type=1326 audit(1776901207.973:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 275.804045][ T5839] usb 3-1: No valid video chain found. [ 275.818149][ T27] audit: type=1326 audit(1776901207.973:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 275.847496][ T5839] usb 3-1: selecting invalid altsetting 0 [ 275.865288][ T5839] usbtest: probe of 3-1:220.1 failed with error -22 [ 275.876397][ T5839] usb 3-1: USB disconnect, device number 16 [ 275.887029][ T27] audit: type=1326 audit(1776901207.973:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 275.999273][ T27] audit: type=1326 audit(1776901207.983:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 276.033618][ T27] audit: type=1326 audit(1776901207.983:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 276.087312][ T27] audit: type=1326 audit(1776901207.983:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 276.147748][ T27] audit: type=1326 audit(1776901207.983:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 276.215831][ T27] audit: type=1326 audit(1776901207.983:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 276.280454][ T27] audit: type=1326 audit(1776901207.983:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10746 comm="syz.4.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 276.412820][T10761] rdma_op ffff88807debf9f0 conn xmit_rdma 0000000000000000 [ 276.847751][T10776] CIFS mount error: No usable UNC path provided in device string! [ 276.847751][T10776] [ 276.863081][T10776] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 277.106025][T10786] loop2: detected capacity change from 0 to 2048 [ 277.173583][T10786] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 277.221928][T10786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.388284][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 277.583546][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.605896][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.657326][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.666433][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.695696][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.708926][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.719672][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 277.728742][ T23] usb 4-1: Product: syz [ 277.732953][ T23] usb 4-1: Manufacturer: syz [ 277.750898][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 277.756208][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 277.787910][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 277.796614][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 278.657334][ T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 278.847326][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 278.859417][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1847'. [ 278.874934][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.896785][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.922659][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 278.942193][ T23] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 278.957078][ T23] usb 3-1: Product: syz [ 278.967210][ T23] usb 3-1: Manufacturer: syz [ 278.993844][ T23] hub 3-1:4.0: USB hub found [ 279.212254][ T23] hub 3-1:4.0: 3 ports detected [ 279.624582][ T23] hub 3-1:4.0: set hub depth failed [ 279.652301][ T23] usb 3-1: USB disconnect, device number 17 [ 280.071349][ T5810] usb 4-1: USB disconnect, device number 16 [ 280.484317][T10871] CUSE: info not properly terminated [ 281.044811][T10864] loop3: detected capacity change from 0 to 40427 [ 281.085567][T10864] F2FS-fs (loop3): invalid crc value [ 281.115650][T10864] F2FS-fs (loop3): Found nat_bits in checkpoint [ 281.269870][T10864] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 281.447122][ T5775] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.603971][ T5777] syz-executor: attempt to access beyond end of device [ 281.603971][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.622797][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 282.261905][T10910] loop5: detected capacity change from 0 to 32768 [ 282.903716][T10921] loop3: detected capacity change from 0 to 40427 [ 282.930148][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 282.930162][ T27] audit: type=1326 audit(1776901215.163:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7fc00000 [ 282.970118][T10921] F2FS-fs (loop3): invalid crc value [ 282.987985][T10921] F2FS-fs (loop3): Found nat_bits in checkpoint [ 283.097560][T10921] F2FS-fs (loop3): Start checkpoint disabled! [ 283.117741][T10921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 283.527449][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.947329][ T27] audit: type=1326 audit(1776901216.173:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 283.947389][ T27] audit: type=1326 audit(1776901216.173:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 283.947432][ T27] audit: type=1326 audit(1776901216.173:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 283.947475][ T27] audit: type=1326 audit(1776901216.173:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 283.947518][ T27] audit: type=1326 audit(1776901216.173:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 283.947561][ T27] audit: type=1326 audit(1776901216.173:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 283.947605][ T27] audit: type=1326 audit(1776901216.173:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 283.947648][ T27] audit: type=1326 audit(1776901216.173:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd1d39c819 code=0x7ffc0000 [ 284.503290][T10959] loop5: detected capacity change from 0 to 32768 [ 284.524538][T10959] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 284.619154][ T6409] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 284.822720][T10969] tipc: Enabling not permitted [ 284.828932][T10969] tipc: Enabling of bearer rejected, failed to enable media [ 285.367547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.446874][T10976] loop2: detected capacity change from 0 to 32768 [ 285.457342][T10976] XFS: attr2 mount option is deprecated. [ 285.478928][T10976] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 285.547817][T10976] XFS (loop2): Ending clean mount [ 285.559156][T10976] XFS (loop2): Quotacheck needed: Please wait. [ 285.653561][T10976] XFS (loop2): Quotacheck: Done. [ 285.726113][ T5770] kernel read not supported for file /dsp (pid: 5770 comm: kworker/1:3) [ 285.989970][T10997] loop5: detected capacity change from 0 to 8 [ 286.030872][T10997] SQUASHFS error: lzo decompression failed, data probably corrupt [ 286.077126][T10997] SQUASHFS error: Failed to read block 0x91: -5 [ 286.097141][T10997] SQUASHFS error: Unable to read metadata cache entry [8f] [ 286.117844][T10997] SQUASHFS error: Unable to read inode 0x7 [ 286.134277][T10982] loop3: detected capacity change from 0 to 32768 [ 286.147833][T10982] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 286.382832][ T6409] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 286.807702][ T5775] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.937088][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 286.976327][T10997] loop5: detected capacity change from 0 to 32768 [ 287.002269][T10997] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1918 (10997) [ 287.097044][T10997] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 