last executing test programs: 2m32.202727719s ago: executing program 4 (id=8010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x814) 2m31.981637322s ago: executing program 4 (id=8011): rmdir(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0xe7, 0x19, 0x87, 0x40, 0xeb1, 0x7007, 0x205, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) 2m30.479863001s ago: executing program 4 (id=8029): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x0, "80b93737579e60470aab1a6d1b080000000000001400", 0x0, 0x800, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfffffffc}) 2m30.237037945s ago: executing program 4 (id=8033): rt_sigreturn() rt_sigreturn() 2m30.059419865s ago: executing program 4 (id=8037): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m29.016202386s ago: executing program 4 (id=8055): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000340)='tsiX', 0x4}], 0x2, 0x0, 0x0) 2m13.918517333s ago: executing program 32 (id=8055): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000340)='tsiX', 0x4}], 0x2, 0x0, 0x0) 13.568605484s ago: executing program 0 (id=9885): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 13.308359309s ago: executing program 0 (id=9890): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0x104, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@dev, 0xffffffff}]}]}, 0x1bc}}, 0x0) 13.090620902s ago: executing program 0 (id=9892): openat$nvram(0xffffff9c, &(0x7f0000000000), 0xa0942, 0x0) syz_open_procfs(0x0, &(0x7f0000008380)='fd/3\x00') 12.847978206s ago: executing program 0 (id=9896): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) munlock(&(0x7f0000014000/0x1000)=nil, 0x1000) 2.088838067s ago: executing program 3 (id=10014): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 1.918199377s ago: executing program 1 (id=10017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x14, 0x2, @private2}]}, 0x38}}, 0x90) 1.723624568s ago: executing program 3 (id=10028): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x4008af25, &(0x7f0000000180)) 1.627877134s ago: executing program 1 (id=10019): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b90103606989068c3c270040f02f83", 0x0, 0x101, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.477853713s ago: executing program 3 (id=10032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.316025852s ago: executing program 1 (id=10022): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x4, @capture={0x1000, 0x1, {0x3639}, 0x0, 0xb}}) 1.295943333s ago: executing program 2 (id=10023): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x20}}], 0x2, 0x20000044) 1.267773386s ago: executing program 3 (id=10024): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.17316154s ago: executing program 5 (id=10025): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "3b296e12d52d00eb82cc420f61e33561ab88669e42bdfb3cec88f302de9e1d73", "9e3fe5ca5f463d0322b78f5a3995fa1e7569d25aed97fbf6eb197b880bef7d55", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1508ebd0c5b39be0c0a8f4394f9dfb56ceccf9f6f1fdfdc100", "78a85ce08babb5877c9ab49084d318f3ce181dd78515a854b784f51f55030e7f", "510f13cf0000000000010001", 0xfffffffd, 0x4000000, 0x4, 0x1}}) 1.071279807s ago: executing program 1 (id=10026): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001500000000", 0x39}], 0x1) 974.327013ms ago: executing program 5 (id=10027): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 973.514202ms ago: executing program 2 (id=10039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 808.452032ms ago: executing program 2 (id=10029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 747.364336ms ago: executing program 1 (id=10030): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 637.224192ms ago: executing program 2 (id=10031): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2, &(0x7f00000006c0)=""/230, &(0x7f0000000600)=0xe6) 532.584468ms ago: executing program 0 (id=10033): r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) 522.664409ms ago: executing program 5 (id=10034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@local}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@private1, 0x3501, 0x1, 0x0, 0x0, 0x0, 0x9}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 520.471879ms ago: executing program 1 (id=10035): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000040)={[{@inode32}, {@swalloc}, {@prjquota}]}, 0x1, 0x97e9, &(0x7f000001c700)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x4, 0xffffffffffff8001, 0x0, 0x8, 0x7, 0x20000005, 0x4035}) 467.499312ms ago: executing program 2 (id=10036): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000700)={0x0, [[0x9ef8, 0x0, 0x0, 0x80000000, 0x2], [0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2], [0x7, 0x0, 0x3, 0xfffffffd]], '\x00', [{}, {0x3, 0xff}, {}, {0x0, 0x80000000}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0xfffffffe}, {0x0, 0x12}], '\x00', 0x1001}) 362.671299ms ago: executing program 5 (id=10037): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a050100000016001200bc00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 254.494015ms ago: executing program 3 (id=10038): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000500)) 253.133675ms ago: executing program 0 (id=10049): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc00090582"], 0x0) 221.473677ms ago: executing program 2 (id=10040): syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x438, &(0x7f00000004c0)="$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") syz_emit_ethernet(0x42, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0xd2}, @timestamp={0x44, 0x8, 0x5, 0x2, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 130.599482ms ago: executing program 5 (id=10041): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 229.59µs ago: executing program 5 (id=10042): r0 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000002c0)={0xd, @output={0x0, 0x0, {0x3, 0x5}, 0x0, 0x7958}}) 0s ago: executing program 3 (id=10043): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x32, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x6}, 0x90) kernel console output (not intermixed with test programs): 0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x7ffc0000 [ 928.159887][T23115] device team0 entered promiscuous mode [ 928.286372][T23115] device team_slave_0 entered promiscuous mode [ 928.305874][T23115] device team_slave_1 entered promiscuous mode [ 928.338899][T23115] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 928.566007][ T26] audit: type=1326 audit(928.810:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.2.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 928.668573][ T26] audit: type=1326 audit(928.810:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.2.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 928.785636][ T26] audit: type=1326 audit(928.840:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.2.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 928.850791][T23137] loop0: detected capacity change from 0 to 47 [ 928.867450][ T26] audit: type=1326 audit(928.840:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.2.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 928.995274][ T26] audit: type=1326 audit(928.840:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23123 comm="syz.2.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 929.130393][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 929.137990][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 929.171326][T22967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.208541][T23143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8338'. [ 929.426313][T23148] loop3: detected capacity change from 0 to 4096 [ 929.442955][T23148] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 929.556518][T23153] loop2: detected capacity change from 0 to 256 [ 929.611362][T23148] ntfs: volume version 3.1. [ 929.798800][ T4273] Bluetooth: hci5: command 0x040f tx timeout [ 930.110344][T23168] loop1: detected capacity change from 0 to 16 [ 930.117796][T23168] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 930.179101][T23171] overlayfs: unrecognized mount option "obj_role=(‹&Ŕ!+/$:\(" or missing value [ 930.215805][T23168] cramfs: Error -3 while decompressing! [ 930.279038][T23168] cramfs: ffffffff96d8b0a8(453)->ffff888046973000(4096) [ 930.309394][T23174] loop0: detected capacity change from 0 to 256 [ 930.413795][T23174] FAT-fs (loop0): Directory bread(block 64) failed [ 930.458375][T23174] FAT-fs (loop0): Directory bread(block 65) failed [ 930.465096][T23174] FAT-fs (loop0): Directory bread(block 66) failed [ 930.538626][T23174] FAT-fs (loop0): Directory bread(block 67) failed [ 930.563985][T23174] FAT-fs (loop0): Directory bread(block 68) failed [ 930.573230][T23174] FAT-fs (loop0): Directory bread(block 69) failed [ 930.587446][T23174] FAT-fs (loop0): Directory bread(block 70) failed [ 930.599551][T21226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 930.611527][T21226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 930.624223][T23174] FAT-fs (loop0): Directory bread(block 71) failed [ 930.655941][T23174] FAT-fs (loop0): Directory bread(block 72) failed [ 930.663229][T23174] FAT-fs (loop0): Directory bread(block 73) failed [ 930.736037][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 930.763707][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 930.786027][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 930.828578][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 930.860208][T22967] device veth0_vlan entered promiscuous mode [ 930.898852][T22967] device veth1_vlan entered promiscuous mode [ 930.992299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 931.014182][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 931.033430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 931.067256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 931.111495][T22967] device veth0_macvtap entered promiscuous mode [ 931.144448][T22967] device veth1_macvtap entered promiscuous mode [ 931.219252][T22967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.252027][T22967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.287137][T22967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.321669][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.328081][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.338398][T22967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.368442][T22967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.388703][T22967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.418569][T22967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.441587][T22967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.482022][T22967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.516331][T21226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 