last executing test programs: 1m0.003516261s ago: executing program 0 (id=88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000640)=@svm={0x5, 0x1, 0x49f, {0x25000}, {"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"}}) 59.716425078s ago: executing program 0 (id=92): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="dc02000011000400140012800b0001006d61637365630000040002800a0001"], 0x40}}, 0x800) 59.320103141s ago: executing program 0 (id=96): r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, "001863718e9bf703"}}}}}, 0x0) 59.184618318s ago: executing program 0 (id=99): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000002c0)={[{@creator={'creator', 0x3d, "1c4cdc1a"}}, {@type={'type', 0x3d, "e833026f"}}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "338be97f"}}, {}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000480)="$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") mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 58.858228037s ago: executing program 0 (id=103): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x400, 0x12) 58.12957595s ago: executing program 0 (id=112): socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x80000, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 57.874851484s ago: executing program 32 (id=112): socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x80000, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.577877933s ago: executing program 4 (id=614): r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x3) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0x46, 0x3, 0x2, [{@remote}, {@loopback, 0x3}, {@multicast1, 0x1}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}, 0x0) 3.427998592s ago: executing program 4 (id=619): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x6, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00}) 3.187444535s ago: executing program 4 (id=622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.071329772s ago: executing program 2 (id=626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000640)=@svm={0x5, 0x1, 0x49f, {0x25000}, {"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"}}) 2.938178739s ago: executing program 2 (id=627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) close_range(r0, 0xffffffffffffffff, 0x0) 2.831056856s ago: executing program 2 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.266894789s ago: executing program 4 (id=629): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 2.265194219s ago: executing program 2 (id=640): io_uring_setup(0x17b6, &(0x7f00000002c0)={0x0, 0xa, 0x100, 0x1, 0x393}) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0xf4c, '\x00', @p_u16=0x0}}) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1) 2.083262399s ago: executing program 4 (id=631): syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0xb8aa, &(0x7f000000b880)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@known='user.syz\x00', 0x0, 0x0, 0x0) setxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0, 0x1) 1.307273054s ago: executing program 2 (id=649): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x6, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00}) 1.016938371s ago: executing program 1 (id=641): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="dc02000011000400140012800b0001006d61637365630000040002800a0001"], 0x40}}, 0x800) 985.659963ms ago: executing program 2 (id=643): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xac3, &(0x7f0000000e00)="$eJzs3U2MW0cBAOCxd73ZTVPilIQuaWgTCm356abZLOEngqRKhETUVIhLpYpLlKYlIgSJIgFVJZKcuNGqChInfsSpl6ogJHpBUU9cKtFIFVJPhQMHoiAqcSiBxCj2jNee2Hn2/j07/j7p7XjejD0z3ufn5/fezARgYlWbf5eW5ishXHzjlaP/eOjvczfXHGrnqDf/TnfEaiGESoxPZ6/33lQrvP7+iyd7hZWw2Pyb4uHJq+3n3hVCOBd2h0uhHnZevPzyW4tPHD9/7MKet189eGV9Wg8AAJPl65cOLu3465/v23bttfsPh03t9en4vB7jW+Jx/+F44J+O/6uhO17pWDrNZPmm41Kd68431SNfZzm1LN90n/JnsvJrffJtCrcvf6pjXa92wzhL23E9VKoLXfFqdWGh9Zs8NH/Xz1QWzp4+8+zzJVUUWHP/fiCEsLtjOXKhOz5qy6ERqMMKl8YI1GEsl8MbV9a1Rkvpbd6gpbG17D0QQEt+vfAW5/IzC6vTfrXpwcq/+ni19/NhDWz09j9U+TMllx+U/5vz9jisnTt1a0rtSp+jLTGeX0fI71/q//nLr3R0r82vR9QGrGe/6wjjcn2hXz2nNrgeK9Wv/vl2caf6cgzT+/CVrtQHuj4/+f90XP7HQG8f5Of/LRbLaC+hK15bzWs1Wq82V+Y+CBhN+X1zjXR9NMrv68vTNxWkzxakzxWkby5Iv6sgHSbZ777/0/BSZfl8V/6bftjz4ek8290x/NCQ9cnPRw5bfn7f77BWW35+PzGMsj+ceOrUF555+nLr/v9Ke/u/Ebf39HOjHj9bl2KGdL4wP6/evve/3l1OtU++e7L63N0jf/Px9u58le3LrxM69jO31GO++3lb++Xb1Z2vnuWbi8tsVt/8+GRz9rx0/JH2q+n9ms7aW8vaMZPVI+1XtsUwrwesRNoe+93/n7bP+VCrPHv6zKnHYjxtp3+aqm26uX7fBtcbWL1B+//Mh+7+P1va62vVzv3C1uX1ldZ+4fX4et3rF9vldKzv+FJL33Pfmppr5l84+d0zz6xx22HSPf+jF7594syZU9/zYMUPvjoa1RjmQfrZMir18WDYB7vXu4iSd0zAutv749ZBwKOnv3PiuVPPnTq7/8CB/YuLB764f2lv87h+b+fRfadzJdQWWEvLX/pl1wQAAAAAAAAAAAAY1A+OHb38zpuff7fV/3+5/1/q/5/u/E39/3+S9f/P+8mnfvCpH+C2HunNPNkAqzNZvlpcPpzVd3tWzo7seR+JYXsev9j/PxWXj+ua6nNvtr7WJ5oNJ3DLeCkz2Rgk+XyBH4/hhRj+OkCJKr2H/su32x7jW1c+6NjW0/gUs8vPahgfeHykrtfNraFjSKPU/7vnuE49+mszXjaix2LZbQR6++dEjf/9r+WGl14XS/9lemPL+/nkbhONvkfpg85gA7A2yp7/M533TOHZP35t9uaSsl19vHt/mY9fCsP4yzvd8VGff3K9y8/n7dvo8stu/0bP/9me/27g/V82Y159ZeX+5xdX3u0oNuwctPy8/Wkc6O3DlX8tlp9a83AYrPzGr7Ly8wtCA/pvVv7mAcu/pf27Vlb+/2L56W175MFBy2/VuFLtrsdc1o50/S8/b5xcz9qfxva8TfnfeKFX+1c4UeONWD5MsnGZZ3ZY2XFE+6B95fP/RufWdv7fdmWz3Vp+H8bnYjztiNN9Dvl8J8PWP91fkb4HdmSvXyn4fjP/73j7UgyLPg9p/t+0PdbjV35HvPlepnitx3t7p+5rYFy9N0rX/5Ky67Hq5crmVbRjtvz6r90yNQJ1WKtltvf/tLGSNm4akW290Wis7wmtAqUWTunvf9m/E8ouv+z3v0g+/29+DJ/P/5un5/P/5un5/L95+lz8D/VLz+f/zd/PfP7fPP3e7HXz+YHnC9I/WpC+s3d6+2f7fQXP31WQ/rGC9D3t9ENdOVL6/bd9/nK+fq9/T0H6gwXpnyhI/2RB+kMF6Y90pHfOAZ3SP1Xw/Dtd6o8yqe2HSZb3z/P5h8mRrv/0+/xvL0gHxtfPXtt35OnffrPe6v8/0z4fkq7jHY7xWvz99MMYz697h474zbQ3Y/xvWfqon++ASZKPn5F/vz9ckA6Mr3Sfl883TKDKbO/VMSwat6rfcT7j5dMx/EwMPxvDR2O4EMO9MdwXw8UNqh/r48jrvz/4UmX59/7WLH3Q+8nz/kBd40SFEPYPWJ/8/MCw97Pn4/gNa7Xlr7A7GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGmqzb9LS/OVEC6+8crRp46f3ntzzaF2jnrz73RHrNZ+XgiPxXAqhr+MD66//+LJzvBGDCthMVRCpb0+PHm1XdJdIYRzYXe4FOph58XLL7+1+MTx88cu7Hn71YNX1u8dAAAAgDvf/wMAAP//Nj4Q1g==") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file1\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f0000000640)) truncate(&(0x7f0000000080)='./file2\x00', 0x0) 957.236045ms ago: executing program 3 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 848.176541ms ago: executing program 1 (id=645): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 843.151561ms ago: executing program 5 (id=657): r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 812.356933ms ago: executing program 1 (id=647): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 783.781634ms ago: executing program 3 (id=648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r1, 0x65aebf9dafbebb59, 0x0, 0x0, {{}, {@val={0x8, 0x12b, 0xffffffff}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/130, 0x82}}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, &(0x7f00000005c0)={0x77359400}) 724.044868ms ago: executing program 3 (id=650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f3, 0x0, 0xfffffffffffffffe}]}) 512.741951ms ago: executing program 3 (id=651): io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000005c0)="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", 0xa3f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8}, 0x94) ptrace(0x10, 0x1) 508.172611ms ago: executing program 4 (id=652): capset(0x0, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 507.951351ms ago: executing program 5 (id=662): r0 = socket$inet(0x2, 0x3, 0x11) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f0000000000)="e4", 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 507.447661ms ago: executing program 1 (id=653): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 411.332506ms ago: executing program 5 (id=654): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xff, 0x0, @val=0x80}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000013c0)=""/49, 0x31}], 0x1}, 0x5}], 0x1, 0x40000000, 0x0) 253.965345ms ago: executing program 5 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x4}]}, 0x24}}, 0x0) 229.414527ms ago: executing program 1 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) 201.546938ms ago: executing program 3 (id=658): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x1d, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x10, 0xff}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "000202822aa5494190"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x14800) 128.161643ms ago: executing program 5 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 72.458756ms ago: executing program 3 (id=660): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4004810) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x100, 0xfc) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0xf8, 0x0, 0x0, 0x0, 0x12000000}) 9.972879ms ago: executing program 5 (id=661): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x3, 0x797a, 0x3, "00a6400d00000000000000f8ffffff00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000900)=0xd) 0s ago: executing program 1 (id=663): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 74.363989][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.384993][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.396091][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.407767][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.427999][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.436871][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.451969][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.468052][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.477064][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.511407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.520205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.529918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.538541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.561801][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.570551][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.583294][ T4191] device veth0_vlan entered promiscuous mode [ 74.589844][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.600038][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.613359][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.616976][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.630456][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.639573][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.676737][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.692702][ T4195] device veth0_macvtap entered promiscuous mode [ 74.707963][ T4191] device veth1_vlan entered promiscuous mode [ 74.714578][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.722733][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 74.722831][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 74.735502][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 74.742234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.750435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.758480][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.766814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.776061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.785829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.793027][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 74.800742][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 74.816813][ T4195] device veth1_macvtap entered promiscuous mode [ 74.871337][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.879677][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.890297][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.899905][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.915855][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.928190][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.939130][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.950370][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.964169][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.992515][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.008749][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.017195][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.027566][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.043062][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.054837][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.065535][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.076353][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.087902][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.098562][ T4189] device veth0_vlan entered promiscuous mode [ 75.123800][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.138408][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.154200][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.184292][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.196861][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.208263][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.235145][ T4191] device veth0_macvtap entered promiscuous mode [ 75.248527][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.258702][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.275920][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.286678][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.305755][ T4189] device veth1_vlan entered promiscuous mode [ 75.910280][ T4191] device veth1_macvtap entered promiscuous mode [ 75.923783][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.938616][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.949913][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.085221][ T4296] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.132417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.155174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.179921][ T4189] device veth0_macvtap entered promiscuous mode [ 76.215350][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.224821][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.233735][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.246652][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.260616][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.280003][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.290311][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.309750][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.336344][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.350725][ T4189] device veth1_macvtap entered promiscuous mode [ 