287.147167][T10997] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 287.156496][T10997] BTRFS info (device loop5): force zlib compression, level 3 [ 287.215409][T10997] BTRFS info (device loop5): force clearing of disk cache [ 287.237110][T10997] BTRFS info (device loop5): setting nodatasum [ 287.243359][T10997] BTRFS info (device loop5): allowing degraded mounts [ 287.300134][T10997] BTRFS info (device loop5): enabling disk space caching [ 287.328195][T10997] BTRFS info (device loop5): disk space caching is enabled [ 287.585442][T10997] BTRFS info (device loop5): auto enabling async discard [ 287.638746][T11013] loop4: detected capacity change from 0 to 32768 [ 287.652499][T10997] BTRFS info (device loop5): rebuilding free space tree [ 287.693994][T10997] BTRFS info (device loop5): disabling free space tree [ 287.708569][T10997] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 287.722247][T10997] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 287.795687][T11013] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 287.822705][T11013] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 288.023655][T11013] XFS (loop4): Ending clean mount [ 288.038595][T10997] BTRFS warning (device loop5): can't set the compat_ro:1 feature bit while mounted [ 288.056635][T11013] XFS (loop4): Quotacheck needed: Please wait. [ 288.127953][ T166] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 288.158264][ T166] XFS (loop4): Unmount and run xfs_repair [ 288.173903][ T9287] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 288.184545][ T166] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 288.197078][ T166] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 288.221738][ T166] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 288.251328][ T166] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 288.270248][ T166] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 288.308984][ T166] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 288.352334][ T166] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 288.400777][ T166] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 288.431780][ T166] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 288.457832][ T166] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 288.514334][T11013] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 288.803231][T11057] netlink: 'syz.5.1932': attribute type 3 has an invalid length. [ 288.849024][T11057] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1932'. [ 288.883963][ T8158] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 288.969888][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'. [ 289.477974][T11071] pim6reg2: entered allmulticast mode [ 290.139543][ T23] kernel write not supported for file /sequencer (pid: 23 comm: kworker/1:0) [ 290.347982][T11098] netlink: 'syz.3.1953': attribute type 3 has an invalid length. [ 290.682881][T11086] loop2: detected capacity change from 0 to 32768 [ 290.789736][T11086] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 290.997257][T11086] XFS (loop2): Ending clean mount [ 291.192718][ T5772] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 291.967430][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 292.187175][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 292.246469][ T9] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 292.265884][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.280966][T11152] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1977'. [ 292.295219][ T9] usb 4-1: Product: syz [ 292.301812][ T9] usb 4-1: Manufacturer: syz [ 292.306486][ T9] usb 4-1: SerialNumber: syz [ 292.333463][ T9] usb 4-1: config 0 descriptor?? [ 292.370826][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 292.404703][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 292.435913][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 292.461970][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 292.481268][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 292.509013][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.537753][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 292.555999][ T9] usb 4-1: media controller created [ 292.610077][T11138] ttusb2: i2c wr len=58 too high [ 292.651112][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.678808][T11158] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 292.696303][ T9] usb 4-1: selecting invalid altsetting 3 [ 292.705501][ T9] ttusb2: set interface to alts=3 failed [ 292.768127][ T9] DVB: Unable to find symbol tda10086_attach() [ 292.774455][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 292.797539][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 292.803424][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 292.858165][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 292.863981][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 292.899683][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 292.937428][ T9] usb 4-1: USB disconnect, device number 17 [ 292.962859][T11165] loop2: detected capacity change from 0 to 128 [ 292.975115][T11165] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 292.996882][T11165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.104304][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 293.441576][T11173] program syz.2.1987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.513942][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1989'. [ 293.557146][T11175] netlink: 'syz.5.1989': attribute type 22 has an invalid length. [ 293.566887][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1989'. [ 293.754827][T11183] loop3: detected capacity change from 0 to 64 [ 293.919010][ T789] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 294.107053][ T789] usb 3-1: Using ep0 maxpacket: 8 [ 294.114667][ T789] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 294.127616][ T789] usb 3-1: config 179 has no interface number 0 [ 294.133957][ T789] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 294.170176][ T789] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 294.170536][T11190] loop3: detected capacity change from 0 to 128 [ 294.182007][ T789] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.202487][ T5775] Bluetooth: hci0: hardware error 0x09 [ 294.211460][ T789] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 294.297091][ T789] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 294.347168][ T789] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 294.356386][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.373708][T11179] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.402162][T11190] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 294.576002][ T5777] sysv_free_block: trying to free block not in datazone [ 294.627413][ T5777] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 294.833681][T11179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.882338][T11179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.095143][T11210] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 295.348690][ T23] usb 3-1: USB disconnect, device number 18 [ 295.348705][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 295.363426][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 295.557086][ T5810] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 295.647811][T11218] loop3: detected capacity change from 0 to 32768 [ 