931.545259][T21226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 931.564795][T21226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 931.586837][T21226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 931.651525][T22967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.682904][T22967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.696123][T22967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.731359][T22967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.761887][T22967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.793189][T22967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.811060][T22967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.826316][T22967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.856859][T22967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.876763][T22967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.887025][ T4273] Bluetooth: hci5: command 0x0419 tx timeout [ 931.890367][T22643] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 931.914040][T22967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.928525][T21226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 931.947671][T21226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 931.958032][T23187] loop1: detected capacity change from 0 to 40427 [ 931.976795][T23187] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 932.002208][T22967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.011179][T23187] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 932.031949][T22967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.037852][T23187] F2FS-fs (loop1): invalid crc value [ 932.066715][T22967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.089983][T22643] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 932.102705][T23187] F2FS-fs (loop1): Found nat_bits in checkpoint [ 932.126377][T22967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.148779][T22643] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 932.181571][T22643] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 932.239084][T22643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.261295][T23201] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 932.347637][T23187] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 932.365390][T23187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 932.472501][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.501637][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.563976][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 932.636384][T21226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.665055][T21226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.707664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 932.720395][T22644] usb 4-1: USB disconnect, device number 5 [ 932.882992][T23221] loop0: detected capacity change from 0 to 512 [ 932.941881][T23221] EXT4-fs (loop0): orphan cleanup on readonly fs [ 933.019648][T23221] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.8372: bg 0: block 248: padding at end of block bitmap is not set [ 933.145840][T23221] Quota error (device loop0): write_blk: dquota write failed [ 933.175003][T23221] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 933.195585][T23221] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.8372: Failed to acquire dquot type 1 [ 933.250925][T23221] EXT4-fs (loop0): 1 truncate cleaned up [ 933.258681][T23221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 933.327489][T23221] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 933.383849][T23219] loop2: detected capacity change from 0 to 32768 [ 933.473292][T23221] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 933.651145][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 934.238944][T23255] netlink: 'syz.2.8386': attribute type 10 has an invalid length. [ 934.291159][T23255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8386'. [ 934.411190][T23255] team0: Port device geneve0 added [ 934.774097][T23268] binfmt_misc: register: failed to install interpreter file ./file0 [ 934.978579][T23244] loop5: detected capacity change from 0 to 32768 [ 935.046125][T23244] [ 935.046125][T23244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 935.046125][T23244] [ 935.177357][T23277] loop2: detected capacity change from 0 to 1024 [ 935.202713][T23275] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 935.219923][T22967] [ 935.219923][T22967] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 935.219923][T22967] [ 935.245433][T22967] [ 935.245433][T22967] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 935.245433][T22967] [ 935.256873][T23279] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8398'. [ 935.439341][T23281] Cannot find map_set index 0 as target [ 935.555285][ T9] hfsplus: b-tree write err: -5, ino 4 [ 935.869607][T23293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8405'. [ 