last executing test programs: 2m28.551346258s ago: executing program 3 (id=4136): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000007c0)="d0", 0x1}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x814) 2m27.509334273s ago: executing program 3 (id=4150): r0 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 2m27.249914007s ago: executing program 3 (id=4153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x947, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) 2m27.05046053s ago: executing program 3 (id=4157): r0 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") statx(r0, &(0x7f0000000300)='./file2\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000400)) 2m26.721655795s ago: executing program 3 (id=4161): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="eae535d4c5cd41b584d3bdb8d3fb3e37666220165c8aec9c235bc9af137d4058a50551a5b228bbbcf6cd1275ef3732adfeaebdf711988cbe9d1da671f8bbaac371392e227f548006163fc9aaf3d55e97410ccacb7df3444c03ac4170da3fbc69ae1c8a590318a7a33a774debbcc54bb6d6025bc65458b94791d5a8bcd898b75cce569e2c6fd55928c5084aab22c8196fb436916cff76302fd8c4b69ca674271f5db630ffad103ad9286287759d0d5470d0b54f701a713e8803665b87799065f31bb0cff21d9c109c1fbfffb640facdacd569f158f694c34ffb4c405b186aa90e8be7b47c56e6e439ae953605d89c131c711ff56f0adb96e5ee0d269b4cfc9d089794f60bdd06e845b5ffdccfefee032ecfd92f6cba5920130f685e807f88de4a2e595ea37f39a92dcbaeb2de15dab62a5a199d4666578eb1707e88ebb0b98140fdb62d60005fd6721f18a2054b2ba2ed308813164f8dbc7e1d26a11a707adc6978a25cca2fca5d62e51794447f656b92f8372ebf98934a0bc057b901080da81ef02ccfa18a29c9b82c90fd38eb554b83428948f3608cd8fd5845bed25a0d96b146f09bd4cce20efc1ecc7bf64bd88e7a460b372a298cb776eb1d78cc334da71dc6056b2d1119cdad3af9092a42c184e9d487076399f0be65a442fdc06901089e6b5178ecb57aa4b98ff1f538696e8510551dbb5cbd36b125efa2a3e719f22b96eeec80a178dae9c894a7dd170419c33817baedfc132cde868a1c55192b9c8a332772fc40fed9f6fee1aea0e2001752caeb58afb55ea7c421cd0eb5e6ea301f8e2f6b68484849f5d3e7bd1b4aa865d2cd049dfc773bb4281f5f8dd2a3f1563c8cd3655dd9e391424151dadf7415afb242cb99b9b9541b6780beafc6a8c2c0bd109749dde1e8535040d8d2cda8393abaa6cdae24e13917e867d6d301f6f39619bcbd70acc747e093ef3c22f0b1a8b8a4d8bd11bc19c7102e11a8603d563507423c96d1653a42d02ff1ee390934927f037d2022cbbf86cb605e82e2b6e2c2fa1d523f72b47738f318836defed1f898271bdd4fcbe7863e5aa7c7e468d9bad908de3c6851c696df710da87771840f46e63fc4c3d5d9b13b663ed2fef2e56a8690cdee9e6ac0a9824c9fe458ad29614f9485f9c18caf2d5c229f24a220ab84daa26ddb2a0d4059b43e073b703148d82fe4d91ae24db7224df2ee4e10d596846466d6a62faa9da7d24f9dd1e3b5cc291f4840b6603d1173204a452a9b05a5efcf4f9e09c2a3c38f2fd49322e718ddc8278ea182a359043387705c0be61be7e62ba7bb85dfa0f24400f89087f78d84d2296844944d186fb55045eb016dd3d602c85211d7b19dbebe3247313283da5bcbba09a3a74c590fdce8cdbef49a73b11413a9df4aaefc356e94f838cef801ba2380d7e5fdc8865140311f071c82bc1482c2033b8ad70d08a5a71e1c949f93cd8743b0bd4eefdaf45f5246efcf800444c8e9b8c2a01b76b6eb4e0639ee7381971172c53e165f14946fb56896e40424a3b981d97b4b01504806d797bb9e3405a7326d2ba7bfa6efc923c4c68d0165aea2d80ae953c7e2ec6534d0da7c28bbe255d81097e84254ff7bd065caa84fa7455885e1b28ab7d6243d0f02903860049935a764ebfe5384bdf9ae0b71f1641e457780da2071a84937dd88d2e4aec7ddaab66e335887f555a724ad9692ee996521ccaa35e2358aea1ab6a8c9845af8af552520fdec7ecb635d230074aa532c3efe6677c79b1328451a779501eccb4c11750744cfce16ba2ced0fc6dd2b75a5ff1770f3851c93bcf8850adf496012d94b8dd6a00d1f9f0c96989979b89838a29875072e0b678a2a55338f21625165c350134d7cb9119ac4dcc77f13a153fe6819d1bdc6b357e93531a68813913daf65d2e62d4bd09da6bb16e8d686518f6faff70dc0804b4b6810117d8698a4d27f0482f9adf9be3aae179dbcad90ab1fbd6b1ba15cdc78ee7686bd15a8fe1cf5af00fcc0a6981a77ac5c3485518921a1b4ea90b02e0059c2c71850d517bddc12bd61a5571da765a34b53e5f06a2b8bb122bf9d642f1ad50a0eb7afe34ef6fd2474d25f314adbf276a895b80b8de6e31eaee5fe4544f4709bf6416f26ec52d517dd3a350cb68df6791dc671495e0f056de8b158095b32ec8b43f65b1f3110cf7da37d2383e99a5bd9a0e0d5684a5b15246170bd11909ef22ee740aa5556dbc0f9dacc8ce440c137bf0ec673651067ef1146004701376116986c49b10226141bea12f679c3f53eaea945b1bb92e6c922a85a2221f768ff4f1c188dc82f9e8d947e140f43c4950430f88a47fb15dcd8ef8491ff08d7b287b280eab99e44a7fba6d4fe20fcb2c2cfa1a6f4d59b51755e66a3d9a325a08a286185c2bdac8c8c2910ed3ff8e047f28b2bf1827e0829f8ec8459241300583f1880c96b2e405b253af5f7e9ee91e34c3fa2cd5c53a71bc3b4b1a5741c17a7b73c8e7d3e8ec9e51a90772b8eb38f23fcb9e07eff8b0f68d4f7d4d68bfb8fbc8d90be681166fe5ed220e3a425c65c0e678e8b7470a99d7fccc7a3be07189ee02e1f8c81549b0b8c0113ef602d10d5d2429e8b60fa5aaddd55cb86141609bae35c185c5ad743d0fb0a1244ba6d67755e46073f3d428926c0d9033f8180120deab78a4b42664e36b6723039457195bff897760ede28bf2661a95715dd20bc744ae2a06bcb12ef8b7a373f3a5557f20256446ba95d45b7810d68494f954d1802aa8986279adc368c2365168c0619bc8952ec6ac60840d9968302edb8809d36f6b0c83dc6941193fb8eb2adcef36db70cbe51fd533ee108eaedebc05ab363058feecfb51e294419695019d0ba50a660ecbe3fd1b43ac973141b7e4c423c062f63ad24468ca79740502716b10a823821429d53f34409cc0757587a5de21663c33a8b194c988a3c209cec76b9fc18805649d9cc109635271c968972f4328e561b562ad6c32a71b269718a303ae3635e5b06717152817a11589d3efa0f803d7bb560c08132827333ada867d1a870e2feb3a5e7851363fc333bb681018764aab63eb740978994f62ec3147d4d6a40e099ada0c50c1a5f6a8196549be226508055aef349c76af40596f6c9b7217423628bb6dc07d9382f6d4c87c962ec97bee6384ba3e2522b76ee8619093500a75bcc8fd0fb9bb5093650ec0ca9c867a22260e2668ecf46047e3df87f5d82d992a558e45fb852be616c030edf6aeeae70848403dc1166e6a16776e8660f90449f297224f667563850480f259f6a59039b1a3ea5488971b5e4bcbf380c527c937055dbf4f5a676bacc09f4dde33c50a1286f6024980df1064a9dc4b3f101b129fa1fc141e54f52d4b7322a0cb1c2567205016f5ede0794122fcaa2d11fa77f5fddb3a5f3c7b3d85f0cb6f32cd11d752f755687fb8d93d40711a4c8873ec7c794f0f781bb9c10f9df22fa8f40cca06a48c37e66ea4480fcdd686526be62915ebe36e0bdf7dafd3940f698469ecdc792ca6105a37499a19382247a85bb734e4ba325dd307be8444b5860f99f9dbc7aa28c26747c89041bde3c10c459406786e10792078a52f4bcc32aff61b3f5798cb5dc2927f260f70a41d8e5fc38498b02d0053a86ae408d2efdc1aca9a8508ef9128dfd1fc6a92ba72f940ee469a3111e2cf6c28e77e5a206db6f09139db812fa4e4cfe33c8d184e4763bd8e54e0e473346215b8905d101463dd2ca855747c81c7ffd6c2625e0b59273a9516ec96a5cd8d9078c974980a16b6b87563986ba287821cd41f417792e42dd24e796e313b9cd943f1b9dd6ee35676ff4ad46dbd52db83abbc78f5dad11b6e7bd09a4ace8c246d0a52c36dcb1f0c6025f6ed2868f4b918b6e4e645c63689b7e7bc369dbe44725993b3b43f4572a7136b6e610adc161f45fc307c0937f2338ebc4fd571852b229b80ccd071e1a29c927f88b8b45efa503691758125d29463e742e2ef508babf30ae39ff8bb3a94cfee379f84348c002fdef77b410bee9f47f8119388b3fc159b409b9d9c9af97a4b75c38ca5fc0665cd975df293370de64714cefdd470c1d05a5d3e0f257182889d7a2d797ebf42d6935d1c6b5ef8cd1e2783cef3a316dbd4768510f26ee5b1c481bcac3e1608458d4b5ec6411cb3c921a131140440561931ca51b92231de91d1f950d992eec74c6500a6ecc9e8bc26eec367dba82720accd6dee234db88c132ec649baeef23a16ebb18c8e5b68b95aac984d8322a01b39636baf16911e458242730ea8b22c686bd01bc451e91c34f81fafe88485bbe97ec99299940ca897c3f802d080ecf8ca7e5032c728b8b33f162ab26a6805db239b88103c19ff8160a28268f8f7ac66593c67251fb0f3fa3004d5ad08107f48e0ecc1e4e910554f49ca72e3fd7e212d828fc3c0c40203e4642a3a372f36cfd13a037fd4dd107d6b386659b379c4c41813c8599cb71fd08e4b80f22dbb088d3d0257f30493b1c4d54201a00e049d998d291ecb659e65e2eed9776b367afc9b84b03957701bcbef289b0eea8e5722a63e1bd748d5af209c5ebff7df185d0d68e7ceabbf9a63bba55946cd3b52a09383fd9b9d2d956dc4e5af16986c5600dfd0db89e0e478420557d001c3716350c3e6ba0bbec1e5888435d296d8666f455d22205ea407a95eb60bc68a184e95ae3259f3783c594d3e550c018369df677ea11a37c757a3bd3c19eb257f5e228ad760562e431754a0c620004548962c3a4fb42d49259dafc1b9d365323fa2ace81876728a24f70b06e1198d5f863bfd00a04d5393b3adb15f4191d374c607c7ccb6b7ef84303454b6655392a23dccca41f55cb314a3bfbb637f57178cc9df4fe0645a8dc1ca0386d1fb0ff2cfc3e149991f97264d893fba0b013c027ce753c3e1f907a2988b1507eecd0e5e26368155ff5c55f616ffec31a613be450ee048955a46d68c272aa53f1db6ce199e2765f4be20933799d96f13b3a65f33cb60da1929023ff5d820172c423f83210a992264a37854033cd43c88129fabb5146367d2b748d84be96dc3a4ad95279ec7ed78dcb57056597a9f46a948708b0e9915b22f28216d94554db2082f4b9782a5802bf6700ef9017168a68304b6573f46c78a0a3be302e096b4f5b87313a2ef9a2b5f51956d9e315b08ee89a59aeec225227f3ece808c451e1103df7887f944138af1b93235bc93121fb84591d065d5f245c035c238a1c30d510be5db14725148919e8d57f1e3a36ead8be870e2505e3c9935c4461741c4a8dc4dff7e0e042167a7228bf218c9d8dd9c0be9e5ff4a79968d8f34cfc3206e0ade5889e9c5e44c918ed3755063d4148e7f1da9d2ce7aa45b9fc873f85cb92160b8a4d5b219884d0c43cc1194259ec4a6127887470d2fabbc1983b1bcc51e931f131d1238333c09740b43802fc5b1c01a942c5d08693b81e59429cb7d49f454f517cddc160d563a243182083008f2481e35312b4b35a2688468f18f4733f4b40d2f298c0b88ec2ad51e2efa509905233e3bbb9e172a1e697ab379f500c8c791aa97623bc8faa7f0468e02e6bc6f9bc40c75b4c01b92731fc371ad7c90928bead62a74580bb2d0aa1d8972fa857766ebe8aa00cd9eae79a591ea3e87a5ce636dc865b992c98a6fafe478973665936ad477558dac400fe179e86e6fef41aa074d0812f0c14f3992edb76358d02a2b763512ca9abc0940dd711670deb4d9abf196de9106efa5e1c14a673de86193908206ab9f72afd6ef1b05355f06ad0b9bc83750bb196654566b56e13e6e820d12bc34920b45c3"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m25.68996742s ago: executing program 3 (id=4174): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x204100, 0xd0) 2m22.459894529s ago: executing program 0 (id=4220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ad9925}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xffffffffffffff80}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 2m22.38309642s ago: executing program 0 (id=4221): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[], 0x2c, 0x1) 2m22.117987584s ago: executing program 0 (id=4226): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 2m21.895454247s ago: executing program 0 (id=4229): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) 2m21.650798271s ago: executing program 0 (id=4232): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce70c0acbc34d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0d", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m20.577792517s ago: executing program 0 (id=4242): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 2m10.580531846s ago: executing program 32 (id=4174): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x204100, 0xd0) 2m5.512730772s ago: executing program 33 (id=4242): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) 2.601712171s ago: executing program 2 (id=6072): r0 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$netlink(r0, 0x10e, 0x1, 0x0, 0xffffffffffffffff) 2.366206895s ago: executing program 2 (id=6076): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ppoll(&(0x7f0000000500)=[{r0, 0x1008}], 0x1, &(0x7f0000000540)={0x0, 0x3938700}, 0x0, 0x0) 2.094257848s ago: executing program 2 (id=6079): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 1.770924553s ago: executing program 2 (id=6085): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x1, 0x0, 0x3, {0xffff, 0x3, 0x6, 0x8}}) 1.624244475s ago: executing program 1 (id=6087): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYRES8=0x0], 0x7, 0x501, &(0x7f0000002b00)="$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") mount$nfs(&(0x7f0000000540)='\xf1uj\xb0\xc1\xb7\x15\r\xa3\xb5e\xee&\x91\xcd\xd2<..', &(0x7f0000000500)='./file0\x00', 0x0, 0x2000, 0x0) 1.556940656s ago: executing program 2 (id=6089): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006400)=[{0x10, 0x29, 0xfffffff9}, {0x10, 0x1, 0x2}], 0x20}}], 0x2, 0x1e80) 1.421551448s ago: executing program 5 (id=6091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_SRC={0x8, 0x2, @loopback}]}, 0x30}}, 0x0) 1.33604821s ago: executing program 2 (id=6092): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.32408157s ago: executing program 4 (id=6093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x20008005}, 0x80) 1.290472161s ago: executing program 6 (id=6094): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) 1.187780722s ago: executing program 1 (id=6095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 1.141340873s ago: executing program 5 (id=6096): r0 = syz_open_dev$vim2m(&(0x7f0000000780), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x4, 0x1, 0x1, "8eb9a828e93b07f1dd06da6b41bfba1700000000000000ff00", 0x20493859}) 1.123222573s ago: executing program 4 (id=6097): r0 = syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x703, 0x8000000000000001) 1.068132354s ago: executing program 6 (id=6098): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x440) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 990.518415ms ago: executing program 5 (id=6099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x120}}, 0x0) 952.278406ms ago: executing program 1 (id=6100): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 861.957217ms ago: executing program 6 (id=6101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) 842.661287ms ago: executing program 4 (id=6102): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'utf8'}}]}, 0x1, 0x304, &(0x7f0000000780)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\xfc\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0x1a39143, 0x0) 767.374598ms ago: executing program 5 (id=6103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 734.493159ms ago: executing program 1 (id=6104): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 588.987741ms ago: executing program 6 (id=6105): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x890c, 0x0) 585.485941ms ago: executing program 4 (id=6106): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 490.379562ms ago: executing program 5 (id=6107): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@discard}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4e5, &(0x7f0000000780)="$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") unlink(&(0x7f0000000100)='./file1\x00') 438.625983ms ago: executing program 1 (id=6108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 365.286424ms ago: executing program 4 (id=6109): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x280, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0xad52c031b2c5971}}, @common=@hl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3275eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 260.557396ms ago: executing program 1 (id=6110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) 259.784246ms ago: executing program 6 (id=6120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syz_tun\x00', 0x219518b687782b97}) 37.79257ms ago: executing program 4 (id=6111): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) 37.17573ms ago: executing program 6 (id=6122): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="1a93d6", 0x3) 0s ago: executing program 5 (id=6112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0xfffffffffffffd6d}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) kernel console output (not intermixed with test programs): ot/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2c398e929 code=0x7ffc0000 [ 430.183634][T14415] bridge0: port 3(batadv0) entered blocking state [ 430.190217][T14415] bridge0: port 3(batadv0) entered forwarding state [ 430.197472][ T27] audit: type=1326 audit(429.761:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14409 comm="syz.4.4516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2c398e929 code=0x7ffc0000 [ 430.304435][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 430.314198][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 430.323629][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 430.337346][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.394716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 430.412753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.435512][T14177] device veth0_vlan entered promiscuous mode [ 430.454849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.495106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.515232][T14423] loop4: detected capacity change from 0 to 4096 [ 430.549923][T14177] device veth1_vlan entered promiscuous mode [ 430.573947][T14423] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 430.632615][T14423] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 430.661747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 430.672930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 430.711653][T14423] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 430.713814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.753966][T14423] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 430.782629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.783597][T14423] ntfs: volume version 3.1. [ 430.814857][T14177] device veth0_macvtap entered promiscuous mode [ 430.852215][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 430.865838][T14177] device veth1_macvtap entered promiscuous mode [ 