295.663997][T11218] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 295.757148][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 295.774443][ T5810] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 295.791247][ T6409] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 295.802870][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.812245][ T5810] usb 6-1: Product: syz [ 295.816490][ T5810] usb 6-1: Manufacturer: syz [ 295.832011][ T5810] usb 6-1: SerialNumber: syz [ 295.851093][ T5810] usb 6-1: config 0 descriptor?? [ 295.864633][ T5810] gspca_main: se401-2.14.0 probing 047d:5003 [ 296.069008][T11222] sit0: entered promiscuous mode [ 296.112887][T11222] netlink: 'syz.2.2011': attribute type 1 has an invalid length. [ 296.132523][T11222] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2011'. [ 296.248447][ T5775] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 296.309124][ T5810] gspca_se401: Wrong descriptor type [ 296.509635][T11220] loop3: detected capacity change from 0 to 40427 [ 296.528735][T11220] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 296.543935][T11220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 296.562574][ T5810] usb 6-1: USB disconnect, device number 6 [ 296.575118][T11220] F2FS-fs (loop3): invalid crc value [ 296.775969][T11220] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 296.798068][T11220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 296.896924][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2018'. [ 296.922525][T11240] team0: Device vlan5 is already an upper device of the team interface [ 296.955228][ T5777] syz-executor: attempt to access beyond end of device [ 296.955228][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.973956][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 297.507728][ T789] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 297.650237][T11258] loop3: detected capacity change from 0 to 1024 [ 297.699667][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.721207][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.745588][ T789] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 297.767699][T11258] hfsplus: bad catalog entry type [ 297.775583][ T789] usb 6-1: New USB device strings: Mfr=0, Product=159, SerialNumber=0 [ 297.795631][ T789] usb 6-1: Product: syz [ 297.815933][ T789] usb 6-1: config 0 descriptor?? [ 297.888515][ T1120] hfsplus: b-tree write err: -5, ino 25 [ 297.894514][ T1120] hfsplus: b-tree write err: -5, ino 4 [ 297.904990][ T1120] hfsplus: b-tree write err: -5, ino 2 [ 297.979884][T11261] [U]  [ 298.049873][T11264] loop3: detected capacity change from 0 to 64 [ 298.127094][ T5810] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 298.222759][T11266] mkiss: ax0: crc mode is auto. [ 298.273580][ T789] lenovo 0003:17EF:6047.001C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 298.317090][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 298.329898][ T5810] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 298.347590][ T5810] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 298.387381][ T5810] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 298.410850][ T5810] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 298.447762][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 298.463129][ T5810] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 298.487517][ T5810] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 298.500265][ T789] usb 6-1: USB disconnect, device number 7 [ 298.516508][ T5810] usb 3-1: Product: syz [ 298.526622][ T5810] usb 3-1: Manufacturer: syz [ 298.543537][ T5810] usb 3-1: SerialNumber: syz [ 298.576613][ T5810] usb 3-1: config 0 descriptor?? [ 298.590867][ T5810] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 298.614411][ T5810] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 298.884367][ T23] usb 3-1: USB disconnect, device number 19 [ 298.906392][ T23] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 299.155389][ T27] audit: type=1326 audit(1776901231.383:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 299.201841][ T27] audit: type=1326 audit(1776901231.383:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 299.251998][ T27] audit: type=1326 audit(1776901231.393:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 299.307275][ T27] audit: type=1326 audit(1776901231.393:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 299.343632][T11275] loop3: detected capacity change from 0 to 32768 [ 299.351020][ T27] audit: type=1326 audit(1776901231.403:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.5.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 299.410156][T11275] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 299.554143][T11275] ocfs2: Unmounting device (7,3) on (node local) [ 300.131011][T11309] bridge_slave_0: invalid flags given to default FDB implementation [ 300.879177][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 300.966906][T11317] loop5: detected capacity change from 0 to 32768 [ 301.384803][T11324] loop2: detected capacity change from 0 to 32768 [ 301.413895][T11324] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2058 (11324) [ 301.507973][T11324] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 301.551251][T11324] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 301.584702][T11324] BTRFS info (device loop2): setting nodatasum [ 301.602163][T11324] BTRFS info (device loop2): using free space tree [ 301.778133][T11324] BTRFS info (device loop2): enabling ssd optimizations [ 301.818226][T11324] BTRFS info (device loop2): auto enabling async discard [ 301.952776][ T27] audit: type=1800 audit(1776901234.183:252): pid=11324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2058" name="file0" dev="loop2" ino=258 res=0 errno=0 [ 302.068603][ T5772] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 302.569127][T11380] syz.5.2075[11380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.569275][T11380] syz.5.2075[11380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.062542][T11371] loop3: detected capacity change from 0 to 32768 [ 303.356537][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2083'. [ 303.892567][T11390] loop5: detected capacity change from 0 to 32768 [ 303.917496][T11390] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2080 (11390) [ 303.977880][T11390] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 304.027153][T11390] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 304.036666][T11390] BTRFS info (device loop5): setting nodatasum [ 304.059518][T11390] BTRFS info (device loop5): using free space tree [ 304.234845][T11425] netlink: 'syz.2.2090': attribute type 39 has an invalid length. [ 304.244130][T11390] BTRFS info (device loop5): enabling ssd optimizations [ 304.272553][T11390] BTRFS info (device loop5): auto enabling async discard [ 304.430110][ T27] audit: type=1800 audit(1776901236.663:253): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2080" name="file0" dev="loop5" ino=258 res=0 errno=0 [ 304.535795][ T9287] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 305.250925][T11447] loop5: detected capacity change from 0 to 2048 [ 305.266001][T11449] loop3: detected capacity change from 0 to 128 [ 305.359341][T11450] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.486579][T11452] loop2: detected capacity change from 0 to 2048 [ 305.505735][T11452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.574018][ T27] audit: type=1800 audit(1776901237.803:254): pid=11452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2101" name="file2" dev="loop2" ino=1347 res=0 errno=0 [ 305.658273][T11450] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 305.680330][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.695743][T11450] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 305.708908][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.724583][T11450] Remounting filesystem read-only [ 305.747379][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.757421][ T166] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 305.775642][ T166] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 305.778121][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.791527][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.816067][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.818379][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.843106][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.853253][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853328][ T166] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 305.853347][ T166] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 305.853363][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853379][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853468][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853535][ T166] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 305.853552][ T166] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 305.853568][ T166] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 305.853583][ T166] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 305.853599][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853621][ T166] NILFS (loop5): discard dirty page: offset=196608, ino=3 [ 305.853636][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853652][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853668][ T166] NILFS (loop5): discard dirty block: blocknr=49, size=1024 [ 305.853683][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853704][ T166] NILFS (loop5): discard dirty page: offset=229376, ino=3 [ 305.853726][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853743][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.853760][ T166] NILFS (loop5): discard dirty block: blocknr=50, size=1024 [ 305.853776][ T166] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 305.854760][ T9287] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 305.897983][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.019820][ T9287] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 306.019847][ T9287] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 306.019866][ T9287] NILFS (loop5): discard dirty block: blocknr=36, size=1024 [ 306.019883][ T9287] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 306.019899][ T9287] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 306.044767][ T9287] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 306.120188][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.168942][ T9287] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 306.176325][ T9287] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.186607][T11454] batadv_slave_1: entered promiscuous mode [ 306.208339][ T9287] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.234622][ T9287] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.262456][ T9287] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 306.276549][ T9287] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 306.289759][ T9287] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.303747][ T9287] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.318720][ T9287] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.478066][T11464] loop4: detected capacity change from 0 to 512 [ 306.491724][T11464] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.540658][T11464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.648310][T11464] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.736739][T11475] EXT4-fs error (device loop4): __ext4_new_inode:1290: comm syz.4.2108: failed to insert inode 16: doubly allocated? [ 306.766087][T11474] sp0: Synchronizing with TNC [ 306.840642][ T8158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.416778][T11496] overlayfs: missing 'lowerdir' [ 307.456040][T11500] loop5: detected capacity change from 0 to 256 [ 307.698643][T11504] ALSA: mixer_oss: invalid OSS volume 'O' [ 307.707417][T11504] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 308.335342][T11531] xt_hashlimit: max too large, truncated to 1048576 [ 308.454892][T11536] loop3: detected capacity change from 0 to 2048 [ 308.511240][T11536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.344783][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2151'. [ 310.014797][ T166] Bluetooth: hci4: Frame reassembly failed (-84) [ 311.241501][T11617] loop5: detected capacity change from 0 to 64 [ 311.276474][ T27] audit: type=1800 audit(1776901243.503:255): pid=11617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2173" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 312.007217][ T5775] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 312.436462][ T27] audit: type=1326 audit(1776901244.663:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11651 comm="syz.5.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 312.466465][ T27] audit: type=1326 audit(1776901244.663:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11651 comm="syz.5.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 312.499592][ T27] audit: type=1326 audit(1776901244.673:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11651 comm="syz.5.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 312.536524][ T27] audit: type=1326 audit(1776901244.673:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11651 comm="syz.5.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 312.565536][ T27] audit: type=1326 audit(1776901244.683:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11651 comm="syz.5.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 312.600118][ T27] audit: type=1326 audit(1776901244.683:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11651 comm="syz.5.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 312.629465][ T27] audit: type=1326 audit(1776901244.683:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11651 comm="syz.5.