936.035277][T23298] loop1: detected capacity change from 0 to 164 [ 936.136618][T23293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8405'. [ 936.517598][T23306] loop2: detected capacity change from 0 to 16 [ 936.559535][T23306] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 936.640177][T23287] loop5: detected capacity change from 0 to 32768 [ 936.714215][T23287] [ 936.714215][T23287] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 936.714215][T23287] [ 936.811634][T23287] read_mapping_page failed! [ 936.838963][T23287] ERROR: (device loop5): txCommit: [ 936.838963][T23287] [ 936.888088][T23311] loop1: detected capacity change from 0 to 512 [ 936.940317][T23311] EXT4-fs (loop1): orphan cleanup on readonly fs [ 936.961152][T23311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8413: bg 0: block 248: padding at end of block bitmap is not set [ 937.018076][T22967] [ 937.018076][T22967] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 937.018076][T22967] [ 937.071013][T23311] Quota error (device loop1): write_blk: dquota write failed [ 937.128583][T23311] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 937.128756][T22967] [ 937.128756][T22967] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 937.128756][T22967] [ 937.145008][T23311] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.8413: Failed to acquire dquot type 1 [ 937.197878][T23311] EXT4-fs (loop1): 1 truncate cleaned up [ 937.220779][T23311] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 937.252488][T23296] loop3: detected capacity change from 0 to 32768 [ 937.309259][T23311] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 937.392197][T23296] XFS (loop3): Mounting V5 Filesystem [ 937.434568][T23304] loop0: detected capacity change from 0 to 32768 [ 937.444301][T23311] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 937.574117][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 937.607145][T23304] read_mapping_page failed! [ 937.696185][T23296] XFS (loop3): Ending clean mount [ 937.909286][ T4278] XFS (loop3): Unmounting Filesystem [ 938.332619][T23353] netlink: 'syz.0.8425': attribute type 79 has an invalid length. [ 938.716748][T23365] loop5: detected capacity change from 0 to 128 [ 938.788756][T23365] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 938.844402][T23365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 939.077144][T23376] netlink: 'syz.0.8436': attribute type 5 has an invalid length. [ 939.146696][T23380] loop2: detected capacity change from 0 to 16 [ 939.154222][T23378] loop3: detected capacity change from 0 to 256 [ 939.184827][T23380] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 939.230757][T23378] FAT-fs (loop3): Directory bread(block 64) failed [ 939.278829][T23378] FAT-fs (loop3): Directory bread(block 65) failed [ 939.285529][T23378] FAT-fs (loop3): Directory bread(block 66) failed [ 939.306805][T23380] cramfs: Error -3 while decompressing! [ 939.328798][T23378] FAT-fs (loop3): Directory bread(block 67) failed [ 939.335743][T23378] FAT-fs (loop3): Directory bread(block 68) failed [ 939.347709][T23378] FAT-fs (loop3): Directory bread(block 69) failed [ 939.365250][T23380] cramfs: ffffffff96d8b1e8(27)->ffff88804bce4000(4096) [ 939.378351][T23378] FAT-fs (loop3): Directory bread(block 70) failed [ 939.391224][T23384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8440'. [ 939.399179][T23380] cramfs: Error -3 while decompressing! [ 939.408735][T23380] cramfs: ffffffff96d8b203(16)->ffff88804c2ad000(4096) [ 939.414113][T23378] FAT-fs (loop3): Directory bread(block 71) failed [ 939.440723][T23380] cramfs: Error -3 while decompressing! [ 939.461709][T23378] FAT-fs (loop3): Directory bread(block 72) failed [ 939.470271][T23380] cramfs: ffffffff96d8b1e8(27)->ffff88804bce4000(4096) [ 939.477446][ T26] audit: type=1800 audit(939.720:270): pid=23380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8438" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 939.491801][T23378] FAT-fs (loop3): Directory bread(block 73) failed [ 940.014058][ T26] audit: type=1107 audit(940.260:271): pid=23403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 940.053237][T23406] device wlan0 left promiscuous mode [ 940.098569][T23406] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 940.521482][T23424] loop1: detected capacity change from 0 to 256 [ 940.668399][T12950] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 940.865872][T12950] usb 1-1: Using ep0 maxpacket: 32 [ 940.873329][T12950] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 940.920813][T12950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.961731][T12950] usb 1-1: config 0 has no interface number 0 [ 940.979017][T12950] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 941.035745][T12950] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 941.076374][T12950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.106748][T12950] usb 1-1: Product: syz [ 941.130659][T12950] usb 1-1: Manufacturer: syz [ 941.135333][T12950] usb 1-1: SerialNumber: syz [ 941.162514][T12950] usb 1-1: config 0 descriptor?? [ 941.202248][T12950] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 941.248037][T12950] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 