76.372336][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.380447][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.390126][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.402041][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.410166][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.425556][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.434906][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.445426][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.456736][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.467631][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.486944][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.497994][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.514298][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.529449][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.563265][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.574393][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.593347][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.607165][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.616378][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.626654][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.642303][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.653085][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.663400][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.674188][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.685878][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.696641][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.707133][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.717957][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.729824][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.755689][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.771341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.780523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.789263][ T4245] Bluetooth: hci0: command 0x0419 tx timeout [ 76.796239][ T4245] Bluetooth: hci1: command 0x0419 tx timeout [ 76.802477][ T4245] Bluetooth: hci2: command 0x0419 tx timeout [ 76.809565][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.832849][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.861589][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 76.862302][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.867977][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 76.880223][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.883694][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.883707][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.883723][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.883735][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.883749][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.887479][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.931849][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.966070][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.975988][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.988302][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.011263][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.020013][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.042792][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.051827][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.131323][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.155119][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.178058][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.225889][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.265696][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.304548][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.316700][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.329426][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.342386][ T1108] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 77.373665][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.379249][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.412346][ T1108] usb 2-1: config 0 descriptor?? [ 77.422624][ T4313] overlayfs: failed to resolve './bus': -2 [ 77.438987][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.474727][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.489866][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.516816][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.653344][ T26] audit: type=1326 audit(1769380333.097:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.0.13" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93657e9cb9 code=0x0 [ 77.692584][ T4322] Zero length message leads to an empty skb [ 77.752757][ T1108] kaweth 2-1:0.0: Firmware present in device. [ 77.849555][ T4328] loop2: detected capacity change from 0 to 1024 [ 77.934106][ T4335] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.953315][ T1108] kaweth 2-1:0.0: Statistics collection: 0 [ 77.959273][ T1108] kaweth 2-1:0.0: Multicast filter limit: 0 [ 77.980664][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 77.990270][ T1108] kaweth 2-1:0.0: MTU: 0 [ 78.019222][ T1108] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 78.116275][ T4328] hfsplus: request for non-existent node 62977 in B*Tree [ 78.150355][ T4328] hfsplus: request for non-existent node 62977 in B*Tree [ 78.211904][ T4343] loop3: detected capacity change from 0 to 1024 [ 78.240090][ T154] hfsplus: b-tree write err: -5, ino 3 [ 78.265301][ T4345] loop4: detected capacity change from 0 to 64 [ 78.376227][ T4343] hfsplus: catalog searching failed [ 78.395874][ T1108] kaweth 2-1:0.0: Error setting SOFS wait [ 78.405642][ T1108] kaweth: probe of 2-1:0.0 failed with error -5 [ 78.422416][ T4348] loop2: detected capacity change from 0 to 16 [ 78.466089][ T1108] usb 2-1: USB disconnect, device number 2 [ 78.502099][ T4348] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 78.564301][ T154] hfsplus: b-tree write err: -5, ino 3 [ 78.931038][ T1110] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.145503][ T4370] loop4: detected capacity change from 0 to 1024 [ 79.217765][ T4370] ======================================================= [ 79.217765][ T4370] WARNING: The mand mount option has been deprecated and [ 79.217765][ T4370] and is ignored by this kernel. Remove the mand [ 79.217765][ T4370] option from the mount to silence this warning. [ 79.217765][ T4370] ======================================================= [ 79.253508][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 79.376782][ T1110] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 79.397174][ T1110] usb 1-1: config 0 has no interface number 0 [ 79.407324][ T1110] usb 1-1: config 0 interface 12 has no altsetting 0 [ 79.448792][ T1273] hfsplus: b-tree write err: -5, ino 4 [ 79.471212][ T4306] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.490027][ T4376] loop2: detected capacity change from 0 to 256 [ 79.591313][ T1110] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 79.614797][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.654927][ T4364] loop3: detected capacity change from 0 to 32768 [ 79.658119][ T1110] usb 1-1: Product: syz [ 79.670685][ T1110] usb 1-1: Manufacturer: syz [ 79.688778][ T1110] usb 1-1: SerialNumber: syz [ 79.709000][ T4364] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.32 (4364) [ 79.718125][ T1110] usb 1-1: config 0 descriptor?? [ 79.811406][ T4364] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 79.838907][ T4364] BTRFS info (device loop3): using free space tree [ 79.855354][ T4364] BTRFS info (device loop3): has skinny extents [ 79.882403][ T4306] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.915068][ T4306] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.055960][ T4306] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.078824][ T4306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.118016][ T4306] usb 2-1: SerialNumber: syz [ 80.128985][ T4364] BTRFS info (device loop3): enabling ssd optimizations [ 80.364165][ T4382] loop4: detected capacity change from 0 to 32768 [ 80.457003][ T4306] usb 2-1: 0:2 : does not exist [ 80.514897][ T4408] loop2: detected capacity change from 0 to 32768 [ 80.542067][ T4306] usb 2-1: USB disconnect, device number 3 [ 80.714314][ T4408] XFS (loop2): Mounting V5 Filesystem [ 80.739380][ T4382] XFS (loop4): Mounting V5 Filesystem [ 80.795243][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.871235][ T1110] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 80.894546][ T1110] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 80.950662][ T1110] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 81.000888][ T1110] f81534: probe of 1-1:0.12 failed with error -71 [ 81.055097][ T1110] usb 1-1: USB disconnect, device number 2 [ 81.107953][ T4232] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 81.138023][ T4232] XFS (loop2): Unmount and run xfs_repair [ 81.174925][ T4232] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 81.194791][ T4232] 00000000: 58 41 47 46 00 00 10 00 00 00 00 00 00 00 10 00 XAGF............ [ 81.206954][ T4232] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 81.219929][ T4232] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 81.235036][ T4232] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 81.257131][ T4232] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 81.311205][ T4232] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 81.336101][ T4232] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.365847][ T4232] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.392482][ T4408] XFS (loop2): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 74 [ 81.403002][ T4408] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 81.412293][ T4408] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1bf/0x1f0 (fs/xfs/xfs_fsops.c:577). Shutting down filesystem. [ 81.427759][ T4408] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 81.436199][ T4408] XFS (loop2): Ending clean mount [ 81.451717][ T4408] XFS (loop2): Failed to initialize disk quotas. [ 81.459567][ T4408] XFS (loop2): Unmounting Filesystem [ 81.552092][ T4382] XFS (loop4): Ending clean mount [ 81.662846][ T4382] XFS (loop4): Quotacheck needed: Please wait. [ 81.814869][ T4382] XFS (loop4): Quotacheck: Done. [ 81.990580][ T4431] loop3: detected capacity change from 0 to 131072 [ 82.031521][ T4431] F2FS-fs (loop3): invalid crc value [ 82.145085][ T4189] XFS (loop4): Unmounting Filesystem [ 82.192299][ T4431] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.241355][ T4431] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 82.279629][ T4431] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 82.704847][ T4454] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 82.808710][ T4456] sctp: [Deprecated]: syz.1.59 (pid 4456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.808710][ T4456] Use struct sctp_sack_info instead [ 83.268759][ T4447] set_capacity_and_notify: 2 callbacks suppressed [ 83.268774][ T4447] loop0: detected capacity change from 0 to 40427 [ 83.442883][ T4447] F2FS-fs (loop0): invalid crc value [ 83.482430][ T4447] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.549241][ T4481] loop1: detected capacity change from 0 to 256 [ 83.615842][ T4481] exfat: Deprecated parameter 'utf8' [ 83.631846][ T4481] exfat: Deprecated parameter 'namecase' [ 83.637612][ T4481] exfat: Deprecated parameter 'namecase' [ 83.654501][ T4447] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.681062][ T4481] exfat: Deprecated parameter 'utf8' [ 83.691349][ T4174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.735590][ T4481] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 83.961138][ T4174] usb 3-1: Using ep0 maxpacket: 32 [ 84.016442][ T4193] attempt to access beyond end of device [ 84.016442][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 84.047848][ T4472] loop4: detected capacity change from 0 to 32768 [ 84.081654][ T4174] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.112934][ T4174] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.215380][ T4472] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 84.282589][ T4472] JBD2: Ignoring recovery information on journal [ 84.301297][ T4174] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 84.310597][ T4174] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 84.409658][ T4174] usb 3-1: Product: syz [ 84.425244][ T4174] usb 3-1: Manufacturer: syz [ 84.474176][ T4472] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 84.484843][ T4174] hub 3-1:4.0: USB hub found [ 84.821233][ T4174] hub 3-1:4.0: 5 ports detected [ 84.851428][ T4174] hub 3-1:4.0: insufficient power available to use all downstream ports [ 84.864281][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 85.018585][ T4493] loop3: detected capacity change from 0 to 32768 [ 85.031312][ T4174] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 85.040968][ T4174] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 85.071770][ T4493] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.71 (4493) [ 85.137832][ T4174] usb 3-1: USB disconnect, device number 2 [ 85.155272][ T4493] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 85.173155][ T4493] BTRFS info (device loop3): enabling auto defrag [ 85.177244][ T4505] loop1: detected capacity change from 0 to 2048 [ 85.191014][ T4493] BTRFS info (device loop3): use no compression [ 85.207504][ T4493] BTRFS info (device loop3): force clearing of disk cache [ 85.223023][ T4493] BTRFS info (device loop3): max_inline at 4096 [ 85.239709][ T4493] BTRFS info (device loop3): disabling free space tree [ 85.247985][ T4493] BTRFS info (device loop3): has skinny extents [ 85.296102][ T4505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.350035][ T4514] loop4: detected capacity change from 0 to 512 [ 85.437348][ T4522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.77'. [ 85.455238][ T4514] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 85.676279][ T4534] input: syz1 as /devices/virtual/input/input5 [ 85.742621][ T4493] BTRFS info (device loop3): enabling ssd optimizations [ 85.753773][ T4493] BTRFS info (device loop3): clearing free space tree [ 85.806338][ T4493] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.861976][ T4493] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.875493][ T4543] netlink: 'syz.4.84': attribute type 25 has an invalid length. [ 85.890349][ T4543] netlink: 'syz.4.84': attribute type 7 has an invalid length. [ 85.920388][ T4543] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 85.929028][ T4543] netlink: 156 bytes leftover after parsing attributes in process `syz.4.84'. [ 85.959561][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.138322][ T4551] loop4: detected capacity change from 0 to 256 [ 86.475542][ T4565] loop1: detected capacity change from 0 to 512 [ 86.572600][ T4559] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 86.705600][ T21] cfg80211: failed to load regulatory.db [ 86.731355][ T4565] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 