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b259c819 code=0x7ffc0000 [ 313.027664][ T5829] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 313.041404][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 313.253983][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.282811][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.310209][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.331501][ T5829] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.341373][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.362257][ T5829] usb 4-1: config 0 descriptor?? [ 313.624856][T11665] loop5: detected capacity change from 0 to 32768 [ 313.665549][T11665] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 313.676411][ T27] audit: type=1800 audit(1776901245.903:263): pid=11665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2195" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 313.698566][T11665] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 313.834525][ T5829] plantronics 0003:047F:FFFF.001D: unbalanced delimiter at end of report description [ 313.849205][ T5829] plantronics 0003:047F:FFFF.001D: parse failed [ 313.861938][ T5829] plantronics: probe of 0003:047F:FFFF.001D failed with error -22 [ 314.034886][ T5839] usb 4-1: USB disconnect, device number 18 [ 314.152097][T11675] loop4: detected capacity change from 0 to 4096 [ 314.173548][T11675] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 314.671801][ T5829] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 314.719657][T11688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2206'. [ 314.861368][ T5829] usb 6-1: Using ep0 maxpacket: 16 [ 314.899016][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.938950][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.951562][ T5829] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.977224][ T5829] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 315.007004][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.036099][ T5829] usb 6-1: config 0 descriptor?? [ 315.479328][ T5829] microsoft 0003:045E:07DA.001E: unbalanced collection at end of report description [ 315.490440][ T5829] microsoft 0003:045E:07DA.001E: parse failed [ 315.490545][ T5829] microsoft: probe of 0003:045E:07DA.001E failed with error -22 [ 315.741085][ T5829] usb 6-1: USB disconnect, device number 8 [ 315.949235][T11701] loop2: detected capacity change from 0 to 40427 [ 315.958975][T11701] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 315.959038][T11701] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 315.960127][T11701] F2FS-fs (loop2): invalid crc value [ 315.970597][T11701] F2FS-fs (loop2): Found nat_bits in checkpoint [ 316.074231][T11701] F2FS-fs (loop2): Start checkpoint disabled! [ 316.076757][T11701] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 316.076783][T11701] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 316.451188][ T42] kworker/u4:2: attempt to access beyond end of device [ 316.451188][ T42] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 316.453435][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 316.455166][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 316.519474][T11714] netlink: 'syz.5.2217': attribute type 1 has an invalid length. [ 317.374079][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.456102][T11716] loop5: detected capacity change from 0 to 32768 [ 317.542170][T11716] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 317.555054][T11716] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.772022][T11716] XFS (loop5): Ending clean mount [ 317.821668][T11716] XFS (loop5): Quotacheck needed: Please wait. [ 317.923685][T11716] XFS (loop5): Quotacheck: Done. [ 318.233344][ T9287] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.515979][T11768] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 319.514240][T11805] loop5: detected capacity change from 0 to 1024 [ 319.532943][T11805] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.581657][T11805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.594416][T11805] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.646258][T11805] EXT4-fs error (device loop5): ext4_ext_check_inode:530: inode #11: comm syz.5.2255: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 319.731557][T11805] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2255: couldn't read orphan inode 11 (err -117) [ 319.828408][T11805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.986203][ T9287] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.447019][ T5770] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 320.460614][T11837] netlink: 'syz.5.2270': attribute type 8 has an invalid length. [ 320.492607][ T27] audit: type=1326 audit(1776901252.723:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 320.546247][ T27] audit: type=1326 audit(1776901252.723:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 320.581153][ T27] audit: type=1326 audit(1776901252.753:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 320.609718][ T27] audit: type=1326 audit(1776901252.753:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 320.639226][ T5770] usb 4-1: Using ep0 maxpacket: 8 [ 320.646697][ T27] audit: type=1326 audit(1776901252.763:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 320.702446][ T5770] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 320.714278][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.739325][ T27] audit: type=1326 audit(1776901252.763:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 320.767287][ T5770] usb 4-1: Product: syz [ 320.771542][ T5770] usb 4-1: Manufacturer: syz [ 320.793031][ T5770] usb 4-1: SerialNumber: syz [ 320.815227][ T27] audit: type=1326 audit(1776901252.763:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 320.862391][ T27] audit: type=1326 audit(1776901252.773:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 320.929414][ T27] audit: type=1326 audit(1776901252.773:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 320.961003][T11847] loop2: detected capacity change from 0 to 512 [ 320.967582][ T27] audit: type=1326 audit(1776901252.773:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11835 comm="syz.4.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f287239c819 code=0x7ffc0000 [ 321.041370][T11847] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2274: invalid indirect mapped block 10 (level 1) [ 321.072669][ T5770] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 321.082994][ T5770] usb 4-1: clock source 0 is not valid, cannot use [ 321.094282][ T5770] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 321.102631][ T5770] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 321.112276][T11847] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2274: invalid indirect mapped block 8 (level 1) [ 321.126178][ T5770] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 321.135432][ T5770] usb 4-1: clock source 0 is not valid, cannot use [ 321.142951][ T5770] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 321.150029][ T5770] usb 4-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 321.190143][T11847] EXT4-fs (loop2): 1 truncate cleaned up [ 321.236673][T11847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.268709][ T5770] usb 4-1: USB disconnect, device number 19 [ 321.322156][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.485460][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.813896][T11845] loop4: detected capacity change from 0 to 32768 [ 321.852835][T11845] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 322.063659][T11845] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 322.139463][T11845] XFS (loop4): Starting recovery (logdev: internal) [ 322.206348][T11845] XFS (loop4): Ending recovery (logdev: internal) [ 322.222833][T11855] loop5: detected capacity change from 0 to 32768 [ 322.322216][T11876] syz_tun: entered allmulticast mode [ 322.350820][T11876] syz_tun: left allmulticast mode [ 322.579084][ T8158] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 323.186394][T11896] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2292'. [ 323.212969][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 323.606713][T11912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2299'. [ 323.632140][T11912] nbd: couldn't find a device at index 196608 [ 324.265422][T11920] loop3: detected capacity