941.282109][ T26] audit: type=1326 audit(941.530:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.2.8471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 941.375883][ T26] audit: type=1326 audit(941.570:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.2.8471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 941.378620][T12950] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 941.458892][T12950] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 941.514524][ T26] audit: type=1326 audit(941.570:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.2.8471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 941.574681][T23454] netlink: 'syz.5.8474': attribute type 1 has an invalid length. [ 941.584659][ T26] audit: type=1326 audit(941.570:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.2.8471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 941.620140][T23454] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8474'. [ 941.642556][T12950] usb 1-1: USB disconnect, device number 2 [ 941.676743][ T26] audit: type=1326 audit(941.570:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.2.8471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 941.735302][ T26] audit: type=1326 audit(941.570:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.2.8471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 941.765642][ T26] audit: type=1326 audit(941.570:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.2.8471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 941.816220][ T26] audit: type=1326 audit(941.570:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.2.8471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f899699aeb9 code=0x7ffc0000 [ 942.617061][T23489] loop5: detected capacity change from 0 to 64 [ 942.706431][T23496] loop1: detected capacity change from 0 to 256 [ 942.749031][T23496] exfat: Deprecated parameter 'utf8' [ 942.786823][T23496] exfat: Deprecated parameter 'utf8' [ 942.801191][T23496] exfat: Deprecated parameter 'utf8' [ 942.866343][T23496] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 942.878849][T12940] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 943.019377][T23496] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 943.045622][T23496] exFAT-fs (loop1): Filesystem has been set read-only [ 943.071817][T12940] usb 1-1: Using ep0 maxpacket: 8 [ 943.083650][T12940] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 943.108482][T12940] usb 1-1: config 0 has no interface number 0 [ 943.127328][T12940] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 943.154772][T12940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.188457][T12940] usb 1-1: Product: syz [ 943.192705][T12940] usb 1-1: Manufacturer: syz [ 943.212627][T12940] usb 1-1: SerialNumber: syz [ 943.264708][T12940] usb 1-1: config 0 descriptor?? [ 943.498627][T12940] usb 1-1: USB disconnect, device number 3 [ 943.618555][T23493] loop3: detected capacity change from 0 to 32768 [ 943.666976][T23493] JBD2: Invalid start block of journal: 67108866 [ 943.678849][T23493] (syz.3.8495,23493,0):ocfs2_journal_wipe:1183 ERROR: status = -22 [ 943.700575][T23493] (syz.3.8495,23493,0):ocfs2_check_volume:2420 ERROR: status = -22 [ 943.723880][T23493] (syz.3.8495,23493,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 943.758151][T23493] (syz.3.8495,23493,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 943.784207][T23493] (syz.3.8495,23493,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 943.828148][T23493] FAT-fs (loop3): invalid media value (0x66) [ 943.838994][T23519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8506'. [ 943.845851][T23493] FAT-fs (loop3): Can't find a valid FAT filesystem [ 943.870306][T23519] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 944.176703][T23530] loop2: detected capacity change from 0 to 2048 [ 944.234810][T23530] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 944.324348][T23537] loop1: detected capacity change from 0 to 256 [ 944.339515][T23530] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 944.393697][T23530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 944.454644][T23537] FAT-fs (loop1): Directory bread(block 64) failed [ 944.472401][T23538] device bond0 entered promiscuous mode [ 944.484517][T23537] FAT-fs (loop1): Directory bread(block 65) failed [ 944.495301][T23538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.507937][T23537] FAT-fs (loop1): Directory bread(block 66) failed [ 944.535167][T23537] FAT-fs (loop1): Directory bread(block 67) failed [ 944.575950][T23537] FAT-fs (loop1): Directory bread(block 68) failed [ 944.606209][T23537] FAT-fs (loop1): Directory bread(block 69) failed [ 944.631885][T23537] FAT-fs (loop1): Directory bread(block 70) failed [ 944.658672][T23537] FAT-fs (loop1): Directory bread(block 71) failed [ 944.687791][T23537] FAT-fs (loop1): Directory bread(block 72) failed [ 944.707623][T23537] FAT-fs (loop1): Directory bread(block 73) failed [ 945.124145][T23552] loop2: detected capacity change from 0 to 256 [ 945.182864][T23552] exfat: Deprecated parameter 'namecase' [ 945.210535][T23552] exfat: Deprecated parameter 'namecase' [ 945.216348][T23552] exfat: Deprecated parameter 'utf8' [ 