86.781380][ T4565] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.868393][ T4565] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.93: corrupted xattr block 33 [ 86.971193][ T4565] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.93: corrupted xattr block 33 [ 86.992520][ T4589] loop0: detected capacity change from 0 to 1024 [ 87.040137][ T4565] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 87.154154][ T4193] hfsplus: bad catalog entry type [ 87.595887][ T4605] netlink: 128 bytes leftover after parsing attributes in process `syz.1.105'. [ 87.648384][ T4603] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.801191][ T4306] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.842755][ T1273] hfsplus: b-tree write err: -5, ino 4 [ 87.875844][ T4576] loop3: detected capacity change from 0 to 32768 [ 87.974517][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.084524][ T4306] usb 3-1: Using ep0 maxpacket: 32 [ 88.103610][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.115756][ T4576] XFS (loop3): Mounting V5 Filesystem [ 88.241285][ T4306] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.260084][ T4306] usb 3-1: config 0 has no interface number 0 [ 88.304598][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.346950][ T4576] XFS (loop3): Ending clean mount [ 88.497676][ T4306] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.524186][ T4191] XFS (loop3): Unmounting Filesystem [ 88.544418][ T4306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.561419][ T4306] usb 3-1: Product: syz [ 88.565643][ T4306] usb 3-1: Manufacturer: syz [ 88.570260][ T4306] usb 3-1: SerialNumber: syz [ 88.602649][ T4306] usb 3-1: config 0 descriptor?? [ 88.649563][ T4639] loop1: detected capacity change from 0 to 2048 [ 88.658293][ T4306] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 88.672452][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.742401][ T4639] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.897287][ T4649] loop4: detected capacity change from 0 to 256 [ 88.935418][ T4306] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 88.952346][ T4649] exfat: Deprecated parameter 'utf8' [ 88.991507][ T4306] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 89.014902][ T4649] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 89.287540][ T4628] chnl_net:caif_netlink_parms(): no params data found [ 89.410968][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 89.419768][ T7] usb 3-1: USB disconnect, device number 3 [ 89.495007][ T7] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 89.594621][ T7] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 89.679640][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.688038][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.697062][ T4628] device bridge_slave_0 entered promiscuous mode [ 89.706315][ T7] quatech2 3-1:0.51: device disconnected [ 89.723789][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.735502][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.758272][ T4671] loop3: detected capacity change from 0 to 512 [ 89.772166][ T4628] device bridge_slave_1 entered promiscuous mode [ 89.804280][ T304] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 89.864968][ T4671] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.886904][ T304] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 89.893479][ T4671] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.956637][ T4671] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.129: corrupted inode contents [ 89.973962][ T4628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.024115][ T4628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.033537][ T4264] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.041470][ T304] EXT4-fs (loop1): This should not happen!! Data will be lost [ 90.041470][ T304] [ 90.061062][ T4671] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #2: comm syz.3.129: mark_inode_dirty error [ 90.088688][ T4682] EXT4-fs (loop3): shut down requested (2) [ 90.105048][ T304] EXT4-fs (loop1): Total free blocks count 0 [ 90.127704][ T304] EXT4-fs (loop1): Free/Dirty block details [ 90.157155][ T304] EXT4-fs (loop1): free_blocks=0 [ 90.180620][ T304] EXT4-fs (loop1): dirty_blocks=3088 [ 90.207695][ T304] EXT4-fs (loop1): Block reservation details [ 90.228503][ T304] EXT4-fs (loop1): i_reserved_data_blocks=193 [ 90.249369][ T4628] team0: Port device team_slave_0 added [ 90.280525][ T4628] team0: Port device team_slave_1 added [ 90.320789][ T144] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 90.379224][ T304] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1026 with error 28 [ 90.392673][ T304] EXT4-fs (loop1): This should not happen!! Data will be lost [ 90.392673][ T304] [ 90.401702][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 90.411300][ T4264] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 90.423129][ T4264] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 90.440736][ T4264] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 90.468496][ T4264] usb 5-1: config 220 has no interface number 2 [ 90.480671][ T4264] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 90.511484][ T4628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.518565][ T4628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.528478][ T4264] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 90.593461][ T4691] delete_channel: no stack [ 90.608668][ T4264] usb 5-1: config 220 interface 0 has no altsetting 0 [ 90.618060][ T4628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.651034][ T4264] usb 5-1: config 220 interface 76 has no altsetting 0 [ 90.677569][ T4264] usb 5-1: config 220 interface 1 has no altsetting 0 [ 90.721622][ T4628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.728618][ T4628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.777474][ T4628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.871941][ T4264] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 90.899403][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.926499][ T4264] usb 5-1: Product: syz [ 90.944333][ T4264] usb 5-1: Manufacturer: syz [ 90.950226][ T4264] usb 5-1: SerialNumber: syz [ 91.064170][ T4570] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.122437][ T4628] device hsr_slave_0 entered promiscuous mode [ 91.142734][ T4628] device hsr_slave_1 entered promiscuous mode [ 91.180025][ T4628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.212134][ T4628] Cannot create hsr debugfs directory [ 91.352280][ T4264] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 91.371692][ T4264] usb 5-1: No valid video chain found. [ 91.377378][ T4264] usb 5-1: selecting invalid altsetting 0 [ 91.521290][ T4570] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.529792][ T4264] usb 5-1: selecting invalid altsetting 0 [ 91.551981][ T4695] loop2: detected capacity change from 0 to 32768 [ 91.558643][ T4264] usbtest: probe of 5-1:220.1 failed with error -22 [ 91.567982][ T4570] usb 4-1: config 0 has no interfaces? [ 91.581458][ T4570] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 91.614289][ T4264] usb 5-1: USB disconnect, device number 2 [ 91.621892][ T4570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.652319][ T4570] usb 4-1: config 0 descriptor?? [ 91.782893][ T4695] XFS (loop2): Mounting V5 Filesystem [ 91.902996][ T4174] usb 4-1: USB disconnect, device number 2 [ 91.973416][ T4695] XFS (loop2): Ending clean mount [ 92.017592][ T154] device hsr_slave_0 left promiscuous mode [ 92.047804][ T154] device hsr_slave_1 left promiscuous mode [ 92.099125][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.140109][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.153827][ T4737] 9p: Unknown uid 00000000004294967295 [ 92.172577][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.190290][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.198160][ T4195] XFS (loop2): Unmounting Filesystem [ 92.240596][ T154] device bridge_slave_1 left promiscuous mode [ 92.249906][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.275450][ T154] device bridge_slave_0 left promiscuous mode [ 92.281835][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.404483][ T154] device veth1_macvtap left promiscuous mode [ 92.415223][ T154] device veth0_macvtap left promiscuous mode [ 92.444841][ T154] device veth1_vlan left promiscuous mode [ 92.478655][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 92.481906][ T154] device veth0_vlan left promiscuous mode [ 92.817064][ T4753] loop3: detected capacity change from 0 to 136 [ 92.978176][ T4753] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 93.074605][ T4746] loop1: detected capacity change from 0 to 40427 [ 93.089819][ T154] team0 (unregistering): Port device team_slave_1 removed [ 93.130319][ T154] team0 (unregistering): Port device team_slave_0 removed [ 93.145492][ T4746] F2FS-fs (loop1): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 93.154398][ T4746] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 93.174018][ T4746] F2FS-fs (loop1): invalid crc value [ 93.181974][ T4758] loop3: detected capacity change from 0 to 128 [ 93.201132][ T4758] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 93.211899][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.226340][ T4746] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.272513][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.419357][ T4746] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 93.434888][ T4746] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.516529][ T4767] loop0: Can't mount, would change RO state [ 93.551616][ T4185] attempt to access beyond end of device [ 93.551616][ T4185] loop1: rw=2049, want=45112, limit=40427 [ 93.609630][ T154] bond0 (unregistering): Released all slaves [ 93.738143][ T4628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.829307][ T4628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.884089][ T4772] loop3: detected capacity change from 0 to 1024 [ 93.900784][ T4628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.950418][ T4628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.967660][ T4306] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.073673][ T4780] hfsplus: request for non-existent node 33554434 in B*Tree [ 94.125958][ T4780] hfsplus: request for non-existent node 33554434 in B*Tree [ 94.251154][ T4306] usb 3-1: Using ep0 maxpacket: 32 [ 94.392352][ T4306] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.401693][ T4306] usb 3-1: config 0 has no interface number 0 [ 94.432130][ T4797] loop4: detected capacity change from 0 to 512 [ 94.443052][ T4628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.508477][ T4628] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.541058][ T4570] Bluetooth: hci3: command 0x040f tx timeout [ 94.560369][ T4797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 94.576679][ T4797] System zones: 1-12 [ 94.599952][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.611865][ T4306] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 94.621338][ T4306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.629370][ T4306] usb 3-1: Product: syz [ 94.634279][ T4306] usb 3-1: Manufacturer: syz [ 94.638932][ T4306] usb 3-1: SerialNumber: syz [ 94.639924][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.649209][ T4306] usb 3-1: config 0 descriptor?? [ 94.674297][ T4797] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.161: error while reading EA inode 32 err=-116 [ 94.693199][ T4306] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 94.710961][ T4306] usb 3-1: selecting invalid altsetting 1 [ 94.717016][ T4306] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 94.754323][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.762611][ T4797] EXT4-fs (loop4): Remounting filesystem read-only [ 94.769195][ T4797] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.786965][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.811565][ T4306] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 94.827389][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.834547][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.855142][ T4306] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 94.897256][ T4803] loop1: detected capacity change from 0 to 4096 [ 94.898437][ T4306] usb 3-1: media controller created [ 94.910064][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.931361][ T4797] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.161: error while reading EA inode 32 err=-116 [ 94.945148][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.975310][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.982487][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.013042][ T4306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.051429][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.071093][ T4797] EXT4-fs (loop4): Remounting filesystem read-only [ 95.078289][ T4797] EXT4-fs (loop4): 1 orphan inode deleted [ 95.106526][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.133197][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.152532][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.161984][ T4306] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 95.169520][ T4306] zl10353_read_register: readreg error (reg=127, ret==-71) [ 95.178366][ T4797] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,. Quota mode: none. [ 95.221120][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.231785][ T4306] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 95.261063][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.305879][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.352471][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.401172][ T4306] usb 3-1: USB disconnect, device number 4 [ 95.409106][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.485884][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.521631][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.565906][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.605459][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.733372][ T4821] netlink: 27 bytes leftover after parsing attributes in process `syz.3.166'. [ 95.810747][ T4185] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 95.850741][ T4185] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 96.104080][ T4840] loop1: detected capacity change from 0 to 256 [ 96.201418][ T4306] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.212688][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.220191][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.247067][ T4628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.281178][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.315749][ T4840] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.347313][ T4840] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 96.356478][ T4839] syz.4.172 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.387063][ T4840] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 96.462504][ T4306] usb 3-1: Using ep0 maxpacket: 32 [ 96.611429][ T4306] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 96.638694][ T4306] usb 3-1: config 0 has no interface number 0 [ 96.661833][ T4306] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1 [ 96.691787][ T21] usb 4-1: config 0 has no interfaces? [ 96.711786][ T4570] Bluetooth: hci3: command 0x0419 tx timeout [ 96.849973][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.869617][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.878510][ T4306] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 96.891198][ T21] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 96.910691][ T4306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.930964][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.950957][ T4306] usb 3-1: Product: syz [ 96.960831][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.961697][ T4174] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.976773][ T21] usb 4-1: Product: syz [ 96.985912][ T4306] usb 3-1: Manufacturer: syz [ 96.990790][ T21] usb 4-1: Manufacturer: syz [ 96.997316][ T4306] usb 3-1: SerialNumber: syz [ 97.000807][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.003625][ T21] usb 4-1: SerialNumber: syz [ 97.025489][ T4306] usb 3-1: config 0 descriptor?? [ 97.044744][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.052288][ T4831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.063013][ T21] usb 4-1: config 0 descriptor?? [ 97.071576][ T4306] smsc95xx v2.0.0 [ 97.077372][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.089004][ T4628] device veth0_vlan entered promiscuous mode [ 97.102395][ T4570] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.126785][ T4628] device veth1_vlan entered promiscuous mode [ 97.159607][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.172507][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.186250][ T4628] device veth0_macvtap entered promiscuous mode [ 97.197985][ T4628] device veth1_macvtap entered promiscuous mode [ 97.218993][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.250275][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.267637][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.284157][ T4831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.292421][ T4174] usb 5-1: Using ep0 maxpacket: 16 [ 97.316691][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.320573][ T4264] usb 4-1: USB disconnect, device number 3 [ 97.327995][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.353051][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.369535][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.380529][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.397872][ T4628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.440072][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.448325][ T4174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.464776][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.471204][ T4174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.486074][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.500339][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.501142][ T4174] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.522800][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.537994][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.548216][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.549227][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.562341][ T4570] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 97.579333][ T4174] usb 5-1: config 0 descriptor?? [ 97.588381][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.598571][ T4570] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 97.608802][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.619487][ T4570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.630522][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.649209][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.660276][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.679989][ T4628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.693400][ T4570] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 97.706383][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.719773][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.732456][ T4628] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.742211][ T4628] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.755555][ T4628] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.765456][ T4628] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781220][ T4306] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 97.812152][ T4306] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 97.863156][ T4306] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 97.912196][ T4306] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 97.928702][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.966424][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.975975][ T4306] usb 3-1: USB disconnect, device number 5 [ 98.010629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.034895][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.051815][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.078232][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.091149][ T4867] loop3: detected capacity change from 0 to 4096 [ 98.290887][ T4875] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.346700][ T4174] usbhid 5-1:0.0: can't add hid device: -71 [ 98.360672][ T4174] usbhid: probe of 5-1:0.0 failed with error -71 [ 98.403573][ T4174] usb 5-1: USB disconnect, device number 3 [ 98.412365][ T4880] vxcan0: tx address claim with dest, not broadcast [ 98.569493][ T4885] loop5: detected capacity change from 0 to 512 [ 98.649930][ T4885] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.663479][ T4867] syz.3.175 (4867) used greatest stack depth: 20112 bytes left [ 98.691279][ T4885] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.722971][ T4890] loop2: detected capacity change from 0 to 1024 [ 98.753541][ T4885] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 98.801171][ T4890] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 98.890503][ T4885] EXT4-fs (loop5): 1 truncate cleaned up [ 98.906828][ T4885] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback. [ 98.956224][ T4570] stv0680 2-1:4.0: Could not get descriptor 0200 [ 98.984830][ T4890] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 99.162450][ T4570] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 99.181175][ T4570] stv0680 2-1:4.0: last error: 2, command = 0x23 [ 99.210648][ T4570] usb 2-1: USB disconnect, device number 4 [ 99.254887][ T4906] loop3: detected capacity change from 0 to 256 [ 99.359871][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 99.394785][ T4906] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 99.454979][ T4913] loop5: detected capacity change from 0 to 128 [ 99.514631][ T4913] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.568649][ T4906] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 99.591872][ T4913] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.892838][ T1174] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.948537][ T26] audit: type=1326 audit(1769380355.397:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz.4.190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f26478cb9 code=0x0 [ 100.082956][ T4926] loop1: detected capacity change from 0 to 4096 [ 100.130672][ T4926] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 100.280726][ T4926] ntfs3: loop1: Inode r=19 is not in use! [ 100.306803][ T4950] program syz.3.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.316295][ T4926] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 100.528699][ T4961] loop4: detected capacity change from 0 to 512 [ 100.552743][ T4926] overlayfs: invalid redirect ((null)) [ 100.574369][ T4962] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 100.731264][ T4969] loop3: detected capacity change from 0 to 512 [ 100.995985][ T4971] loop2: detected capacity change from 0 to 32768 [ 101.122323][ T4971] XFS (loop2): Mounting V5 Filesystem [ 101.296906][ T4971] XFS (loop2): Ending clean mount [ 101.306348][ T4971] XFS (loop2): Quotacheck needed: Please wait. [ 101.367819][ T4969] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.417293][ T4969] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 101.430585][ T4971] XFS (loop2): Quotacheck: Done. [ 101.440802][ T4971] XFS (loop2): Unmounting Filesystem [ 101.470752][ T4969] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 101.501037][ T4969] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 101.639005][ T4969] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.202: Directory hole found for htree leaf block 0 [ 101.986225][ T4961] loop4: detected capacity change from 0 to 32768 [ 102.283655][ T5022] syz.3.212[5022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.283811][ T5022] syz.3.212[5022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.292453][ T4961] XFS (loop4): Mounting V5 Filesystem [ 102.375426][ T4990] loop1: detected capacity change from 0 to 32768 [ 102.534697][ T4961] XFS (loop4): Ending clean mount [ 102.590545][ T4990] (syz.1.205,4990,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.631443][ T4990] (syz.1.205,4990,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.715714][ T4189] XFS (loop4): Unmounting Filesystem [ 102.866000][ T4990] JBD2: Ignoring recovery information on journal [ 102.961283][ T5046] loop2: detected capacity change from 0 to 256 [ 103.004323][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 103.033628][ T4990] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 103.093825][ T26] audit: type=1800 audit(1769380358.547:4): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="file1" dev="loop2" ino=1048604 res=0 errno=0 [ 103.136051][ T144] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 103.162111][ T144] FAT-fs (loop2): Filesystem has been set read-only [ 103.168969][ T144] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 103.363317][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 103.762900][ T5071] netlink: 64 bytes leftover after parsing attributes in process `syz.2.226'. [ 103.958999][ T5076] loop4: detected capacity change from 0 to 2048 [ 104.182089][ T5076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.286835][ T5076] EXT4-fs (loop4): shut down requested (1) [ 104.686976][ T5112] program syz.1.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.861180][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 105.235316][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.255598][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.287778][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 105.311977][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.337626][ T5085] loop2: detected capacity change from 0 to 40427 [ 105.362554][ T7] usb 6-1: config 0 descriptor?? [ 105.441357][ T5085] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 105.473995][ T5085] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.577148][ T5085] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.619517][ T5067] loop3: detected capacity change from 0 to 65536 [ 105.732237][ T5085] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.738490][ T5067] XFS (loop3): Mounting V5 Filesystem [ 105.755099][ T5085] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.857970][ T5067] XFS (loop3): Ending clean mount [ 105.864926][ T7] hid (null): nested delimiters [ 105.874532][ T7] wacom 0003:056A:030C.0001: nested delimiters [ 105.921209][ T7] wacom 0003:056A:030C.0001: item 0 1 2 10 parsing failed [ 105.952024][ T5158] binder: 5157:5158 ioctl 400c620e 2000000001c0 returned -22 [ 105.984727][ T7] wacom 0003:056A:030C.0001: parse failed [ 105.990121][ T5085] attempt to access beyond end of device [ 105.990121][ T5085] loop2: rw=2049, want=53256, limit=40427 [ 106.030982][ T7] wacom: probe of 0003:056A:030C.0001 failed with error -22 [ 106.091190][ T7] usb 6-1: USB disconnect, device number 2 [ 106.147489][ T4195] attempt to access beyond end of device [ 106.147489][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 106.311179][ T4191] XFS (loop3): Unmounting Filesystem [ 106.561103][ T4264] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.811036][ T4264] usb 2-1: Using ep0 maxpacket: 32 [ 106.828316][ T5188] loop4: detected capacity change from 0 to 256 [ 106.931323][ T4264] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 106.947971][ T5192] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.979416][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.031816][ T4264] usb 2-1: config 0 descriptor?? [ 107.144510][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 107.165244][ T5200] loop3: detected capacity change from 0 to 1024 [ 107.202184][ T5203] ptrace attach of "./syz-executor exec"[4628] was attempted by " Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ    ÿÿÿÿ   ÿÿÿÿ  [ 107.228681][ T5200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.361134][ T4264] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 107.390682][ T4264] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.436089][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.269'. [ 107.442510][ T4264] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 107.458842][ T4264] usb 2-1: media controller created [ 107.509225][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.556599][ T5213] loop2: detected capacity change from 0 to 512 [ 107.564161][ T5171] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 107.598546][ T5209] loop4: detected capacity change from 0 to 4096 [ 107.631256][ T4264] az6027: usb out operation failed. (-71) [ 107.651216][ T4264] az6027: usb out operation failed. (-71) [ 107.657008][ T4264] stb0899_attach: Driver disabled by Kconfig [ 107.666321][ T5209] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 107.687612][ T5213] EXT4-fs (loop2): Ignoring removed oldalloc option [ 107.705337][ T4264] az6027: no front-end attached [ 107.705337][ T4264] [ 107.716673][ T5213] EXT4-fs (loop2): 1 truncate cleaned up [ 107.722543][ T5213] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 107.747990][ T5213] EXT4-fs (loop2): shut down requested (1) [ 107.751463][ T4264] az6027: usb out operation failed. (-71) [ 107.759720][ T4264] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 107.778664][ T4264] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 107.801493][ T4264] dvb-usb: schedule remote query interval to 400 msecs. [ 107.809370][ T4264] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 107.820225][ T4264] usb 2-1: USB disconnect, device number 5 [ 107.871080][ T5209] ntfs: volume version 3.1. [ 107.961506][ T5222] loop3: detected capacity change from 0 to 128 [ 107.980414][ T4264] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 108.062621][ T5222] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.137765][ T5222] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.147595][ T5235] loop2: detected capacity change from 0 to 64 [ 108.180703][ T5234] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 108.228419][ T5234] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 108.361086][ T5234] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 108.378382][ T5240] program syz.5.282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.396352][ T5234] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 108.468212][ T5234] ntfs: (device loop4): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 108.542199][ T5242] loop3: detected capacity change from 0 to 1024 [ 108.579506][ T4189] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 108.648630][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.287'. [ 108.661908][ T4487] hfsplus: b-tree write err: -5, ino 4 [ 108.781149][ T4264] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.834275][ T5257] process 'syz.3.289' launched './file0' with NULL argv: empty string added [ 108.911188][ T1110] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.023447][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 109.143155][ T4264] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.163081][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 109.181293][ T4264] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.305661][ T5269] loop3: detected capacity change from 0 to 256 [ 109.353091][ T5269] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x44702e96, utbl_chksum : 0xe619d30d) [ 109.420374][ T26] audit: type=1800 audit(1769380364.867:5): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.294" name="file1" dev="loop3" ino=1048605 res=0 errno=0 [ 109.459922][ T5269] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 109.486008][ T5269] exFAT-fs (loop3): Filesystem has been set read-only [ 109.766854][ T5274] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.862376][ T5274] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.045392][ T4264] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.052382][ T4264] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 110.062262][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.082423][ T1110] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 110.090557][ T1110] usb 3-1: config 0 has no interface number 0 [ 110.112378][ T4264] usb 2-1: config 0 descriptor?? [ 110.127279][ T5267] F2FS-fs (loop5): Found nat_bits in checkpoint [ 110.171356][ T5267] F2FS-fs (loop5): recover fsync data on readonly fs [ 110.178984][ T5267] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955 [ 110.281378][ T1110] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 110.300686][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.321025][ T1110] usb 3-1: Product: syz [ 110.325327][ T1110] usb 3-1: Manufacturer: syz [ 110.329952][ T1110] usb 3-1: SerialNumber: syz [ 110.377020][ T1110] usb 3-1: config 0 descriptor?? [ 110.447547][ T1110] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 110.513560][ T5289] set_capacity_and_notify: 2 callbacks suppressed [ 110.513575][ T5289] loop4: detected capacity change from 0 to 16 [ 110.636727][ T5289] erofs: (device loop4): mounted with root inode @ nid 36. [ 110.653151][ T1110] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 110.679591][ T4264] cougar 0003:060B:500A.0002: unexpected long global item [ 110.701731][ T1110] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 110.712819][ T4264] cougar 0003:060B:500A.0002: parse failed [ 110.718698][ T4264] cougar: probe of 0003:060B:500A.0002 failed with error -22 [ 110.729457][ T5289] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 110.822227][ T4188] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6122 in[4096, 0] out[8192] [ 110.853848][ T4264] usb 2-1: USB disconnect, device number 6 [ 110.861575][ T5289] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 110.924301][ T5289] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 110.933699][ T5289] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 110.951084][ T5289] erofs: (device loop4): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 110.969998][ T5250] udc-core: couldn't find an available UDC or it's busy [ 110.977231][ T5289] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 111.031148][ T5289] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 111.045743][ T5250] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.081194][ T5289] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 111.091155][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 111.150273][ T5289] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6122 in[4096, 0] out[8192] [ 111.273577][ T4264] usb 3-1: USB disconnect, device number 6 [ 111.280961][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 111.307244][ T4264] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 111.385644][ T4264] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 111.401365][ T26] audit: type=1800 audit(1769380366.857:6): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.301" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 111.498904][ T4264] quatech2 3-1:0.51: device disconnected [ 111.538126][ T5289] syz.4.301 (5289) used greatest stack depth: 19576 bytes left [ 111.565091][ T5322] program syz.3.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.588525][ T5325] loop1: detected capacity change from 0 to 256 [ 111.737906][ T5325] FAT-fs (loop1): Directory bread(block 64) failed [ 111.764753][ T5325] FAT-fs (loop1): Directory bread(block 65) failed [ 111.820116][ T5325] FAT-fs (loop1): Directory bread(block 66) failed [ 111.850830][ T5325] FAT-fs (loop1): Directory bread(block 67) failed [ 111.888364][ T5325] FAT-fs (loop1): Directory bread(block 68) failed [ 111.912349][ T5325] FAT-fs (loop1): Directory bread(block 69) failed [ 111.919129][ T5325] FAT-fs (loop1): Directory bread(block 70) failed [ 111.974232][ T5325] FAT-fs (loop1): Directory bread(block 71) failed [ 112.022062][ T5325] FAT-fs (loop1): Directory bread(block 72) failed [ 112.028803][ T5325] FAT-fs (loop1): Directory bread(block 73) failed [ 112.139236][ T5352] loop3: detected capacity change from 0 to 256 [ 112.248902][ T26] audit: type=1800 audit(1769380367.697:7): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 112.287237][ T5325] attempt to access beyond end of device [ 112.287237][ T5325] loop1: rw=0, want=1196, limit=256 [ 112.359570][ T5365] loop5: detected capacity change from 0 to 128 [ 112.454857][ T5365] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 112.520609][ T5368] netlink: 128 bytes leftover after parsing attributes in process `syz.4.329'. [ 112.549969][ T5365] hpfs: filesystem error: improperly stopped [ 112.573198][ T5365] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 112.616180][ T5365] hpfs: You really don't want any checks? You are crazy... [ 112.663407][ T5372] loop3: detected capacity change from 0 to 2048 [ 112.674181][ T5365] hpfs: hpfs_map_sector(): read error [ 112.697578][ T5365] hpfs: code page support is disabled [ 112.719814][ T5365] hpfs: hpfs_map_4sectors(): unaligned read [ 112.732943][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 112.761034][ T5372] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.811495][ T5365] hpfs: hpfs_map_4sectors(): unaligned read [ 112.817456][ T5365] hpfs: filesystem error: unable to find root dir [ 113.079942][ T5384] loop4: detected capacity change from 0 to 256 [ 113.157331][ T5384] exfat: Deprecated parameter 'namecase' [ 113.239168][ T5384] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 113.283630][ T5392] netlink: 'syz.2.337': attribute type 11 has an invalid length. [ 113.431869][ T5385] loop3: detected capacity change from 0 to 8192 [ 113.483443][ T5385] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 113.499284][ T5385] REISERFS (device loop3): using ordered data mode [ 113.506541][ T5385] reiserfs: using flush barriers [ 113.520117][ T5385] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.555549][ T5385] REISERFS (device loop3): checking transaction log (loop3) [ 113.575986][ T5385] REISERFS (device loop3): Using r5 hash to sort names [ 113.595651][ T5385] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 113.732363][ T5406] loop1: detected capacity change from 0 to 1024 [ 113.924844][ T144] hfsplus: b-tree write err: -5, ino 4 [ 114.058364][ T5418] loop4: detected capacity change from 0 to 256 [ 114.067322][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 114.201010][ T4262] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.228735][ T5422] pimreg1: tun_chr_ioctl cmd 1074025677 [ 114.252748][ T5422] pimreg1: linktype set to 780 [ 114.356613][ T5428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.355'. [ 114.393249][ T5431] loop5: detected capacity change from 0 to 1024 [ 114.441089][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 114.454440][ T5431] EXT4-fs (loop5): Ignoring removed bh option [ 114.512082][ T5431] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 114.651143][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.751114][ T4262] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 114.760209][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.810991][ T4262] usb 3-1: Product: syz [ 114.815384][ T4262] usb 3-1: Manufacturer: syz [ 114.830166][ T4262] usb 3-1: SerialNumber: syz [ 114.847972][ T4262] usb 3-1: config 0 descriptor?? [ 114.912537][ T4262] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 114.921574][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 114.982216][ T5447] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 114.999322][ T5447] REISERFS (device loop4): using ordered data mode [ 115.007300][ T5447] reiserfs: using flush barriers [ 115.014174][ T5447] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.036785][ T5447] REISERFS (device loop4): checking transaction log (loop4) [ 115.044778][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.065836][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.077128][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.087643][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.101480][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.110555][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.357336][ T5447] REISERFS (device loop4): Using tea hash to sort names [ 115.370049][ T5447] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 115.391313][ T7] usb 2-1: GET_CAPABILITIES returned 0 [ 115.396851][ T7] usbtmc 2-1:16.0: can't read capabilities [ 115.427896][ T5447] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 115.646632][ T7] usb 2-1: USB disconnect, device number 7 [ 115.781560][ T4262] ssu100: probe of 3-1:0.0 failed with error -71 [ 115.820836][ T4262] usb 3-1: USB disconnect, device number 7 [ 116.297050][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 116.387858][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 116.444560][ T5501] set_capacity_and_notify: 1 callbacks suppressed [ 116.444577][ T5501] loop2: detected capacity change from 0 to 512 [ 116.527092][ T5501] EXT4-fs (loop2): filesystem is read-only [ 116.575307][ T5501] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 116.691593][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 116.701706][ T5501] EXT4-fs (loop2): filesystem is read-only [ 116.707563][ T5501] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.778196][ T5480] loop3: detected capacity change from 0 to 32768 [ 116.826302][ T5501] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.380: iget: bad i_size value: -504403158265486552 [ 116.847099][ T5524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.385'. [ 116.859687][ T5501] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.380: couldn't read orphan inode 16 (err -117) [ 116.885915][ T5501] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000004000000,max_batch_time=0x0000000000000003,noblock_validity,minixdf,nolazytime,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 117.152183][ T5480] XFS (loop3): Mounting V5 Filesystem [ 117.253226][ T5480] XFS (loop3): Ending clean mount [ 117.352795][ T5480] XFS (loop3): Quotacheck needed: Please wait. [ 117.366467][ T5547] loop2: detected capacity change from 0 to 4096 [ 117.453654][ T5547] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 117.508387][ T5480] XFS (loop3): Quotacheck: Done. [ 117.528066][ T5547] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 117.601612][ T5547] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 117.668100][ T5547] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 117.723501][ T4191] XFS (loop3): Unmounting Filesystem [ 117.754489][ T5547] ntfs: volume version 3.1. [ 117.920125][ T5541] loop5: detected capacity change from 0 to 32768 [ 118.131133][ T304] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 118.164167][ T5541] XFS (loop5): Mounting V5 Filesystem [ 118.220627][ T304] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 118.251207][ T4195] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 118.429256][ T5541] XFS (loop5): Ending clean mount [ 118.437033][ T5589] loop3: detected capacity change from 0 to 512 [ 118.458717][ T5541] XFS (loop5): Quotacheck needed: Please wait. [ 118.570556][ T5589] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.396: bg 0: block 393: padding at end of block bitmap is not set [ 118.594869][ T5589] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 118.618288][ T5541] XFS (loop5): Quotacheck: Done. [ 118.684087][ T5589] EXT4-fs (loop3): 2 truncates cleaned up [ 118.734233][ T5589] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.804536][ T5605] loop2: detected capacity change from 0 to 1024 [ 118.894747][ T4628] XFS (loop5): Unmounting Filesystem [ 118.907246][ T5605] EXT4-fs (loop2): Ignoring removed nobh option [ 119.096878][ T5605] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.402: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 119.182979][ T5617] loop1: detected capacity change from 0 to 2048 [ 119.217763][ T5605] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.402: couldn't read orphan inode 11 (err -117) [ 119.254914][ T5605] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 