430.941827][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.972290][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.012906][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.051820][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.071839][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.089002][T14435] loop4: detected capacity change from 0 to 512 [ 431.096570][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 431.106359][ T7] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 431.127190][T14433] loop1: detected capacity change from 0 to 2048 [ 431.141633][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.149629][T14435] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4528: attempt to clear invalid blocks 1 len 1 [ 431.152404][ T7] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 431.152432][ T7] usb 6-1: Product: syz [ 431.152447][ T7] usb 6-1: Manufacturer: syz [ 431.152462][ T7] usb 6-1: SerialNumber: syz [ 431.181893][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.201259][ T7] usb 6-1: config 0 descriptor?? [ 431.222138][T14435] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4528: bg 0: block 343: padding at end of block bitmap is not set [ 431.230654][T14420] loop2: detected capacity change from 0 to 40427 [ 431.252948][T14420] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 431.260993][T14420] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 431.270598][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.283198][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.292009][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.301232][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.303161][T14420] F2FS-fs (loop2): invalid crc value [ 431.310477][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.333459][T14437] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.354992][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.366894][T14435] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 431.403937][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.418446][T14437] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 431.431179][T14435] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4528: invalid indirect mapped block 1819239214 (level 0) [ 431.458423][T14437] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 431.468446][T14420] F2FS-fs (loop2): Found nat_bits in checkpoint [ 431.501834][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.512931][T14435] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4528: invalid indirect mapped block 1819239214 (level 1) [ 431.535714][T14437] Remounting filesystem read-only [ 431.562604][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.621666][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.622945][T14435] EXT4-fs (loop4): 1 truncate cleaned up [ 431.658203][T14435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 431.662569][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.751776][T14420] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 431.759513][T14420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 431.784417][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.796112][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.807214][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.829888][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.851275][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.890367][T14420] syz.2.4520: attempt to access beyond end of device [ 431.890367][T14420] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 431.898395][ T7] usb 6-1: USB disconnect, device number 2 [ 431.918303][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.943572][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.959784][ T4252] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 431.977954][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 431.987015][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.003348][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.019717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.057471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.114445][T14177] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.129870][T14177] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.149761][T14177] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.187988][ T6523] udevd[6523]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.200511][T14177] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.446260][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4530'. [ 432.554213][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.569971][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.607861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 432.717310][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.742951][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.787203][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 433.084630][T14455] loop4: detected capacity change from 0 to 8192 [ 433.122985][T14455] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 433.166532][T14455] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 433.177196][T14455] REISERFS (device loop4): using ordered data mode [ 433.184145][T14455] reiserfs: using flush barriers [ 433.196654][T14455] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 433.249110][T14470] netlink: 'syz.6.4541': attribute type 1 has an invalid length. [ 433.342565][T14455] REISERFS (device loop4): checking transaction log (loop4) [ 433.352381][T14455] REISERFS (device loop4): Using r5 hash to sort names [ 433.359795][T14455] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 433.431933][T14455] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 434.545443][T14511] loop1: detected capacity change from 0 to 256 [ 434.584446][T14511] exfat: Deprecated parameter 'utf8' [ 434.630929][T14511] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 434.715572][T14482] loop5: detected capacity change from 0 to 32768 [ 434.796624][T14482] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.4546 (14482) [ 434.850656][T14482] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 434.871308][T14482] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 434.895137][T14518] loop2: detected capacity change from 0 to 2048 [ 434.908757][T14482] BTRFS info (device loop5): force zlib compression, level 3 [ 434.958290][T14482] BTRFS info (device loop5): force clearing of disk cache [ 434.988619][T14518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 435.014154][T14482] BTRFS info (device loop5): setting nodatasum [ 435.036313][T14482] BTRFS info (device loop5): allowing degraded mounts [ 435.081261][T14482] BTRFS info (device loop5): enabling disk space caching [ 435.129440][T14482] BTRFS info (device loop5): disk space caching is enabled [ 435.184379][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 435.521240][T14482] BTRFS info (device loop5): rebuilding free space tree [ 435.597118][T14559] loop4: detected capacity change from 0 to 512 [ 435.599157][T14482] BTRFS info (device loop5): disabling free space tree [ 435.651403][T14482] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 435.688270][T14482] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 435.728860][T14559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 435.855636][T14565] loop2: detected capacity change from 0 to 2048 [ 435.902449][T14482] BTRFS info (device loop5): balance: start -sprofiles=system|metadata|single|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=7,devid=0,drange=36028797018963968..70368744177664 [ 435.905561][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 435.925519][T14482] BTRFS info (device loop5): balance: ended with status: 0 [ 436.013248][T14568] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 436.091455][T14568] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 436.120578][T14570] tmpfs: Bad value for 'mpol' [ 436.141813][T14568] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 436.153893][T14063] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 436.243945][T14568] Remounting filesystem read-only [ 436.717378][T14585] netlink: 'syz.6.4580': attribute type 2 has an invalid length. [ 436.731943][T14585] netlink: 'syz.6.4580': attribute type 1 has an invalid length. [ 436.758732][T14585] netlink: 'syz.6.4580': attribute type 1 has an invalid length. [ 436.807856][ T4254] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 437.061363][T14594] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.4575'. [ 437.092144][T14594] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.4575'. [ 437.118344][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 437.118360][ T27] audit: type=1326 audit(437.061:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.5.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 437.271834][ T27] audit: type=1326 audit(437.111:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.5.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 437.339235][ T27] audit: type=1326 audit(437.111:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.5.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 437.451803][ T27] audit: type=1326 audit(437.111:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.5.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 437.549509][ T27] audit: type=1326 audit(437.111:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.5.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 437.746148][T14619] netlink: 'syz.6.4594': attribute type 1 has an invalid length. [ 437.774508][T14619] netlink: 'syz.6.4594': attribute type 2 has an invalid length. [ 437.935022][T14627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4597'. [ 437.962171][T14627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4597'. [ 438.447808][T14646] loop5: detected capacity change from 0 to 64 [ 438.720974][T14652] loop4: detected capacity change from 0 to 4096 [ 438.843748][T14652] ntfs: volume version 3.1. [ 439.111395][T14664] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.113349][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.119758][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.849227][T14734] netlink: 'syz.1.4650': attribute type 8 has an invalid length. [ 441.450866][T14757] xt_TCPMSS: Only works on TCP SYN packets [ 441.581832][T14763] ipt_CLUSTERIP: bad num_local_nodes 32 [ 441.777592][ T4691] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 441.852724][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4667'. [ 442.003921][ T4691] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 442.041999][ T4691] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.071829][ T4691] usb 3-1: config 0 has no interface number 0 [ 442.112623][ T4691] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 442.141649][ T4691] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 442.162346][ T4691] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.211725][ T4691] usb 3-1: config 0 interface 52 has no altsetting 0 [ 442.227023][ T4691] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 442.308782][ T4691] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 442.334035][ T27] audit: type=1326 audit(442.281:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.6.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f838e929 code=0x7ffc0000 [ 442.342947][T14787] loop1: detected capacity change from 0 to 512 [ 442.361680][ T4691] usb 3-1: Product: syz [ 442.372443][T14789] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4676'. [ 442.387393][ T4691] usb 3-1: Manufacturer: syz [ 442.405757][ T4691] usb 3-1: SerialNumber: syz [ 442.412176][ T27] audit: type=1326 audit(442.311:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.6.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f24f838e929 code=0x7ffc0000 [ 442.450132][ T4691] usb 3-1: config 0 descriptor?? [ 442.456675][T14787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.476968][T14787] EXT4-fs (loop1): Test dummy encryption mode enabled [ 442.498484][ T27] audit: type=1326 audit(442.311:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.6.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f838e929 code=0x7ffc0000 [ 442.566295][T14787] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4675: invalid indirect mapped block 4294967295 (level 1) [ 442.601899][ T27] audit: type=1326 audit(442.321:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.6.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f838e929 code=0x7ffc0000 [ 442.648124][T14787] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4675: invalid indirect mapped block 4294967295 (level 1) [ 442.667899][T14795] loop4: detected capacity change from 0 to 256 [ 442.700353][ T4691] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 442.716614][ T4691] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 442.746429][T14787] EXT4-fs (loop1): 2 truncates cleaned up [ 442.756387][T14795] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.767297][T14795] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 442.778347][T14787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 442.787982][T14795] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 442.939404][ T4691] usb 3-1: USB disconnect, device number 21 [ 442.971773][T14793] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 443.045371][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 443.745580][T14821] loop1: detected capacity change from 0 to 1024 [ 443.935541][ T11] hfsplus: b-tree write err: -5, ino 4 [ 444.473810][T14845] nfs: Deprecated parameter 'nointr' [ 445.057927][T14867] netlink: 1392 bytes leftover after parsing attributes in process `syz.1.4716'. [ 445.107001][T14871] loop2: detected capacity change from 0 to 512 [ 445.176284][T14871] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 445.211767][T14871] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 445.277763][T14871] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4717: Corrupt directory, running e2fsck is recommended [ 445.315663][T14871] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 445.328118][T14878] netlink: 'syz.6.4719': attribute type 27 has an invalid length. [ 445.357808][T14871] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.4717: corrupted in-inode xattr [ 445.392464][T14883] loop4: detected capacity change from 0 to 64 [ 445.453235][T14871] EXT4-fs (loop2): Remounting filesystem read-only [ 445.460074][T14871] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4717: couldn't read orphan inode 15 (err -117) [ 445.574193][T14871] EXT4-fs (loop2): Remounting filesystem read-only [ 445.580822][T14871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 445.679995][T14871] EXT4-fs error (device loop2): __ext4_remount:6623: comm syz.2.4717: Abort forced by user [ 445.740977][T14871] EXT4-fs (loop2): Remounting filesystem read-only [ 445.787436][T14871] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 445.819221][T14893] loop6: detected capacity change from 0 to 256 [ 445.891046][T14893] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 445.913407][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 446.142135][T14903] IPv6: Can't replace route, no match found [ 446.362895][T14907] loop4: detected capacity change from 0 to 256 [ 446.439798][T14907] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 446.554499][ T27] audit: type=1800 audit(446.501:236): pid=14907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4734" name="file2" dev="loop4" ino=1048679 res=0 errno=0 [ 446.667642][T14917] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4739'. [ 446.938535][T14923] loop4: detected capacity change from 0 to 4096 [ 446.945284][ T7461] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 446.945904][T14929] loop6: detected capacity change from 0 to 164 [ 446.984068][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 447.007355][T14929] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 447.024164][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 447.039845][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 447.069020][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 447.091966][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 447.100976][T14929] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 447.118146][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 447.141941][ T7461] usb 2-1: Using ep0 maxpacket: 32 [ 447.156998][ T7461] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 447.171859][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 447.183548][ T7461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.193166][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 447.201494][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 447.210116][ T7461] usb 2-1: Product: syz [ 