945.324018][T23552] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5417aa89, utbl_chksum : 0xe619d30d) [ 945.670525][T23562] loop1: detected capacity change from 0 to 4096 [ 945.944918][T23570] loop3: detected capacity change from 0 to 2048 [ 946.017741][T23570] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 946.079175][T23575] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 946.808042][T23597] netlink: 'syz.3.8543': attribute type 1 has an invalid length. [ 946.848725][T23597] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8543'. [ 946.871401][T23602] loop1: detected capacity change from 0 to 64 [ 946.951931][T23602] hfs: keylen 94 too large [ 947.017477][T23600] loop0: detected capacity change from 0 to 4096 [ 947.911955][T23631] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8558'. [ 948.214973][T23638] loop1: detected capacity change from 0 to 764 [ 948.290460][T23638] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 948.752508][T23655] loop5: detected capacity change from 0 to 512 [ 949.498968][T23682] autofs4:pid:23682:autofs_fill_super: called with bogus options [ 949.510862][T23673] loop2: detected capacity change from 0 to 4096 [ 949.536925][T23673] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 949.840926][T23673] ntfs: (device loop2): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 949.873603][T23673] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 949.913919][T23673] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 949.987567][T23673] ntfs: volume version 3.1. [ 950.016820][T23659] loop0: detected capacity change from 0 to 32768 [ 950.038362][T23673] ntfs: (device loop2): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 950.057682][T23673] ntfs: (device loop2): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 950.102170][T23673] ntfs: (device loop2): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 950.251416][ T4307] read_mapping_page failed! [ 950.256008][ T4307] ERROR: (device loop0): txCommit: [ 950.256008][ T4307] [ 950.308788][ T4307] ERROR: (device loop0): remounting filesystem as read-only [ 950.353459][ T4307] jfs_write_inode: jfs_commit_inode failed! [ 950.673447][T23707] netlink: 'syz.5.8595': attribute type 5 has an invalid length. [ 951.371672][T23735] loop3: detected capacity change from 0 to 8 [ 951.475682][T23735] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 951.745079][ T26] audit: type=1326 audit(951.990:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.8614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7ffc0000 [ 951.837116][ T26] audit: type=1326 audit(952.030:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.8614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f359639aeb9 code=0x7ffc0000 [ 951.929670][ T26] audit: type=1326 audit(952.030:282): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.8614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7ffc0000 [ 952.806929][T23784] program syz.3.8632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.833646][T23784] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 952.954935][T23751] loop1: detected capacity change from 0 to 32768 [ 953.091874][T23788] loop5: detected capacity change from 0 to 2048 [ 953.125492][T23788] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 953.187647][T23788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 953.531400][T23806] autofs4:pid:23806:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 953.859691][T23820] netlink: 'syz.1.8649': attribute type 17 has an invalid length. [ 953.867611][T23820] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8649'. [ 954.047051][T23822] loop3: detected capacity change from 0 to 256 [ 954.141294][T23822] FAT-fs (loop3): Directory bread(block 64) failed [ 954.216316][T23822] FAT-fs (loop3): Directory bread(block 65) failed [ 954.245814][T23822] FAT-fs (loop3): Directory bread(block 66) failed [ 954.297688][T23822] FAT-fs (loop3): Directory bread(block 67) failed [ 954.306020][T23822] FAT-fs (loop3): Directory bread(block 68) failed [ 954.316263][T23830] IPv6: Can't replace route, no match found [ 954.332515][T23822] FAT-fs (loop3): Directory bread(block 69) failed [ 954.385570][T23822] FAT-fs (loop3): Directory bread(block 70) failed [ 954.429659][T23822] FAT-fs (loop3): Directory bread(block 71) failed [ 954.467936][T23822] FAT-fs (loop3): Directory bread(block 72) failed [ 954.487980][T23822] FAT-fs (loop3): Directory bread(block 73) failed [ 955.134077][T23853] loop5: detected capacity change from 0 to 2048 [ 955.170245][T23853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 956.254811][T23893] device sit0 entered promiscuous mode [ 956.309318][T23893] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8685'. [ 956.397334][T23888] loop1: detected capacity change from 0 to 4096 [ 956.499167][T23874] loop0: detected capacity change from 0 to 32768 [ 956.548656][T12940] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 956.558445][T23896] netlink: 'syz.5.8686': attribute type 3 has an invalid length. [ 956.595773][T23896] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8686'. [ 956.619121][T23874] syz.0.8676: attempt to access beyond end of device [ 956.619121][T23874] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 