last executing test programs: 3.206198491s ago: executing program 2 (id=7825): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x4, 0xfffff028}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) 2.950946246s ago: executing program 2 (id=7829): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x64, 0x0, &(0x7f0000000080)) 2.730362669s ago: executing program 2 (id=7833): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) 2.504477493s ago: executing program 2 (id=7838): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1a000}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 2.366432421s ago: executing program 2 (id=7840): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.273797065s ago: executing program 3 (id=7859): capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x338}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.17149438s ago: executing program 4 (id=7860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x402}]}, 0x40}}, 0x0) 1.050611778s ago: executing program 0 (id=7862): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2750], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.01898281s ago: executing program 1 (id=7863): r0 = socket(0x11, 0x3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 971.415802ms ago: executing program 3 (id=7864): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x420, 0x3e0, 0x1c0, 0xffffffff, 0x1c0, 0x3e0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) 965.509193ms ago: executing program 4 (id=7865): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) syz_clone3(&(0x7f0000000080)={0x42081400, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x60, 0x0, 0x0}, 0x88) 877.876468ms ago: executing program 0 (id=7866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) 843.69104ms ago: executing program 1 (id=7867): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000200), 0x0}, 0x20) 843.29922ms ago: executing program 3 (id=7868): unshare(0x8000400) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) 819.802171ms ago: executing program 4 (id=7869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xa5, 0x0, 0x0, 0x0, 0x12d1f31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xb11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xfffffffd, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x90, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x488}}, 0x0) 727.054557ms ago: executing program 1 (id=7870): syz_mount_image$hfsplus(&(0x7f0000001380), &(0x7f0000000a40)='./file2\x00', 0x800094, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES64], 0x5, 0x686, &(0x7f00000001c0)="$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") unlink(&(0x7f0000000100)='./file1\x00') 693.659499ms ago: executing program 0 (id=7871): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x40c0) 683.09819ms ago: executing program 4 (id=7872): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004, 0x2}, {@in6=@mcast2, 0x2000000, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x327, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffa}, {}, {0x25}, 0x70bd29, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x5e61, 0x0, @in=@rand_addr=0x64010101}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 618.671903ms ago: executing program 3 (id=7873): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x99, &(0x7f0000002840)=ANY=[@ANYRES16=r0], 0x0, 0x61c, &(0x7f0000001180)="$eJzs3U9rHOcdB/DvrGRZcsFREjtJS0uFfWiJqa3VJo4OLXZLKTqEEugllxyELcfCayVISlFCKXL/XvsOkh7kc089lB4M6blvQVBKDoXedXOZ2dnVxpLllSxr1+7nA7PPM/vMPPN7fp55tDOL2QD/txbez6kHKbJw6d2Ncn17q9Xe3mrd7daTnE7SSMY7RYqVpPgyuZ7Okm+Wb9bdFY87zgefvzP/VfP+vSQTfW8X3U6fbhSb9ZKZJGN1eUjjj+vvxtH661P0Rlgm7GI3cTBsD/fYPMzuT3ndAqOg6Pzd3GM6OZNksv4ckHp2aJxsdMfvULMcAAAAPKde2slONnJ22HEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86T+/f+iXhrd+kyK7u//T5TrY8MO9Jg8GHYAAAAAAAAAAHAMvlts7mQjZ7vrD4vqO/8L1cq56vUb+SRrWcpqLmcji1nPelbTTDLd19HExuL6+mpznz0n6y26e87tu+fcsx8rAAAAAAAAALzAfpOF3e//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgFBTJWKeolnPd+nQa40kmk0yU220mf+/Wn2cPhh0AAAAAnICXdrKTjZztrj8sqnv+16r7/sl8kpWsZznraWcpN6tnAZ27/sb2Vqu9vdW6Wy57+/3xfw8VRtVjOs8e9j/ybLVF0dtjIT/LL3IpM3kvq1nOL7OY9SxlJj+taospMl0/vZjuxrl/vNe/tvbe42Icq8s3qkimcivLVWyXcyMfpZ2baVRjqLY5+Ij3yuwUY7lWGTBHN+uyHNGf6vJYHbnD6Sojp3oZma1zVWbj5U4Gyr73y8Qhz5NHj9RMo/cM6twgOb927VA5P1OXZfh/eBY5P7JHMzHXd/a9dnAmkgv/+s5fb7dX7ty+tXZpdIZ0RI9motWXidefmInJvBiZKMY7s+h0b6Zq5Hyv9cmz5YVq37NZzs/zUW5mKW9nPm9nLm/lrcxmPlf78np+gGutcbhr7eL368pUkj/W5Wgo8/pyX177Z7rpqq3/nd0svXKIGelH/x4olPFv1ZXyGL+ty9HwaCaafZl49eBM/Plh+brWXrmzenvx4wGP9726LC/b34/U3FyeL6+U/1jV2tfPjrLt1X3bmlXbuV5bY0/b+V7bk67Uifoz3N6e5qq21/dta1Vtb/S17fcpB4CRd+bNMxNT/5n659QXU7+buj317uRPTs+f/vZETv1j/G9jf2ncb/yweDNf5Ne79/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDRrX362Z3Fdntp9YDKeL3tQduMQmWyjnNU4lEZrDI24HmocpKVIU5KwIm4sn734ytrn372g+W7ix8ufbi00mo1r87NX52fu3rl1nJ7abbzOuwwgWdg94/+sCMBAAAAAAAAAAAABnUS/51g2GMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnm8L7+fUgxRpzl6eTZFkq9Xe3mq1y7Zu2TGepJGk+FVSfJlcT2fJdF93xeOO88Hn78x/1bx/b7ev8e72jYP2G8xmvWQmyVhdHld/N566v6I3wjJhF7uJg2H7XwAAAP//VgAARg==") 518.154009ms ago: executing program 0 (id=7874): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200020500000004000000ffdbdf2503000700"], 0x28}, 0x1, 0x7}, 0x0) 517.644169ms ago: executing program 4 (id=7875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "f8b10bd669395ab0"}, 0x7}}, @CGW_CS_XOR={0x8, 0x5, {0x7}}]}, 0x34}}, 0x0) 428.764014ms ago: executing program 2 (id=7876): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x13, 0x3, "22a855"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 428.093464ms ago: executing program 1 (id=7877): r0 = socket(0x2, 0x3, 0xff) setsockopt(r0, 0x0, 0x5, &(0x7f0000000240), 0x0) 263.358444ms ago: executing program 4 (id=7878): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nojournal_checksum}, {@nombcache}, {@grpquota, 0x0}, {@noauto_da_alloc}, {@noload}, {@norecovery}, {@jqfmt_vfsold}, {@noacl}, {@quota}, {@nodiscard}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@orlov}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodioread_nolock}], [{@uid_eq}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}], 0x2c}, 0x0, 0x4f8, &(0x7f0000000700)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 263.110344ms ago: executing program 3 (id=7879): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000940)=""/12, 0xc}], 0x1) 262.806574ms ago: executing program 0 (id=7880): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x1d, 0xfffffffffffffd04, &(0x7f0000000000)="e02742e8680d85ff9782762f86dd3f8a45e2318273ad90cb7ab9d0f477f5b43ac4ed2618bce6808e000000435024e1ff76b534e444fea2834c6c510d6aeb9ab347165756607916af436c42110bb30983c62b09ef27a9d6ff4c24f5d2cfc1067fb20400000044e98c99c307f145fcda96609d6a0a0cd940993f0a0075205286959f60", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1b) 210.500637ms ago: executing program 1 (id=7881): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030b00000000000000000000000100090000000000030006006c0000000200000000100000000000000000000002000100000000000002fb0b00000000030005000000000002"], 0x58}, 0x1, 0x7}, 0x0) 123.322322ms ago: executing program 3 (id=7882): r0 = syz_open_dev$radio(&(0x7f0000001800), 0x2, 0x2) readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/150, 0x96}, {0x0, 0xc800}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000000880)=""/156, 0x9c}], 0x7) 107.233404ms ago: executing program 0 (id=7883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4083}]}, 0x28}}, 0x0) 0s ago: executing program 1 (id=7884): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x80044d76, 0x0) kernel console output (not intermixed with test programs): [ 745.033993][ T27] audit: type=1326 audit(45365395.081:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18600 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 745.095989][T18604] loop1: detected capacity change from 0 to 1024 [ 745.110208][ T27] audit: type=1326 audit(45365395.081:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18600 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 745.156746][ T6617] gspca_spca501: reg write: error -71 [ 745.162283][ T6617] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 745.180900][ T27] audit: type=1326 audit(45365395.081:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18600 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 745.205553][ T6617] spca501: probe of 1-1:0.0 failed with error -22 [ 745.215086][ T6617] usb 1-1: USB disconnect, device number 9 [ 745.222150][ T27] audit: type=1326 audit(45365395.081:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18600 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 745.248470][ T27] audit: type=1326 audit(45365395.081:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18600 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 745.260784][T18604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 745.272484][ T27] audit: type=1326 audit(45365395.081:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18600 comm="syz.3.6080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 745.376342][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6084'. [ 745.388585][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 745.556182][T18617] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 745.664818][T18624] loop2: detected capacity change from 0 to 256 [ 745.726028][T18624] FAT-fs (loop2): Directory bread(block 64) failed [ 745.746166][T18624] FAT-fs (loop2): Directory bread(block 65) failed [ 745.771386][T18624] FAT-fs (loop2): Directory bread(block 66) failed [ 745.778068][T18624] FAT-fs (loop2): Directory bread(block 67) failed [ 745.844519][T18624] FAT-fs (loop2): Directory bread(block 68) failed [ 745.874412][T18624] FAT-fs (loop2): Directory bread(block 69) failed [ 745.882297][T18624] FAT-fs (loop2): Directory bread(block 70) failed [ 745.888882][T18624] FAT-fs (loop2): Directory bread(block 71) failed [ 745.905485][T18624] FAT-fs (loop2): Directory bread(block 72) failed [ 745.928191][T18624] FAT-fs (loop2): Directory bread(block 73) failed [ 746.118782][T18641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 746.573734][T18659] netlink: 'syz.2.6106': attribute type 13 has an invalid length. [ 746.614660][T18659] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6106'. [ 746.646102][T18659] syz_tun: refused to change device tx_queue_len [ 746.693091][T18659] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 746.724563][ T27] audit: type=1326 audit(45365396.686:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 746.827486][ T27] audit: type=1326 audit(45365396.686:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 746.902631][ T27] audit: type=1326 audit(45365396.733:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 747.007791][ T27] audit: type=1326 audit(45365396.733:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 747.115850][T18678] device netdevsim0 entered promiscuous mode [ 747.124921][T18678] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 747.517430][T18687] loop0: detected capacity change from 0 to 8192 [ 747.562619][T18687] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 747.717110][T18687] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 747.760506][T18713] [U] v3f"S/4:XTzWtlW= [ 747.769494][T18687] REISERFS (device loop0): using ordered data mode [ 747.799321][T18713] [U] J"e:" [ 747.804013][T18687] reiserfs: using flush barriers [ 747.816188][T18687] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 747.879434][T18687] REISERFS (device loop0): checking transaction log (loop0) [ 748.035190][T18723] loop4: detected capacity change from 0 to 512 [ 748.138813][T18723] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 748.185488][T18723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 748.231759][T18723] EXT4-fs (loop4): orphan cleanup on readonly fs [ 748.256669][T18687] REISERFS (device loop0): Using tea hash to sort names [ 748.311362][T18723] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.6135: iget: bad i_size value: 12154761577498 [ 748.318350][T18687] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 748.357390][T18687] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 748.373777][T18723] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6135: couldn't read orphan inode 13 (err -117) [ 748.428224][T18723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 748.458194][T18736] loop2: detected capacity change from 0 to 1024 [ 748.470096][T18723] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 748.470117][T18723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 748.543538][T18736] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 748.543658][T18736] hfsplus: xattr search failed [ 748.543917][T18736] syz.2.6142: attempt to access beyond end of device [ 748.543917][T18736] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 748.543993][T18736] Buffer I/O error on dev loop2, logical block 458752, async page read [ 748.544017][T18736] hfsplus: unable to mark blocks free: error -5 [ 748.544029][T18736] hfsplus: can't free extent [ 748.642459][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 748.860844][T18744] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 748.860905][T18744] overlayfs: missing 'lowerdir' [ 749.093929][T18752] loop4: detected capacity change from 0 to 1764 [ 749.373424][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6154'. [ 749.442194][T18767] IPv6: NLM_F_CREATE should be specified when creating new route [ 749.638048][T18775] loop1: detected capacity change from 0 to 16 [ 749.706571][T18775] erofs: (device loop1): mounted with root inode @ nid 36. [ 749.765325][T18775] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 749.809238][T18775] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -24 in[64, 4032] out[1851] [ 749.809371][T18782] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 749.844366][T18775] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 750.020985][T18789] loop2: detected capacity change from 0 to 16 [ 750.054076][T18789] erofs: (device loop2): mounted with root inode @ nid 36. [ 750.103781][T18789] erofs: (device loop2): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 750.149304][T18789] erofs: (device loop2): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 750.210133][T18789] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 750.348659][T18801] Cannot find set identified by id 0 to match [ 750.439989][T18808] xt_socket: unknown flags 0x50 [ 750.572035][T18813] openvswitch: netlink: Message has 1 unknown bytes. [ 751.435708][T18849] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6197'. [ 751.752554][T18863] overlayfs: empty lowerdir [ 752.805346][T18903] loop0: detected capacity change from 0 to 736 [ 753.042420][T18908] loop1: detected capacity change from 0 to 4096 [ 753.081802][T18908] __ntfs_warning: 2 callbacks suppressed [ 753.081817][T18908] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 753.219154][T18908] ntfs: (device loop1): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 753.260566][T18908] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 753.346828][T18908] ntfs: volume version 3.1. [ 753.574492][ T6617] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 753.785490][ T6617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 753.800006][T18933] kcapi: manufacturer command 18446744073709551608 unknown. [ 753.819491][T18935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6240'. [ 753.827304][ T6617] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 753.854418][ T6617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.869225][ T6617] usb 4-1: Product: syz [ 753.892274][ T6617] usb 4-1: Manufacturer: syz [ 753.896931][ T6617] usb 4-1: SerialNumber: syz [ 753.916641][ T6617] usb 4-1: config 0 descriptor?? [ 753.950180][ T6617] hub 4-1:0.0: bad descriptor, ignoring hub [ 753.991375][ T6617] hub: probe of 4-1:0.0 failed with error -5 [ 754.011064][T18915] loop4: detected capacity change from 0 to 32768 [ 754.014358][ T6617] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55 [ 754.064686][T18915] [ 754.064686][T18915] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 754.064686][T18915] [ 754.087487][T18941] loop1: detected capacity change from 0 to 1024 [ 754.151583][T18915] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 754.151583][T18915] [ 754.233919][T18915] ERROR: (device loop4): jfs_unlink: [ 754.233919][T18915] [ 754.329385][T18943] loop2: detected capacity change from 0 to 4096 [ 754.373659][T18943] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 754.410145][ T4278] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 754.410145][ T4278] [ 754.412146][T18945] loop0: detected capacity change from 0 to 64 [ 754.437837][T18943] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 754.517098][ T4357] ERROR: (device loop4): diWrite: ixpxd invalid [ 754.517098][ T4357] [ 754.529042][T18943] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 754.551797][ T4357] ERROR: (device loop4): txCommit: [ 754.551797][ T4357] [ 754.585257][ T4357] jfs_write_inode: jfs_commit_inode failed! [ 754.594825][ T4930] usb 4-1: USB disconnect, device number 47 [ 754.602659][ T4278] [ 754.602659][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 754.602659][ T4278] [ 754.625072][ T4278] [ 754.625072][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 754.625072][ T4278] [ 754.644274][T18943] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 754.725425][T18943] ntfs: volume version 3.1. [ 754.912095][T18953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 754.935461][T18953] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 755.176485][T18961] loop2: detected capacity change from 0 to 512 [ 755.204613][T18965] netlink: 'syz.0.6256': attribute type 1 has an invalid length. [ 755.213374][T18965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6256'. [ 755.272504][T18961] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 755.329414][T18961] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 755.372842][T18961] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.6254: Failed to acquire dquot type 1 [ 755.401681][T18961] EXT4-fs (loop2): 1 truncate cleaned up [ 755.448458][T18961] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 755.461811][T18978] loop4: detected capacity change from 0 to 256 [ 755.486846][T18978] exfat: Deprecated parameter 'utf8' [ 755.526170][T18978] exfat: Deprecated parameter 'namecase' [ 755.581088][T18978] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 755.601538][T18961] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 755.695370][T18961] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.6254: Failed to acquire dquot type 1 [ 755.893179][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 756.154020][T19000] netlink: 'syz.1.6270': attribute type 74 has an invalid length. [ 756.328737][T19008] overlayfs: missing 'lowerdir' [ 756.718430][T19027] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 757.146933][T19009] loop3: detected capacity change from 0 to 32768 [ 757.350498][T19009] XFS (loop3): Mounting V5 Filesystem [ 757.358776][T19053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 757.475830][T19009] XFS (loop3): Ending clean mount [ 757.689635][ T4273] XFS (loop3): Unmounting Filesystem [ 758.191161][T19081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6308'. [ 758.529193][T19064] loop4: detected capacity change from 0 to 32768 [ 758.558404][T19064] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 758.594468][T19064] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 758.639204][T19064] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 758.802485][T19064] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 758.978758][T19099] loop2: detected capacity change from 0 to 4096 [ 759.061344][T19099] ntfs: volume version 3.1. [ 759.141169][T19099] __ntfs_error: 6 callbacks suppressed [ 759.141193][T19099] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 759.185704][T19071] loop1: detected capacity change from 0 to 65536 [ 759.274378][T19099] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 759.297922][ T4930] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 759.322147][T19071] XFS (loop1): Mounting V5 Filesystem [ 759.356593][T19071] XFS (loop1): Ending clean mount [ 759.374723][T19099] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 759.398973][T19099] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 759.449328][T19099] ntfs: (device loop2): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 759.512347][ T4930] usb 4-1: Using ep0 maxpacket: 8 [ 759.520430][ T4930] usb 4-1: config 0 has an invalid interface number: 193 but max is 1 [ 759.535254][ T4271] XFS (loop1): Unmounting Filesystem [ 759.562943][ T4930] usb 4-1: config 0 has an invalid interface number: 4 but max is 1 [ 759.584786][ T4930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.623178][ T4930] usb 4-1: config 0 has no interface number 0 [ 759.629322][ T4930] usb 4-1: config 0 has no interface number 1 [ 759.674751][ T4930] usb 4-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.707305][ T4930] usb 4-1: config 0 interface 4 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 759.750612][ T4930] usb 4-1: config 0 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 759.762551][T19125] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 759.783460][ T4930] usb 4-1: config 0 interface 193 has no altsetting 0 [ 759.790305][ T4930] usb 4-1: config 0 interface 4 has no altsetting 0 [ 759.831248][ T4930] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 759.858960][ T4930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.874382][ T4267] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 759.886414][ T4930] usb 4-1: Product: syz [ 759.897901][ T4930] usb 4-1: Manufacturer: syz [ 759.914616][ T4930] usb 4-1: SerialNumber: syz [ 759.955600][ T4930] usb 4-1: config 0 descriptor?? [ 760.043033][T19130] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.6328'. [ 760.253545][ T4930] usb 4-1: unknown interface protocol 0x4f, assuming v1 [ 760.281719][ T4930] usb 4-1: 193:2 : does not exist [ 760.289182][ T4930] usb 4-1: unknown interface protocol 0x5, assuming v1 [ 760.317615][T19140] Illegal XDP return value 8 on prog (id 407) dev N/A, expect packet loss! [ 760.338433][ T4930] usb 4-1: 4:2 : does not exist [ 760.393151][ T4930] usb 4-1: USB disconnect, device number 48 [ 760.419890][T19142] netlink: 'syz.2.6333': attribute type 1 has an invalid length. [ 760.646279][T19150] loop4: detected capacity change from 0 to 1024 [ 760.746419][T19152] Cannot find add_set index 0 as target [ 760.843902][T19154] netlink: 'syz.2.6338': attribute type 1 has an invalid length. [ 760.975557][T19154] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.6338'. [ 761.142072][T19157] Process accounting resumed [ 761.755020][T19185] loop4: detected capacity change from 0 to 4096 [ 761.803184][T19193] netlink: 'syz.3.6357': attribute type 1 has an invalid length. [ 761.826028][T19185] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 761.858991][T19193] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.6357'. [ 762.110596][T19203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6362'. [ 762.179052][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6362'. [ 762.228978][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6362'. [ 762.858933][T19196] loop2: detected capacity change from 0 to 32768 [ 762.885218][T19196] [ 762.885218][T19196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.885218][T19196] [ 762.924871][T19196] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 762.924871][T19196] [ 762.964163][T19196] ERROR: (device loop2): jfs_unlink: [ 762.964163][T19196] [ 763.078486][ T6617] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 763.115341][ T4267] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 763.115341][ T4267] [ 763.144689][ T75] ERROR: (device loop2): diWrite: ixpxd invalid [ 763.144689][ T75] [ 763.179316][ T75] ERROR: (device loop2): txCommit: [ 763.179316][ T75] [ 763.209881][ T75] jfs_write_inode: jfs_commit_inode failed! [ 763.235511][ T4267] [ 763.235511][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 763.235511][ T4267] [ 763.257674][ T4267] [ 763.257674][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 763.257674][ T4267] [ 763.297243][ T6617] usb 5-1: Using ep0 maxpacket: 8 [ 763.304753][ T6617] usb 5-1: unable to get BOS descriptor or descriptor too short [ 763.330302][ T6617] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 763.344480][T19245] 8021q: VLANs not supported on hsr0 [ 763.350077][T19241] loop1: detected capacity change from 0 to 4096 [ 763.355230][ T6617] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 763.400181][ T6617] usb 5-1: config 4 has no interface number 0 [ 763.408456][T19241] ntfs: volume version 3.1. [ 763.426988][ T6617] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 763.461785][ T6617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.485494][T19241] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 763.490327][ T6617] usb 5-1: Product: syz [ 763.566805][T19249] netlink: 'syz.0.6385': attribute type 2 has an invalid length. [ 763.578763][ T6617] usb 5-1: Manufacturer: syz [ 763.595540][ T6617] usb 5-1: SerialNumber: syz [ 763.596567][T19241] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 763.738077][T19241] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to map page. [ 763.784620][T19241] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 763.863069][ T6617] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 763.888351][ T6617] usb 5-1: No valid video chain found. [ 763.914283][ T6617] usb 5-1: USB disconnect, device number 50 [ 763.957761][T19255] loop0: detected capacity change from 0 to 4096 [ 764.044013][T19255] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 764.816884][T19285] block device autoloading is deprecated and will be removed. [ 764.835538][T19284] loop0: detected capacity change from 0 to 4096 [ 764.915055][T19284] ntfs: volume version 3.1. [ 764.958971][T19284] __ntfs_error: 6 callbacks suppressed [ 764.958989][T19284] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 764.959053][T19284] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 764.959087][T19284] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to map page. [ 764.959102][T19284] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 764.959119][T19284] ntfs: (device loop0): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 764.997254][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.098141][ T4272] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 765.103550][T19297] loop4: detected capacity change from 0 to 16 [ 765.105310][T19297] erofs: (device loop4): mounted with root inode @ nid 36. [ 765.111207][T19297] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 765.111591][T19297] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -57 in[61, 4035] out[1851] [ 765.111645][T19297] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 765.312113][T19269] loop1: detected capacity change from 0 to 32768 [ 765.366187][T19303] loop3: detected capacity change from 0 to 256 [ 765.372742][T19269] ERROR: (device loop1): diNewExt: no free extents [ 765.372742][T19269] [ 765.385536][T19269] ERROR: (device loop1): remounting filesystem as read-only [ 765.394044][T19269] ialloc: diAlloc returned -5! [ 765.657997][T19309] loop4: detected capacity change from 0 to 8 [ 765.725124][T19311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6415'. [ 765.742801][T19307] loop0: detected capacity change from 0 to 4096 [ 765.768707][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6415'. [ 765.786722][T19307] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 765.811493][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6415'. [ 766.315428][T19327] xt_connbytes: Forcing CT accounting to be enabled [ 766.851053][T19351] loop2: detected capacity change from 0 to 512 [ 766.888567][T19351] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 766.916763][T19353] No source specified [ 766.994297][T19351] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 767.130662][ T5120] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 767.337961][ T5120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 767.372418][ T5120] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 767.401574][ T5120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.431628][ T5120] usb 5-1: Product: syz [ 767.447010][ T5120] usb 5-1: Manufacturer: syz [ 767.451709][ T5120] usb 5-1: SerialNumber: syz [ 767.483798][ T5120] usb 5-1: config 0 descriptor?? [ 767.499755][ T5120] hub 5-1:0.0: bad descriptor, ignoring hub [ 767.519971][ T5120] hub: probe of 5-1:0.0 failed with error -5 [ 767.544281][ T5120] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input56 [ 767.578204][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6449'. [ 767.864267][T19387] loop3: detected capacity change from 0 to 1024 [ 767.963178][T19387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 768.105356][T19387] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.6453: Attempting to read directory block (623) that is past i_size (638464) [ 768.273363][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 768.398845][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6463'. [ 768.465167][T19413] Process accounting resumed [ 768.786894][ T27] audit: type=1326 audit(45365417.043:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.1.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 768.891007][ T27] audit: type=1326 audit(45365417.043:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.1.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 768.913870][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 768.948115][ T27] audit: type=1326 audit(45365417.043:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.1.