447.221394][T14923] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 447.248488][ T7461] usb 2-1: Manufacturer: syz [ 447.258612][ T7461] usb 2-1: SerialNumber: syz [ 447.300923][ T7461] usb 2-1: config 0 descriptor?? [ 447.422021][T14935] loop5: detected capacity change from 0 to 128 [ 447.429364][T14935] EXT4-fs: Ignoring removed orlov option [ 447.497302][T14935] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 447.546321][T14940] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4750'. [ 447.553983][ T7461] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 017 [ 447.566004][T14935] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #2: comm syz.5.4748: Directory block failed checksum [ 447.789883][T14063] EXT4-fs (loop5): unmounting filesystem. [ 447.804388][ T4691] usb 2-1: USB disconnect, device number 17 [ 448.512642][T14966] netlink: 'syz.4.4763': attribute type 1 has an invalid length. [ 448.551471][T14966] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.4763'. [ 448.741411][T14972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4766'. [ 448.821731][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4766'. [ 448.831023][T14944] loop2: detected capacity change from 0 to 32768 [ 449.093560][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4769'. [ 449.434134][T14993] loop2: detected capacity change from 0 to 64 [ 449.573696][T14964] loop5: detected capacity change from 0 to 32768 [ 449.688205][T14964] XFS (loop5): Mounting V5 Filesystem [ 449.836277][T14964] XFS (loop5): Ending clean mount [ 449.874445][T14964] XFS (loop5): Quotacheck needed: Please wait. [ 449.904309][T15008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4779'. [ 450.063222][T14964] XFS (loop5): Quotacheck: Done. [ 450.322251][T14063] XFS (loop5): Unmounting Filesystem [ 450.475474][T15026] device vti0 entered promiscuous mode [ 450.697020][T15032] loop4: detected capacity change from 0 to 128 [ 450.775846][T15032] FAT-fs (loop4): error, invalid access to FAT (entry 0x0005ffff) [ 450.799120][T15032] FAT-fs (loop4): Filesystem has been set read-only [ 451.365649][T15057] netlink: 'syz.4.4806': attribute type 1 has an invalid length. [ 451.715095][T15070] dlm: plock device version mismatch: kernel (1.2.0), user (1.16121856.0) [ 451.818804][T15073] xt_hashlimit: size too large, truncated to 1048576 [ 451.863029][T15073] xt_hashlimit: overflow, try lower: 0/0 [ 452.103837][T15082] loop4: detected capacity change from 0 to 16 [ 452.146196][T15082] erofs: (device loop4): mounted with root inode @ nid 36. [ 452.206991][T15082] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 452.254984][T15082] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 452.281864][T15082] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 452.340928][T15086] loop6: detected capacity change from 0 to 4096 [ 452.388122][T15086] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 452.496708][T15086] ntfs3: loop6: failed to convert "c46c" to iso8859-4 [ 453.232455][T15117] device ip6erspan0 entered promiscuous mode [ 453.492818][T15127] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4838'. [ 453.765317][T15139] netlink: 'syz.6.4844': attribute type 6 has an invalid length. [ 453.992023][T15148] loop5: detected capacity change from 0 to 256 [ 454.062157][T15155] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4851'. [ 454.248665][T15154] loop6: detected capacity change from 0 to 4096 [ 454.298068][T15156] loop2: detected capacity change from 0 to 4096 [ 454.338946][T15160] loop4: detected capacity change from 0 to 1024 [ 454.663997][T14177] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 454.670806][T14177] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 455.091864][ T7461] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 455.155758][T15182] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 455.286032][ T7461] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 455.317026][ T7461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.366514][ T7461] usb 3-1: Product: syz [ 455.391959][ T7461] usb 3-1: Manufacturer: syz [ 455.396658][ T7461] usb 3-1: SerialNumber: syz [ 455.425425][ T7461] usb 3-1: config 0 descriptor?? [ 455.652159][ T7461] hso 3-1:0.0: Can't find BULK IN endpoint [ 455.658591][ T7461] usb-storage 3-1:0.0: USB Mass Storage device detected [ 455.761772][ T7459] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 455.875546][ T8060] usb 3-1: USB disconnect, device number 22 [ 455.935524][T15206] device bond3 entered promiscuous mode [ 455.963449][ T7459] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 455.987134][T15206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.994614][ T7459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.040432][ T7459] usb 6-1: config 0 descriptor?? [ 456.278834][ T7459] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 456.298174][ T7459] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 456.327343][T15215] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4879'. [ 456.491178][ T7459] [drm:udl_init] *ERROR* Selecting channel failed [ 456.542152][ T7459] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 456.579395][ T7459] [drm] Initialized udl on minor 2 [ 456.595577][ T7459] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 456.634171][ T7459] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 456.674323][ T7459] usb 6-1: USB disconnect, device number 3 [ 457.331776][ T8060] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 457.521935][ T8060] usb 3-1: Using ep0 maxpacket: 32 [ 457.529400][ T8060] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 457.550973][ T8060] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 457.591037][ T8060] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 457.639379][ T8060] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 457.661764][ T8060] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 457.698645][ T8060] usb 3-1: config 0 interface 0 has no altsetting 0 [ 457.726578][ T8060] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 457.741880][ T8060] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 457.759230][T15254] loop5: detected capacity change from 0 to 4096 [ 457.770787][ T8060] usb 3-1: Product: syz [ 457.781694][ T8060] usb 3-1: Manufacturer: syz [ 457.804397][ T8060] usb 3-1: SerialNumber: syz [ 457.812610][T15254] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 457.824266][ T8060] usb 3-1: config 0 descriptor?? [ 457.843592][ T8060] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 457.857877][T15229] loop6: detected capacity change from 0 to 32768 [ 457.908763][ T8060] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 457.938357][T15254] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 457.999872][T15254] ntfs3: loop5: Failed to load $Extend. [ 458.049297][T15238] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 458.090086][T15229] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 458.150829][T15229] XFS (loop6): Mounting V5 Filesystem [ 458.172979][ T8060] usb 3-1: USB disconnect, device number 23 [ 458.230458][ T8060] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 458.255117][T15271] loop1: detected capacity change from 0 to 256 [ 458.335101][T15229] XFS (loop6): Ending clean mount [ 458.358282][T15229] XFS (loop6): Quotacheck needed: Please wait. [ 458.382818][T15271] FAT-fs (loop1): Directory bread(block 64) failed [ 458.402853][T15271] FAT-fs (loop1): Directory bread(block 65) failed [ 458.412137][T15271] FAT-fs (loop1): Directory bread(block 66) failed [ 458.458101][T15271] FAT-fs (loop1): Directory bread(block 67) failed [ 458.487827][T15271] FAT-fs (loop1): Directory bread(block 68) failed [ 458.510688][T15271] FAT-fs (loop1): Directory bread(block 69) failed [ 458.535936][T15229] XFS (loop6): Quotacheck: Done. [ 458.546027][T15271] FAT-fs (loop1): Directory bread(block 70) failed [ 458.571722][T15271] FAT-fs (loop1): Directory bread(block 71) failed [ 458.602271][T15271] FAT-fs (loop1): Directory bread(block 72) failed [ 458.608900][T15271] FAT-fs (loop1): Directory bread(block 73) failed [ 458.737831][T14177] XFS (loop6): Unmounting Filesystem [ 458.994780][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4909'. [ 459.215555][T15292] __vm_enough_memory: pid: 15292, comm: syz.2.4914, no enough memory for the allocation [ 459.460456][T15299] loop2: detected capacity change from 0 to 64 [ 459.496152][ T4691] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 460.079702][T15318] loop2: detected capacity change from 0 to 2048 [ 460.151844][ T4691] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 460.191426][T15325] loop6: detected capacity change from 0 to 128 [ 460.238735][T15325] hpfs: bad mount options. [ 460.247255][T15318] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 460.341886][ T4691] usb 5-1: Using ep0 maxpacket: 8 [ 460.350998][ T4691] usb 5-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02 [ 460.391005][ T4691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.452927][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 460.453793][ T4691] usb 5-1: config 0 descriptor?? [ 460.747214][ T4691] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 460.953120][ T4691] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 460.985825][ T4691] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 461.031823][ T4691] asix: probe of 5-1:0.0 failed with error -71 [ 461.071813][ T4691] usb 5-1: USB disconnect, device number 20 [ 461.474163][ T7461] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 461.681753][ T7461] usb 2-1: Using ep0 maxpacket: 32 [ 461.689069][ T7461] usb 2-1: config 2 has an invalid interface number: 1 but max is 0 [ 461.699720][ C1] sd 0:0:1:0: [sda] tag#4857 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 461.710723][ C1] sd 0:0:1:0: [sda] tag#4857 CDB: Read(6) 08 00 9f d1 fe de [ 461.738684][ T7461] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 461.759490][ T7461] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 461.788955][ T7461] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 461.819855][ T7461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.837028][ T7461] usb 2-1: Product: syz [ 461.849190][ T7461] usb 2-1: Manufacturer: syz [ 461.864356][ T7461] usb 2-1: SerialNumber: syz [ 461.895754][ T7461] cdc_acm: probe of 2-1:2.1 failed with error -22 [ 461.949096][T15377] loop4: detected capacity change from 0 to 4096 [ 461.965265][T15377] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 462.099048][ T7461] usb 2-1: USB disconnect, device number 18 [ 462.354806][T15387] loop2: detected capacity change from 0 to 2048 [ 462.527824][T15394] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.570159][T15387] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18374686479671623682, rec_len=65535, name_len=255 [ 462.633208][T15387] Remounting filesystem read-only [ 462.773241][T15399] loop5: detected capacity change from 0 to 256 [ 462.792977][T15399] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.861177][T15399] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 462.932109][T15399] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 463.050628][T15383] loop6: detected capacity change from 0 to 32768 [ 463.086051][T15406] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 463.089963][T15383] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.4957 (15383) [ 463.241125][T15408] loop1: detected capacity change from 0 to 4096 [ 463.248717][T15383] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 463.272904][T15383] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 463.324243][T15408] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 463.335375][T15383] BTRFS info (device loop6): force zlib compression, level 3 [ 463.370610][T15383] BTRFS info (device loop6): force clearing of disk cache [ 463.422315][T15383] BTRFS info (device loop6): setting nodatasum [ 463.428613][T15383] BTRFS info (device loop6): use zlib compression, level 3 [ 463.468860][T15383] BTRFS info (device loop6): allowing degraded mounts [ 463.526825][T15383] BTRFS info (device loop6): enabling disk space caching [ 463.545309][T15408] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 463.575263][T15383] BTRFS info (device loop6): disk space caching is enabled [ 463.721952][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 463.882896][ T4252] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 463.889943][ T4252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 463.941836][T15383] BTRFS info (device loop6): enabling ssd optimizations [ 463.995780][T15444] ip6t_REJECT: ECHOREPLY is not supported [ 464.008177][T15383] BTRFS info (device loop6): rebuilding free space tree [ 464.163575][T15383] BTRFS info (device loop6): disabling free space tree [ 464.170597][T15383] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 464.231796][T15383] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 464.449074][T15383] BTRFS info (device loop6): balance: start -susage=0..511,limit=0 [ 464.501958][T15383] BTRFS info (device loop6): balance: ended with status: 0 [ 464.522601][T15460] loop4: detected capacity change from 0 to 256 [ 464.601211][T15460] FAT-fs (loop4): Directory bread(block 64) failed [ 464.628987][T15460] FAT-fs (loop4): Directory bread(block 65) failed [ 464.656007][T15460] FAT-fs (loop4): Directory bread(block 66) failed [ 464.683482][T14177] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 464.694685][T15460] FAT-fs (loop4): Directory bread(block 67) failed [ 464.701379][T15460] FAT-fs (loop4): Directory bread(block 68) failed [ 464.748569][T15460] FAT-fs (loop4): Directory bread(block 69) failed [ 464.794790][T15460] FAT-fs (loop4): Directory bread(block 70) failed [ 464.801411][T15460] FAT-fs (loop4): Directory bread(block 71) failed [ 464.867173][T15460] FAT-fs (loop4): Directory bread(block 72) failed [ 464.912486][T15460] FAT-fs (loop4): Directory bread(block 73) failed [ 464.921166][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4992'. [ 465.737552][T15487] loop6: detected capacity change from 0 to 1024 [ 465.964283][ T1175] hfsplus: b-tree write err: -5, ino 8 [ 466.043309][T15496] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5004'. [ 466.234962][T15503] sctp: [Deprecated]: syz.5.5007 (pid 15503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 466.234962][T15503] Use struct sctp_sack_info instead [ 466.252787][T15473] loop1: detected capacity change from 0 to 32768 [ 466.301974][T15473] (syz.1.4993,15473,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 466.308180][T15505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5008'. [ 466.364392][T15473] (syz.1.4993,15473,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 466.513438][T15473] JBD2: Ignoring recovery information on journal [ 466.762766][T15473] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 466.855943][T15521] netlink: 19 bytes leftover after parsing attributes in process `syz.5.5015'. [ 467.044794][ T4252] ocfs2: Unmounting device (7,1) on (node local) [ 467.391364][T15529] NILFS (nullb0): couldn't find nilfs on the device [ 467.813207][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 467.868050][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 467.966941][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 468.335763][ T27] audit: type=1326 audit(468.281:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.5.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 468.421866][ T27] audit: type=1326 audit(468.281:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.5.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 468.495788][T15545] infiniband syz2: set active [ 468.500606][ T7457] vxcan1 speed is unknown, defaulting to 1000 [ 468.508244][T15545] infiniband syz2: added vxcan1 [ 468.545199][ T27] audit: type=1326 audit(468.281:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.5.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 468.710056][ T27] audit: type=1326 audit(468.281:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.5.