956.668422][T23874] metapage_write_end_io: I/O error [ 956.741155][T12940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.759985][T23874] blkno = 8ed2c, nblocks = 1 [ 956.764662][T23874] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 956.764662][T23874] [ 956.790433][T12940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.824787][T12940] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 956.869111][T12940] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 956.883824][T23874] ERROR: (device loop0): remounting filesystem as read-only [ 956.898539][T12940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.951044][T12940] usb 3-1: config 0 descriptor?? [ 956.954219][T23874] blkno = 8ed2c, nblocks = 1 [ 956.977966][T23874] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 956.977966][T23874] [ 956.992739][T12940] hub 3-1:0.0: USB hub found [ 957.165327][T12940] hub 3-1:0.0: 14 ports detected [ 957.175449][T12940] hub 3-1:0.0: insufficient power available to use all downstream ports [ 957.225822][ T107] blkno = 8ed2c, nblocks = 4 [ 957.230750][ T107] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 957.230750][ T107] [ 957.267681][ T4271] syz-executor: attempt to access beyond end of device [ 957.267681][ T4271] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 957.288615][ T4271] metapage_write_end_io: I/O error [ 957.304333][ T4271] JFS: metapage_get_blocks failed [ 957.334411][ T4271] JFS: metapage_get_blocks failed [ 957.348761][ T4271] JFS: metapage_get_blocks failed [ 957.368491][ T4271] JFS: metapage_get_blocks failed [ 957.374216][T12940] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 957.384914][T12940] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 957.455436][T12940] usb 3-1: USB disconnect, device number 13 [ 957.743651][T12950] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 957.895206][T23906] loop1: detected capacity change from 0 to 32768 [ 957.932077][T12950] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 957.956092][T12950] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 957.984981][T12950] usb 4-1: Product: syz [ 957.999184][T12950] usb 4-1: SerialNumber: syz [ 958.017235][T12950] usb 4-1: config 0 descriptor?? [ 958.142344][T23922] ieee802154 phy0 wpan0: encryption failed: -22 [ 958.248341][T12950] hso 4-1:0.0: Failed to find BULK IN ep [ 958.330162][T23926] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.8701'. [ 958.365431][T23918] loop5: detected capacity change from 0 to 32768 [ 958.463759][T12950] usb 4-1: USB disconnect, device number 6 [ 959.454885][T23951] ieee802154 phy0 wpan0: encryption failed: -90 [ 959.702639][T23958] loop5: detected capacity change from 0 to 4096 [ 960.348336][T23980] netlink: 'syz.5.8727': attribute type 19 has an invalid length. [ 960.370917][T23980] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8727'. [ 960.511436][T23985] netlink: 'syz.3.8729': attribute type 5 has an invalid length. [ 960.733075][T23990] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.8732'. [ 960.826933][T23992] loop3: detected capacity change from 0 to 8 [ 960.904748][T23992] SQUASHFS error: zlib decompression failed, data probably corrupt [ 960.934581][T23992] SQUASHFS error: Failed to read block 0x4de: -5 [ 960.968598][T23992] SQUASHFS error: zlib decompression failed, data probably corrupt [ 960.983684][T23992] SQUASHFS error: Failed to read block 0x4df: -5 [ 961.038875][T23992] SQUASHFS error: zlib decompression failed, data probably corrupt [ 961.055724][T23996] loop5: detected capacity change from 0 to 256 [ 961.068855][T23992] SQUASHFS error: Failed to read block 0x4e0: -5 [ 961.091294][T23992] SQUASHFS error: zlib decompression failed, data probably corrupt [ 961.131743][T23992] SQUASHFS error: Failed to read block 0x4de: -5 [ 961.142914][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 961.142930][ T26] audit: type=1800 audit(961.390:284): pid=23992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8733" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 961.168310][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.181813][T23996] FAT-fs (loop5): Directory bread(block 64) failed [ 961.201941][T23996] FAT-fs (loop5): Directory bread(block 65) failed [ 961.223709][T23996] FAT-fs (loop5): Directory bread(block 66) failed [ 961.245362][T23996] FAT-fs (loop5): Directory bread(block 67) failed [ 961.266088][T23996] FAT-fs (loop5): Directory bread(block 68) failed [ 961.280666][T23996] FAT-fs (loop5): Directory bread(block 69) failed [ 961.295424][T23996] FAT-fs (loop5): Directory bread(block 70) failed [ 961.310149][T23996] FAT-fs (loop5): Directory bread(block 71) failed [ 961.348856][T23996] FAT-fs (loop5): Directory bread(block 72) failed [ 961.355478][T23996] FAT-fs (loop5): Directory bread(block 73) failed [ 961.954749][T24010] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 962.294022][T24020] loop3: detected capacity change from 0 to 16 [ 962.348522][T24020] cramfs: empty filesystem [ 962.866174][T24030] loop2: detected capacity change from 0 to 2048 [ 962.969697][T24030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 963.068230][T24030] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 963.198341][T22644] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 