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 769.129031][ T26] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 769.141246][ T26] usb 1-1: config 0 has no interface number 0 [ 769.167802][ T26] usb 1-1: config 0 interface 255 has no altsetting 0 [ 769.200858][ T26] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 769.241960][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.276636][ T26] usb 1-1: config 0 descriptor?? [ 769.298597][ T26] cp210x 1-1:0.255: cp210x converter detected [ 769.732465][ T26] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 769.754179][ T26] usb 1-1: cp210x converter now attached to ttyUSB0 [ 769.784960][ T26] usb 1-1: USB disconnect, device number 10 [ 769.812804][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 769.858307][ T26] cp210x 1-1:0.255: device disconnected [ 770.170226][T19488] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6496'. [ 770.431602][T19494] loop4: detected capacity change from 0 to 4096 [ 770.486825][T19494] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker. [ 770.520590][T19504] loop3: detected capacity change from 0 to 512 [ 770.567711][T19504] EXT4-fs: Ignoring removed i_version option [ 770.573795][T19504] EXT4-fs: Ignoring removed bh option [ 770.599422][T19494] ntfs: volume version 3.1. [ 770.674204][T19504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 770.793897][T19515] loop2: detected capacity change from 0 to 64 [ 770.949117][T19517] netlink: 'syz.4.6509': attribute type 10 has an invalid length. [ 770.962707][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 770.976714][T19517] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6509'. [ 771.015732][T19517] netlink: 'syz.4.6509': attribute type 10 has an invalid length. [ 771.074578][T19517] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6509'. [ 771.392818][T19533] kernel read not supported for file / Iq"IvQh3JyxvL=QW-. GaǹW (pid: 19533 comm: syz.2.6517) [ 771.459267][T19538] cgroup: No subsys list or none specified [ 771.524137][ T27] audit: type=1800 audit(45365419.581:61): pid=19533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6517" name=BD16204971EE22FB4976C3015168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D5118FF572D05992E1A09476115C7B9949DF357A3 dev="mqueue" ino=74744 res=0 errno=0 [ 771.896669][T19554] loop1: detected capacity change from 0 to 256 [ 772.036785][T19554] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 772.063227][T19529] loop4: detected capacity change from 0 to 32768 [ 772.088699][T19529] (syz.4.6515,19529,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 772.143688][T19529] (syz.4.6515,19529,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 772.232850][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6532'. [ 772.287689][T19529] JBD2: Ignoring recovery information on journal [ 772.536060][T17903] usb 5-1: USB disconnect, device number 51 [ 772.575645][T19529] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 772.971544][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 772.997030][ T5129] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 773.195869][T19598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6549'. [ 773.212427][ T5129] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 773.232008][T19598] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6549'. [ 773.250356][ T5129] usb 2-1: config 160 has no interface number 0 [ 773.261111][ T5129] usb 2-1: config 160 interface 200 has no altsetting 0 [ 773.298195][ T5129] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 773.329080][ T5129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.353403][ T5129] usb 2-1: Product: syz [ 773.357925][ T5129] usb 2-1: Manufacturer: syz [ 773.383620][ T5129] usb 2-1: SerialNumber: syz [ 773.394519][T19604] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6546'. [ 773.444822][T19608] loop2: detected capacity change from 0 to 64 [ 773.518508][T19608] Bad inode number on dev loop2: 6 is out of range [ 773.677383][ T5129] usb 2-1: MIDIStreaming interface descriptor not found [ 773.728386][ T5129] usb 2-1: USB disconnect, device number 28 [ 773.793600][T19610] loop3: detected capacity change from 0 to 8192 [ 773.868116][T19610] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 773.907749][T19610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 773.962716][T19610] FAT-fs (loop3): Filesystem has been set read-only [ 774.200448][T19607] loop0: detected capacity change from 0 to 32768 [ 774.263397][T19607] (syz.0.6552,19607,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 774.319641][T19607] (syz.0.6552,19607,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 774.414218][T19607] JBD2: Ignoring recovery information on journal [ 774.586926][T19607] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 774.640783][T19637] loop3: detected capacity change from 0 to 8 [ 774.798153][T19637] SQUASHFS error: Failed to read block 0x2d7: -5 [ 774.813956][T19637] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 774.882203][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 774.948652][T19619] loop2: detected capacity change from 0 to 32768 [ 774.999372][T19619] (syz.2.6557,19619,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 775.055532][T19619] (syz.2.6557,19619,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 775.116475][T19619] JBD2: Ignoring recovery information on journal [ 775.332426][T19619] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 775.545010][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 775.576974][T17903] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 775.780007][T17903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 775.805797][T17903] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 775.837546][T17903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.868219][T17903] usb 1-1: Product: syz [ 775.872454][T17903] usb 1-1: Manufacturer: syz [ 775.893788][T17903] usb 1-1: SerialNumber: syz [ 775.930993][T17903] usb 1-1: config 0 descriptor?? [ 775.950629][T17903] hub 1-1:0.0: bad descriptor, ignoring hub [ 775.966769][T17903] hub: probe of 1-1:0.0 failed with error -5 [ 776.002025][T17903] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input58 [ 776.067529][T19667] set_capacity_and_notify: 1 callbacks suppressed [ 776.067546][T19667] loop2: detected capacity change from 0 to 4096 [ 776.170849][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 776.177270][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.483178][ T26] usb 1-1: USB disconnect, device number 11 [ 776.595061][T19683] loop4: detected capacity change from 0 to 8192 [ 776.638713][T19683] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 776.684183][T19683] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 776.695570][T19683] REISERFS (device loop4): using ordered data mode [ 776.709821][T19683] reiserfs: using flush barriers [ 776.716508][T19683] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 776.768410][T17903] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 776.801859][T19683] REISERFS (device loop4): checking transaction log (loop4) [ 776.805686][T19698] loop3: detected capacity change from 0 to 4096 [ 776.833580][T19683] REISERFS (device loop4): Using r5 hash to sort names [ 776.920425][T19698] ntfs3: Cannot use different iocharset when remounting! [ 776.978023][T17903] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 777.002737][T17903] usb 3-1: config 0 has no interface number 1 [ 777.031074][T17903] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 777.062757][T17903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.094485][T17903] usb 3-1: config 0 descriptor?? [ 777.143875][T19704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6598'. [ 777.175570][T19702] loop1: detected capacity change from 0 to 4096 [ 777.229288][T19702] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 777.244366][T19708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.333664][T17903] qcserial 3-1:0.2: Qualcomm USB modem converter detected [ 777.387310][T19702] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 777.447661][T19702] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 777.596525][ T4930] usb 3-1: USB disconnect, device number 52 [ 777.606642][ T4930] qcserial 3-1:0.2: device disconnected [ 777.626527][ T4271] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 777.647695][ T4271] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 777.734475][T19717] xt_CT: No such helper "syz0" [ 777.914383][T19724] loop4: detected capacity change from 0 to 4096 [ 777.928114][T19725] loop1: detected capacity change from 0 to 4096 [ 778.014695][T19724] ntfs: volume version 3.1. [ 778.103074][T19724] ntfs: (device loop4): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 778.110114][T19725] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 778.137709][T19725] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 778.488672][T19721] loop3: detected capacity change from 0 to 32768 [ 778.561537][T19721] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6607 (19721) [ 778.651198][T19721] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 778.717670][T19721] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 778.747288][T19721] BTRFS info (device loop3): using free space tree [ 778.974228][T19721] BTRFS info (device loop3): enabling ssd optimizations [ 779.186702][ T4273] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 779.511123][T19788] netlink: 'syz.0.6631': attribute type 1 has an invalid length. [ 779.830308][T19795] loop1: detected capacity change from 0 to 4096 [ 780.017128][T19795] ntfs3: Cannot use different iocharset when remounting! [ 780.075260][T19781] loop2: detected capacity change from 0 to 32768 [ 780.151332][T19781] JBD2: Ignoring recovery information on journal [ 780.179312][T19809] loop4: detected capacity change from 0 to 512 [ 780.272088][T19781] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 780.299349][T19814] syz.0.6642: attempt to access beyond end of device [ 780.299349][T19814] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 780.301892][T19809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 780.400874][T19814] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 780.458797][T19781] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 780.458920][T19781] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 780.491202][T19804] xt_CT: No such helper "syz0" [ 780.606051][T19781] OCFS2: Returning error to the calling process. [ 780.650804][T19781] (syz.2.6627,19781,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 780.670851][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 780.719729][T19781] (syz.2.6627,19781,1):ocfs2_mknod:334 ERROR: status = -117 [ 780.745093][T19821] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 780.753655][ T27] audit: type=1326 audit(45365428.098:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19818 comm="syz.3.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 780.793119][T19781] (syz.2.6627,19781,1):ocfs2_mknod:502 ERROR: status = -117 [ 780.838637][ T5102] udevd[5102]: incorrect cramfs checksum on /dev/loop1 [ 780.868161][T19781] (syz.2.6627,19781,1):ocfs2_mkdir:659 ERROR: status = -117 [ 780.871726][ T27] audit: type=1326 audit(45365428.117:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19818 comm="syz.3.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 780.980002][ T27] audit: type=1326 audit(45365428.117:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19818 comm="syz.3.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 780.984593][ T5102] udevd[5102]: incorrect cramfs checksum on /dev/loop1 [ 781.116168][ T27] audit: type=1326 audit(45365428.117:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19818 comm="syz.3.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 781.159191][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 781.492690][T19839] Alternate GPT is invalid, using primary GPT. [ 781.499075][T19839] loop3: p2 p3 p7 [ 781.511037][T14122] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 781.727979][ T4294] hfsplus: b-tree write err: -5, ino 4 [ 781.738120][T14122] usb 2-1: unable to get BOS descriptor or descriptor too short [ 781.761490][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 781.761955][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 781.788453][T14122] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 781.801274][ T5102] udevd[5102]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 781.820910][T14122] usb 2-1: config 6 has no interface number 0 [ 781.852310][T14122] usb 2-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 781.902003][T14122] usb 2-1: config 6 interface 200 has no altsetting 0 [ 781.946255][T14122] usb 2-1: string descriptor 0 read error: -22 [ 781.952764][T14122] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 781.998869][T14122] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 782.060533][T14122] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 782.275589][T14122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 782.314762][T14122] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 782.355702][T14122] usb 2-1: media controller created [ 782.426377][T14122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 782.512361][T14122] dvb-usb: bulk message failed: -71 (6/0) [ 782.524038][T19875] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.527911][T14122] dvb-usb: bulk message failed: -71 (6/0) [ 782.544422][T14122] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 782.567508][T14122] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 782.582971][T14122] dvb-usb: schedule remote query interval to 150 msecs. [ 782.606444][T14122] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 782.655857][T14122] usb 2-1: USB disconnect, device number 29 [ 782.738353][T14122] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 782.869538][T19886] set_capacity_and_notify: 4 callbacks suppressed [ 782.869556][T19886] loop3: detected capacity change from 0 to 1764 [ 783.301150][T19894] loop0: detected capacity change from 0 to 4096 [ 783.331917][T19894] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 783.433530][T19894] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 783.457076][T19894] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 783.485029][T19907] xt_l2tp: missing protocol rule (udp|l2tpip) [ 783.590941][ T4272] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 783.623144][ T4272] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 783.727269][T19915] netlink: 'syz.4.6687': attribute type 10 has an invalid length. [ 783.856507][T19915] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 784.023251][T19928] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 784.033423][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6694'. [ 784.090691][T19926] loop3: detected capacity change from 0 to 4096 [ 784.183154][T19926] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 784.198364][T19926] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 784.263641][ T4312] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 784.360188][T19935] loop1: detected capacity change from 0 to 764 [ 784.406451][T19935] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 784.440765][T19935] Symlink component flag not implemented [ 784.458508][T19935] Symlink component flag not implemented (7) [ 784.479060][T19939] loop4: detected capacity change from 0 to 4096 [ 784.487328][ T4312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 784.501743][ T4312] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 784.545089][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.556211][T19939] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 784.589116][ T4312] usb 3-1: config 0 descriptor?? [ 784.614699][ T4312] usb 3-1: selecting invalid altsetting 0 [ 784.633377][ T4312] usb 3-1: can't set first interface for hiFace device. [ 784.674016][ T4312] snd-usb-hiface: probe of 3-1:0.0 failed with error -5 [ 784.691838][T19939] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 784.714071][ T27] audit: type=1326 audit(45365431.743:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 784.765131][T19939] ntfs3: loop4: ino=1b, "file0" attr_set_size [ 784.823795][ T4312] usb 3-1: USB disconnect, device number 53 [ 784.823931][ T27] audit: type=1326 audit(45365431.798:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 784.852243][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.919562][ T4278] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 784.934619][ T27] audit: type=1326 audit(45365431.798:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 784.948858][ T4278] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 784.977857][T19951] netlink: 'syz.3.6705': attribute type 1 has an invalid length. [ 784.989566][ T27] audit: type=1326 audit(45365431.808:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 785.011753][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.065208][ T27] audit: type=1326 audit(45365431.808:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 785.087510][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.130112][ T27] audit: type=1326 audit(45365431.808:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 785.163614][ T27] audit: type=1326 audit(45365431.808:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 785.202813][ T27] audit: type=1326 audit(45365431.808:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 785.225696][ T27] audit: type=1326 audit(45365431.808:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.1.