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 468.734209][T15545] RDS/IB: syz2: added [ 468.738368][T15545] smc: adding ib device syz2 with port count 1 [ 468.793143][T15545] smc: ib device syz2 port 1 has pnetid [ 468.829533][ T7] vxcan1 speed is unknown, defaulting to 1000 [ 468.842914][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 469.212798][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 469.241942][ T7457] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 469.358352][T15597] loop4: detected capacity change from 0 to 1024 [ 469.443563][ T7457] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 469.463210][ T7457] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 469.524236][ T7457] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 469.566658][ T7457] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.591716][ T7457] usb 7-1: Product: syz [ 469.606233][ T7457] usb 7-1: Manufacturer: syz [ 469.626522][ T7457] usb 7-1: SerialNumber: syz [ 469.644539][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 469.881962][ T7457] usb 7-1: USB disconnect, device number 2 [ 469.947341][T15610] netlink: 'syz.4.5058': attribute type 49 has an invalid length. [ 470.090122][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 470.417747][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 470.924297][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 471.005340][T15644] kAFS: unable to lookup cell 'sy@0' [ 471.051478][T15647] netlink: 'syz.2.5076': attribute type 3 has an invalid length. [ 471.111767][ T7465] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 471.258327][T15654] xt_TCPMSS: Only works on TCP SYN packets [ 471.301914][ T7465] usb 5-1: Using ep0 maxpacket: 32 [ 471.309219][ T7465] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 471.339380][ T7465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.373814][T15545] vxcan1 speed is unknown, defaulting to 1000 [ 471.398243][ T7465] usb 5-1: config 0 descriptor?? [ 471.444599][ T7465] as10x_usb: device has been detected [ 471.450624][ T7465] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 471.526771][ T7465] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 471.697245][ T7465] as10x_usb: error during firmware upload part1 [ 471.722864][ T7465] Registered device nBox DVB-T Dongle [ 471.753140][ T7465] usb 5-1: USB disconnect, device number 21 [ 471.860874][ T7465] Unregistered device nBox DVB-T Dongle [ 471.866829][ T7465] as10x_usb: device has been disconnected [ 472.038530][T15674] delete_channel: no stack [ 472.111755][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 472.460950][T15691] loop4: detected capacity change from 0 to 128 [ 472.502783][T15692] loop1: detected capacity change from 0 to 512 [ 472.527232][T15684] loop6: detected capacity change from 0 to 4096 [ 472.543582][T15691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 472.559204][T15684] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 472.627460][T15695] IPv6: sit1: Disabled Multicast RS [ 472.655415][T15692] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #3: comm syz.1.5097: corrupted inode contents [ 472.680571][T15691] System zones: 1-3, 19-19, 35-36 [ 472.704858][T15691] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 472.737516][T15692] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #3: comm syz.1.5097: mark_inode_dirty error [ 472.816172][T15692] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #3: comm syz.1.5097: corrupted inode contents [ 472.839186][T15684] ntfs3: loop6: ino=5, "/" The size of extended attributes must not exceed 64KiB [ 472.868545][T15691] EXT4-fs warning (device loop4): ext4_group_extend:1899: can't read last block, resize aborted [ 472.893779][T15692] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.5097: mark_inode_dirty error [ 472.946627][T15692] Quota error (device loop1): write_blk: dquota write failed [ 472.976944][T15692] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 473.009940][T15692] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.5097: Failed to acquire dquot type 0 [ 473.049127][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 473.106671][T15692] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.5097: corrupted inode contents [ 473.198591][T15710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5108'. [ 473.212057][T15692] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #16: comm syz.1.5097: mark_inode_dirty error [ 473.257537][T15692] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.5097: corrupted inode contents [ 473.342056][T15692] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.5097: mark_inode_dirty error [ 473.386228][T15692] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.5097: corrupted inode contents [ 473.471992][T15692] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 473.492936][T15692] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.5097: corrupted inode contents [ 473.534255][T15692] EXT4-fs error (device loop1): ext4_truncate:4312: inode #16: comm syz.1.5097: mark_inode_dirty error [ 473.608593][T15692] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 473.632892][T15692] EXT4-fs (loop1): 1 truncate cleaned up [ 473.638668][T15692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 473.892379][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 474.234093][T15740] loop2: detected capacity change from 0 to 4096 [ 474.332801][T15751] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 474.373392][T15751] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 474.449064][T15740] ntfs3: loop2: ino=5, "/" attr_set_size [ 474.463251][T15740] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 474.927852][ T27] audit: type=1326 audit(474.871:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.2.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bf18e929 code=0x7ffc0000 [ 474.970456][ T27] audit: type=1326 audit(474.911:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.2.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe8bf18e929 code=0x7ffc0000 [ 474.992292][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.012896][ T27] audit: type=1326 audit(474.911:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.2.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bf18e929 code=0x7ffc0000 [ 475.051771][ T7465] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 475.076319][T15772] libceph: resolve '0.0' (ret=-3): failed [ 475.116096][ T27] audit: type=1326 audit(474.911:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.2.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bf18e929 code=0x7ffc0000 [ 475.243824][ T7465] usb 7-1: config 1 has an invalid interface descriptor of length 6, skipping [ 475.273552][ T7465] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.313347][ T7465] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 475.353273][ T7465] usb 7-1: config 1 has no interface number 1 [ 475.390177][ T7465] usb 7-1: string descriptor 0 read error: -22 [ 475.414365][ T7465] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.448944][ T7465] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.458989][T15782] loop4: detected capacity change from 0 to 2048 [ 475.508371][T15782] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.533692][ T7465] usb 7-1: MIDIStreaming interface descriptor not found [ 475.595910][ T7465] snd-usb-audio: probe of 7-1:1.2 failed with error -16 [ 475.697639][ T7459] usb 7-1: USB disconnect, device number 3 [ 476.349549][T15815] loop4: detected capacity change from 0 to 64 [ 477.100151][T15839] loop6: detected capacity change from 0 to 2048 [ 477.148234][T15840] XFS (nullb0): Invalid superblock magic number [ 477.174163][T15839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.240821][T15812] loop2: detected capacity change from 0 to 32768 [ 477.250054][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5172'. [ 477.271875][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5172'. [ 477.308269][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5172'. [ 477.322291][T15812] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.5156 (15812) [ 477.407144][T15812] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 477.440499][T15812] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 477.478222][T15812] BTRFS info (device loop2): using free space tree [ 477.625669][T15858] device netdevsim0 left promiscuous mode [ 477.684987][T15858] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 477.943305][T15812] BTRFS info (device loop2): enabling ssd optimizations [ 478.110756][ T4254] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 478.164075][T15893] netlink: 'syz.6.5185': attribute type 27 has an invalid length. [ 478.185217][T15893] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 478.206602][ T7457] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 478.292073][ T7459] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 478.411943][ T7457] usb 2-1: Using ep0 maxpacket: 16 [ 478.432565][ T7457] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 478.454221][T15897] loop4: detected capacity change from 0 to 256 [ 478.458531][ T7457] usb 2-1: config 4 has no interface number 0 [ 478.481982][ T7457] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 478.492875][ T7459] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 478.543547][ T7459] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.560727][ T7457] usb 2-1: config 4 interface 9 has no altsetting 0 [ 478.567874][ T7459] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.585158][T15897] FAT-fs (loop4): Directory bread(block 64) failed [ 478.594059][ T7457] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 478.601672][T15897] FAT-fs (loop4): Directory bread(block 65) failed [ 478.617191][T15897] FAT-fs (loop4): Directory bread(block 66) failed [ 478.622262][ T7459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 478.641052][ T7457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.670854][ T7457] usb 2-1: Product: syz [ 478.671061][ T7459] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.671670][T15897] FAT-fs (loop4): Directory bread(block 67) failed [ 478.691945][ T7459] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.722023][T15897] FAT-fs (loop4): Directory bread(block 68) failed [ 478.723763][ T7457] usb 2-1: Manufacturer: syz [ 478.728617][T15897] FAT-fs (loop4): Directory bread(block 69) failed [ 478.733625][ T7459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 478.778561][ T7457] usb 2-1: SerialNumber: syz [ 478.783603][T15899] nft_compat: unsupported protocol 0 [ 478.789960][T15897] FAT-fs (loop4): Directory bread(block 70) failed [ 478.797977][ T7459] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.803271][T15897] FAT-fs (loop4): Directory bread(block 71) failed [ 478.828563][ T7459] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.840530][T15882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 478.868482][ T7459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 478.872664][T15897] FAT-fs (loop4): Directory bread(block 72) failed [ 478.883644][ T7459] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.902686][ T7459] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.915753][ T7457] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 478.947032][ T7459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 478.948429][T15897] FAT-fs (loop4): Directory bread(block 73) failed [ 478.956059][ T7459] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.973615][ T7459] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.984983][ T7459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 479.012033][ T7459] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.031289][ T7459] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.042759][ T7459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 479.062745][ T7459] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.082070][ T7459] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.103429][ T7459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 479.139691][ T7459] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.159709][ T7459] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.186987][ T9] usb 2-1: Failed to submit usb control message: -71 [ 479.201736][ T7459] usb 6-1: config 0 interface 0 has no altsetting 0 [ 479.212000][ T9] usb 2-1: unable to send the bmi data to the device: -71 [ 479.253741][ T7465] usb 2-1: USB disconnect, device number 19 [ 479.260645][ T9] usb 2-1: unable to get target info from device [ 479.269458][ T7459] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 479.289369][ T9] usb 2-1: could not get target info (-71) [ 479.295935][ T7459] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 479.312127][ T9] usb 2-1: could not probe fw (-71) [ 479.321729][ T7459] usb 6-1: Product: syz [ 479.326318][ T7459] usb 6-1: Manufacturer: syz [ 479.344602][ T7459] usb 6-1: SerialNumber: syz [ 479.374719][ T7459] usb 6-1: config 0 descriptor?? [ 479.420295][ T7459] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 479.427170][T15912] loop6: detected capacity change from 0 to 256 [ 479.500111][T15912] FAT-fs (loop6): Directory bread(block 64) failed [ 479.541694][T15912] FAT-fs (loop6): Directory bread(block 65) failed [ 479.548648][T15912] FAT-fs (loop6): Directory bread(block 66) failed [ 479.601270][T15912] FAT-fs (loop6): Directory bread(block 67) failed [ 479.632525][T15912] FAT-fs (loop6): Directory bread(block 68) failed [ 479.639340][T15912] FAT-fs (loop6): Directory bread(block 69) failed [ 479.666880][T15912] FAT-fs (loop6): Directory bread(block 70) failed [ 479.687510][ T4686] usb 6-1: USB disconnect, device number 4 [ 479.693931][T15912] FAT-fs (loop6): Directory bread(block 71) failed [ 479.700752][T15912] FAT-fs (loop6): Directory bread(block 72) failed [ 479.727819][ T4686] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 479.762063][T15912] FAT-fs (loop6): Directory bread(block 73) failed [ 479.887883][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5198'. [ 480.198348][T15932] netlink: 'syz.2.5203': attribute type 27 has an invalid length. [ 480.242396][T15932] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 480.394571][T15937] loop1: detected capacity change from 0 to 16 [ 480.425890][T15937] erofs: (device loop1): mounted with root inode @ nid 36. [ 480.865731][T15952] loop4: detected capacity change from 0 to 1764 [ 480.952153][T15952] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 480.967668][T15958] loop6: detected capacity change from 0 to 128 [ 481.032427][T15958] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 481.092302][T15958] EXT4-fs error (device loop6): ext4_validate_inode_bitmap:106: comm syz.6.5216: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 481.239044][T15966] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5219'. [ 481.262830][T14177] EXT4-fs (loop6): unmounting filesystem. [ 481.342677][T15966] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5219'. [ 481.379121][T15966] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5219'. [ 481.391527][T15973] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 481.567958][T15982] netlink: 'syz.4.5227': attribute type 16 has an invalid length. [ 481.611790][T15982] netlink: 'syz.4.5227': attribute type 3 has an invalid length. [ 481.635621][ T27] audit: type=1326 audit(481.581:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 481.645895][T15982] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5227'. [ 481.677944][ T27] audit: type=1326 audit(481.581:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 481.770927][ T27] audit: type=1326 audit(481.581:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 481.817467][ T27] audit: type=1326 audit(481.581:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 481.870758][ T27] audit: type=1326 audit(481.581:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 481.937506][ T27] audit: type=1326 audit(481.581:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 481.974444][ T27] audit: type=1326 audit(481.581:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 482.012775][ T27] audit: type=1326 audit(481.581:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 482.036991][T15995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5233'. [ 482.081667][ T27] audit: type=1326 audit(481.581:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 482.134431][ T27] audit: type=1326 audit(481.581:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15983 comm="syz.5.