119.300670][ T5617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.492681][ T5605] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.402: Invalid block bitmap block 0 in block_group 0 [ 119.558696][ T5605] Quota error (device loop2): write_blk: dquota write failed [ 119.583400][ T5605] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 119.654887][ T5605] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.402: Failed to acquire dquot type 0 [ 119.714308][ T5634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'. [ 119.763804][ T5635] loop4: detected capacity change from 0 to 2048 [ 119.778152][ T5605] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.402: Invalid inode table block 18446530553705398273 in block_group 0 [ 119.818265][ T5635] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.933100][ T9] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm kworker/u4:0: Invalid inode table block 18446530553705398273 in block_group 0 [ 119.960318][ T5641] loop5: detected capacity change from 0 to 2048 [ 120.065949][ T5641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.135498][ T5652] loop1: detected capacity change from 0 to 256 [ 120.319348][ T5652] FAT-fs (loop1): Directory bread(block 64) failed [ 120.371131][ T5652] FAT-fs (loop1): Directory bread(block 65) failed [ 120.384747][ T5652] FAT-fs (loop1): Directory bread(block 66) failed [ 120.413699][ T5652] FAT-fs (loop1): Directory bread(block 67) failed [ 120.451116][ T5652] FAT-fs (loop1): Directory bread(block 68) failed [ 120.480313][ T5652] FAT-fs (loop1): Directory bread(block 69) failed [ 120.536488][ T4262] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.666023][ T5652] FAT-fs (loop1): Directory bread(block 70) failed [ 120.711590][ T5652] FAT-fs (loop1): Directory bread(block 71) failed [ 120.718411][ T5652] FAT-fs (loop1): Directory bread(block 72) failed [ 120.725278][ T5652] FAT-fs (loop1): Directory bread(block 73) failed [ 120.801096][ T4262] usb 5-1: Using ep0 maxpacket: 16 [ 120.860854][ T5668] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 120.867998][ T5668] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.921421][ T4262] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 121.091324][ T4262] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 121.104033][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.157634][ T4262] usb 5-1: Product: syz [ 121.173681][ T4262] usb 5-1: Manufacturer: syz [ 121.178341][ T4262] usb 5-1: SerialNumber: syz [ 121.206117][ T4262] usb 5-1: config 0 descriptor?? [ 121.262859][ T4262] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 121.291528][ T4262] usb 5-1: Detected FT232RL [ 121.481133][ T4262] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 121.732901][ T5708] set_capacity_and_notify: 2 callbacks suppressed [ 121.732918][ T5708] loop1: detected capacity change from 0 to 256 [ 121.765786][ T4262] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 121.823426][ T5708] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 121.889482][ T5683] loop3: detected capacity change from 0 to 32768 [ 121.984854][ T4262] usb 5-1: USB disconnect, device number 4 [ 122.011604][ T5690] loop5: detected capacity change from 0 to 32768 [ 122.012837][ T4262] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 122.029436][ T4262] ftdi_sio 5-1:0.0: device disconnected [ 122.049383][ T5690] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.427 (5690) [ 122.131511][ T5723] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 122.155156][ T5683] XFS (loop3): Mounting V5 Filesystem [ 122.161238][ T5690] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 122.170007][ T5690] BTRFS info (device loop5): using free space tree [ 122.194339][ T5728] loop2: detected capacity change from 0 to 256 [ 122.218156][ T5690] BTRFS info (device loop5): has skinny extents [ 122.247927][ T5728] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 122.265083][ T5683] XFS (loop3): Ending clean mount [ 122.296453][ T5731] XFS (loop3): SB summary counter sanity check failed [ 122.310519][ T5731] XFS (loop3): Metadata corruption detected at xfs_sb_write_verify+0xf8/0x2c0, xfs_sb block 0x0 [ 122.321931][ T5731] XFS (loop3): Unmount and run xfs_repair [ 122.327732][ T5731] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 122.335568][ T5731] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 122.344844][ T5731] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.354297][ T5731] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 122.363232][ T5731] 00000030: 00 00 00 00 00 00 00 08 00 00 00 00 00 00 18 00 ................ [ 122.372299][ T5731] 00000040: 00 00 00 00 00 00 18 01 00 00 00 00 00 00 18 02 ................ [ 122.381486][ T5731] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 122.390542][ T5731] 00000060: 00 00 0b e8 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 122.404581][ T5731] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 122.413846][ T5731] XFS (loop3): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x20c/0x670 (fs/xfs/xfs_buf.c:1515). Shutting down filesystem. [ 122.428607][ T5731] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 122.476098][ T4191] XFS (loop3): Unmounting Filesystem [ 123.011635][ T5690] BTRFS info (device loop5): enabling ssd optimizations [ 123.683650][ T4245] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.907157][ T5812] loop4: detected capacity change from 0 to 1024 [ 123.922219][ T5781] loop2: detected capacity change from 0 to 40427 [ 123.944572][ T5812] EXT4-fs (loop4): Ignoring removed nobh option [ 123.964243][ T5781] F2FS-fs (loop2): invalid crc value [ 124.001214][ T5812] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.451: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 124.030305][ T5781] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.101306][ T4245] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 124.110046][ T5821] loop5: detected capacity change from 0 to 256 [ 124.116886][ T4245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.125179][ T5812] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.451: couldn't read orphan inode 11 (err -117) [ 124.156219][ T4245] usb 4-1: config 0 descriptor?? [ 124.191186][ T5812] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 124.230016][ T5821] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 124.242414][ T5781] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.265681][ T5812] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.451: Invalid block bitmap block 0 in block_group 0 [ 124.328710][ T5812] Quota error (device loop4): write_blk: dquota write failed [ 124.357882][ T5812] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 124.436574][ T5812] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.451: Failed to acquire dquot type 0 [ 124.459546][ T4245] kaweth 4-1:0.0: Firmware present in device. [ 124.522792][ T5832] netlink: 16 bytes leftover after parsing attributes in process `syz.5.453'. [ 124.545268][ T5812] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.451: Invalid inode table block 18446530553705398273 in block_group 0 [ 124.610124][ T4195] attempt to access beyond end of device [ 124.610124][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 124.651264][ T4245] kaweth 4-1:0.0: Statistics collection: 0 [ 124.657987][ T4245] kaweth 4-1:0.0: Multicast filter limit: 0 [ 124.669619][ T154] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:2: Invalid inode table block 18446530553705398273 in block_group 0 [ 124.717772][ T4245] kaweth 4-1:0.0: MTU: 0 [ 124.722369][ T4245] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 124.810744][ T5837] loop5: detected capacity change from 0 to 2048 [ 124.935949][ T5837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.100014][ T4245] kaweth 4-1:0.0: Error setting SOFS wait [ 125.141183][ T4245] kaweth: probe of 4-1:0.0 failed with error -5 [ 125.154613][ T4245] usb 4-1: USB disconnect, device number 4 [ 125.458568][ T5849] loop5: detected capacity change from 0 to 4096 [ 125.552089][ T5849] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 125.692239][ T5849] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 125.740966][ T5849] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 125.792062][ T5849] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 125.857913][ T5849] ntfs: volume version 3.1. [ 126.025374][ T5842] loop4: detected capacity change from 0 to 32768 [ 126.090101][ T5842] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.457 (5842) [ 126.129286][ T5866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.193100][ T5842] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 126.207516][ T5842] BTRFS info (device loop4): using free space tree [ 126.224915][ T5842] BTRFS info (device loop4): has skinny extents [ 126.295443][ T4487] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 126.331938][ T4628] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 126.639748][ T5842] BTRFS info (device loop4): enabling ssd optimizations [ 126.972843][ T5918] 9p: Unknown uid 00000000004294967295 [ 127.045889][ T5304] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop4 scanned by udevd (5304) [ 127.360766][ T5932] set_capacity_and_notify: 1 callbacks suppressed [ 127.360784][ T5932] loop1: detected capacity change from 0 to 136 [ 127.391044][ T5810] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.439424][ T5925] loop5: detected capacity change from 0 to 40427 [ 127.525495][ T5925] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 127.532796][ T5925] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 127.608160][ T5932] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 127.641163][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 127.761169][ T5810] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 127.842365][ T5936] loop2: detected capacity change from 0 to 2048 [ 127.941627][ T5810] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 127.950752][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.034489][ T5810] usb 4-1: Product: syz [ 128.049221][ T5936] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.078234][ T5947] loop4: detected capacity change from 0 to 1024 [ 128.090360][ T5810] usb 4-1: Manufacturer: syz [ 128.127820][ T5810] usb 4-1: SerialNumber: syz [ 128.163799][ T5810] usb 4-1: config 0 descriptor?? [ 128.201448][ T5947] EXT4-fs (loop4): Test dummy encryption mode enabled [ 128.241603][ T5947] EXT4-fs (loop4): inline encryption not supported [ 128.257989][ T5810] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 128.271856][ T5810] usb 4-1: Detected FT232RL [ 128.282494][ T5947] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,nojournal_checksum,dax=inode,nobarrier,inode_readahead_blks=0x0000000002000000,test_dummy_encryption,inlinecrypt,grpjquota=,,errors=continue. Quota mode: writeback. [ 128.324798][ T5953] loop1: detected capacity change from 0 to 128 [ 128.392265][ T5947] EXT4-fs (loop4): Ignoring removed orlov option [ 128.398868][ T5947] EXT4-fs (loop4): Remounting file system with no journal so ignoring journalled data option [ 128.409109][ T5953] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 128.431427][ T5810] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 128.436780][ T5947] EXT4-fs (loop4): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,sysvgroups,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 128.703472][ T5810] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 128.781284][ T5959] loop0: Can't mount, would change RO state [ 128.790364][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.488'. [ 128.856981][ T4487] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 234: padding at end of block bitmap is not set [ 128.933671][ T1108] usb 4-1: USB disconnect, device number 5 [ 128.948520][ T1108] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 128.973954][ T1108] ftdi_sio 4-1:0.0: device disconnected [ 128.973977][ T4487] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 129.000747][ T5965] loop5: detected capacity change from 0 to 64 [ 129.044600][ T4487] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.044600][ T4487] [ 129.055189][ T4487] EXT4-fs (loop2): Total free blocks count 0 [ 129.061340][ T4487] EXT4-fs (loop2): Free/Dirty block details [ 129.067499][ T4487] EXT4-fs (loop2): free_blocks=0 [ 129.073507][ T4487] EXT4-fs (loop2): dirty_blocks=2448 [ 129.079157][ T4487] EXT4-fs (loop2): Block reservation details [ 129.124036][ T4487] EXT4-fs (loop2): i_reserved_data_blocks=153 [ 129.187324][ T4488] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 394 with error 28 [ 129.213684][ T4488] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.213684][ T4488] [ 129.338426][ T4571] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.434860][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 129.462594][ T5963] loop1: detected capacity change from 0 to 32768 [ 129.486435][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 129.592076][ T5963] XFS (loop1): Mounting V5 Filesystem [ 129.615714][ T5983] pimreg1: tun_chr_ioctl cmd 1074025677 [ 129.622825][ T5983] pimreg1: linktype set to 780 [ 129.661190][ T4306] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 129.709813][ T5963] XFS (loop1): Ending clean mount [ 129.722571][ T5963] XFS (loop1): Quotacheck needed: Please wait. [ 129.832151][ T5963] XFS (loop1): Quotacheck: Done. [ 129.848746][ T5989] loop2: detected capacity change from 0 to 512 [ 129.918174][ T4185] XFS (loop1): Unmounting Filesystem [ 129.941476][ T4571] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 129.962470][ T5989] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.496: bg 0: block 393: padding at end of block bitmap is not set [ 129.988785][ T4571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.027599][ T4571] usb 5-1: Product: syz [ 130.041590][ T5989] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 130.070733][ T4571] usb 5-1: Manufacturer: syz [ 130.075891][ T4306] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.091036][ T4306] usb 6-1: config 0 has no interfaces? [ 130.096687][ T4571] usb 5-1: SerialNumber: syz [ 130.107594][ T5989] EXT4-fs (loop2): 2 truncates cleaned up [ 130.117472][ T4306] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 130.134458][ T4571] usb 5-1: config 0 descriptor?? [ 130.139594][ T5989] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.156778][ T4306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.167706][ T4306] usb 6-1: config 0 descriptor?? [ 130.202171][ T4571] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 130.402589][ T5994] loop2: detected capacity change from 0 to 128 [ 130.430784][ T5994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 