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 785.247805][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.387760][T19965] loop0: detected capacity change from 0 to 2048 [ 785.528135][T19965] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 785.637031][T19978] loop2: detected capacity change from 0 to 4096 [ 785.645178][T19978] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 785.691277][T19980] netlink: 'syz.3.6717': attribute type 5 has an invalid length. [ 785.745304][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 785.758067][T19978] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 785.785534][T19978] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 785.854832][ T27] audit: type=1326 audit(45365432.795:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19981 comm="syz.4.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e699aeb9 code=0x7ffc0000 [ 785.958385][ T4267] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 785.992172][ T4267] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 786.144916][T19991] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 786.345647][T19998] netlink: 'syz.3.6727': attribute type 11 has an invalid length. [ 786.403633][T19998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6727'. [ 786.531405][T19971] loop1: detected capacity change from 0 to 32768 [ 786.549435][T19971] (syz.1.6715,19971,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 786.610482][T19971] (syz.1.6715,19971,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 786.709123][T19971] (syz.1.6715,19971,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 786.775176][T19971] JBD2: Ignoring recovery information on journal [ 786.904236][T19971] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 786.974446][T19990] loop4: detected capacity change from 0 to 32768 [ 787.057439][T19990] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 787.111041][T19990] (syz.4.6724,19990,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 787.163131][T19990] (syz.4.6724,19990,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 787.191572][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 787.249579][T19990] (syz.4.6724,19990,1):ocfs2_mknod:298 ERROR: status = -2 [ 787.286978][T19990] (syz.4.6724,19990,1):ocfs2_mknod:502 ERROR: status = -2 [ 787.294166][T19990] (syz.4.6724,19990,1):ocfs2_mkdir:659 ERROR: status = -2 [ 787.392889][T20031] device veth1_to_bond entered promiscuous mode [ 787.452209][T20031] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 787.544154][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 787.636680][T20035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6742'. [ 787.669229][T20035] netlink: 'syz.2.6742': attribute type 3 has an invalid length. [ 787.683940][ T5123] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 787.731315][T20035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6742'. [ 787.775650][T20035] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6742'. [ 787.786319][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 787.802152][T20041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.008714][T20048] loop3: detected capacity change from 0 to 16 [ 788.017353][ T5123] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 788.044546][T20051] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6751'. [ 788.063421][T20048] erofs: (device loop3): mounted with root inode @ nid 36. [ 788.104471][T20048] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 788.262484][T20049] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 788.566314][ T125] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 788.628480][T20070] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 788.675479][T20070] (unnamed net_device) (uninitialized): peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 788.717431][ T5123] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 788.784734][T20070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.858352][T20078] Unsupported ieee802154 address type: 0 [ 788.927003][ T5123] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 788.955878][ T5123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.975303][ T5123] usb 1-1: Product: syz [ 788.986285][ T5123] usb 1-1: Manufacturer: syz [ 788.991407][ T5123] usb 1-1: SerialNumber: syz [ 789.036855][ T5123] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 789.135136][T20090] set_capacity_and_notify: 1 callbacks suppressed [ 789.135153][T20090] loop1: detected capacity change from 0 to 1024 [ 789.153531][ T5123] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 789.181315][ T125] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 789.218403][ T125] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 789.269433][T20090] hfsplus: keylen 65060 too large [ 789.381960][ C1] usb 1-1: ath9k_htc: invalid pkt_len (fd10) [ 789.600466][T14122] usb 1-1: USB disconnect, device number 12 [ 789.627762][ T125] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 789.677351][T20106] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 789.690350][T20106] (unnamed net_device) (uninitialized): peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 789.724845][T20106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 789.855138][ T128] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 790.066535][ T128] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 790.086641][ T128] usb 2-1: config 0 has no interface number 0 [ 790.092843][ T128] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 790.137599][ T128] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 790.175225][ T128] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 790.223386][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.247748][ T128] usb 2-1: config 0 descriptor?? [ 790.274164][ T128] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input60 [ 790.299760][ T5123] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 790.307865][ T5123] ath9k_htc: Failed to initialize the device [ 790.319062][T20131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 790.348749][T20131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 790.373560][T14122] usb 1-1: ath9k_htc: USB layer deinitialized [ 790.397302][T20131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 790.437686][T20131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 790.460227][T20131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 790.469046][T20137] loop3: detected capacity change from 0 to 256 [ 790.494761][ T128] usb 2-1: USB disconnect, device number 30 [ 790.549781][T20137] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 790.670667][T20141] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 790.688366][T20141] (unnamed net_device) (uninitialized): peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 790.732543][T20141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 790.928150][T14122] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 791.065744][T20152] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 791.137124][T14122] usb 3-1: Using ep0 maxpacket: 32 [ 791.147650][T14122] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 791.190766][T14122] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 791.209750][T14122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.229180][T14122] usb 3-1: Product: syz [ 791.234224][T14122] usb 3-1: Manufacturer: syz [ 791.238862][T14122] usb 3-1: SerialNumber: syz [ 791.276424][T14122] usb 3-1: config 0 descriptor?? [ 791.284285][T20133] loop4: detected capacity change from 0 to 32768 [ 791.292426][T20139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 791.377744][T20133] XFS (loop4): Mounting V5 Filesystem [ 791.541884][T20139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 791.563694][T20133] XFS (loop4): Ending clean mount [ 791.582815][T14122] net1080 3-1:0.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, de:6d:a9:f6:68:75 [ 791.753929][ T4278] XFS (loop4): Unmounting Filesystem [ 791.813524][T14122] usb 3-1: USB disconnect, device number 54 [ 791.828045][T14122] net1080 3-1:0.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 792.055054][T20193] netlink: 'syz.3.6817': attribute type 21 has an invalid length. [ 792.678839][T20217] loop0: detected capacity change from 0 to 256 [ 792.750218][T20223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6827'. [ 792.806818][T20217] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 793.243744][T20241] loop2: detected capacity change from 0 to 2048 [ 793.318578][T20241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 793.593837][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 793.700233][T20260] netlink: 'syz.4.6844': attribute type 11 has an invalid length. [ 793.754411][T20260] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6844'. [ 793.940077][T20267] Process accounting paused [ 794.640411][T20300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6860'. [ 795.214194][T20319] netlink: 'syz.2.6867': attribute type 8 has an invalid length. [ 795.345776][T20326] loop0: detected capacity change from 0 to 2048 [ 795.408301][T20323] device geneve1 entered promiscuous mode [ 795.429383][ T5102] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 795.461487][T20326] Invalid option length (0) for dns_resolver key [ 795.739431][T20339] dlm: non-version read from control device 0 [ 796.139565][T20357] netlink: 'syz.0.6885': attribute type 21 has an invalid length. [ 796.173123][T20357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6885'. [ 796.182248][T20357] netlink: 'syz.0.6885': attribute type 1 has an invalid length. [ 796.338955][T20363] netlink: 'syz.0.6888': attribute type 3 has an invalid length. [ 796.540124][T20366] loop1: detected capacity change from 0 to 2048 [ 796.614208][T20366] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 796.738799][T20351] loop4: detected capacity change from 0 to 32768 [ 796.761826][T20371] device wlan0 entered promiscuous mode [ 796.813548][T20351] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 796.892375][T20351] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 796.913778][T20379] netlink: 'syz.1.6895': attribute type 4 has an invalid length. [ 796.966111][ T4357] (kworker/u4:6,4357,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 797.002438][T20379] netlink: 'syz.1.6895': attribute type 10 has an invalid length. [ 797.032766][T20379] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6895'. [ 797.138328][T20379] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 797.266376][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 797.449824][T20398] loop3: detected capacity change from 0 to 1024 [ 797.463791][T20398] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 797.679712][T20406] usb usb1: usbfs: process 20406 (syz.1.6908) did not claim interface 0 before use [ 797.779283][T20410] device bridge2 entered promiscuous mode [ 798.111885][T20424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6917'. [ 798.119371][T20427] loop3: detected capacity change from 0 to 512 [ 798.254210][T20427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 798.399807][T20427] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.6918: corrupted xattr block 33 [ 798.457910][T20427] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 798.555162][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 798.560788][T14122] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 798.784585][T14122] usb 3-1: Using ep0 maxpacket: 32 [ 798.791892][T14122] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 798.800764][T20457] No such timeout policy "syz0" [ 798.832940][T14122] usb 3-1: config 0 has no interface number 0 [ 798.854833][T14122] usb 3-1: config 0 interface 6 has no altsetting 0 [ 798.878618][T14122] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=ab.5a [ 798.926016][T14122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.944547][T14122] usb 3-1: Product: syz [ 798.949759][T14122] usb 3-1: Manufacturer: syz [ 798.954395][T14122] usb 3-1: SerialNumber: syz [ 798.976115][T14122] usb 3-1: config 0 descriptor?? [ 799.160144][T20471] loop0: detected capacity change from 0 to 764 [ 799.202959][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6939'. [ 799.217420][T20471] rock: directory entry would overflow storage [ 799.218182][T14122] cdc_subset: probe of 3-1:0.6 failed with error -22 [ 799.270752][T20471] rock: sig=0x4654, size=5, remaining=4 [ 799.397328][T20480] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 799.503598][T14122] usb 3-1: USB disconnect, device number 55 [ 799.989218][T20481] loop3: detected capacity change from 0 to 32768 [ 800.072361][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 800.072376][ T27] audit: type=1800 audit(45365445.917:80): pid=20481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6944" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 800.253954][T20503] loop1: detected capacity change from 0 to 65 [ 800.305317][T20503] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 801.011627][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6968'. [ 801.031230][T20535] loop2: detected capacity change from 0 to 256 [ 801.046374][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6968'. [ 801.128359][T20535] FAT-fs (loop2): Directory bread(block 64) failed [ 801.155914][T20533] Process accounting paused [ 801.167961][T20535] FAT-fs (loop2): Directory bread(block 65) failed [ 801.216770][T20535] FAT-fs (loop2): Directory bread(block 66) failed [ 801.234832][T20535] FAT-fs (loop2): Directory bread(block 67) failed [ 801.241519][T20535] FAT-fs (loop2): Directory bread(block 68) failed [ 801.285191][T20539] loop3: detected capacity change from 0 to 64 [ 801.302390][T20535] FAT-fs (loop2): Directory bread(block 69) failed [ 801.309066][T20535] FAT-fs (loop2): Directory bread(block 70) failed [ 801.342273][T20535] FAT-fs (loop2): Directory bread(block 71) failed [ 801.360424][T20539] syz.3.6971: attempt to access beyond end of device [ 801.360424][T20539] loop3: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 801.371275][T20535] FAT-fs (loop2): Directory bread(block 72) failed [ 801.406307][T20539] Buffer I/O error on dev loop3, logical block 32767, async page read [ 801.407077][T20535] FAT-fs (loop2): Directory bread(block 73) failed [ 801.427468][T20539] syz.3.6971: attempt to access beyond end of device [ 801.427468][T20539] loop3: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 801.483944][T20539] Buffer I/O error on dev loop3, logical block 32767, async page read [ 801.856639][T20549] loop3: detected capacity change from 0 to 4096 [ 801.879211][T20549] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 802.000139][T20549] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 802.031635][T20549] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 802.042063][T20558] afs: Unknown parameter 'dont_hash' [ 802.061486][T20549] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 802.129996][T20549] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 802.205898][T20549] ntfs: volume version 3.1. [ 802.226778][T20549] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota. [ 802.263387][T20549] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 802.308589][T20523] loop4: detected capacity change from 0 to 65536 [ 802.518497][T20523] XFS (loop4): Mounting V5 Filesystem [ 802.534193][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 802.625607][T20578] loop1: detected capacity change from 0 to 764 [ 