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x50000 [ 482.252280][T16000] loop4: detected capacity change from 0 to 190 [ 482.298430][T16000] ntfs: volume version 3.1. [ 482.333996][T16000] syz.4.5237: attempt to access beyond end of device [ 482.333996][T16000] loop4: rw=0, sector=552, nr_sectors = 8 limit=190 [ 482.410639][T16002] loop2: detected capacity change from 0 to 2048 [ 482.420433][T16000] syz.4.5237: attempt to access beyond end of device [ 482.420433][T16000] loop4: rw=0, sector=552, nr_sectors = 8 limit=190 [ 482.480479][T16002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.618535][T16008] loop6: detected capacity change from 0 to 256 [ 483.184664][T16022] loop1: detected capacity change from 0 to 128 [ 483.266373][T16027] loop6: detected capacity change from 0 to 1024 [ 483.273531][T16022] EXT4-fs (loop1): Test dummy encryption mode enabled [ 483.396572][T16022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 483.549075][T16025] loop4: detected capacity change from 0 to 8192 [ 483.611510][T16025] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 483.683052][T16025] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 483.742968][T16025] REISERFS (device loop4): using ordered data mode [ 483.749747][T16025] reiserfs: using flush barriers [ 483.801075][T16025] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 483.825505][T16039] loop6: detected capacity change from 0 to 64 [ 483.829877][T16036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5253'. [ 483.838958][T16025] REISERFS (device loop4): checking transaction log (loop4) [ 484.163655][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 484.164611][T16046] loop6: detected capacity change from 0 to 128 [ 484.295201][T16025] REISERFS (device loop4): Using tea hash to sort names [ 484.308304][T16046] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 484.332268][T16025] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 484.451458][T16049] loop1: detected capacity change from 0 to 1024 [ 484.503545][T14177] EXT4-fs (loop6): unmounting filesystem. [ 484.554749][T16051] netlink: 'syz.2.5257': attribute type 1 has an invalid length. [ 484.688149][T16049] syz.1.5256: attempt to access beyond end of device [ 484.688149][T16049] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 484.740882][T16049] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 484.773715][T16049] syz.1.5256: attempt to access beyond end of device [ 484.773715][T16049] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 484.807120][T16049] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 484.848436][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5259'. [ 485.192294][T16068] loop4: detected capacity change from 0 to 512 [ 485.233871][T16068] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 485.294948][T16068] EXT4-fs (loop4): orphan cleanup on readonly fs [ 485.312489][T16068] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.5260: Block bitmap for bg 0 marked uninitialized [ 485.336773][T16068] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 485.348010][T16068] EXT4-fs (loop4): 1 orphan inode deleted [ 485.354635][T16068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 485.402468][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 485.412613][T16072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5267'. [ 485.436377][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'. [ 485.502946][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'. [ 485.547997][T16078] loop1: detected capacity change from 0 to 1024 [ 485.588547][T16077] sp0: Synchronizing with TNC [ 485.628818][T16075] [U] è [ 485.796341][ T9] hfsplus: b-tree write err: -5, ino 4 [ 485.869737][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5274'. [ 486.143808][T16100] netlink: 280 bytes leftover after parsing attributes in process `syz.5.5281'. [ 486.821247][T16120] loop5: detected capacity change from 0 to 4096 [ 486.983146][T16130] loop2: detected capacity change from 0 to 65 [ 487.033376][T16130] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 487.405513][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5302'. [ 488.091755][ T4686] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 488.218221][T16150] loop6: detected capacity change from 0 to 32768 [ 488.291850][ T4686] usb 6-1: Using ep0 maxpacket: 8 [ 488.301915][ T4686] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 488.334675][ T4686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.349602][ T4686] usb 6-1: Product: syz [ 488.359990][ T4686] usb 6-1: Manufacturer: syz [ 488.369300][ T4686] usb 6-1: SerialNumber: syz [ 488.381882][ T4686] usb 6-1: config 0 descriptor?? [ 488.401612][ T4686] gspca_main: sq930x-2.14.0 probing 2770:930c [ 488.722220][T16182] netlink: 'syz.1.5321': attribute type 74 has an invalid length. [ 488.799123][ T4686] gspca_sq930x: ucbus_write failed -71 [ 489.061919][ T4686] gspca_sq930x: Sensor ov9630 not yet treated [ 489.068174][ T4686] sq930x: probe of 6-1:0.0 failed with error -22 [ 489.088690][ T4686] usb 6-1: USB disconnect, device number 5 [ 489.251867][ T7459] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 489.391781][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.451986][ T7459] usb 5-1: Using ep0 maxpacket: 16 [ 489.459625][ T7459] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 489.478320][ T7459] usb 5-1: config 4 has no interface number 0 [ 489.491700][ T7465] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 489.530989][ T7459] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 489.562813][ T7459] usb 5-1: config 4 interface 9 has no altsetting 0 [ 489.579647][ T7459] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 489.612030][ T7459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.630655][ T7459] usb 5-1: Product: syz [ 489.641289][ T7459] usb 5-1: Manufacturer: syz [ 489.646667][ T7459] usb 5-1: SerialNumber: syz [ 489.670625][T16188] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 489.707903][ T7465] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.728746][ T7465] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 489.751206][ T7459] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 489.775952][ T7465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.830920][ T7465] usb 3-1: config 0 descriptor?? [ 489.857189][ T7465] usb 3-1: bad CDC descriptors [ 489.873931][ T7465] usb 3-1: bad CDC descriptors [ 489.927264][ T4352] usb 5-1: Failed to submit usb control message: -71 [ 489.931808][ T7459] usb 5-1: USB disconnect, device number 22 [ 489.941787][ T4686] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 489.959427][ T4352] usb 5-1: unable to send the bmi data to the device: -71 [ 489.974153][ T4352] usb 5-1: unable to get target info from device [ 489.989164][ T4352] usb 5-1: could not get target info (-71) [ 490.005735][ T4352] usb 5-1: could not probe fw (-71) [ 490.122789][ T8060] usb 3-1: USB disconnect, device number 24 [ 490.149041][ T4686] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 490.178714][ T4686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.201746][ T4686] usb 6-1: Product: syz [ 490.206099][ T4686] usb 6-1: Manufacturer: syz [ 490.219893][ T4686] usb 6-1: SerialNumber: syz [ 490.245485][ T4686] r8152-cfgselector 6-1: config 0 descriptor?? [ 490.325316][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5337'. [ 490.691515][ T4686] r8152-cfgselector 6-1: Unknown version 0x0000 [ 490.707870][ T4686] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 490.815596][T16227] loop6: detected capacity change from 0 to 4096 [ 490.858986][T16227] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 490.896488][ T27] kauditd_printk_skb: 2400 callbacks suppressed [ 490.896504][ T27] audit: type=1326 audit(490.841:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.1.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c18e929 code=0x7ffc0000 [ 490.973375][ T27] audit: type=1326 audit(490.891:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.1.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f869c18e929 code=0x7ffc0000 [ 491.017142][ T27] audit: type=1326 audit(490.891:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.1.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c18e929 code=0x7ffc0000 [ 491.053751][T16227] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 491.072077][T16227] ntfs3: loop6: Failed to load $Extend. [ 491.111668][ T27] audit: type=1326 audit(490.891:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.1.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c18e929 code=0x7ffc0000 [ 492.392691][T16278] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5366'. [ 492.413466][T16278] netlink: 'syz.5.5366': attribute type 1 has an invalid length. [ 492.475360][T16237] loop2: detected capacity change from 0 to 40427 [ 492.534627][T16237] F2FS-fs (loop2): invalid crc value [ 492.589641][T16237] F2FS-fs (loop2): Found nat_bits in checkpoint [ 492.793492][T16237] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 492.990312][T16303] loop6: detected capacity change from 0 to 128 [ 493.153411][ T27] audit: type=1326 audit(493.101:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 493.292524][ T27] audit: type=1326 audit(493.171:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 493.391246][ T27] audit: type=1326 audit(493.171:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 493.481641][ T27] audit: type=1326 audit(493.171:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16308 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 493.909130][T16331] loop4: detected capacity change from 0 to 8 [ 493.982366][T16331] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 494.025631][ T6523] udevd[6523]: incorrect cramfs checksum on /dev/loop4 [ 494.056202][T16331] cramfs: Error -3 while decompressing! [ 494.079349][T16331] cramfs: ffffffff96b51568(26)->ffff88804dfd8000(4096) [ 494.110136][T16331] cramfs: bad data blocksize 3288329103 [ 494.133685][ T6523] udevd[6523]: incorrect cramfs checksum on /dev/loop4 [ 494.154539][T16331] cramfs: Error -3 while decompressing! [ 494.174428][T16331] cramfs: ffffffff96b51568(26)->ffff88804dfd8000(4096) [ 494.209558][ T27] audit: type=1800 audit(494.151:2644): pid=16331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5391" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 494.280792][T16341] loop2: detected capacity change from 0 to 256 [ 494.691430][T16357] loop2: detected capacity change from 0 to 2048 [ 494.709662][T16356] loop4: detected capacity change from 0 to 2048 [ 494.753530][T16357] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 494.783971][T16356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.798194][T16357] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 494.847161][T16357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.858069][ T27] audit: type=1326 audit(494.811:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.5.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687d58e929 code=0x7ffc0000 [ 495.300844][T16365] loop5: detected capacity change from 0 to 4096 [ 495.319274][T16365] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 495.438988][T16365] ntfs3: loop5: failed to convert "c46c" to cp874 [ 495.458818][T16373] loop6: detected capacity change from 0 to 4096 [ 495.544473][T16380] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.557456][T16373] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 495.685324][T16384] binder: 16381:16384 ioctl c018620c 200000001180 returned -22 [ 496.230455][T16404] loop5: detected capacity change from 0 to 256 [ 496.316932][T16404] FAT-fs (loop5): Directory bread(block 64) failed [ 496.350201][T16404] FAT-fs (loop5): Directory bread(block 65) failed [ 496.368884][T16404] FAT-fs (loop5): Directory bread(block 66) failed [ 496.381983][ T4686] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 496.429387][T16404] FAT-fs (loop5): Directory bread(block 67) failed [ 496.462219][T16404] FAT-fs (loop5): Directory bread(block 68) failed [ 496.480036][T16404] FAT-fs (loop5): Directory bread(block 69) failed [ 496.500408][T16404] FAT-fs (loop5): Directory bread(block 70) failed [ 496.521338][T16404] FAT-fs (loop5): Directory bread(block 71) failed [ 496.558319][T16404] FAT-fs (loop5): Directory bread(block 72) failed [ 496.575674][T16404] FAT-fs (loop5): Directory bread(block 73) failed [ 496.610520][ T4686] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 496.642082][ T4686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.650206][ T4686] usb 3-1: Product: syz [ 496.701685][ T4686] usb 3-1: Manufacturer: syz [ 496.706374][ T4686] usb 3-1: SerialNumber: syz [ 496.772605][ T4686] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 496.864963][ T4686] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 497.005887][T16427] binder: 16426:16427 ioctl 400c620e 0 returned -14 [ 497.059274][T16429] netlink: 'syz.5.5437': attribute type 2 has an invalid length. [ 497.092783][T16429] netlink: 'syz.5.5437': attribute type 1 has an invalid length. [ 497.295975][ T8060] usb 3-1: USB disconnect, device number 25 [ 497.554752][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5445'. [ 497.564100][T16445] netlink: 393 bytes leftover after parsing attributes in process `syz.4.5447'. [ 497.951929][ T4686] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 497.963093][ T4686] ath9k_htc: Failed to initialize the device [ 497.979169][T16457] loop1: detected capacity change from 0 to 2048 [ 497.994089][ T8060] usb 3-1: ath9k_htc: USB layer deinitialized [ 498.047191][T16457] Alternate GPT is invalid, using primary GPT. [ 498.067251][T16457] loop1: p2 p3 p7 [ 498.088058][T16465] netlink: 'syz.5.5456': attribute type 1 has an invalid length. [ 498.243857][T16467] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 498.261786][ T4296] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 498.285099][T16469] loop2: detected capacity change from 0 to 64 [ 498.461803][ T4296] usb 5-1: Using ep0 maxpacket: 8 [ 498.480570][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 498.504089][ T5337] udevd[5337]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 498.523034][ T5338] udevd[5338]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 498.547291][ T4296] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 498.564950][ T4424] udevd[4424]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 498.604677][ T4296] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 498.651923][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.713395][ T4296] usb 5-1: Product: syz [ 498.717864][ T4296] usb 5-1: Manufacturer: syz [ 498.743360][ T4296] usb 5-1: SerialNumber: syz [ 498.764672][ T4296] usb 5-1: config 0 descriptor?? [ 499.194123][ T4296] usb 5-1: USB disconnect, device number 23 [ 499.398442][T16506] bridge0: port 3(batadv0) entered disabled state [ 499.408016][T16506] infiniband syz2: set active [ 499.415663][T16506] infiniband syz2: set active [ 499.427247][T16506] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.437115][T16506] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.444869][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5475'. [ 499.472313][T16508] netlink: 'syz.5.5475': attribute type 1 has an invalid length. [ 499.480127][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5475'. [ 499.492548][T16506] infiniband syz0: set active [ 499.497819][T16506] infiniband syz0: set active [ 499.536721][ T7465] vxcan1 speed is unknown, defaulting to 1000 [ 499.575544][ T4382] vxcan1 speed is unknown, defaulting to 1000 [ 499.776765][T16516] loop1: detected capacity change from 0 to 512 [ 499.933669][T16516] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 500.094665][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 500.281743][ T4268] Bluetooth: hci0: command 0x0c20 tx timeout [ 500.567361][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5490'. [ 501.127685][T16557] loop6: detected capacity change from 0 to 1024 [ 501.276423][T16563] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5501'. [ 501.553090][T16574] tmpfs: Bad value for 'mpol' [ 501.558455][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.564957][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.625421][T16571] loop6: detected capacity change from 0 to 4096 [ 501.747599][T16571] ntfs3: loop6: Failed to load $Extend. [ 501.848588][T16582] netlink: 'syz.4.5511': attribute type 10 has an invalid length. [ 501.922027][T16582] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 501.988558][T16582] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 502.022151][T16582] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 502.037158][T16587] loop1: detected capacity change from 0 to 16 [ 502.067656][T16582] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 502.111865][T16587] erofs: (device loop1): mounted with root inode @ nid 36. [ 502.154201][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5515'. [ 502.405869][ T7459] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 502.441887][ T4382] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 502.519136][T16602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5520'. [ 502.557811][T16606] loop1: detected capacity change from 0 to 256 [ 502.634501][ T7459] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 502.643764][ T7459] usb 7-1: config 0 has no interface number 0 [ 502.651731][ T4382] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 502.661116][T16606] FAT-fs (loop1): Directory bread(block 64) failed [ 502.671206][ T4382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.680144][T16606] FAT-fs (loop1): Directory bread(block 65) failed [ 502.689120][ T7459] usb 7-1: New USB device found, idVendor=5276, idProduct=a15e, bcdDevice=ba.30 [ 502.710915][ T7459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.719498][ T4382] usb 3-1: Product: syz [ 502.724563][T16606] FAT-fs (loop1): Directory bread(block 66) failed [ 502.732484][ T4382] usb 3-1: Manufacturer: syz [ 502.738992][ T7459] usb 7-1: Product: syz [ 502.743589][ T4382] usb 3-1: SerialNumber: syz [ 502.749228][T16606] FAT-fs (loop1): Directory bread(block 67) failed [ 502.757817][ T7459] usb 7-1: Manufacturer: syz [ 502.763765][ T7459] usb 7-1: SerialNumber: syz [ 502.769629][T16606] FAT-fs (loop1): Directory bread(block 68) failed [ 502.776817][ T4382] usb 3-1: config 0 descriptor?? [ 502.782130][T16608] netlink: 'syz.4.5523': attribute type 8 has an invalid length. [ 502.805261][T16606] FAT-fs (loop1): Directory bread(block 69) failed [ 502.805316][ T4382] usb 3-1: interface 1 not found [ 502.812494][T16606] FAT-fs (loop1): Directory bread(block 70) failed [ 502.820627][ T7459] usb 7-1: config 0 descriptor?? [ 502.836128][T16610] loop5: detected capacity change from 0 to 64 [ 502.838753][T16606] FAT-fs (loop1): Directory bread(block 71) failed [ 502.860790][T16606] FAT-fs (loop1): Directory bread(block 72) failed [ 502.868205][T16606] FAT-fs (loop1): Directory bread(block 73) failed [ 503.062939][ T7459] usb 7-1: MIDIStreaming interface descriptor not found [ 503.083279][ T4296] usb 3-1: USB disconnect, device number 26 [ 503.137077][ T7459] usb 7-1: USB disconnect, device number 4 [ 503.192111][T16615] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5525'. [ 503.436044][T16622] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.525526][T16625] loop1: detected capacity change from 0 to 256 [ 503.534307][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.3/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 503.578333][T16625] exfat: Deprecated parameter 'namecase' [ 503.610453][T16625] exfat: Deprecated parameter 'namecase' [ 503.641771][T16625] exfat: Deprecated parameter 'namecase' [ 503.713917][T16625] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf0064b2e, utbl_chksum : 0xe619d30d) [ 503.772713][T16631] xt_NFQUEUE: number of total queues is 0 [ 503.941478][T16635] gfs2: not a GFS2 filesystem [ 503.951865][ T4296] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 504.202052][ T4296] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 504.221458][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.269470][ T4296] usb 5-1: Product: syz [ 504.289748][ T4296] usb 5-1: Manufacturer: syz [ 504.320412][ T4296] usb 5-1: SerialNumber: syz [ 504.344789][ T4296] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 504.402570][ T4296] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 504.846240][ T7459] usb 5-1: USB disconnect, device number 24 [ 505.004314][T16668] netlink: 'syz.5.5551': attribute type 1 has an invalid length. [ 505.260295][T16645] loop1: detected capacity change from 0 to 32768 [ 505.333477][T16645] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 505.374842][T16645] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 505.411644][T16645] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 505.422029][T16645] OCFS2: Returning error to the calling process. [ 505.428411][T16645] (syz.1.5539,16645,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 505.442774][T16645] (syz.1.5539,16645,0):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 505.451140][T16645] (syz.1.5539,16645,0):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 505.460898][T16645] (syz.1.5539,16645,0):ocfs2_mknod:306 ERROR: status = -5 [ 505.469354][T16645] (syz.1.5539,16645,0):ocfs2_mknod:502 ERROR: status = -5 [ 505.481797][ T4296] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 505.488907][ T4296] ath9k_htc: Failed to initialize the device [ 505.512950][ T7459] usb 5-1: ath9k_htc: USB layer deinitialized [ 505.522076][T16645] (syz.1.5539,16645,0):ocfs2_mkdir:659 ERROR: status = -5 [ 505.667348][ T4252] ocfs2: Unmounting device (7,1) on (node local) [ 505.676549][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5559'. [ 506.069589][T16693] loop1: detected capacity change from 0 to 1024 [ 506.197204][T16696] loop4: detected capacity change from 0 to 2048 [ 506.236712][T16676] loop2: detected capacity change from 0 to 32768 [ 506.285638][T16696] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.301422][T16676] (syz.2.5555,16676,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 506.302222][ T50] hfsplus: b-tree write err: -5, ino 4 [ 506.352174][T16676] (syz.2.5555,16676,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 506.453302][T16676] (syz.2.5555,16676,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 506.542068][T16676] JBD2: Ignoring recovery information on journal [ 506.703032][T16676] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 506.761370][T16681] loop5: detected capacity change from 0 to 32768 [ 506.925804][T16681] XFS (loop5): Mounting V5 Filesystem [ 506.931769][T16676] (syz.2.5555,16676,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 506.947094][T16676] (syz.2.5555,16676,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 506.960564][T16676] (syz.2.5555,16676,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 506.972545][T16676] (syz.2.5555,16676,1):ocfs2_quota_read:201 ERROR: status = -5 [ 506.981906][T16676] __quota_error: 4 callbacks suppressed [ 506.981926][T16676] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5 [ 507.036704][T16717] loop4: detected capacity change from 0 to 128 [ 507.072107][T16676] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 507.098435][T16676] (syz.2.5555,16676,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 507.105047][T16681] XFS (loop5): Ending clean mount [ 507.142267][T16681] XFS (loop5): Quotacheck needed: Please wait. [ 507.165888][T16676] (syz.2.5555,16676,0):ocfs2_mknod:314 ERROR: status = -5 [ 507.192137][T16717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 507.201712][T16676] (syz.2.5555,16676,0):ocfs2_mknod:502 ERROR: status = -5 [ 507.212120][T16676] (syz.2.5555,16676,1):ocfs2_mkdir:659 ERROR: status = -5 [ 507.260677][T16717] System zones: 1-3, 19-19, 35-36 [ 507.301339][T16717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 507.362315][T16681] XFS (loop5): Quotacheck: Done. [ 507.484892][ T4254] ocfs2: Unmounting device (7,2) on (node local) [ 507.569122][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 507.825913][T14063] XFS (loop5): Unmounting Filesystem [ 508.515481][T16756] netlink: 'syz.2.5589': attribute type 10 has an invalid length. [ 508.620634][T16756] device wlan1 entered promiscuous mode [ 508.642824][T16756] team0: Port device wlan1 added [ 509.081835][ T7459] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 509.271818][ T7459] usb 5-1: Using ep0 maxpacket: 16 [ 509.278983][ T7459] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 509.298035][ T7459] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 509.321665][ T7459] usb 5-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 509.384351][ T7459] usb 5-1: config 166 has no interface number 0 [ 509.390697][ T7459] usb 5-1: config 166 has no interface number 1 [ 509.426240][ T7459] usb 5-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 509.462115][ T7459] usb 5-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 509.485992][ T7459] usb 5-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 509.531790][ T7459] usb 5-1: config 166 interface 177 has no altsetting 0 [ 509.538935][ T7459] usb 5-1: config 166 interface 34 has no altsetting 0 [ 509.591342][ T7459] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 509.652370][ T7459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.660762][ T7459] usb 5-1: Product: syz [ 509.691743][ T7459] usb 5-1: Manufacturer: syz [ 509.696532][ T7459] usb 5-1: SerialNumber: syz [ 509.825748][T16766] loop2: detected capacity change from 0 to 32768 [ 509.881311][T16793] loop5: detected capacity change from 0 to 16 [ 509.907167][T16766] [ 509.907167][T16766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 509.907167][T16766] [ 509.913987][T16793] erofs: (device loop5): mounted with root inode @ nid 36. [ 509.937994][ T7459] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 509.960335][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5608'. [ 510.001144][T16793] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 89 [ 510.006505][T16766] [ 510.006505][T16766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 510.006505][T16766] [ 510.028391][T16793] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 510.060986][ T7459] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 510.116321][T16766] [ 510.116321][T16766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 510.116321][T16766] [ 510.184478][ T107] [ 510.184478][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 510.184478][ T107] [ 510.201341][ T7459] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 510.218659][ T7459] usb 5-1: No valid video chain found. [ 510.269496][ T7459] usb 5-1: USB disconnect, device number 25 [ 510.289254][ T1175] [ 510.289254][ T1175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 510.289254][ T1175] [ 510.319076][ T1175] [ 510.319076][ T1175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 510.319076][ T1175] [ 510.385142][ T4254] [ 510.385142][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 510.385142][ T4254] [ 510.433918][ T107] [ 510.433918][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 510.433918][ T107] [ 510.451662][ T4254] [ 510.451662][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 510.451662][ T4254] [ 510.758976][T16815] IPv6: Can't replace route, no match found [ 511.036906][T16827] netlink: zone id is out of range [ 511.081138][T16827] netlink: zone id is out of range [ 511.091883][T16827] netlink: set zone limit has 8 unknown bytes [ 511.118294][T16821] loop2: detected capacity change from 0 to 4096 [ 511.208204][T16821] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 511.284700][T16821] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 511.328838][T16833] loop4: detected capacity change from 0 to 64 [ 511.682577][T16843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5627'. [ 511.922977][T16855] netlink: 'syz.5.5632': attribute type 1 has an invalid length. [ 511.930840][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5632'. [ 512.384421][T16866] loop5: detected capacity change from 0 to 4096 [ 512.401245][T16866] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 512.591855][ T7459] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 512.674781][T16876] netlink: 'syz.4.5645': attribute type 21 has an invalid length. [ 512.692023][T16876] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5645'. [ 512.804459][ T7459] usb 7-1: config index 0 descriptor too short (expected 69, got 36) [ 512.838852][ T7459] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.884460][ T7459] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 512.902043][ T7459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.950815][ T7459] usb 7-1: Product: syz [ 512.967944][ T7459] usb 7-1: Manufacturer: syz [ 512.984697][ T7459] usb 7-1: SerialNumber: syz [ 513.012522][ T7459] usb 7-1: config 0 descriptor?? [ 513.039513][ T7459] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 513.168217][T16886] device netdevsim0 entered promiscuous mode [ 513.192143][T16886] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 513.237757][T16890] loop2: detected capacity change from 0 to 512 [ 513.246693][T16888] loop5: detected capacity change from 0 to 1024 [ 513.275755][T16890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.342650][T16874] loop1: detected capacity change from 0 to 32768 [ 513.429657][T16890] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.5650: casefold flag without casefold feature [ 513.445568][ T7459] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 513.472064][ T7459] gspca_pac7302: probe of 7-1:0.0 failed with error -71 [ 513.501495][T16890] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.5650: couldn't read orphan inode 15 (err -117) [ 513.506024][T16874] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 513.506024][T16874] [ 513.542626][ T7459] usb 7-1: USB disconnect, device number 5 [ 513.543570][T16890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 513.802631][ T1175] read_mapping_page failed! [ 513.807223][ T1175] ERROR: (device loop1): txCommit: [ 513.807223][ T1175] [ 513.838208][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 513.842557][ T1175] jfs_write_inode: jfs_commit_inode failed! [ 514.207606][T16909] loop6: detected capacity change from 0 to 1024 [ 514.289832][T16909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.385552][T16909] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 514.446280][T16909] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 514.496537][T16909] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 514.604826][T16922] loop1: detected capacity change from 0 to 4096 [ 514.691379][T16922] ntfs: volume version 3.1. [ 514.714090][T14177] EXT4-fs (loop6): unmounting filesystem. [ 514.732493][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5669'. [ 514.747297][T16927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.782768][T16927] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 514.839613][T16922] ntfs: (device loop1): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 514.873458][T16929] overlayfs: missing 'lowerdir' [ 515.427590][T16946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5680'. [ 515.466735][T16949] device lo left promiscuous mode [ 515.527781][T16949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.573264][T16952] loop6: detected capacity change from 0 to 64 [ 515.612379][T16953] loop4: detected capacity change from 0 to 64 [ 515.687753][T16953] syz.4.5681: attempt to access beyond end of device [ 515.687753][T16953] loop4: rw=0, sector=128, nr_sectors = 2 limit=64 [ 515.787428][T16953] Trying to free block not in datazone [ 515.811072][T16953] Trying to free block not in datazone [ 515.862594][T16953] Trying to free block not in datazone [ 515.882290][T16953] Trying to free block not in datazone [ 515.920466][T16953] Trying to free block not in datazone [ 515.927556][T16957] loop2: detected capacity change from 0 to 1024 [ 515.942124][T16953] Trying to free block not in datazone [ 515.962879][T16953] minix_free_block (loop4:6): bit already cleared [ 516.166913][ T1043] block nbd4: Attempted send on invalid socket [ 516.173304][ T1043] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.208835][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5688'. [ 516.251786][ T4382] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 516.299196][T16947] loop5: detected capacity change from 0 to 32768 [ 516.443745][ T4382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 516.472271][ T4382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 516.500351][ T4382] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.551423][ T4382] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 516.590302][ T4382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.655510][ T4382] usb 3-1: config 0 descriptor?? [ 516.693345][ T4382] gspca_main: spca561-2.14.0 probing abcd:cdee [ 516.894354][ T4382] spca561: probe of 3-1:0.0 failed with error -22 [ 516.906849][ T4382] usb 3-1: MIDIStreaming interface descriptor not found [ 517.021707][ T4382] usb 3-1: USB disconnect, device number 27 [ 517.247583][T16612] udevd[16612]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.291214][T16990] loop5: detected capacity change from 0 to 256 [ 517.344536][T16987] loop1: detected capacity change from 0 to 1024 [ 517.991736][T16997] loop6: detected capacity change from 0 to 4096 [ 518.030680][T16997] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 518.186819][T17011] loop4: detected capacity change from 0 to 256 [ 518.784072][T17025] loop2: detected capacity change from 0 to 164 [ 519.101756][T17036] netlink: 'syz.5.5722': attribute type 2 has an invalid length. [ 519.160671][ T27] audit: type=1326 audit(519.101:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c18e929 code=0x7ffc0000 [ 519.246021][ T27] audit: type=1326 audit(519.121:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f869c18e929 code=0x7ffc0000 [ 519.267893][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.386025][ T27] audit: type=1326 audit(519.121:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c18e929 code=0x7ffc0000 [ 519.437012][T17050] loop2: detected capacity change from 0 to 64 [ 519.482653][ T27] audit: type=1326 audit(519.121:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.5725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c18e929 