change from 0 to 40427 [ 324.289192][T11920] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 324.306328][T11920] F2FS-fs (loop3): Image doesn't support compression [ 324.330890][T11920] F2FS-fs (loop3): Image doesn't support compression [ 324.341135][T11920] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 324.353138][T11920] F2FS-fs (loop3): invalid crc value [ 324.389770][T11920] F2FS-fs (loop3): Found nat_bits in checkpoint [ 324.501120][T11920] F2FS-fs (loop3): Start checkpoint disabled! [ 324.520719][T11920] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 324.648144][T11920] syz.3.2303: attempt to access beyond end of device [ 324.648144][T11920] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 324.917962][ T42] kworker/u4:2: attempt to access beyond end of device [ 324.917962][ T42] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 324.938526][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 324.946904][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 325.334387][T11949] smc: net device bond0 applied user defined pnetid SYZ2 [ 325.510994][T11957] loop5: detected capacity change from 0 to 164 [ 325.605791][T11957] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 326.222788][T11983] ip6gretap0: entered promiscuous mode [ 326.236320][T11983] macsec2: entered promiscuous mode [ 326.249055][T11980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.259639][T11983] macsec2: entered allmulticast mode [ 326.259659][T11983] ip6gretap0: entered allmulticast mode [ 326.273888][T11983] ip6gretap0: left allmulticast mode [ 326.287404][T11983] ip6gretap0: left promiscuous mode [ 326.365555][T11987] loop3: detected capacity change from 0 to 1024 [ 326.393339][T11987] hfsplus: b-tree write err: -5, ino 2 [ 326.444400][ T1120] hfsplus: b-tree write err: -5, ino 25 [ 326.456264][ T1120] hfsplus: b-tree write err: -5, ino 4 [ 327.366342][T11993] loop3: detected capacity change from 0 to 32768 [ 327.424834][T12017] ipvlan2: entered promiscuous mode [ 327.717614][ T5829] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 327.719795][T12025] loop4: detected capacity change from 0 to 512 [ 327.755207][T12025] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 327.937920][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 327.962861][ T5829] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 327.986063][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.003125][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2353'. [ 328.030920][ T5829] usb 3-1: Product: syz [ 328.040930][ T5829] usb 3-1: Manufacturer: syz [ 328.057092][ T5829] usb 3-1: SerialNumber: syz [ 328.338058][ T5829] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 328.358389][ T5829] usb 3-1: clock source 0 is not valid, cannot use [ 328.374625][ T5829] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 328.391713][ T5829] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 328.408264][ T5829] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 328.420188][ T5829] usb 3-1: clock source 0 is not valid, cannot use [ 328.434599][ T5829] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 328.442785][ T5829] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 328.497304][ T5770] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 328.534334][ T5829] usb 3-1: USB disconnect, device number 20 [ 328.640946][T11852] udevd[11852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.669396][T12045] loop4: detected capacity change from 0 to 128 [ 328.681575][T12045] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 328.697127][ T5770] usb 4-1: Using ep0 maxpacket: 16 [ 328.717581][ T5770] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.752680][T12045] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 328.767713][ T5770] usb 4-1: config 1 has an invalid interface number: 107 but max is 2 [ 328.775953][ T5770] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.833269][ T5770] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 328.842877][ T5770] usb 4-1: config 1 has no interface number 3 [ 328.861702][ T5770] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.891692][ T5770] usb 4-1: config 1 interface 2 has no altsetting 0 [ 328.914403][ T5770] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 328.923968][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.946254][ T5770] usb 4-1: Product: syz [ 328.953157][ T5770] usb 4-1: Manufacturer: syz [ 328.960029][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 328.962854][ T5770] usb 4-1: SerialNumber: syz [ 329.236484][ T5770] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 329.267846][ T5770] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 329.290997][ T5770] usb 4-1: selecting invalid altsetting 0 [ 329.334322][ T5770] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 329.353411][ T5770] snd-usb-audio: probe of 4-1:1.107 failed with error -22 [ 329.383810][ T5770] usb 4-1: USB disconnect, device number 20 [ 329.488637][ T6409] udevd[6409]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.583334][T12058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2365'. [ 330.123381][T12084] netlink: 'syz.2.2377': attribute type 11 has an invalid length. [ 330.135181][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2377'. [ 330.898230][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 330.955311][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'. [ 330.997015][T12110] netlink: 'syz.2.2389': attribute type 7 has an invalid length. [ 331.038814][T12092] loop3: detected capacity change from 0 to 40427 [ 331.068422][T12092] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 331.080761][T12092] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 331.130685][T12116] loop4: detected capacity change from 0 to 512 [ 331.145923][T12092] F2FS-fs (loop3): invalid crc value [ 331.169310][T12116] FAT-fs (loop4): Unrecognized mount option "appraise" or missing value [ 331.197081][T12092] F2FS-fs (loop3): Found nat_bits in checkpoint [ 331.410650][T12092] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 331.435700][T12092] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 331.721445][T12136] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 331.728469][T12136] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 331.791632][T12136] vhci_hcd vhci_hcd.0: Device attached [ 331.826631][T12139] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 331.833235][T12139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 331.869642][T12139] vhci_hcd vhci_hcd.0: Device attached [ 331.907668][T12140] vhci_hcd: connection closed [ 331.909372][T12137] vhci_hcd: connection closed [ 331.918840][ T42] vhci_hcd: stop threads [ 331.929433][ T42] vhci_hcd: release socket [ 331.935326][ T42] vhci_hcd: disconnect device [ 331.947460][ T42] vhci_hcd: stop threads [ 331.961987][ T42] vhci_hcd: release socket [ 331.978391][ T42] vhci_hcd: disconnect device [ 332.084575][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2405'. [ 332.358373][T12155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2406'. [ 