802.643419][T20523] XFS (loop4): Ending clean mount [ 802.660776][T20523] XFS (loop4): Quotacheck needed: Please wait. [ 802.737382][T20523] XFS (loop4): Quotacheck: Done. [ 802.986232][ T4278] XFS (loop4): Unmounting Filesystem [ 803.196884][T20598] loop2: detected capacity change from 0 to 64 [ 803.216322][T20598] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 803.293937][T20598] minix_free_inode: bit 3 already cleared [ 803.414153][T20603] futex_wake_op: syz.0.7002 tries to shift op by 32; fix this program [ 803.761112][T20614] loop2: detected capacity change from 0 to 64 [ 803.962516][T20619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7010'. [ 803.989881][T20621] loop0: detected capacity change from 0 to 128 [ 804.090434][T20621] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 804.155430][T20621] FAT-fs (loop0): Filesystem has been set read-only [ 804.164191][T20595] loop3: detected capacity change from 0 to 32768 [ 804.282402][T20595] XFS (loop3): Mounting V5 Filesystem [ 804.557815][T20595] XFS (loop3): Ending clean mount [ 804.593170][ T128] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 804.739669][ T4273] XFS (loop3): Unmounting Filesystem [ 804.813285][ T128] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 804.829253][ T128] usb 5-1: config 0 has no interface number 0 [ 804.835891][ T128] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 804.853328][ T5123] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 804.866207][ T128] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 804.880699][ T128] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 804.892821][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.932005][ T128] usb 5-1: config 0 descriptor?? [ 804.947042][ T128] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input61 [ 805.070073][ T5123] usb 1-1: Using ep0 maxpacket: 8 [ 805.082808][ T5123] usb 1-1: unable to get BOS descriptor or descriptor too short [ 805.125073][T20666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7029'. [ 805.125386][ T5123] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 805.186421][ T5123] usb 1-1: config 8 has no interface number 0 [ 805.197374][ T5123] usb 1-1: config 8 interface 255 has no altsetting 0 [ 805.215995][ T5123] usb 1-1: string descriptor 0 read error: -22 [ 805.243585][ T5123] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 805.263852][ T5123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.309808][ T26] usb 5-1: USB disconnect, device number 52 [ 805.491955][T20676] loop2: detected capacity change from 0 to 1024 [ 805.509167][T20676] EXT4-fs: Ignoring removed bh option [ 805.599110][T20678] syz.1.7034: attempt to access beyond end of device [ 805.599110][T20678] loop1: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 805.613619][T20676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 805.655282][T20678] Buffer I/O error on dev loop1, logical block 32767, async page read [ 805.665606][T20676] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #11: comm syz.2.7033: directory missing '.' [ 805.697230][T20678] syz.1.7034: attempt to access beyond end of device [ 805.697230][T20678] loop1: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 805.730450][T20678] Buffer I/O error on dev loop1, logical block 32767, async page read [ 805.760811][ T5123] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 805.809473][ T5123] usb 1-1: USB disconnect, device number 13 [ 805.819032][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 806.310106][T20685] XFS (loop3): Mounting V5 Filesystem [ 806.433392][T20685] XFS (loop3): Ending clean mount [ 806.462662][T20685] XFS (loop3): Quotacheck needed: Please wait. [ 806.579005][T20685] XFS (loop3): Quotacheck: Done. [ 806.698298][T20717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7048'. [ 806.774854][T20719] netlink: 'syz.1.7049': attribute type 17 has an invalid length. [ 806.807741][T20719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 806.856478][ T4273] XFS (loop3): Unmounting Filesystem [ 807.836439][T20753] set_capacity_and_notify: 3 callbacks suppressed [ 807.836456][T20753] loop1: detected capacity change from 0 to 4096 [ 807.865726][ T4312] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 808.062551][ T4312] usb 3-1: config index 0 descriptor too short (expected 897, got 27) [ 808.071329][ T4312] usb 3-1: config 2 has an invalid interface number: 1 but max is -1 [ 808.103595][ T4312] usb 3-1: config 2 has an invalid interface number: 1 but max is -1 [ 808.129082][ T4312] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 808.158330][ T4312] usb 3-1: config 2 has no interface number 0 [ 808.205023][ T4312] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 808.259178][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.274966][ T4312] usb 3-1: Product: syz [ 808.288366][ T4312] usb 3-1: Manufacturer: syz [ 808.293588][ T4312] usb 3-1: SerialNumber: syz [ 808.478073][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7076'. [ 808.533935][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7076'. [ 808.558816][ T4312] cdc_ncm 3-1:2.1: CDC Union missing and no IAD found [ 808.571729][ T4312] cdc_ncm 3-1:2.1: bind() failure [ 808.583141][T20779] loop1: detected capacity change from 0 to 1024 [ 808.590018][ T4312] usb 3-1: no audio or video endpoints found [ 808.617612][ T4312] usb 3-1: USB disconnect, device number 56 [ 808.774907][ T46] hfsplus: b-tree write err: -5, ino 4 [ 808.871200][T20766] loop0: detected capacity change from 0 to 32768 [ 808.944031][T20766] loop0: p1 p2 p3 < p5 p6 > [ 808.949239][T20766] loop0: p1 size 242222080 extends beyond EOD, truncated [ 808.970868][T20766] loop0: p2 start 4294967295 is beyond EOD, truncated [ 809.250252][T20799] loop4: detected capacity change from 0 to 128 [ 809.297277][T20799] FAT-fs (loop4): Directory bread(block 414) failed [ 809.304086][T20799] FAT-fs (loop4): Directory bread(block 415) failed [ 809.332649][T20799] FAT-fs (loop4): Directory bread(block 416) failed [ 809.365263][T20799] FAT-fs (loop4): Directory bread(block 417) failed [ 809.383068][T20799] FAT-fs (loop4): Directory bread(block 418) failed [ 809.389755][T20799] FAT-fs (loop4): Directory bread(block 419) failed [ 809.417268][T20799] FAT-fs (loop4): Directory bread(block 420) failed [ 809.423943][T20799] FAT-fs (loop4): Directory bread(block 421) failed [ 809.476568][T20799] FAT-fs (loop4): Directory bread(block 414) failed [ 809.481609][T20805] loop2: detected capacity change from 0 to 2048 [ 809.495105][T20799] FAT-fs (loop4): Directory bread(block 415) failed [ 809.541077][T20805] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 810.371436][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 810.388785][ T5102] udevd[5102]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 810.389988][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 810.415820][ T6805] udevd[6805]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 810.462987][T20837] netlink: 'syz.4.7106': attribute type 2 has an invalid length. [ 810.506692][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 810.519457][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 810.533405][ T6805] udevd[6805]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 810.556246][ T5102] udevd[5102]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 810.757056][T20844] loop1: detected capacity change from 0 to 256 [ 810.779482][T20847] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7112'. [ 811.183876][T20831] loop2: detected capacity change from 0 to 32768 [ 811.234390][T20831] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 811.306076][T20831] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 811.362402][T20870] loop4: detected capacity change from 0 to 1024 [ 811.373120][ T4294] (kworker/u4:5,4294,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 811.412729][T20870] EXT4-fs: Ignoring removed bh option [ 811.485224][ T26] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 811.522075][T20870] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 811.536719][T20870] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz.4.7122: directory missing '.' [ 811.580241][T20874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7123'. [ 811.590913][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 811.603135][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 811.704400][ T26] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 811.733107][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.755176][ T26] usb 2-1: config 0 has no interface number 0 [ 811.794946][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 811.829877][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.860572][ T26] usb 2-1: Product: syz [ 811.876447][ T26] usb 2-1: Manufacturer: syz [ 811.881197][ T26] usb 2-1: SerialNumber: syz [ 811.901574][T20885] loop0: detected capacity change from 0 to 256 [ 811.909053][ T26] usb 2-1: config 0 descriptor?? [ 811.926603][ T26] hub 2-1:0.31: bad descriptor, ignoring hub [ 811.938753][T20887] loop2: detected capacity change from 0 to 64 [ 811.940423][ T26] hub: probe of 2-1:0.31 failed with error -5 [ 812.017032][ T26] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 812.037949][ T26] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 812.068006][ T26] usb 2-1: Failed to create links for entity 6 [ 812.087929][ T26] usb 2-1: Failed to register entities (-22). [ 812.204028][ T26] usb 2-1: USB disconnect, device number 31 [ 813.229626][T20903] loop3: p1 p2 p3 < p5 p6 > [ 813.251744][T20903] loop3: p1 size 242222080 extends beyond EOD, truncated [ 813.260704][T20903] loop3: p2 start 4294967295 is beyond EOD, truncated [ 813.334010][T20916] netlink: 'syz.1.7144': attribute type 1 has an invalid length. [ 813.372754][T20916] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7144'. [ 813.380548][T20919] set_capacity_and_notify: 2 callbacks suppressed [ 813.380565][T20919] loop2: detected capacity change from 0 to 128 [ 813.468756][T20919] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 813.512952][T20919] sysv_free_block: flc_count > flc_size [ 813.543192][T20919] sysv_free_block: flc_count > flc_size [ 813.582506][T20919] sysv_free_block: flc_count > flc_size [ 813.603086][T20919] sysv_free_block: flc_count > flc_size [ 813.629833][T20919] sysv_free_block: flc_count > flc_size [ 813.636173][T20919] sysv_free_block: flc_count > flc_size [ 813.649206][T20926] netlink: 'syz.4.7148': attribute type 17 has an invalid length. [ 813.651856][T20919] sysv_free_block: flc_count > flc_size [ 813.673846][T20919] sysv_free_block: flc_count > flc_size [ 813.681206][T20919] sysv_free_block: flc_count > flc_size [ 813.686784][T20926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.713147][T20919] sysv_free_block: flc_count > flc_size [ 813.728158][T20919] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 813.905060][ T128] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 813.927360][ T27] audit: type=1326 audit(782.070:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8f19aeb9 code=0x7ffc0000 [ 814.011397][ T27] audit: type=1326 audit(782.126:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f7d8f19aeb9 code=0x7ffc0000 [ 814.071258][T20934] loop4: detected capacity change from 0 to 256 [ 814.125579][ T27] audit: type=1326 audit(782.126:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8f19aeb9 code=0x7ffc0000 [ 814.153171][ T128] usb 2-1: unable to get BOS descriptor or descriptor too short [ 814.158560][T20938] Option ' ' to dns_resolver key: bad/missing value [ 814.172956][ T128] usb 2-1: not running at top speed; connect to a high speed hub [ 814.187175][T20934] FAT-fs (loop4): Directory bread(block 64) failed [ 814.200074][T20934] FAT-fs (loop4): Directory bread(block 65) failed [ 814.216696][ T128] usb 2-1: config 97 has an invalid interface number: 135 but max is 0 [ 814.237828][ T128] usb 2-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 814.254447][T20934] FAT-fs (loop4): Directory bread(block 66) failed [ 814.254816][T20940] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.7155'. [ 814.261232][ T128] usb 2-1: config 97 has no interface number 0 [ 814.281694][ T27] audit: type=1326 audit(782.126:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8f19aeb9 code=0x7ffc0000 [ 814.311166][T20934] FAT-fs (loop4): Directory bread(block 67) failed [ 814.333531][T20934] FAT-fs (loop4): Directory bread(block 68) failed [ 814.341168][ T128] usb 2-1: config 97 interface 135 has no altsetting 0 [ 814.356988][T20934] FAT-fs (loop4): Directory bread(block 69) failed [ 814.357062][T20940] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 814.366659][ T128] usb 2-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=8b.d4 [ 814.389637][T20934] FAT-fs (loop4): Directory bread(block 70) failed [ 814.411505][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.419753][T20934] FAT-fs (loop4): Directory bread(block 71) failed [ 814.447647][T20934] FAT-fs (loop4): Directory bread(block 72) failed [ 814.456493][ T128] usb 2-1: Product: syz [ 814.471745][ T128] usb 2-1: Manufacturer: syz [ 814.493656][T20934] FAT-fs (loop4): Directory bread(block 73) failed [ 814.501867][ T128] usb 2-1: SerialNumber: syz [ 814.623410][T20944] loop2: detected capacity change from 0 to 4096 [ 814.673914][ T7024] udevd[7024]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 814.675867][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 814.698361][T20944] ntfs3: loop2: ino=3, Correct links count -> 2. [ 814.771698][ T128] usb 2-1: USB disconnect, device number 32 [ 814.896577][T20950] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7160'. [ 815.111193][ T27] audit: type=1326 audit(783.159:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20954 comm="syz.2.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2b79aeb9 code=0x7ffc0000 [ 815.198487][ T27] audit: type=1326 audit(783.215:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20954 comm="syz.2.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6c2b79aeb9 code=0x7ffc0000 [ 815.237117][ T27] audit: type=1326 audit(783.215:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20954 comm="syz.2.