code=0x7ffc0000 [ 519.711827][ T4691] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 519.901673][ T4691] usb 6-1: Using ep0 maxpacket: 16 [ 519.911595][ T4691] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 519.930582][ T4691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.955661][ T4691] usb 6-1: Product: syz [ 519.968920][ T4691] usb 6-1: Manufacturer: syz [ 519.986805][ T4691] usb 6-1: SerialNumber: syz [ 520.015691][ T4691] usb 6-1: config 0 descriptor?? [ 520.253689][ T4691] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 520.281848][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5743'. [ 520.281866][ T4691] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 520.469850][ T4691] usb 6-1: USB disconnect, device number 7 [ 520.851836][ T4686] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 520.915634][T17080] loop4: detected capacity change from 0 to 32768 [ 520.937710][T17080] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5742 (17080) [ 520.969093][T17080] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 521.031952][T17080] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 521.063442][T17080] BTRFS info (device loop4): setting nodatacow, compression disabled [ 521.081772][ T4686] usb 2-1: Using ep0 maxpacket: 8 [ 521.090768][ T4686] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.111765][T17080] BTRFS info (device loop4): max_inline at 0 [ 521.117949][T17080] BTRFS info (device loop4): enabling disk space caching [ 521.144998][ T4686] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 521.174458][T17080] BTRFS info (device loop4): setting datasum, datacow enabled [ 521.182660][ T4686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.190915][T17080] BTRFS info (device loop4): turning off barriers [ 521.207956][T17080] BTRFS info (device loop4): turning on flush-on-commit [ 521.215896][ T4686] usb 2-1: Product: syz [ 521.220143][ T4686] usb 2-1: Manufacturer: syz [ 521.231810][T17080] BTRFS info (device loop4): doing ref verification [ 521.243075][ T4686] usb 2-1: SerialNumber: syz [ 521.258115][T17080] BTRFS info (device loop4): force clearing of disk cache [ 521.275479][ T4686] usb 2-1: config 0 descriptor?? [ 521.301418][ T4686] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 521.308018][T17080] BTRFS info (device loop4): enabling ssd optimizations [ 521.331843][T17080] BTRFS info (device loop4): max_inline at 4096 [ 521.352030][ T4686] usb 2-1: selecting invalid altsetting 1 [ 521.358710][T17080] BTRFS info (device loop4): disk space caching is enabled [ 521.615734][ T4342] BTRFS warning (device loop4): checksum verify failed on logical 5287936 mirror 1 wanted 0x10870a5f found 0xdcde1527 level 0 [ 521.683418][T17080] BTRFS warning (device loop4): failed to read root (objectid=4): -5 [ 521.741492][ T4691] usb 2-1: USB disconnect, device number 20 [ 521.755579][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5759'. [ 521.801752][T17130] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5759'. [ 521.882768][T17130] netlink: 'syz.5.5759': attribute type 3 has an invalid length. [ 521.890578][T17130] netlink: 'syz.5.5759': attribute type 2 has an invalid length. [ 521.932634][T17130] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5759'. [ 522.032100][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 522.346849][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5766'. [ 522.361440][T17080] BTRFS error (device loop4): open_ctree failed: -22 [ 522.371909][ T6523] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (6523) [ 522.381928][T17144] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5766'. [ 522.407264][T17144] device vlan0 entered promiscuous mode [ 522.450381][T17146] device bridge6 entered promiscuous mode [ 522.751219][T17156] No such timeout policy "syz0" [ 522.775892][T17157] xt_TCPMSS: Only works on TCP SYN packets [ 522.864174][T17161] netlink: 71 bytes leftover after parsing attributes in process `syz.5.5774'. [ 523.517002][T17183] loop1: detected capacity change from 0 to 256 [ 523.582450][T17183] exfat: Deprecated parameter 'utf8' [ 523.627813][T17183] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 523.883459][ T7465] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 524.071852][ T7465] usb 7-1: Using ep0 maxpacket: 16 [ 524.087610][ T7465] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 524.127791][ T7465] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.149105][T17203] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5794'. [ 524.163547][ T7465] usb 7-1: Product: syz [ 524.172058][ T7465] usb 7-1: Manufacturer: syz [ 524.176729][ T7465] usb 7-1: SerialNumber: syz [ 524.199783][T17203] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5794'. [ 524.209636][ T7465] r8152-cfgselector 7-1: config 0 descriptor?? [ 524.422068][T17211] libceph: resolve '4.' (ret=-3): failed [ 524.643449][ T7465] r8152-cfgselector 7-1: Unknown version 0x0000 [ 524.662223][ T7465] r8152-cfgselector 7-1: USB disconnect, device number 6 [ 525.061957][ T4690] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 525.269009][ T4690] usb 2-1: too many configurations: 89, using maximum allowed: 8 [ 525.308581][ T4690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.342808][ T4690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.346725][T17248] loop4: detected capacity change from 0 to 256 [ 525.374016][T17248] exfat: Deprecated parameter 'utf8' [ 525.387655][T17248] exfat: Deprecated parameter 'namecase' [ 525.393189][ T4690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.425915][ T4690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.444469][T17248] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 525.454949][ T4690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.517986][ T4690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.580580][ T4690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.582256][T17249] xt_CT: No such helper "pptp" [ 525.618893][ T4690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.648659][T17254] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 525.674274][ T4690] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 525.691747][ T4690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.721760][ T4690] usb 2-1: Product: syz [ 525.726056][ T4690] usb 2-1: Manufacturer: syz [ 525.761053][ T4690] usb 2-1: SerialNumber: syz [ 525.774984][ T4690] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 525.861670][ T4690] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 526.091687][T17266] netlink: 'syz.2.5825': attribute type 27 has an invalid length. [ 526.121985][ C0] usb 2-1: ath9k_htc: invalid pkt_len (ec0c) [ 526.321351][T17274] netlink: 'syz.5.5828': attribute type 4 has an invalid length. [ 526.344253][ T6967] usb 2-1: USB disconnect, device number 21 [ 526.413876][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5830'. [ 526.551085][T17274] netlink: 'syz.5.5828': attribute type 4 has an invalid length. [ 526.912077][ T4690] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 526.929488][ T4690] ath9k_htc: Failed to initialize the device [ 526.944248][T17274] netlink: 'syz.5.5828': attribute type 4 has an invalid length. [ 526.952557][ T6967] usb 2-1: ath9k_htc: USB layer deinitialized [ 527.346441][T17309] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 59411 - 0 [ 527.371713][T17309] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 59411 - 0 [ 527.401940][T17309] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 59411 - 0 [ 527.442971][T17309] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 59411 - 0 [ 527.471411][T17309] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 57141 - 0 [ 527.508202][T17309] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 57141 - 0 [ 527.541708][T17309] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 57141 - 0 [ 527.581710][T17309] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 57141 - 0 [ 527.590755][T17309] device geneve3 entered promiscuous mode [ 527.718218][T17326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5853'. [ 527.851224][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 528.190453][T17336] loop6: detected capacity change from 0 to 4096 [ 528.453185][T17352] loop4: detected capacity change from 0 to 1024 [ 528.654734][ T4352] hfsplus: b-tree write err: -5, ino 4 [ 529.815750][T17402] program syz.4.5890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.851379][T17402] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 530.051306][T17404] loop2: detected capacity change from 0 to 4096 [ 530.082438][T17404] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 530.127126][T17404] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 530.161904][T17404] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 530.242280][T17404] ntfs: volume version 3.1. [ 530.440605][ T4254] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 530.508213][T17384] loop1: detected capacity change from 0 to 32768 [ 530.679307][T17384] XFS (loop1): Mounting V5 Filesystem [ 530.790533][T17434] netlink: 'syz.6.5901': attribute type 3 has an invalid length. [ 530.844289][T17384] XFS (loop1): Ending clean mount [ 530.865461][T17384] XFS (loop1): Quotacheck needed: Please wait. [ 530.983288][T17384] XFS (loop1): Quotacheck: Done. [ 531.203081][ T4252] XFS (loop1): Unmounting Filesystem [ 531.376959][T17448] binder: 17447:17448 ioctl c018620c 200000000700 returned -22 [ 531.601722][ T4690] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 531.793932][T17428] loop5: detected capacity change from 0 to 32768 [ 531.821797][ T4690] usb 7-1: Using ep0 maxpacket: 8 [ 531.828836][ T4690] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 531.858057][ T4690] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 531.925573][ T4690] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 531.944089][ T4690] usb 7-1: Product: syz [ 531.963060][ T4690] usb 7-1: Manufacturer: syz [ 531.980111][ T4690] usb 7-1: SerialNumber: syz [ 532.051445][T17462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5913'. [ 532.146368][T17462] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 532.228206][ T4690] usb 7-1: Invalid connection information received from device [ 532.437972][ T7465] usb 7-1: USB disconnect, device number 7 [ 533.736646][T17515] loop1: detected capacity change from 0 to 4096 [ 533.800628][T17515] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 534.008557][ T27] audit: type=1800 audit(533.951:2654): pid=17515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5933" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 534.098200][T17528] loop6: detected capacity change from 0 to 512 [ 534.118074][T17528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.146825][T17533] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5941'. [ 534.213020][T17535] loop2: detected capacity change from 0 to 64 [ 534.232694][T17528] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.5939: casefold flag without casefold feature [ 534.334813][T17528] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5939: couldn't read orphan inode 15 (err -117) [ 534.421695][T17528] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 534.422384][T17542] netlink: 344 bytes leftover after parsing attributes in process `syz.4.5943'. [ 534.670317][T14177] EXT4-fs (loop6): unmounting filesystem. [ 535.207547][T17574] loop2: detected capacity change from 0 to 256 [ 535.299993][T17574] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbbba8adb, utbl_chksum : 0xe619d30d) [ 535.377877][T17578] loop5: detected capacity change from 0 to 512 [ 535.463422][T17578] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 535.541967][T17578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0102] [ 535.551326][T17578] EXT4-fs (loop5): orphan cleanup on readonly fs [ 535.622689][T17578] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5958: bg 0: block 361: padding at end of block bitmap is not set [ 535.681710][T17578] EXT4-fs (loop5): Remounting filesystem read-only [ 535.688598][T17578] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 535.771675][T17578] EXT4-fs (loop5): Remounting filesystem read-only [ 535.831613][T17578] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.5958: attempt to clear invalid blocks 33619980 len 1 [ 535.901627][T17578] EXT4-fs (loop5): Remounting filesystem read-only [ 535.949348][T17578] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.5958: invalid indirect mapped block 1811939328 (level 0) [ 536.039788][T17578] EXT4-fs (loop5): Remounting filesystem read-only [ 536.055379][T17578] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.5958: invalid indirect mapped block 2185560079 (level 1) [ 536.111475][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 536.132490][T17578] EXT4-fs (loop5): Remounting filesystem read-only [ 536.140307][T17578] EXT4-fs (loop5): 1 truncate cleaned up [ 536.147259][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 536.189926][T17578] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 536.221860][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 536.255373][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 536.301663][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 536.341740][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 536.412049][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 536.434188][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 536.448965][T14063] EXT4-fs (loop5): unmounting filesystem. [ 536.828414][T17625] netlink: 'syz.2.5978': attribute type 2 has an invalid length. [ 536.936312][T17634] delete_channel: no stack [ 536.956074][T17635] loop1: detected capacity change from 0 to 256 [ 537.079740][T17635] FAT-fs (loop1): Directory bread(block 64) failed [ 537.129862][T17635] FAT-fs (loop1): Directory bread(block 65) failed [ 537.203839][T17635] FAT-fs (loop1): Directory bread(block 66) failed [ 537.210455][T17635] FAT-fs (loop1): Directory bread(block 67) failed [ 537.244012][T17635] FAT-fs (loop1): Directory bread(block 68) failed [ 537.250678][T17635] FAT-fs (loop1): Directory bread(block 69) failed [ 537.278030][T17635] FAT-fs (loop1): Directory bread(block 70) failed [ 537.298215][T17635] FAT-fs (loop1): Directory bread(block 71) failed [ 537.321035][T17635] FAT-fs (loop1): Directory bread(block 72) failed [ 537.382475][T17635] FAT-fs (loop1): Directory bread(block 73) failed [ 537.566521][T17635] syz.1.5979: attempt to access beyond end of device [ 537.566521][T17635] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 537.604952][T17656] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.663519][T17635] syz.1.5979: attempt to access beyond end of device [ 537.663519][T17635] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 537.731444][ T27] audit: type=1800 audit(537.671:2655): pid=17635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5979" name="file1" dev="loop1" ino=1048696 res=0 errno=0 [ 537.751184][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.111971][T17672] usb usb9: usbfs: process 17672 (syz.4.5997) did not claim interface 0 before use [ 538.499537][T17687] IPv6: addrconf: prefix option has invalid lifetime [ 538.554070][T17691] IPv6: addrconf: prefix option has invalid lifetime [ 538.960905][T17701] loop2: detected capacity change from 0 to 4096 [ 538.982434][T17701] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 538.982467][T17701] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 538.982523][T17701] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 538.983737][T17701] ntfs: volume version 3.1. [ 539.072061][T17701] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 539.072262][T17701] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 539.190154][T17709] loop5: detected capacity change from 0 to 4096 [ 539.193056][ T1175] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 539.215000][ T4254] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 539.222084][T17709] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 539.241867][T17709] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 539.452439][ T50] ntfs3: loop5: ntfs3_write_inode r=5 failed, -22. [ 539.453669][T14063] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 539.471789][ T4268] Bluetooth: hci5: command 0x0406 tx timeout [ 539.858440][T17730] SET target dimension over the limit! [ 540.343795][T17746] loop2: detected capacity change from 0 to 1024 [ 540.351185][T17746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 540.368888][T17746] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 540.384245][T17746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 540.472710][T17755] loop5: detected capacity change from 0 to 64 [ 