130.463833][ T5805] usb 6-1: USB disconnect, device number 3 [ 130.704239][ T4571] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 130.876496][ T5992] loop3: detected capacity change from 0 to 40427 [ 130.917991][ T5992] F2FS-fs (loop3): invalid crc value [ 130.938693][ T4571] usb 5-1: USB disconnect, device number 5 [ 130.952322][ T5992] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.055682][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.502'. [ 131.091079][ T5992] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.117762][ T6004] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 131.283953][ T6006] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.416972][ T4191] attempt to access beyond end of device [ 131.416972][ T4191] loop3: rw=2049, want=45104, limit=40427 [ 131.829231][ T4571] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.063558][ T1174] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 132.094620][ T4571] usb 5-1: Using ep0 maxpacket: 8 [ 132.100870][ T1174] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 132.125631][ T1174] EXT4-fs (loop5): This should not happen!! Data will be lost [ 132.125631][ T1174] [ 132.136044][ T1174] EXT4-fs (loop5): Total free blocks count 0 [ 132.150433][ T1174] EXT4-fs (loop5): Free/Dirty block details [ 132.167526][ T1174] EXT4-fs (loop5): free_blocks=0 [ 132.172972][ T1174] EXT4-fs (loop5): dirty_blocks=3008 [ 132.199776][ T1174] EXT4-fs (loop5): Block reservation details [ 132.211615][ T1174] EXT4-fs (loop5): i_reserved_data_blocks=188 [ 132.241166][ T4571] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.262579][ T4571] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.293016][ T4571] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.323791][ T4571] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.345520][ T4571] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.346191][ T1174] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 944 with error 28 [ 132.365016][ T4571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.385953][ T6018] set_capacity_and_notify: 2 callbacks suppressed [ 132.385970][ T6018] loop1: detected capacity change from 0 to 40427 [ 132.406242][ T1174] EXT4-fs (loop5): This should not happen!! Data will be lost [ 132.406242][ T1174] [ 132.507183][ T6040] netlink: 128 bytes leftover after parsing attributes in process `syz.2.515'. [ 132.533234][ T6018] F2FS-fs (loop1): invalid crc value [ 132.598118][ T6018] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.630464][ T6047] syz.2.516[6047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.630635][ T6047] syz.2.516[6047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.681045][ T4571] usb 5-1: GET_CAPABILITIES returned 0 [ 132.729163][ T4571] usbtmc 5-1:16.0: can't read capabilities [ 132.739326][ T6018] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.771572][ T6051] program syz.3.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.785604][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.792941][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.904164][ T5810] usb 5-1: USB disconnect, device number 6 [ 132.964958][ T6061] loop3: detected capacity change from 0 to 16 [ 132.996221][ T6055] loop2: detected capacity change from 0 to 2048 [ 133.004838][ T4185] attempt to access beyond end of device [ 133.004838][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 133.042827][ T6061] erofs: (device loop3): mounted with root inode @ nid 36. [ 133.074635][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 133.092330][ T6055] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.147424][ T4188] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 6122 in[4096, 0] out[8192] [ 133.178521][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 133.190115][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 133.199609][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 133.209662][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 133.219483][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 133.229845][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 133.230733][ T6055] EXT4-fs (loop2): shut down requested (1) [ 133.247848][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 133.261147][ T5805] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 133.267357][ T6061] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 6122 in[4096, 0] out[8192] [ 133.402368][ T26] audit: type=1800 audit(1769380388.847:8): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.522" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 133.501054][ T5805] usb 6-1: Using ep0 maxpacket: 16 [ 133.609306][ T6067] loop4: detected capacity change from 0 to 2048 [ 133.648821][ T5805] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.693297][ T5805] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.719855][ T5805] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.732524][ T5805] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 133.745201][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.780417][ T5805] usb 6-1: config 0 descriptor?? [ 133.818582][ T6067] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.283318][ T5805] cougar 0003:060B:500A.0003: unexpected long global item [ 134.307255][ T5805] cougar 0003:060B:500A.0003: parse failed [ 134.319259][ T5805] cougar: probe of 0003:060B:500A.0003 failed with error -22 [ 134.383800][ T6095] netlink: 27 bytes leftover after parsing attributes in process `syz.1.532'. [ 134.385550][ T6094] loop2: detected capacity change from 0 to 256 [ 134.486754][ T6094] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.508783][ T5805] usb 6-1: USB disconnect, device number 4 [ 134.534137][ T6094] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 134.563893][ T6094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 134.685627][ T1174] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 134.721867][ T6102] vxcan0: tx address claim with dest, not broadcast [ 134.729040][ T1174] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 134.751356][ T1174] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.751356][ T1174] [ 134.792809][ T1174] EXT4-fs (loop4): Total free blocks count 0 [ 134.798854][ T1174] EXT4-fs (loop4): Free/Dirty block details [ 134.813132][ T1174] EXT4-fs (loop4): free_blocks=0 [ 134.818253][ T1174] EXT4-fs (loop4): dirty_blocks=4800 [ 134.824650][ T1174] EXT4-fs (loop4): Block reservation details [ 134.846616][ T1174] EXT4-fs (loop4): i_reserved_data_blocks=300 [ 134.903109][ T1174] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 134.916819][ T1174] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.916819][ T1174] [ 134.971834][ T6104] loop2: detected capacity change from 0 to 4096 [ 135.204402][ T6109] loop5: detected capacity change from 0 to 4096 [ 135.213118][ T4188] Bluetooth: hci3: link tx timeout [ 135.214965][ T6107] loop3: detected capacity change from 0 to 4096 [ 135.218636][ T4188] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.282766][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 135.289251][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 135.361283][ T6107] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 135.384894][ T6115] loop1: detected capacity change from 0 to 1024 [ 135.399989][ T6115] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 135.416610][ T6107] ntfs3: loop3: Inode r=19 is not in use! [ 135.428775][ T6107] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 135.440532][ T6116] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.535841][ T6107] overlayfs: invalid redirect ((null)) [ 135.542690][ T6119] delete_channel: no stack [ 135.549651][ T6115] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 135.612584][ T26] audit: type=1800 audit(1769380391.067:9): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.542" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 135.777784][ T4188] Bluetooth: hci3: link tx timeout [ 135.783160][ T4188] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.812734][ T6127] sctp: [Deprecated]: syz.4.548 (pid 6127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.812734][ T6127] Use struct sctp_sack_info instead [ 136.016983][ T6133] loop1: detected capacity change from 0 to 128 [ 136.094091][ T6140] program syz.2.552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.141781][ T6133] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.189319][ T6133] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.326624][ T154] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.441767][ T6156] program syz.3.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.626099][ T6169] sctp: [Deprecated]: syz.3.565 (pid 6169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.626099][ T6169] Use struct sctp_sack_info instead [ 136.650907][ T6168] erofs: (device loop1): mounted with root inode @ nid 36. [ 136.661527][ T6168] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 136.680725][ T4188] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6122 in[4096, 0] out[8192] [ 136.715159][ T6168] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 136.739251][ T6168] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 136.755096][ T6168] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 136.766494][ T6168] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 136.778982][ T5810] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.787770][ T6168] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 136.796963][ T6168] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 136.806191][ T6168] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 136.815691][ T6168] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6122 in[4096, 0] out[8192] [ 136.842304][ T5805] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.853595][ T26] audit: type=1800 audit(1769380392.307:10): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.564" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 137.050969][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 137.085441][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 137.092461][ T5805] usb 3-1: Using ep0 maxpacket: 16 [ 137.151387][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 137.191233][ T5810] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.200042][ T5810] usb 5-1: config 0 has no interface number 0 [ 137.211778][ T4188] Bluetooth: hci3: link tx timeout [ 137.216968][ T4188] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.225139][ T5805] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.236438][ T5805] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.246482][ T5805] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.253208][ T5805] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 137.263428][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.275437][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 137.282712][ T5805] usb 3-1: config 0 descriptor?? [ 137.401435][ T5810] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 137.434165][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.446309][ T6163] set_capacity_and_notify: 1 callbacks suppressed [ 137.446326][ T6163] loop5: detected capacity change from 0 to 32768 [ 137.465682][ T5810] usb 5-1: Product: syz [ 137.469933][ T5810] usb 5-1: Manufacturer: syz [ 137.474996][ T5810] usb 5-1: SerialNumber: syz [ 137.480398][ T6183] loop3: detected capacity change from 0 to 128 [ 137.487911][ T5810] usb 5-1: config 0 descriptor?? [ 137.542369][ T6183] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.559059][ T5810] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 137.593174][ T6183] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.616763][ T5810] usb 5-1: selecting invalid altsetting 1 [ 137.658155][ T5810] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 137.691247][ T6163] XFS (loop5): Mounting V5 Filesystem [ 137.703687][ T5810] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.715885][ T5810] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 137.724787][ T5810] usb 5-1: media controller created [ 137.742617][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.766792][ T1174] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.793350][ T5805] cougar 0003:060B:500A.0004: unexpected long global item [ 137.801130][ T5805] cougar 0003:060B:500A.0004: parse failed [ 137.807088][ T5805] cougar: probe of 0003:060B:500A.0004 failed with error -22 [ 137.831061][ T5810] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 137.844971][ T5810] zl10353_read_register: readreg error (reg=127, ret==-71) [ 137.851920][ T6163] XFS (loop5): Ending clean mount [ 137.891056][ T5810] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 137.927550][ T6199] XFS (loop5): SB summary counter sanity check failed [ 137.937443][ T6199] XFS (loop5): Metadata corruption detected at xfs_sb_write_verify+0xf8/0x2c0, xfs_sb block 0x0 [ 137.948412][ T6199] XFS (loop5): Unmount and run xfs_repair [ 137.954206][ T6199] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 137.961823][ T6199] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 137.970748][ T6199] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.995558][ T4571] usb 3-1: USB disconnect, device number 8 [ 138.007817][ T6199] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 138.052623][ T6199] 00000030: 00 00 00 00 00 00 00 08 00 00 00 00 00 00 18 00 ................ [ 138.098602][ T6199] 00000040: 00 00 00 00 00 00 18 01 00 00 00 00 00 00 18 02 ................ [ 138.101950][ T5810] usb 5-1: USB disconnect, device number 7 [ 138.133911][ T6199] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 138.175047][ T6199] 00000060: 00 00 0b e8 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 138.205514][ T6199] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 138.238104][ T6199] XFS (loop5): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x20c/0x670 (fs/xfs/xfs_buf.c:1515). Shutting down filesystem. [ 138.260284][ T6199] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 138.301275][ T4628] XFS (loop5): Unmounting Filesystem [ 138.346969][ T6207] loop1: detected capacity change from 0 to 1024 [ 138.421331][ T6207] EXT4-fs (loop1): Test dummy encryption mode enabled [ 138.456042][ T6207] EXT4-fs (loop1): inline encryption not supported [ 138.488265][ T6207] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,nojournal_checksum,dax=inode,nobarrier,inode_readahead_blks=0x0000000002000000,test_dummy_encryption,inlinecrypt,grpjquota=,,errors=continue. Quota mode: writeback. [ 138.527247][ T6213] loop4: detected capacity change from 0 to 256 [ 138.554150][ T6207] EXT4-fs (loop1): Ignoring removed orlov option [ 138.560568][ T6207] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 138.709678][ T6207] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,sysvgroups,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 138.742458][ T6213] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xb4f9e0e3, utbl_chksum : 0xe619d30d) [ 138.876797][ T6213] exFAT-fs (loop4): error, invalid size(size(6940) > aligned(9223372036854777344) [ 138.876797][ T6213] [ 138.920641][ T6213] exFAT-fs (loop4): Filesystem has been set read-only [ 139.019786][ T6210] loop3: detected capacity change from 0 to 32768 [ 139.031153][ T5805] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 139.392212][ T5805] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.422786][ T5805] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.531197][ T5805] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.540587][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.552199][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.581544][ T5805] usb 3-1: SerialNumber: syz [ 139.610048][ T6249] loop5: detected capacity change from 0 to 1024 [ 139.636379][ T4188] Bluetooth: hci3: link tx timeout [ 139.641737][ T4188] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.650220][ T4188] Bluetooth: hci3: link tx timeout [ 139.656156][ T4188] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.676511][ T6250] loop3: detected capacity change from 0 to 2048 [ 139.778817][ T4188] Bluetooth: hci3: link tx timeout [ 139.784126][ T4188] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.808193][ T6250] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.817971][ T154] hfsplus: b-tree write err: -5, ino 4 [ 139.907099][ T5805] usb 3-1: 0:2 : does not exist [ 139.971082][ T1108] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 140.001203][ T5805] usb 3-1: USB disconnect, device number 9 [ 140.011222][ T1108] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 140.020335][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.149510][ T6264] netlink: 64 bytes leftover after parsing attributes in process `syz.5.588'. [ 140.161015][ T1108] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 140.283273][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.674163][ T5933] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 234: padding at end of block bitmap is not set [ 140.736714][ T5933] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 140.769802][ T5933] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.769802][ T5933] [ 140.811160][ T5933] EXT4-fs (loop3): Total free blocks count 0 [ 140.817218][ T5933] EXT4-fs (loop3): Free/Dirty block details [ 140.843886][ T5933] EXT4-fs (loop3): free_blocks=0 [ 140.848917][ T5933] EXT4-fs (loop3): dirty_blocks=3648 [ 140.875085][ T5933] EXT4-fs (loop3): Block reservation details [ 140.915710][ T5933] EXT4-fs (loop3): i_reserved_data_blocks=228 [ 141.019482][ T5933] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1594 with error 28 [ 141.046865][ T5933] EXT4-fs (loop3): This should not happen!! Data will be lost [ 141.046865][ T5933] [ 141.120814][ T6278] loop1: detected capacity change from 0 to 32768 [ 141.218907][ T6273] loop5: detected capacity change from 0 to 40427 [ 141.222548][ T6278] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 141.253689][ T6273] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 141.262164][ T6278] JBD2: Ignoring recovery information on journal [ 141.288138][ T6273] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 141.341560][ T6273] F2FS-fs (loop5): Found nat_bits in checkpoint [ 141.351158][ T6292] loop2: detected capacity change from 0 to 1024 [ 141.365592][ T6278] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 141.411324][ T1108] stv0680 5-1:4.0: Could not get descriptor 0200 [ 141.481353][ T6273] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 141.498726][ T6273] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 141.631879][ T1108] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 141.650391][ T1108] stv0680 5-1:4.0: last error: 2, command = 0x23 [ 141.694950][ T1108] usb 5-1: USB disconnect, device number 8 [ 141.749251][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 141.770207][ T6273] attempt to access beyond end of device [ 141.770207][ T6273] loop5: rw=2049, want=53256, limit=40427 [ 141.879533][ T26] audit: type=1800 audit(1769380397.327:11): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.599" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 141.900110][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 141.980077][ T4628] attempt to access beyond end of device [ 141.980077][ T4628] loop5: rw=2049, want=45104, limit=40427 [ 142.362308][ T6315] input: syz1 as /devices/virtual/input/input9 [ 143.455008][ T4306] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 143.469377][ T6332] set_capacity_and_notify: 1 callbacks suppressed [ 143.469392][ T6332] loop3: detected capacity change from 0 to 40427 [ 143.610972][ T6332] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 143.617640][ T6332] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.648971][ T6332] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.725765][ T6332] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 143.733072][ T4306] usb 6-1: Using ep0 maxpacket: 8 [ 143.750564][ T6332] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.861299][ T4306] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.889651][ T6332] attempt to access beyond end of device [ 143.889651][ T6332] loop3: rw=2049, want=53256, limit=40427 [ 143.908296][ T4306] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 144.003068][ T4191] attempt to access beyond end of device [ 144.003068][ T4191] loop3: rw=2049, want=45104, limit=40427 [ 144.131375][ T4306] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.144999][ T4306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.170348][ T6369] loop1: detected capacity change from 0 to 256 [ 144.178139][ T4306] usb 6-1: Product: syz [ 144.188116][ T4306] usb 6-1: Manufacturer: syz [ 144.205462][ T4306] usb 6-1: SerialNumber: syz [ 144.531216][ T4306] cdc_ncm 6-1:1.0: bind() failure [ 144.546871][ T4306] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 144.559680][ T4306] cdc_ncm 6-1:1.1: bind() failure [ 144.597308][ T4306] usb 6-1: USB disconnect, device number 5 [ 144.970172][ T6367] loop4: detected capacity change from 0 to 65536 [ 145.104493][ T6390] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 145.128296][ T6397] loop2: detected capacity change from 0 to 2048 [ 145.145363][ T6367] XFS (loop4): Mounting V5 Filesystem [ 145.288132][ T6411] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.315600][ T6367] XFS (loop4): Ending clean mount [ 145.367466][ T5810] kernel read not supported for file /rfkill (pid: 5810 comm: kworker/0:19) [ 145.558865][ T4189] XFS (loop4): Unmounting Filesystem [ 145.649906][ T6431] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.668907][ T6428] ptrace attach of "./syz-executor exec"[4191] was attempted by " Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ    ÿÿÿÿ   ÿÿÿÿ  [ 145.673345][ T6397] NILFS (loop2): error -2 truncating bmap (ino=16) [ 146.115144][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 146.160136][ T6411] ------------[ cut here ]------------ [ 146.166628][ T6411] WARNING: CPU: 0 PID: 6411 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 146.176344][ T6411] Modules linked in: [ 146.180283][ T6411] CPU: 0 PID: 6411 Comm: segctord Not tainted syzkaller #0 [ 146.188689][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.188772][ T6411] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 146.188800][ T6411] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 d3 6b 6a fe e8 4e c9 f1 fd e9 b8 fc ff ff e8 c4 6b 6a fe <0f> 0b e9 16 fc ff ff e8 b8 6b 6a fe e8 33 c9 f1 fd e9 74 fe ff ff [ 146.188817][ T6411] RSP: 0000:ffffc90002fff390 EFLAGS: 00010293 [ 146.188839][ T6411] RAX: ffffffff830eb3dc RBX: ffff88806330a1a0 RCX: ffff888020a78000 [ 146.188856][ T6411] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 146.188870][ T6411] RBP: 0000000000000003 R08: ffff88805611ad9f R09: 1ffff1100ac235b3 [ 146.188885][ T6411] R10: dffffc0000000000 R11: ffffed100ac235b4 R12: ffff888020a79788 [ 146.188903][ T6411] R13: ffff88805585d9e0 R14: 00000000003f0002 R15: ffff888055f32db0 [ 146.188919][ T6411] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 146.188939][ T6411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.287178][ T6411] CR2: 00007f629a0da000 CR3: 0000000063283000 CR4: 00000000003506f0 [ 146.295243][ T6411] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 146.303281][ T6411] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 146.311335][ T6411] Call Trace: [ 146.314710][ T6411] [ 146.317674][ T6411] nilfs_dat_commit_update+0x24/0x40 [ 146.323053][ T6411] nilfs_btree_commit_update_v+0x93/0x410 [ 146.328810][ T6411] nilfs_btree_propagate+0x95a/0xcf0 [ 146.334217][ T6411] nilfs_bmap_propagate+0x70/0x120 [ 146.334251][ T6411] nilfs_segctor_apply_buffers+0x15d/0x320 [ 146.334279][ T6411] ? nilfs_collect_file_data+0xc0/0xc0 [ 146.334307][ T6411] nilfs_segctor_scan_file+0x7af/0x9d0 [ 146.334342][ T6411] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 146.334390][ T6411] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 146.334420][ T6411] ? rcu_is_watching+0x11/0xa0 [ 146.334447][ T6411] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 146.334525][ T6411] ? verify_lock_unused+0x140/0x140 [ 146.334566][ T6411] ? nilfs_transaction_unlock+0x220/0x220 [ 146.334592][ T6411] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 146.334633][ T6411] ? clear_nonspinnable+0x60/0x60 [ 146.334660][ T6411] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 146.334689][ T6411] ? __lock_acquire+0x7d10/0x7d10 [ 146.334716][ T6411] ? __rwlock_init+0x140/0x140 [ 146.334744][ T6411] ? do_raw_spin_unlock+0x11d/0x230 [ 146.334771][ T6411] ? _raw_spin_unlock+0x24/0x40 [ 146.334797][ T6411] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 146.334825][ T6411] nilfs_segctor_construct+0x17b/0x690 [ 146.334860][ T6411] nilfs_segctor_thread+0x523/0x1180 [ 146.334914][ T6411] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 146.334943][ T6411] ? nilfs_iput_work_func+0x70/0x70 [ 146.334968][ T6411] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 146.335000][ T6411] ? _raw_spin_unlock+0x40/0x40 [ 146.335022][ T6411] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 146.335049][ T6411] ? init_wait_entry+0xd0/0xd0 [ 146.335076][ T6411] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 146.335107][ T6411] ? __kthread_parkme+0x157/0x1b0 [ 146.335143][ T6411] kthread+0x436/0x520 [ 146.335165][ T6411] ? nilfs_iput_work_func+0x70/0x70 [ 146.335189][ T6411] ? kthread_blkcg+0xd0/0xd0 [ 146.335213][ T6411] ret_from_fork+0x1f/0x30 [ 146.335253][ T6411] [ 146.335274][ T6411] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.335291][ T6411] CPU: 0 PID: 6411 Comm: segctord Not tainted syzkaller #0 [ 146.335312][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.335326][ T6411] Call Trace: [ 146.335333][ T6411] [ 146.335342][ T6411] dump_stack_lvl+0x188/0x250 [ 146.335371][ T6411] ? show_regs_print_info+0x20/0x20 [ 146.335397][ T6411] ? load_image+0x400/0x400 [ 146.335434][ T6411] panic+0x2e5/0x810 [ 146.335461][ T6411] ? bpf_jit_dump+0xd0/0xd0 [ 146.563143][ T6411] ? ret_from_fork+0x1f/0x30 [ 146.563179][ T6411] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 146.573208][ T6411] __warn+0x248/0x2b0 [ 146.573243][ T6411] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 146.573270][ T6411] report_bug+0x1b7/0x2e0 [ 146.573300][ T6411] handle_bug+0x3a/0x70 [ 146.591216][ T6411] exc_invalid_op+0x16/0x40 [ 146.591245][ T6411] asm_exc_invalid_op+0x16/0x20 [ 146.591284][ T6411] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 146.591309][ T6411] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 d3 6b 6a fe e8 4e c9 f1 fd e9 b8 fc ff ff e8 c4 6b 6a fe <0f> 0b e9 16 fc ff ff e8 b8 6b 6a fe e8 33 c9 f1 fd e9 74 fe ff ff [ 146.591327][ T6411] RSP: 0000:ffffc90002fff390 EFLAGS: 00010293 [ 146.591347][ T6411] RAX: ffffffff830eb3dc RBX: ffff88806330a1a0 RCX: ffff888020a78000 [ 146.640399][ T6411] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 146.640419][ T6411] RBP: 0000000000000003 R08: ffff88805611ad9f R09: 1ffff1100ac235b3 [ 146.656409][ T6411] R10: dffffc0000000000 R11: ffffed100ac235b4 R12: ffff888020a79788 [ 146.664518][ T6411] R13: ffff88805585d9e0 R14: 00000000003f0002 R15: ffff888055f32db0 [ 146.664547][ T6411] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 146.664588][ T6411] nilfs_dat_commit_update+0x24/0x40 [ 146.664612][ T6411] nilfs_btree_commit_update_v+0x93/0x410 [ 146.664639][ T6411] nilfs_btree_propagate+0x95a/0xcf0 [ 146.664675][ T6411] nilfs_bmap_propagate+0x70/0x120 [ 146.664702][ T6411] nilfs_segctor_apply_buffers+0x15d/0x320 [ 146.664727][ T6411] ? nilfs_collect_file_data+0xc0/0xc0 [ 146.664752][ T6411] nilfs_segctor_scan_file+0x7af/0x9d0 [ 146.664784][ T6411] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 146.664828][ T6411] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 146.664854][ T6411] ? rcu_is_watching+0x11/0xa0 [ 146.664878][ T6411] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 146.664949][ T6411] ? verify_lock_unused+0x140/0x140 [ 146.664986][ T6411] ? nilfs_transaction_unlock+0x220/0x220 [ 146.665014][ T6411] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 146.665071][ T6411] ? clear_nonspinnable+0x60/0x60 [ 146.665095][ T6411] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 146.665135][ T6411] ? __lock_acquire+0x7d10/0x7d10 [ 146.665159][ T6411] ? __rwlock_init+0x140/0x140 [ 146.665186][ T6411] ? do_raw_spin_unlock+0x11d/0x230 [ 146.665210][ T6411] ? _raw_spin_unlock+0x24/0x40 [ 146.665234][ T6411] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 146.665260][ T6411] nilfs_segctor_construct+0x17b/0x690 [ 146.665294][ T6411] nilfs_segctor_thread+0x523/0x1180 [ 146.665346][ T6411] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 146.665372][ T6411] ? nilfs_iput_work_func+0x70/0x70 [ 146.665396][ T6411] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 146.665423][ T6411] ? _raw_spin_unlock+0x40/0x40 [ 146.665445][ T6411] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 146.665471][ T6411] ? init_wait_entry+0xd0/0xd0 [ 146.665497][ T6411] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 146.665523][ T6411] ? __kthread_parkme+0x157/0x1b0 [ 146.665546][ T6411] kthread+0x436/0x520 [ 146.665563][ T6411] ? nilfs_iput_work_func+0x70/0x70 [ 146.665582][ T6411] ? kthread_blkcg+0xd0/0xd0 [ 146.665605][ T6411] ret_from_fork+0x1f/0x30 [ 146.665639][ T6411] [ 146.665881][ T6411] Kernel Offset: disabled [ 146.873692][ T6411] Rebooting in 86400 seconds..