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2b79aeb9 code=0x7ffc0000 [ 815.401913][T20964] loop4: detected capacity change from 0 to 512 [ 815.469859][T20964] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 815.478501][T20948] loop0: detected capacity change from 0 to 32768 [ 815.557993][T20948] XFS (loop0): Mounting V5 Filesystem [ 815.587514][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 815.637451][T20979] nfs: Deprecated parameter 'nointr' [ 815.723443][T20948] XFS (loop0): Ending clean mount [ 815.943054][ T4272] XFS (loop0): Unmounting Filesystem [ 816.332990][T21000] loop1: detected capacity change from 0 to 16 [ 816.343190][T21000] erofs: (device loop1): mounted with root inode @ nid 36. [ 816.388210][T21000] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 816.410300][T21000] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 816.456108][T21000] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 816.482771][T21000] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 816.523808][T21000] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 816.540204][T21000] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 816.589353][T21000] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 816.620961][T21000] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 816.653985][ T27] audit: type=1800 audit(784.580:88): pid=21000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7179" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 816.819111][T21016] loop2: detected capacity change from 0 to 64 [ 817.011977][ T125] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 817.043273][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7193'. [ 817.237221][T21036] loop2: detected capacity change from 0 to 64 [ 817.250711][ T125] usb 1-1: Using ep0 maxpacket: 8 [ 817.282930][ T125] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 817.327350][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.357747][ T125] usb 1-1: Product: syz [ 817.377108][ T125] usb 1-1: Manufacturer: syz [ 817.391512][ T125] usb 1-1: SerialNumber: syz [ 817.421568][ T125] usb 1-1: config 0 descriptor?? [ 817.441025][ T125] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 817.755412][T21044] loop2: detected capacity change from 0 to 4096 [ 817.779708][T21044] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 817.843404][T21044] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 817.869134][T21044] ntfs3: loop2: mft corrupted [ 817.876122][T21044] ntfs3: loop2: Failed to load $Extend. [ 817.884075][ T125] gspca_vc032x: reg_w err -71 [ 817.888853][ T125] vc032x: probe of 1-1:0.0 failed with error -71 [ 817.921048][ T125] usb 1-1: USB disconnect, device number 14 [ 817.935438][T21044] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 818.182368][T21068] loop1: detected capacity change from 0 to 64 [ 818.420867][ T128] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 818.608537][T21058] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 818.627909][ T128] usb 5-1: Using ep0 maxpacket: 32 [ 818.636251][ T128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.658530][ T128] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 818.681102][ T128] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 818.690209][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.691738][T21058] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 818.700346][ T128] usb 5-1: config 0 descriptor?? [ 818.733093][ T128] usb 5-1: bad CDC descriptors [ 818.759761][ T9] (kworker/u4:0,9,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 818.806953][ T128] usb 5-1: bad CDC descriptors [ 818.863874][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 818.900984][T21091] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7223'. [ 818.986601][ T128] usb 5-1: USB disconnect, device number 53 [ 819.103594][ T5123] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 819.135484][T21097] set_capacity_and_notify: 1 callbacks suppressed [ 819.135502][T21097] loop1: detected capacity change from 0 to 512 [ 819.234801][T21097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 819.321663][ T5123] usb 1-1: Using ep0 maxpacket: 8 [ 819.336431][ T5123] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 819.366292][T21097] Quota error (device loop1): write_blk: dquota write failed [ 819.376037][ T5123] usb 1-1: config 0 has no interface number 0 [ 819.382182][ T5123] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 819.402788][T21097] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 819.429558][T21097] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 819.440083][ T5123] usb 1-1: config 0 interface 96 has no altsetting 0 [ 819.454428][T21097] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.7226: Failed to acquire dquot type 1 [ 819.473635][ T5123] usb 1-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 819.504804][ T5123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.512854][ T5123] usb 1-1: Product: syz [ 819.536955][ T5123] usb 1-1: Manufacturer: syz [ 819.541713][ T5123] usb 1-1: SerialNumber: syz [ 819.552776][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 819.559632][ T5123] usb 1-1: config 0 descriptor?? [ 819.619154][T21095] loop2: detected capacity change from 0 to 32768 [ 819.700539][T21095] XFS (loop2): Mounting V5 Filesystem [ 819.809145][T21095] XFS (loop2): Ending clean mount [ 819.861908][T21095] XFS (loop2): Quotacheck needed: Please wait. [ 820.000688][T21095] XFS (loop2): Quotacheck: Done. [ 820.041036][ T5123] usb 1-1: USB disconnect, device number 15 [ 820.075082][T21127] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7235'. [ 820.122326][ T4267] XFS (loop2): Unmounting Filesystem [ 820.491102][T21137] loop1: detected capacity change from 0 to 256 [ 820.555715][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 820.570801][T21137] FAT-fs (loop1): Directory bread(block 64) failed [ 820.588325][T21137] FAT-fs (loop1): Directory bread(block 65) failed [ 820.606451][T21137] FAT-fs (loop1): Directory bread(block 66) failed [ 820.628288][T21137] FAT-fs (loop1): Directory bread(block 67) failed [ 820.647416][T21137] FAT-fs (loop1): Directory bread(block 68) failed [ 820.673423][T21137] FAT-fs (loop1): Directory bread(block 69) failed [ 820.685792][T21137] FAT-fs (loop1): Directory bread(block 70) failed [ 820.692370][T21137] FAT-fs (loop1): Directory bread(block 71) failed [ 820.729338][T21137] FAT-fs (loop1): Directory bread(block 72) failed [ 820.736373][T21137] FAT-fs (loop1): Directory bread(block 73) failed [ 821.226564][T21163] loop2: detected capacity change from 0 to 16 [ 821.252450][T21163] erofs: (device loop2): mounted with root inode @ nid 36. [ 821.312240][T21163] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 821.367711][T21163] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 821.411893][T21163] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 821.764788][ T27] audit: type=1326 audit(789.305:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.1.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 821.845157][ T27] audit: type=1326 audit(789.323:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.1.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 821.944934][ T27] audit: type=1326 audit(789.333:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.1.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 822.037346][ T27] audit: type=1326 audit(789.333:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.1.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 822.089027][T21153] loop0: detected capacity change from 0 to 32768 [ 822.096389][ T27] audit: type=1326 audit(789.333:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.1.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a719aeb9 code=0x7ffc0000 [ 822.230643][T21153] XFS (loop0): Mounting V5 Filesystem [ 822.331193][T21211] netlink: 'syz.2.7273': attribute type 2 has an invalid length. [ 822.377864][T21211] netlink: 'syz.2.7273': attribute type 2 has an invalid length. [ 822.412339][T21153] XFS (loop0): Ending clean mount [ 822.427851][T21153] XFS (loop0): Quotacheck needed: Please wait. [ 822.512933][T21218] loop4: detected capacity change from 0 to 16 [ 822.567048][T21218] erofs: (device loop4): mounted with root inode @ nid 36. [ 822.590857][T21153] XFS (loop0): Quotacheck: Done. [ 822.597654][T21219] loop1: detected capacity change from 0 to 2048 [ 822.653255][T21218] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 822.666651][T21219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 822.687919][T21218] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 822.718855][T21218] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 822.742067][ T4272] XFS (loop0): Unmounting Filesystem [ 822.749408][T21218] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 822.759152][T21218] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 822.771653][T21218] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 822.781651][T21218] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 822.792127][T21218] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 822.801069][T21219] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 822.829228][T21219] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 822.846248][ T27] audit: type=1800 audit(790.302:94): pid=21218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7275" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 822.966312][T21225] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 823.174118][T21231] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7283'. [ 823.271960][T21235] dlm: no locking on control device [ 823.750999][T21258] netlink: 'syz.4.7298': attribute type 8 has an invalid length. [ 824.113857][T21269] loop4: detected capacity change from 0 to 4096 [ 824.192265][T21269] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 824.204858][T21279] device bridge3 entered promiscuous mode [ 824.235319][T21269] ntfs3: loop4: Failed to load $Extend. [ 824.462325][ T52] block nbd3: Attempted send on invalid socket [ 824.468607][ T52] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 824.484887][T21287] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 824.493218][T21285] loop2: detected capacity change from 0 to 16 [ 824.532979][T21285] erofs: (device loop2): mounted with root inode @ nid 36. [ 824.850099][T21303] loop1: detected capacity change from 0 to 512 [ 824.885515][T21303] EXT4-fs: Ignoring removed i_version option [ 824.942411][T21306] loop0: detected capacity change from 0 to 16 [ 824.946602][T21303] EXT4-fs: Ignoring removed mblk_io_submit option [ 824.987850][T21306] erofs: (device loop0): mounted with root inode @ nid 36. [ 825.052501][T21303] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.7318: inode #13: comm syz.1.7318: iget: illegal inode # [ 825.091911][T21306] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 825.120421][T21303] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.7318: couldn't read orphan inode 13 (err -117) [ 825.172389][T21306] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 825.186681][T21303] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 825.195472][T21306] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 825.222975][T21306] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 825.274360][T21306] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 825.309918][T21306] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 825.343394][T21306] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 825.384272][T21306] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 825.394484][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 825.415951][ T27] audit: type=1800 audit(792.673:95): pid=21306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7320" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 825.669514][T21335] loop2: detected capacity change from 0 to 764 [ 825.726310][T21335] Symlink component flag not implemented [ 825.747622][T21335] Symlink component flag not implemented [ 825.756584][T21335] Symlink component flag not implemented (129) [ 825.789333][T21335] Symlink component flag not implemented (6) [ 825.846784][ T128] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 826.083480][ T128] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 826.103784][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.149076][ T128] usb 4-1: config 0 descriptor?? [ 826.161371][ T128] cp210x 4-1:0.0: cp210x converter detected [ 826.219582][T21353] loop4: detected capacity change from 0 to 128 [ 826.383374][ T128] usb 4-1: cp210x converter now attached to ttyUSB0 [ 826.439044][T21330] loop1: detected capacity change from 0 to 32768 [ 826.462665][T21361] netlink: 2120 bytes leftover after parsing attributes in process `syz.4.7346'. [ 826.560074][T21330] XFS (loop1): Mounting V5 Filesystem [ 826.566837][T21370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7349'. [ 826.576379][T21370] netlink: 'syz.0.7349': attribute type 1 has an invalid length. [ 826.610781][ T128] usb 4-1: USB disconnect, device number 49 [ 826.683372][ T128] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 826.718721][T21379] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 826.740442][ T128] cp210x 4-1:0.0: device disconnected [ 826.770475][T21379] overlayfs: missing 'lowerdir' [ 826.785932][T21330] XFS (loop1): Ending clean mount [ 826.825532][T21330] XFS (loop1): Quotacheck needed: Please wait. [ 826.852956][T21382] netlink: 'syz.4.7354': attribute type 10 has an invalid length. [ 826.860914][T21382] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7354'. [ 826.945462][T21330] XFS (loop1): Quotacheck: Done. [ 827.077942][ T4271] XFS (loop1): Unmounting Filesystem [ 827.157294][ T125] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 827.207301][T21331] Process accounting resumed [ 827.372090][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 827.384771][ T125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.423984][ T125] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 827.435370][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.448772][ T125] usb 3-1: Product: syz [ 827.453473][ T125] usb 3-1: Manufacturer: syz [ 827.467172][ T125] usb 3-1: SerialNumber: syz [ 827.484011][ T125] usb 3-1: config 0 descriptor?? [ 827.504304][ T125] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 827.519392][ T125] gspca_stv06xx: st6422 sensor detected [ 827.648301][T21399] loop3: detected capacity change from 0 to 4096 [ 827.655742][T21399] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 827.706728][T21399] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 827.724593][T21399] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 827.733870][T21399] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 827.753720][T21399] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 827.784187][T21399] ntfs: volume version 3.1. [ 827.792314][T21399] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota. [ 827.826640][T21399] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 827.976783][T21409] netlink: 'syz.4.7368': attribute type 2 has an invalid length. [ 827.977326][T21409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.041490][ T125] STV06xx: probe of 3-1:0.0 failed with error -71 [ 828.076958][ T125] usb 3-1: USB disconnect, device number 57 [ 828.355481][T21419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7373'. [ 828.376290][T21419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7373'. [ 828.586572][T21411] loop3: detected capacity change from 0 to 32768 [ 828.626021][T21411] XFS: noikeep mount option is deprecated. [ 828.748184][T21411] XFS (loop3): Mounting V5 Filesystem [ 828.882889][T21411] XFS (loop3): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 828.961798][T21411] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 829.035363][T21411] XFS (loop3): Starting recovery (logdev: internal) [ 829.115602][T21411] XFS (loop3): Ending recovery (logdev: internal) [ 829.258720][ T4273] XFS (loop3): Unmounting Filesystem [ 829.728744][T21434] loop4: detected capacity change from 0 to 32768 [ 829.810172][ T5119] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 829.826209][T21434] XFS (loop4): Mounting V5 Filesystem [ 829.989526][T21480] loop3: detected capacity change from 0 to 1024 [ 830.005216][ T5119] usb 2-1: Using ep0 maxpacket: 8 [ 830.020300][ T5119] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 830.071033][ T5119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.103620][ T5119] usb 2-1: Product: syz [ 830.121352][ T5119] usb 2-1: Manufacturer: syz [ 830.135249][ T5119] usb 2-1: SerialNumber: syz [ 830.149205][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7397'. [ 830.168979][ T5119] usb 2-1: config 0 descriptor?? [ 830.172583][ T5119] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 830.182033][T21434] XFS (loop4): Ending clean mount [ 830.200547][ T4294] hfsplus: b-tree write err: -5, ino 4 [ 830.384790][ T4278] XFS (loop4): Unmounting Filesystem [ 830.504917][T21490] QAT: failed to copy from user cfg_data. [ 830.616872][ T5119] gspca_vc032x: reg_w err -71 [ 830.621647][ T5119] vc032x: probe of 2-1:0.0 failed with error -71 [ 830.648567][ T5119] usb 2-1: USB disconnect, device number 33 [ 830.997898][T21508] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7408'. [ 831.072140][T21514] loop4: detected capacity change from 0 to 1024 [ 831.138668][T21516] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 831.168643][T21514] EXT4-fs: Ignoring removed oldalloc option [ 831.244904][T21514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 831.267544][T21523] loop2: detected capacity change from 0 to 128 [ 831.294134][T21514] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.4.7411: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 831.346470][T21514] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 831.388466][T21514] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #2: comm syz.4.7411: Deleting old file: nlink 4, error=-117 [ 831.558952][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 831.737333][T21539] netlink: 'syz.4.7421': attribute type 46 has an invalid length. [ 832.148725][T21559] autofs4:pid:21559:autofs_fill_super: called with bogus options [ 832.159564][T21563] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7434'. [ 832.362973][T21575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7439'. [ 832.567305][T21581] loop1: detected capacity change from 0 to 1024 [ 832.635679][T21581] fuse: Invalid rootmode [ 832.810962][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 833.192797][T21565] loop2: detected capacity change from 0 to 32768 [ 833.241765][T21565] ERROR: (device loop2): diAllocAG: nfreeinos = 0, but iag on freelist [ 833.241765][T21565] [ 833.287908][T21565] ERROR: (device loop2): remounting filesystem as read-only [ 833.313019][T21610] xt_ecn: cannot match TCP bits for non-tcp packets [ 833.320661][T21565] ialloc: diAlloc returned -5! [ 833.342011][T21608] loop0: detected capacity change from 0 to 4096 [ 833.481342][T21608] ntfs3: loop0: ino=5, "/" directory corrupted [ 833.521142][T21608] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 833.575465][T21612] loop4: detected capacity change from 0 to 4096 [ 833.645652][T21612] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 833.689762][T21612] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 833.698817][T21612] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 833.705373][T21608] Process accounting resumed [ 833.809511][T21612] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 833.980057][T21612] ntfs: volume version 3.1. [ 834.066974][T21612] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 834.089207][T21631] netlink: 'syz.0.7463': attribute type 1 has an invalid length. [ 834.103808][T21630] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7465'. [ 834.115732][T21612] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 834.159423][T21626] loop1: detected capacity change from 0 to 4096 [ 834.231244][T21626] ntfs: volume version 3.1. [ 834.434824][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7470'. [ 834.584689][ C1] sd 0:0:1:0: [sda] tag#437 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 834.595185][ C1] sd 0:0:1:0: [sda] tag#437 CDB: Read(6) 08 00 00 00 03 44 [ 835.354763][T21681] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 835.687446][T21687] 9pnet: Could not find request transport: 0xffffffffffffffff [ 836.243798][ T27] audit: type=1326 audit(802.667:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21719 comm="syz.3.7509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 836.311653][ T27] audit: type=1326 audit(802.676:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21719 comm="syz.3.7509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 836.423820][ T27] audit: type=1326 audit(802.676:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21719 comm="syz.3.7509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 836.505406][ T27] audit: type=1326 audit(802.676:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21719 comm="syz.3.7509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7605d9aeb9 code=0x7ffc0000 [ 836.590945][T21729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7513'. [ 836.636795][T21706] loop1: detected capacity change from 0 to 32768 [ 836.867262][T21716] loop2: detected capacity change from 0 to 32768 [ 836.971142][T21716] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 837.065782][T21716] (syz.2.7507,21716,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=280, name_len=10 [ 837.092303][T21727] loop4: detected capacity change from 0 to 32768 [ 837.097099][T21716] (syz.2.7507,21716,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 837.111896][T21743] sctp: [Deprecated]: syz.3.7518 (pid 21743) Use of int in max_burst socket option. [ 837.111896][T21743] Use struct sctp_assoc_value instead [ 837.149509][T21716] (syz.2.7507,21716,0):ocfs2_mknod:298 ERROR: status = -2 [ 837.196760][T21716] (syz.2.7507,21716,0):ocfs2_mknod:502 ERROR: status = -2 [ 837.266762][T21716] (syz.2.7507,21716,0):ocfs2_create:676 ERROR: status = -2 [ 837.471962][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 837.785711][T21761] loop4: detected capacity change from 0 to 1764 [ 838.586887][T21796] cgroup: Unexpected value for 'cpuset_v2_mode' [ 839.361642][T21832] libceph: resolve 'c0' (ret=-3): failed [ 839.539420][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7566'. [ 839.796718][T21852] loop1: detected capacity change from 0 to 512 [ 839.860055][T21856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 839.922809][T21852] __quota_error: 10 callbacks suppressed [ 839.922827][T21852] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 839.966320][T21852] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 840.009473][T21852] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.7573: Failed to acquire dquot type 1 [ 840.069560][T21852] EXT4-fs (loop1): 1 truncate cleaned up [ 840.080644][T21852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 840.178849][T21852] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 840.225230][T21852] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 840.265299][T21852] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.7573: Failed to acquire dquot type 1 [ 840.402903][ T4277] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 840.450282][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 840.525423][T21883] xt_nat: multiple ranges no longer supported [ 840.972236][ T4312] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 841.182199][ T4312] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 841.200000][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.241169][ T4312] usb 1-1: Product: syz [ 841.245765][ T4312] usb 1-1: Manufacturer: syz [ 841.250379][ T4312] usb 1-1: SerialNumber: syz [ 841.286001][ T4312] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 841.356100][ T4312] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 841.773464][T21939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7614'. [ 841.833518][ T5123] usb 1-1: USB disconnect, device number 16 [ 841.896293][T21944] loop1: detected capacity change from 0 to 64 [ 841.920842][T21945] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7617'. [ 841.953129][T21944] Trying to free block not in datazone [ 841.967857][T21944] Trying to free block not in datazone [ 842.147712][T21956] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7622'. [ 842.458942][T21971] loop1: detected capacity change from 0 to 64 [ 842.500180][ T4312] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 842.514260][T21971] Trying to free block not in datazone [ 842.518201][ T4312] ath9k_htc: Failed to initialize the device [ 842.527637][T21973] loop0: detected capacity change from 0 to 1024 [ 842.539244][ T5123] usb 1-1: ath9k_htc: USB layer deinitialized [ 842.637179][T21973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 842.695157][ T128] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 842.741371][T21973] EXT4-fs warning (device loop0): ext4_rmdir:3243: inode #11: comm syz.0.7630: empty directory 'file1' has too many links (111) [ 842.756861][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 842.756919][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 842.864155][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 842.919076][ T128] usb 3-1: Using ep0 maxpacket: 8 [ 842.935259][ T128] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 842.960558][ T128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.965787][T21988] loop4: detected capacity change from 0 to 2048 [ 842.975866][ T128] usb 3-1: config 0 has no interface number 0 [ 842.987219][ T128] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 843.006671][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.020279][T21988] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 843.027344][ T128] usb 3-1: Product: syz [ 843.034885][ T128] usb 3-1: Manufacturer: syz [ 843.039715][ T128] usb 3-1: SerialNumber: syz [ 843.053051][ T128] usb 3-1: config 0 descriptor?? [ 843.113878][ T5102] udevd[5102]: incorrect nilfs2 checksum on /dev/loop4 [ 843.118344][T21993] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 843.283155][ T128] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 843.290908][ T128] usb 3-1: No valid video chain found. [ 843.549781][T14122] usb 3-1: USB disconnect, device number 58 [ 843.739351][T22012] loop1: detected capacity change from 0 to 4096 [ 843.799815][T22012] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 843.848571][T22012] ntfs3: loop1: Failed to load $Extend. [ 844.185644][T22028] trusted_key: encrypted_key: master key parameter '' is invalid [ 844.514537][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7662'. [ 844.558966][ T5123] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 844.575095][T22044] netlink: zone id is out of range [ 844.624048][T22044] netlink: zone id is out of range [ 844.645659][T22044] netlink: zone id is out of range [ 844.667279][T22044] netlink: zone id is out of range [ 844.690605][T22044] netlink: zone id is out of range [ 844.695779][T22044] netlink: zone id is out of range [ 844.740635][T22044] netlink: zone id is out of range [ 844.747058][T22044] netlink: zone id is out of range [ 844.757902][T22044] netlink: zone id is out of range [ 844.766798][ T5123] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 844.773104][T22034] loop3: detected capacity change from 0 to 32768 [ 844.786154][ T5123] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 844.797085][ T5123] usb 5-1: config 0 has no interface number 0 [ 844.806523][T22034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7656 (22034) [ 844.827942][ T5123] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 844.859639][ T5123] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.893818][ T5123] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 844.911939][ T5123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.927231][T22034] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 844.945733][ T5123] usb 5-1: config 0 descriptor?? [ 844.956285][T22034] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 844.995845][T22034] BTRFS info (device loop3): force clearing of disk cache [ 845.012191][T22034] BTRFS info (device loop3): force zlib compression, level 3 [ 845.033949][T22034] BTRFS info (device loop3): enabling auto defrag [ 845.040069][T22058] loop2: detected capacity change from 0 to 64 [ 845.045385][T22034] BTRFS info (device loop3): max_inline at 0 [ 845.061742][T22034] BTRFS info (device loop3): enabling disk space caching [ 845.091316][T22034] BTRFS info (device loop3): disk space caching is enabled [ 845.226154][T22066] netlink: 'syz.1.7671': attribute type 1 has an invalid length. [ 845.422309][T22034] BTRFS info (device loop3): enabling ssd optimizations [ 845.429630][ T5123] usb 5-1: USB disconnect, device number 54 [ 845.450531][T22034] BTRFS info (device loop3): rebuilding free space tree [ 845.494117][T22034] BTRFS info (device loop3): disabling free space tree [ 845.525218][T22034] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 845.553385][T22090] loop1: detected capacity change from 0 to 512 [ 845.598238][T22034] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 845.674378][T22090] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.7675: bad orphan inode 13 [ 845.762953][T22090] ext4_test_bit(bit=12, block=4) = 1 [ 845.768997][T22090] is_bad_inode(inode)=0 [ 845.783502][T22090] NEXT_ORPHAN(inode)=0 [ 845.787666][T22090] max_ino=32 [ 845.790879][T22090] i_nlink=1 [ 845.794092][T22090] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 845.859727][T22090] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.7675: Unrecognised inode hash code 20 [ 845.898697][T22090] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.7675: Corrupt directory, running e2fsck is recommended [ 845.920864][ T4273] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 845.940079][T22104] loop2: detected capacity change from 0 to 256 [ 845.954439][T22090] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.7675: Unrecognised inode hash code 20 [ 846.026069][T22090] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.7675: Corrupt directory, running e2fsck is recommended [ 846.414103][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 846.446211][T22114] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 846.598398][T22121] netlink: 'syz.1.7688': attribute type 5 has an invalid length. [ 846.873959][T22134] tmpfs: Bad value for 'mpol' [ 846.919525][T22136] loop0: detected capacity change from 0 to 64 [ 846.938836][T22140] netlink: 'syz.4.7699': attribute type 1 has an invalid length. [ 847.004154][T22140] netlink: 'syz.4.7699': attribute type 12 has an invalid length. [ 847.048681][T22140] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7699'. [ 847.059799][T22142] loop1: detected capacity change from 0 to 16 [ 847.096311][T22142] erofs: (device loop1): mounted with root inode @ nid 36. [ 848.096859][T22188] loop4: detected capacity change from 0 to 256 [ 848.162717][T22188] FAT-fs (loop4): Directory bread(block 64) failed [ 848.212356][T22188] FAT-fs (loop4): Directory bread(block 65) failed [ 848.240942][T22188] FAT-fs (loop4): Directory bread(block 66) failed [ 848.276542][T22188] FAT-fs (loop4): Directory bread(block 67) failed [ 848.283198][T22188] FAT-fs (loop4): Directory bread(block 68) failed [ 848.373471][T22188] FAT-fs (loop4): Directory bread(block 69) failed [ 848.380923][T22188] FAT-fs (loop4): Directory bread(block 70) failed [ 848.417187][T22188] FAT-fs (loop4): Directory bread(block 71) failed [ 848.439468][T22188] FAT-fs (loop4): Directory bread(block 72) failed [ 848.460186][T22188] FAT-fs (loop4): Directory bread(block 73) failed [ 848.495937][T22164] loop1: detected capacity change from 0 to 32768 [ 848.652872][T22164] XFS (loop1): Mounting V5 Filesystem [ 848.794958][T22164] XFS (loop1): Ending clean mount [ 848.826404][T22164] XFS (loop1): Quotacheck needed: Please wait. [ 848.906505][T22164] XFS (loop1): Quotacheck: Done. [ 849.086783][ T4271] XFS (loop1): Unmounting Filesystem [ 849.232857][T22226] xt_ipcomp: unknown flags B [ 849.295682][T22230] loop3: detected capacity change from 0 to 136 [ 849.504005][ T4273] rock: directory entry would overflow storage [ 849.533465][ T4273] rock: sig=0x4f50, size=4, remaining=3 [ 849.540631][ T4273] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 849.585595][ T4273] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 849.886093][T22248] loop4: detected capacity change from 0 to 256 [ 850.244128][T22263] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7753'. [ 850.607079][T22281] loop3: detected capacity change from 0 to 256 [ 851.166986][T22302] netlink: 'syz.3.7772': attribute type 10 has an invalid length. [ 851.196337][T22302] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7772'. [ 851.346269][T22285] loop2: detected capacity change from 0 to 32768 [ 851.363354][T22285] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.7765 (22285) [ 851.413951][T22285] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 851.425919][T22285] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 851.451112][T22285] BTRFS info (device loop2): using free space tree [ 851.690079][T22285] BTRFS info (device loop2): enabling ssd optimizations [ 851.748010][ T4267] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 851.777616][T22303] netlink: 760 bytes leftover after parsing attributes in process `syz.0.7771'. [ 852.119410][ T5102] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5102) [ 852.162945][T22331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7779'. [ 852.193541][T22335] tmpfs: Bad value for 'mpol' [ 852.942125][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7795'. [ 852.981076][T22364] usb usb7: usbfs: process 22364 (syz.3.7794) did not claim interface 0 before use [ 853.137306][T22366] net_ratelimit: 112 callbacks suppressed [ 853.137326][T22366] netlink: set zone limit has 4 unknown bytes [ 853.450858][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7805'. [ 853.562118][T22388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7805'. [ 853.575114][T22388] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7805'. [ 854.094918][T22415] netlink: 'syz.1.7816': attribute type 1 has an invalid length. [ 854.435641][T22429] loop0: detected capacity change from 0 to 64 [ 854.563950][T22430] loop1: detected capacity change from 0 to 4096 [ 854.634717][T22430] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 854.668535][T22430] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 854.700346][T22430] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 854.745566][T22430] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 854.808129][T22430] ntfs: volume version 3.1. [ 855.110029][T22450] loop3: detected capacity change from 0 to 256 [ 855.221537][T22458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7837'. [ 855.622748][T22476] netlink: 'syz.4.7845': attribute type 21 has an invalid length. [ 855.639205][ T6415] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 855.685373][T22480] loop3: detected capacity change from 0 to 64 [ 855.752671][T22482] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7850'. [ 855.782448][T22478] loop1: detected capacity change from 0 to 4096 [ 855.800072][T22478] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 855.850958][ T6415] usb 3-1: Using ep0 maxpacket: 32 [ 855.863202][ T6415] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 855.886304][ T6415] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 855.915290][ T6415] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 855.939223][ T6415] usb 3-1: config 1 has no interface number 0 [ 855.945432][ T6415] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 855.947846][T22487] loop3: detected capacity change from 0 to 256 [ 856.006187][ T6415] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 856.045851][ T6415] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 856.086025][ T6415] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 856.114336][T22490] Timeout policy `syz1' can only be used by L3 protocol number 33024 [ 856.132616][ T6415] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.164295][ T6415] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 856.350795][T22496] netlink: 'syz.4.7856': attribute type 4 has an invalid length. [ 856.384643][ T6415] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 856.397650][ T6415] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 856.425427][ T6415] snd_usb_pod: probe of 3-1:1.1 failed with error -90 [ 856.575833][T22506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7861'. [ 856.612019][ T6415] usb 3-1: USB disconnect, device number 59 [ 857.105477][T22527] loop1: detected capacity change from 0 to 1024 [ 857.207990][T22530] loop3: detected capacity change from 0 to 1024 [ 857.253077][T22530] hfsplus: invalid btree flag [ 857.258259][T22530] hfsplus: failed to load attributes file [ 857.313883][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 857.521334][T22540] loop4: detected capacity change from 0 to 512 [ 857.546050][T22540] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 857.643625][T22540] ================================================================== [ 857.651738][T22540] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e40 [ 857.658886][T22540] Read of size 8 at addr ffff888054724eb0 by task syz.4.7878/22540 [ 857.666809][T22540] [ 857.669146][T22540] CPU: 1 PID: 22540 Comm: syz.4.7878 Not tainted syzkaller #0 [ 857.676628][T22540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 857.686708][T22540] Call Trace: [ 857.690007][T22540] [ 857.692948][T22540] dump_stack_lvl+0x188/0x24e [ 857.697649][T22540] ? __lock_acquire+0x7d10/0x7d10 [ 857.702700][T22540] ? show_regs_print_info+0x12/0x12 [ 857.703870][ T6415] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 857.707905][T22540] ? load_image+0x400/0x400 [ 857.707931][T22540] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 857.725474][T22540] ? __virt_addr_valid+0x188/0x540 [ 857.730620][T22540] ? __virt_addr_valid+0x465/0x540 [ 857.735761][T22540] ? __ext4_iget+0x2bb/0x3e40 [ 857.740458][T22540] print_report+0xa8/0x210 [ 857.744897][T22540] kasan_report+0x10b/0x140 [ 857.749445][T22540] ? __ext4_iget+0x2bb/0x3e40 [ 857.754154][T22540] __ext4_iget+0x2bb/0x3e40 [ 857.758708][T22540] ? apply_workqueue_attrs+0x180/0x180 [ 857.764192][T22540] ? ext4_get_projid+0x140/0x140 [ 857.769151][T22540] ext4_fill_super+0x60c1/0x7dc0 [ 857.774175][T22540] ? bdev_name+0x2c1/0x3f0 [ 857.778622][T22540] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 857.785008][T22540] ? set_blocksize+0x1d0/0x470 [ 857.789813][T22540] ? sb_set_blocksize+0xa5/0xe0 [ 857.794689][T22540] get_tree_bdev+0x3f1/0x610 [ 857.799417][T22540] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 857.805700][T22540] vfs_get_tree+0x88/0x270 [ 857.810138][T22540] do_new_mount+0x24a/0xa40 [ 857.814662][T22540] __se_sys_mount+0x2e3/0x3d0 [ 857.819353][T22540] ? __x64_sys_mount+0xc0/0xc0 [ 857.824161][T22540] ? lockdep_hardirqs_on+0x94/0x140 [ 857.829352][T22540] ? __x64_sys_mount+0x1c/0xc0 [ 857.834143][T22540] do_syscall_64+0x4c/0xa0 [ 857.838552][T22540] ? clear_bhb_loop+0x60/0xb0 [ 857.843232][T22540] ? clear_bhb_loop+0x60/0xb0 [ 857.847895][T22540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.853780][T22540] RIP: 0033:0x7f36e699c14a [ 857.858199][T22540] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.877824][T22540] RSP: 002b:00007f36e790ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 857.886341][T22540] RAX: ffffffffffffffda RBX: 00007f36e790cee0 RCX: 00007f36e699c14a [ 857.894304][T22540] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 00007f36e790cea0 [ 857.902280][T22540] RBP: 0000200000000000 R08: 00007f36e790cee0 R09: 0000000000000759 [ 857.910256][T22540] R10: 0000000000000759 R11: 0000000000000246 R12: 0000200000000080 [ 857.918239][T22540] R13: 00007f36e790cea0 R14: 00000000000004f8 R15: 0000200000000c00 [ 857.926241][T22540] [ 857.929354][T22540] [ 857.931696][T22540] Allocated by task 15073: [ 857.936207][T22540] kasan_set_track+0x4b/0x70 [ 857.940819][T22540] __kasan_slab_alloc+0x6b/0x80 [ 857.945693][T22540] slab_post_alloc_hook+0x4b/0x480 [ 857.950912][T22540] kmem_cache_alloc_lru+0x11a/0x2e0 [ 857.956134][T22540] reiserfs_alloc_inode+0x26/0xc0 [ 857.961193][T22540] iget5_locked+0x9e/0x260 [ 857.965625][T22540] reiserfs_fill_super+0x11d3/0x23b0 [ 857.968472][ T6415] usb 3-1: Using ep0 maxpacket: 32 [ 857.970913][T22540] mount_bdev+0x287/0x3c0 [ 857.970935][T22540] legacy_get_tree+0xe6/0x180 [ 857.970955][T22540] vfs_get_tree+0x88/0x270 [ 857.970972][T22540] do_new_mount+0x24a/0xa40 [ 857.982641][ T6415] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 857.985058][T22540] __se_sys_mount+0x2e3/0x3d0 [ 857.985086][T22540] do_syscall_64+0x4c/0xa0 [ 857.996655][ T6415] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.002040][T22540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.002070][T22540] [ 858.002075][T22540] Last potentially related work creation: [ 858.002081][T22540] kasan_save_stack+0x3a/0x60 [ 858.002104][T22540] __kasan_record_aux_stack+0xb2/0xc0 [ 858.012815][ T6415] usb 3-1: config 0 has no interface number 0 [ 858.021228][T22540] call_rcu+0x14f/0x990 [ 858.021262][T22540] evict+0x834/0x8d0 [ 858.021282][T22540] reiserfs_fill_super+0x1475/0x23b0 [ 858.021307][T22540] mount_bdev+0x287/0x3c0 [ 858.021323][T22540] legacy_get_tree+0xe6/0x180 [ 858.021340][T22540] vfs_get_tree+0x88/0x270 [ 858.021355][T22540] do_new_mount+0x24a/0xa40 [ 858.021371][T22540] __se_sys_mount+0x2e3/0x3d0 [ 858.021386][T22540] do_syscall_64+0x4c/0xa0 [ 858.021405][T22540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.021423][T22540] [ 858.021428][T22540] The buggy address belongs to the object at ffff8880547248e0 [ 858.021428][T22540] which belongs to the cache reiser_inode_cache of size 1568 [ 858.021444][T22540] The buggy address is located 1488 bytes inside of [ 858.021444][T22540] 1568-byte region [ffff8880547248e0, ffff888054724f00) [ 858.021462][T22540] [ 858.021467][T22540] The buggy address belongs to the physical page: [ 858.021489][T22540] page:ffffea000151c800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888054727740 pfn:0x54720 [ 858.021509][T22540] head:ffffea000151c800 order:3 compound_mapcount:0 compound_pincount:0 [ 858.021523][T22540] memcg:ffff88807c60ab01 [ 858.021531][T22540] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 858.021560][T22540] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801a733dc0 [ 858.036636][ T6415] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 858.040406][T22540] raw: ffff888054727740 000000008013000f 00000001ffffffff ffff88807c60ab01 [ 858.040420][T22540] page dumped because: kasan: bad access detected [ 858.040429][T22540] page_owner tracks the page as allocated [ 858.040447][T22540] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5577, tgid 5576 (syz.3.431), ts 121732282344, free_ts 12995199172 [ 858.040483][T22540] post_alloc_hook+0x173/0x1a0 [ 858.040510][T22540] get_page_from_freelist+0x1a1e/0x1ab0 [ 858.048635][ T6415] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 858.052008][T22540] __alloc_pages+0x1ec/0x4f0 [ 858.052041][T22540] alloc_slab_page+0x5d/0x160 [ 858.052059][T22540] new_slab+0x87/0x2c0 [ 858.052076][T22540] ___slab_alloc+0xbc6/0x1240 [ 858.052091][T22540] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 858.056403][ T6415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.060268][T22540] reiserfs_alloc_inode+0x26/0xc0 [ 858.060296][T22540] iget5_locked+0x9e/0x260 [ 858.060315][T22540] reiserfs_fill_super+0x11d3/0x23b0 [ 858.060340][T22540] mount_bdev+0x287/0x3c0 [ 858.060358][T22540] legacy_get_tree+0xe6/0x180 [ 858.065857][ T6415] usb 3-1: Product: syz [ 858.069947][T22540] vfs_get_tree+0x88/0x270 [ 858.069968][T22540] do_new_mount+0x24a/0xa40 [ 858.069985][T22540] __se_sys_mount+0x2e3/0x3d0 [ 858.089507][ T6415] usb 3-1: Manufacturer: syz [ 858.092818][T22540] do_syscall_64+0x4c/0xa0 [ 858.092847][T22540] page last free stack trace: [ 858.092853][T22540] free_unref_page_prepare+0x8b4/0x9a0 [ 858.092878][T22540] free_unref_page+0x2e/0x3f0 [ 858.092900][T22540] free_contig_range+0x9d/0x150 [ 858.099470][ T6415] usb 3-1: SerialNumber: syz [ 858.101115][T22540] destroy_args+0xf0/0xa0a [ 858.101141][T22540] debug_vm_pgtable+0x33c/0x38e [ 858.101158][T22540] do_one_initcall+0x26a/0x840 [ 858.125226][ T6415] usb 3-1: config 0 descriptor?? [ 858.129318][T22540] do_initcall_level+0x137/0x1e4 [ 858.129347][T22540] do_initcalls+0x4b/0x8a [ 858.129373][T22540] kernel_init_freeable+0x415/0x5be [ 858.129394][T22540] kernel_init+0x19/0x1b0 [ 858.129410][T22540] ret_from_fork+0x1f/0x30 [ 858.129433][T22540] [ 858.129437][T22540] Memory state around the buggy address: [ 858.129446][T22540] ffff888054724d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 858.129458][T22540] ffff888054724e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 858.144866][ T6415] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 858.149871][T22540] >ffff888054724e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 858.149884][T22540] ^ [ 858.149894][T22540] ffff888054724f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 858.149904][T22540] ffff888054724f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 858.149913][T22540] ================================================================== [ 858.261370][T22540] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 858.261390][T22540] CPU: 1 PID: 22540 Comm: syz.4.7878 Not tainted syzkaller #0 [ 858.261409][T22540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 858.261420][T22540] Call Trace: [ 858.261427][T22540] [ 858.261434][T22540] dump_stack_lvl+0x188/0x24e [ 858.261464][T22540] ? memcpy+0x3c/0x60 [ 858.261481][T22540] ? show_regs_print_info+0x12/0x12 [ 858.261504][T22540] ? load_image+0x400/0x400 [ 858.261527][T22540] panic+0x2e5/0x730 [ 858.261552][T22540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 858.261576][T22540] ? bpf_jit_dump+0xd0/0xd0 [ 858.261604][T22540] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 858.261622][T22540] ? _raw_spin_unlock+0x40/0x40 [ 858.261640][T22540] check_panic_on_warn+0x80/0xa0 [ 858.261661][T22540] ? __ext4_iget+0x2bb/0x3e40 [ 858.261678][T22540] end_report+0x66/0x110 [ 858.261703][T22540] kasan_report+0x118/0x140 [ 858.261728][T22540] ? __ext4_iget+0x2bb/0x3e40 [ 858.261747][T22540] __ext4_iget+0x2bb/0x3e40 [ 858.261772][T22540] ? apply_workqueue_attrs+0x180/0x180 [ 858.261795][T22540] ? ext4_get_projid+0x140/0x140 [ 858.261816][T22540] ext4_fill_super+0x60c1/0x7dc0 [ 858.261835][T22540] ? bdev_name+0x2c1/0x3f0 [ 858.261864][T22540] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 858.261893][T22540] ? set_blocksize+0x1d0/0x470 [ 858.261917][T22540] ? sb_set_blocksize+0xa5/0xe0 [ 858.261941][T22540] get_tree_bdev+0x3f1/0x610 [ 858.261962][T22540] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 858.261983][T22540] vfs_get_tree+0x88/0x270 [ 858.262003][T22540] do_new_mount+0x24a/0xa40 [ 858.262026][T22540] __se_sys_mount+0x2e3/0x3d0 [ 858.262047][T22540] ? __x64_sys_mount+0xc0/0xc0 [ 858.262067][T22540] ? lockdep_hardirqs_on+0x94/0x140 [ 858.262093][T22540] ? __x64_sys_mount+0x1c/0xc0 [ 858.262112][T22540] do_syscall_64+0x4c/0xa0 [ 858.262133][T22540] ? clear_bhb_loop+0x60/0xb0 [ 858.262152][T22540] ? clear_bhb_loop+0x60/0xb0 [ 858.276285][ T6415] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 858.357549][ T6415] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 858.575597][ T6415] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 858.580913][ T6415] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 858.591619][ T6415] usb 3-1: USB disconnect, device number 60 [ 858.591937][ T6415] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 858.710444][T22540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.716374][T22540] RIP: 0033:0x7f36e699c14a [ 858.720820][T22540] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.740534][T22540] RSP: 002b:00007f36e790ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 858.749130][T22540] RAX: ffffffffffffffda RBX: 00007f36e790cee0 RCX: 00007f36e699c14a [ 858.757201][T22540] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 00007f36e790cea0 [ 858.765199][T22540] RBP: 0000200000000000 R08: 00007f36e790cee0 R09: 0000000000000759 [ 858.773176][T22540] R10: 0000000000000759 R11: 0000000000000246 R12: 0000200000000080 [ 858.781159][T22540] R13: 00007f36e790cea0 R14: 00000000000004f8 R15: 0000200000000c00 [ 858.789325][T22540] [ 858.792826][T22540] Kernel Offset: disabled [ 858.797170][T22540] Rebooting in 86400 seconds..