332.515557][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.539230][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.561415][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.577130][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.604923][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.625192][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.637098][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673193][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673271][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673307][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673330][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673353][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673375][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673397][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673420][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673442][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673464][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673486][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673508][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673531][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673553][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673575][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673597][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673620][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673642][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673664][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673687][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673709][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673732][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673755][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673777][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673816][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673840][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673863][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673887][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673910][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673934][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673968][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.673996][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674018][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674040][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674063][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674085][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674107][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674148][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674172][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674196][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674221][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674245][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674269][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674293][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674317][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674340][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674365][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674399][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674422][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674444][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674467][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674489][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674530][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674554][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674578][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674602][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674625][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674650][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674673][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674697][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674721][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674745][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674769][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674793][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674817][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674841][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674865][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674888][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674913][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674936][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674960][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.674990][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675013][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675037][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675061][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675085][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675109][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675132][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675156][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675180][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675204][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675228][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675252][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675276][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675299][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675323][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675347][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675371][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675395][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675419][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675443][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675467][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675491][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.675515][ T5839] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0 [ 332.698163][ T5839] hid-generic 0000:0000:0004.001F: hidraw0: HID v0.03 Device [syz1] on syz0 [ 332.737114][ T5810] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 332.929225][ T5810] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.929256][ T5810] usb 4-1: config 0 has no interface number 0 [ 332.929297][ T5810] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.929324][ T5810] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.929363][ T5810] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 332.929389][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.931891][ T5810] usb 4-1: config 0 descriptor?? [ 332.994804][T12173] fido_id[12173]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 333.356184][ T5810] prodikeys 0003:041E:2801.0020: item fetching failed at offset 5/7 [ 333.360680][ T5810] prodikeys 0003:041E:2801.0020: hid parse failed [ 333.360799][ T5810] prodikeys: probe of 0003:041E:2801.0020 failed with error -22 [ 333.637647][ T5810] usb 4-1: USB disconnect, device number 21 [ 334.239003][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 334.515294][ T9] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 334.526480][ T9] usb 6-1: config 0 has no interface number 0 [ 334.551039][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 334.568709][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.589907][ T9] usb 6-1: Product: syz [ 334.595017][T12199] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.2419'. [ 334.611586][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'. [ 334.620691][ T9] usb 6-1: Manufacturer: syz [ 334.625330][ T9] usb 6-1: SerialNumber: syz [ 334.637835][T12199] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.2419'. [ 334.647450][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 334.659426][ T9] usb 6-1: config 0 descriptor?? [ 334.885019][ T9] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 334.915850][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 334.930554][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 334.940468][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 334.969092][T12212] loop3: detected capacity change from 0 to 256 [ 334.976604][ T9] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 335.050698][T12212] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 335.365928][ T28] usb 6-1: USB disconnect, device number 9 [ 335.392407][ T28] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 335.433945][ T28] keyspan 6-1:0.133: device disconnected [ 335.721869][T12232] loop2: detected capacity change from 0 to 512 [ 335.766110][T12230] loop3: detected capacity change from 0 to 8192 [ 335.793674][T12230] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 335.809748][T12230] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 335.823982][T12230] REISERFS (device loop3): using ordered data mode [ 335.833844][T12230] reiserfs: using flush barriers [ 335.863173][T12230] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 335.883387][T12230] REISERFS (device loop3): checking transaction log (loop3) [ 335.918577][T12232] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 335.945301][T12230] REISERFS (device loop3): Using r5 hash to sort names [ 335.955249][T12232] FAT-fs (loop2): Filesystem has been set read-only [ 335.973185][T12230] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 335.991855][T12230] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 336.023212][T12232] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 336.590334][T12245] netlink: 'syz.5.2436': attribute type 21 has an invalid length. [ 336.615824][T12245] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.624752][T12245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.632930][T12245] IPv6: NLM_F_CREATE should be set when creating new route [ 336.640398][T12245] IPv6: NLM_F_CREATE should be set when creating new route [ 336.647818][T12245] IPv6: NLM_F_CREATE should be set when creating new route [ 336.690591][T12246] netlink: 'syz.5.2436': attribute type 21 has an invalid length. [ 336.707253][T12246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.980456][T12237] loop2: detected capacity change from 0 to 32768 [ 337.054106][T12237] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.133502][T12266] loop5: detected capacity change from 0 to 64 [ 337.148531][T12237] XFS (loop2): Ending clean mount [ 337.177740][T12268] loop3: detected capacity change from 0 to 1024 [ 337.183905][T12237] XFS (loop2): Quotacheck needed: Please wait. [ 337.246570][T12268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.268904][ T1120] ------------[ cut here ]------------ [ 337.274509][ T1120] kernel BUG at fs/hfs/inode.c:449! [ 337.323480][T12268] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.2443: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 337.351820][ T1120] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 337.357974][ T1120] CPU: 1 PID: 1120 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 337.365554][ T1120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 337.375648][ T1120] Workqueue: writeback wb_workfn (flush-7:5) [ 337.381692][ T1120] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 337.387294][ T1120] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 337.406963][ T1120] RSP: 0000:ffffc900047bf340 EFLAGS: 00010293 [ 337.413076][ T1120] RAX: ffffffff825b5f5a RBX: ffff88802c7b5ca8 RCX: ffff888023d4bc00 [ 337.421079][ T1120] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 337.429089][ T1120] RBP: ffffc900047bf4d0 R08: ffff888023d4bc00 R09: 0000000000000003 [ 337.437134][ T1120] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 337.445145][ T1120] R13: 1ffff920008f7e6c R14: ffff88802c7b5c58 R15: 0000000000000000 [ 337.453161][ T1120] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 337.462146][ T1120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.468771][ T1120] CR2: 0000001b2d91dff8 CR3: 000000007f8e4000 CR4: 00000000003506e0 [ 337.476784][ T1120] Call Trace: [ 337.480125][ T1120] [ 337.483157][ T1120] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 337.488602][ T1120] ? __rwlock_init+0x150/0x150 [ 337.493430][ T1120] __writeback_single_inode+0x705/0xec0 [ 337.499041][ T1120] writeback_sb_inodes+0x7cd/0xf50 [ 337.504214][ T1120] ? queue_io+0x550/0x550 [ 337.508600][ T1120] ? rcu_is_watching+0x15/0xb0 [ 337.513422][ T1120] wb_writeback+0x46a/0xbf0 [ 337.517973][ T1120] ? queue_io+0x351/0x550 [ 337.522350][ T1120] ? percpu_ref_tryget+0x250/0x250 [ 337.527508][ T1120] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 337.533538][ T1120] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.538794][ T1120] wb_workfn+0x400/0xe60 [ 337.543086][ T1120] ? try_to_wake_up+0x70a/0x1190 [ 337.548054][ T1120] ? inode_wait_for_writeback+0x230/0x230 [ 337.553814][ T1120] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 337.559834][ T1120] ? read_lock_is_recursive+0x20/0x20 [ 337.565249][ T1120] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.570493][ T1120] ? process_scheduled_works+0x96f/0x15d0 [ 337.576260][ T1120] ? process_scheduled_works+0x96f/0x15d0 [ 337.582031][ T1120] process_scheduled_works+0xa5d/0x15d0 [ 337.584699][T12237] XFS (loop2): Quotacheck: Done. [ 337.587616][ T1120] ? worker_attach_to_pool+0x380/0x380 [ 337.598133][ T1120] ? assign_work+0x3d2/0x5d0 [ 337.602819][ T1120] worker_thread+0xa55/0xfc0 [ 337.607479][ T1120] kthread+0x2fa/0x390 [ 337.611602][ T1120] ? pr_cont_work+0x560/0x560 [ 337.616340][ T1120] ? kthread_blkcg+0xd0/0xd0 [ 337.620980][ T1120] ret_from_fork+0x48/0x80 [ 337.625471][ T1120] ? kthread_blkcg+0xd0/0xd0 [ 337.630108][ T1120] ret_from_fork_asm+0x11/0x20 [ 337.634926][ T1120] [ 337.637987][ T1120] Modules linked in: [ 337.641962][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.661342][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.712302][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.725817][ T1120] ---[ end trace 0000000000000000 ]--- [ 337.754245][ T1120] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 337.776890][ T1120] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 337.812398][ T1120] RSP: 0000:ffffc900047bf340 EFLAGS: 00010293 [ 337.819896][ T1120] RAX: ffffffff825b5f5a RBX: ffff88802c7b5ca8 RCX: ffff888023d4bc00 [ 337.828591][ T1120] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 337.836669][ T1120] RBP: ffffc900047bf4d0 R08: ffff888023d4bc00 R09: 0000000000000003 [ 337.846367][ T1120] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 337.858749][ T1120] R13: 1ffff920008f7e6c R14: ffff88802c7b5c58 R15: 0000000000000000 [ 337.867537][ T1120] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 337.878454][ T1120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.886304][ T1120] CR2: 00007fdd1d5e92f8 CR3: 000000002f11f000 CR4: 00000000003506e0 [ 337.894412][ T1120] Kernel panic - not syncing: Fatal exception [ 337.901095][ T1120] Kernel Offset: disabled [ 337.905435][ T1120] Rebooting in 86400 seconds..