540.491463][T17746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 540.731690][ T4690] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 540.749973][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 540.954254][ T4690] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 540.971690][ T4690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.990094][ T4690] usb 5-1: Product: syz [ 541.000241][ T4690] usb 5-1: Manufacturer: syz [ 541.010409][ T4690] usb 5-1: SerialNumber: syz [ 541.031939][ T4690] usb 5-1: config 0 descriptor?? [ 541.052495][ T4690] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 541.449343][ T4690] gspca_sunplus: reg_w_riv err -71 [ 541.459323][ T4690] sunplus: probe of 5-1:0.0 failed with error -71 [ 541.490207][ T4690] usb 5-1: USB disconnect, device number 26 [ 541.612215][T17779] __nla_validate_parse: 44 callbacks suppressed [ 541.612238][T17779] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6048'. [ 541.681838][ T4296] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 541.874959][ T4296] usb 3-1: Using ep0 maxpacket: 8 [ 541.882689][ T4296] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 541.904856][ T4296] usb 3-1: config 2 has no interface number 0 [ 541.911059][ T4296] usb 3-1: config 2 interface 31 has no altsetting 0 [ 541.940690][ T4296] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 541.969801][ T4296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.988677][ T4296] usb 3-1: Product: syz [ 542.012360][ T4296] usb 3-1: Manufacturer: syz [ 542.017546][ T4296] usb 3-1: SerialNumber: syz [ 542.290699][T17797] loop6: detected capacity change from 0 to 512 [ 542.355859][T17797] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 542.420817][T17804] loop1: detected capacity change from 0 to 8 [ 542.481993][T17804] SQUASHFS error: Failed to read block 0x636: -5 [ 542.495022][ T4296] ch9200: probe of 3-1:2.31 failed with error -22 [ 542.510900][ T4296] usb 3-1: USB disconnect, device number 28 [ 542.532191][T17804] SQUASHFS error: Unable to read metadata cache entry [634] [ 542.581940][T17804] SQUASHFS error: Unable to read metadata cache entry [634] [ 542.611926][T17804] SQUASHFS error: Unable to read directory block [629:0] [ 542.641300][T14177] EXT4-fs (loop6): unmounting filesystem. [ 542.792224][T17810] loop5: detected capacity change from 0 to 1024 [ 542.843319][T17817] loop1: detected capacity change from 0 to 64 [ 542.890511][T17821] rtc_cmos 00:00: Alarms can be up to one day in the future [ 542.900010][T17810] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 543.004031][T14063] EXT4-fs (loop5): unmounting filesystem. [ 543.475398][ T27] audit: type=1326 audit(543.421:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.6.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f838e929 code=0x7ffc0000 [ 543.556808][ T27] audit: type=1326 audit(543.451:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.6.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f838e929 code=0x7ffc0000 [ 543.656711][ T27] audit: type=1326 audit(543.461:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.6.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f24f838e929 code=0x7ffc0000 [ 543.760253][ T27] audit: type=1326 audit(543.461:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.6.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f838e929 code=0x7ffc0000 [ 543.817228][ T27] audit: type=1326 audit(543.461:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17837 comm="syz.6.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f838e929 code=0x7ffc0000 [ 543.900259][T17849] Invalid option length (1048180) for dns_resolver key [ 544.227858][T17863] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 544.230071][T17862] loop1: detected capacity change from 0 to 164 [ 544.284667][T17862] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 544.601671][ T4268] Bluetooth: hci6: command 0x0406 tx timeout [ 544.781844][ T4382] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 544.930870][T17889] loop4: detected capacity change from 0 to 64 [ 544.981688][ T4382] usb 3-1: Using ep0 maxpacket: 16 [ 544.991251][ T4382] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 545.021035][ T4382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.070644][ T4382] usb 3-1: Product: syz [ 545.087183][ T4382] usb 3-1: Manufacturer: syz [ 545.101873][ T4382] usb 3-1: SerialNumber: syz [ 545.119753][ T4382] r8152-cfgselector 3-1: config 0 descriptor?? [ 545.332795][T17901] loop5: detected capacity change from 0 to 512 [ 545.389003][T17901] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 545.472540][T17901] Quota error (device loop5): do_check_range: Getting block 16777219 out of range 1-5 [ 545.527321][T17901] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 545.537531][T17901] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.6107: Failed to acquire dquot type 1 [ 545.567819][ T4382] r8152-cfgselector 3-1: Unknown version 0x0000 [ 545.576174][ T4382] r8152-cfgselector 3-1: bad CDC descriptors [ 545.596939][ T4382] r8152-cfgselector 3-1: Unknown version 0x0000 [ 545.614096][ T4382] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 545.709630][T17913] ieee802154 phy0 wpan0: encryption failed: -22 [ 545.717969][ T28] INFO: task syz-executor:4259 blocked for more than 143 seconds. [ 545.746227][T14063] EXT4-fs (loop5): unmounting filesystem. [ 545.762874][ T28] Not tainted 6.1.142-syzkaller #0 [ 545.772098][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.781176][ T28] task:syz-executor state:D stack:22240 pid:4259 ppid:1 flags:0x00004004 [ 545.791261][ T28] Call Trace: [ 545.827046][ T28] [ 545.830334][ T28] __schedule+0x10e9/0x40d0 [ 545.839059][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 545.857528][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 545.870678][ T28] ? lock_chain_count+0x20/0x20 [ 545.904637][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 545.924962][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 545.956699][ T28] schedule+0xb9/0x180 [ 545.960363][T17917] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6112'. [ 545.966662][ T28] io_schedule+0x7c/0xd0 [ 545.983583][ T28] folio_wait_bit_common+0x6e1/0xf60 [ 545.996713][ T28] ? folio_wait_bit+0x30/0x30 [ 546.007363][ T28] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 546.024692][ T28] ? folio_mapping+0x1ba/0x4d0 [ 546.029672][ T28] truncate_inode_pages_range+0x9a2/0xff0 [ 546.036047][ T28] ? mapping_evict_folio+0x520/0x520 [ 546.041416][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 546.048299][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 546.054028][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 546.059325][ T28] evict+0x498/0x870 [ 546.063655][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 546.068571][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 546.074224][ T28] ? _raw_spin_unlock+0x24/0x40 [ 546.079175][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 546.086340][ T28] evict_inodes+0x604/0x690 [ 546.091006][ T28] ? clear_inode+0x150/0x150 [ 546.121086][ T28] ? dput+0x1c9/0x1d0 [ 546.125755][ T28] ? sync_filesystem+0x103/0x220 [ 546.130776][ T28] generic_shutdown_super+0x93/0x340 [ 546.136799][ T28] kill_block_super+0x7c/0xe0 [ 546.141998][ T28] deactivate_locked_super+0x93/0xf0 [ 546.147686][ T28] cleanup_mnt+0x463/0x4f0 [ 546.152583][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 546.157872][ T28] task_work_run+0x1ca/0x250 [ 546.167913][ T28] ? task_work_cancel+0x230/0x230 [ 546.175399][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 546.180932][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 546.190151][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 546.198731][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 546.205363][ T28] do_syscall_64+0x58/0xa0 [ 546.209872][ T28] ? clear_bhb_loop+0x60/0xb0 [ 546.215287][ T28] ? clear_bhb_loop+0x60/0xb0 [ 546.220024][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.226073][ T28] RIP: 0033:0x7fdb6a58fc57 [ 546.230682][ T28] RSP: 002b:00007ffd04ae1238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 546.239239][ T28] RAX: 0000000000000000 RBX: 00007fdb6a610925 RCX: 00007fdb6a58fc57 [ 546.247834][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd04ae12f0 [ 546.255993][ T28] RBP: 00007ffd04ae12f0 R08: 0000000000000000 R09: 0000000000000000 [ 546.264216][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd04ae2380 [ 546.272605][ T28] R13: 00007fdb6a610925 R14: 0000000000061a1a R15: 00007ffd04ae23c0 [ 546.280634][ T28] [ 546.284065][ T28] [ 546.284065][ T28] Showing all locks held in the system: [ 546.294774][ T28] 2 locks held by kworker/u4:0/9: [ 546.299856][ T28] #0: ffff8880b8f3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 546.309988][ T28] #1: ffff88801d6de358 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x5c/0x1080 [ 546.320237][ T28] 1 lock held by rcu_tasks_kthre/12: [ 546.325635][ T28] #0: ffffffff8c92b430 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 546.336379][ T28] 1 lock held by rcu_tasks_trace/13: [ 546.342473][ T28] #0: ffffffff8c92bc50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 546.354727][ T28] 1 lock held by khungtaskd/28: [ 546.359811][ T28] #0: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 546.370361][ T28] 2 locks held by kworker/u4:3/50: [ 546.375709][ T28] #0: ffff8880b8f3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 546.386048][ T28] #1: ffffc90000bb7d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 546.398863][ T28] 2 locks held by getty/4016: [ 546.403799][ T28] #0: ffff8880302e6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 546.413765][ T28] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 546.425346][ T28] 1 lock held by syz-executor/4258: [ 546.430697][ T28] #0: ffff8880291ae0e0 (&type->s_umount_key#94){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 546.441229][ T28] 1 lock held by syz-executor/4259: [ 546.446740][ T28] #0: ffff88807614c0e0 (&type->s_umount_key#94){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 546.457827][ T28] [ 546.460211][ T28] ============================================= [ 546.460211][ T28] [ 546.468843][ T28] NMI backtrace for cpu 0 [ 546.473340][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.142-syzkaller #0 [ 546.481355][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.491432][ T28] Call Trace: [ 546.494741][ T28] [ 546.497716][ T28] dump_stack_lvl+0x168/0x22e [ 546.502462][ T28] ? show_regs_print_info+0x12/0x12 [ 546.507706][ T28] ? load_image+0x3b0/0x3b0 [ 546.512235][ T28] ? vprintk_emit+0x571/0x680 [ 546.516980][ T28] ? printk_sprint+0x460/0x460 [ 546.521811][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 546.526840][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 546.533121][ T28] ? _printk+0xcc/0x110 [ 546.537303][ T28] ? load_image+0x3b0/0x3b0 [ 546.541922][ T28] ? load_image+0x3b0/0x3b0 [ 546.546446][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 546.552535][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 546.558557][ T28] watchdog+0xeee/0xf30 [ 546.562769][ T28] ? watchdog+0x1ed/0xf30 [ 546.567232][ T28] kthread+0x29d/0x330 [ 546.571338][ T28] ? hungtask_pm_notify+0x40/0x40 [ 546.576389][ T28] ? kthread_blkcg+0xd0/0xd0 [ 546.581014][ T28] ret_from_fork+0x1f/0x30 [ 546.585467][ T28] [ 546.589421][ T28] Sending NMI from CPU 0 to CPUs 1: [ 546.595163][ C1] NMI backtrace for cpu 1 [ 546.595179][ C1] CPU: 1 PID: 3606 Comm: syslogd Not tainted 6.1.142-syzkaller #0 [ 546.595197][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.595207][ C1] RIP: 0010:__lock_acquire+0x32cc/0x7c50 [ 546.595242][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 10 00 74 12 4c 89 f7 e8 d9 30 6f 00 48 ba 00 00 00 00 00 fc ff df 4c 0b ac 24 80 00 00 00 4d 8b 3e <4c> 89 ac 24 80 00 00 00 4d 39 f7 0f 84 50 fc ff ff 4d 8d 67 30 4c [ 546.595258][ C1] RSP: 0018:ffffc900032072a0 EFLAGS: 00000006 [ 546.595273][ C1] RAX: 1ffffffff2048ece RBX: ffffffff93189ee8 RCX: 0000000000000008 [ 546.595287][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff90247690 [ 546.595299][ C1] RBP: ffffc900032074f0 R08: dffffc0000000000 R09: ffffc90003207440 [ 546.595313][ C1] R10: fffff52000640e8f R11: 1ffff92000640e88 R12: ffffffff902476fa [ 546.595325][ C1] R13: 00000000000003dd R14: ffffffff90247670 R15: ffffffff931839d8 [ 546.595338][ C1] FS: 00007fa55a92ac80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 546.595353][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.595365][ C1] CR2: 00007fe8bf381178 CR3: 000000002fd83000 CR4: 00000000003506e0 [ 546.595380][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.595390][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.595401][ C1] Call Trace: [ 546.595407][ C1] [ 546.595413][ C1] ? check_path+0x40/0x40 [ 546.595450][ C1] ? verify_lock_unused+0x140/0x140 [ 546.595483][ C1] lock_acquire+0x1b4/0x490 [ 546.595505][ C1] ? psi_task_change+0xe1/0x250 [ 546.595535][ C1] ? read_lock_is_recursive+0x10/0x10 [ 546.595563][ C1] ? psi_task_change+0xe1/0x250 [ 546.595587][ C1] psi_group_change+0x1c2/0x1370 [ 546.595612][ C1] ? psi_task_change+0xe1/0x250 [ 546.595636][ C1] ? rcu_read_lock_sched_held+0x86/0xf0 [ 546.595656][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 546.595681][ C1] psi_task_change+0xe1/0x250 [ 546.595708][ C1] enqueue_task+0x26d/0x2b0 [ 546.595729][ C1] ttwu_do_activate+0x1b5/0x340 [ 546.595752][ C1] try_to_wake_up+0x5de/0x1080 [ 546.595776][ C1] autoremove_wake_function+0x13/0xf0 [ 546.595802][ C1] __wake_up_common+0x2a4/0x4e0 [ 546.595827][ C1] __wake_up_sync_key+0x10d/0x180 [ 546.595851][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 546.595876][ C1] ? sock_load_diag_module+0x130/0x130 [ 546.595904][ C1] __unix_dgram_recvmsg+0x498/0xd70 [ 546.595924][ C1] ? aa_file_perm+0x117/0xec0 [ 546.595948][ C1] ? unix_unhash+0x10/0x10 [ 546.595966][ C1] ? aa_af_perm+0x2b0/0x2b0 [ 546.595988][ C1] ? aa_file_perm+0x3ef/0xec0 [ 546.596005][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 546.596029][ C1] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 546.596055][ C1] ? security_socket_recvmsg+0x85/0xb0 [ 546.596071][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 546.596093][ C1] sock_read_iter+0x2bf/0x370 [ 546.596111][ C1] ? kernel_sock_ip_overhead+0x590/0x590 [ 546.596133][ C1] ? common_file_perm+0x171/0x1c0 [ 546.596151][ C1] ? fsnotify_perm+0x248/0x550 [ 546.596176][ C1] vfs_read+0x434/0x920 [ 546.596198][ C1] ? kernel_read+0x1e0/0x1e0 [ 546.596227][ C1] ? __rseq_handle_notify_resume+0x395/0x1210 [ 546.596253][ C1] ? __fdget_pos+0x1d4/0x360 [ 546.596281][ C1] ksys_read+0x143/0x240 [ 546.596298][ C1] ? vfs_write+0x960/0x960 [ 546.596314][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 546.596333][ C1] do_syscall_64+0x4c/0xa0 [ 546.596356][ C1] ? clear_bhb_loop+0x60/0xb0 [ 546.596374][ C1] ? clear_bhb_loop+0x60/0xb0 [ 546.596391][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.596420][ C1] RIP: 0033:0x7fa55aa7a407 [ 546.596435][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 546.596450][ C1] RSP: 002b:00007ffcafe3b9d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 546.596466][ C1] RAX: ffffffffffffffda RBX: 00007fa55a92ac80 RCX: 00007fa55aa7a407 [ 546.596479][ C1] RDX: 00000000000000ff RSI: 0000564bce761950 RDI: 0000000000000000 [ 546.596489][ C1] RBP: 0000564bce761910 R08: 0000000000000000 R09: 0000000000000000 [ 546.596500][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564bce7619dc [ 546.596511][ C1] R13: 0000000000000000 R14: 0000564bce761950 R15: 0000564bc04f0d98 [ 546.596528][ C1] [ 547.041966][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 547.048887][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.142-syzkaller #0 [ 547.056909][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.067153][ T28] Call Trace: [ 547.070480][ T28] [ 547.073445][ T28] dump_stack_lvl+0x168/0x22e [ 547.078169][ T28] ? memcpy+0x3c/0x60 [ 547.082177][ T28] ? show_regs_print_info+0x12/0x12 [ 547.087428][ T28] ? load_image+0x3b0/0x3b0 [ 547.092069][ T28] panic+0x2c9/0x710 [ 547.095997][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 547.101668][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 547.106192][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 547.111793][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 547.118153][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 547.124416][ T28] watchdog+0xf2d/0xf30 [ 547.128682][ T28] ? watchdog+0x1ed/0xf30 [ 547.133029][ T28] kthread+0x29d/0x330 [ 547.137218][ T28] ? hungtask_pm_notify+0x40/0x40 [ 547.142260][ T28] ? kthread_blkcg+0xd0/0xd0 [ 547.146873][ T28] ret_from_fork+0x1f/0x30 [ 547.151316][ T28] [ 547.154678][ T28] Kernel Offset: disabled [ 547.159103][ T28] Rebooting in 86400 seconds..