963.290779][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 963.398518][T22644] usb 4-1: Using ep0 maxpacket: 32 [ 963.405800][T22644] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 963.422405][T22644] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 963.463009][T22644] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 963.491852][T22644] usb 4-1: config 1 has no interface number 0 [ 963.508740][T22644] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 963.528336][T22644] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 963.555267][T22644] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 963.595206][T22644] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 963.635029][T22644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.666232][T24035] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 963.696211][T22644] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 963.803629][T24058] loop5: detected capacity change from 0 to 512 [ 963.845917][T24058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 963.892253][T24035] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 963.911214][T24058] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 963.938101][T22644] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 963.994333][T22967] EXT4-fs (loop5): unmounting filesystem. [ 964.143513][T12931] usb 4-1: USB disconnect, device number 7 [ 964.159662][T12931] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 964.491862][ T26] audit: type=1326 audit(964.740:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24075 comm="syz.5.8772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x50000 [ 964.578159][ T26] audit: type=1326 audit(964.740:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24075 comm="syz.5.8772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x50000 [ 964.638363][ T26] audit: type=1326 audit(964.760:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24075 comm="syz.5.8772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x50000 [ 964.697792][ T26] audit: type=1326 audit(964.760:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24075 comm="syz.5.8772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x50000 [ 964.748372][ T26] audit: type=1326 audit(964.760:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24075 comm="syz.5.8772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x50000 [ 964.808424][ T26] audit: type=1326 audit(964.760:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24075 comm="syz.5.8772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x50000 [ 964.878522][ T26] audit: type=1326 audit(964.760:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24075 comm="syz.5.8772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x50000 [ 964.900334][T12931] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 964.934351][ T26] audit: type=1326 audit(964.760:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24075 comm="syz.5.8772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x50000 [ 964.999877][ T26] audit: type=1326 audit(964.760:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24075 comm="syz.5.8772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x50000 [ 965.090544][T12931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 965.121356][T12931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 965.157776][T12931] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 965.174767][T12931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.204476][T12931] usb 3-1: Product: syz [ 965.228361][T12931] usb 3-1: Manufacturer: syz [ 965.233037][T12931] usb 3-1: SerialNumber: syz [ 965.261785][T12931] usb 3-1: config 0 descriptor?? [ 965.398569][T24092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8780'. [ 965.448755][T24092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8780'. [ 965.474472][T12931] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input56 [ 965.700948][T12931] usb 3-1: USB disconnect, device number 14 [ 965.770765][T24099] loop0: detected capacity change from 0 to 512 [ 965.881711][T24099] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 966.069339][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 966.354629][T24119] netlink: 'syz.2.8792': attribute type 4 has an invalid length. [ 966.408381][T24119] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8792'. [ 966.946230][T24136] loop2: detected capacity change from 0 to 2048 [ 967.064213][T24141] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 967.207710][T24145] loop3: detected capacity change from 0 to 256 [ 967.416528][T24151] vivid-007: disconnect [ 967.432704][T24150] vivid-007: reconnect [ 968.081574][T24173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8817'. [ 968.148921][T24173] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8817'. [ 968.167039][T24173] netlink: 'syz.2.8817': attribute type 1 has an invalid length. [ 968.462616][T24187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8823'. [ 969.110241][T24204] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8833'. [ 969.311861][T24208] loop5: detected capacity change from 0 to 128 [ 969.571728][T24191] loop0: detected capacity change from 0 to 32768 [ 969.619378][T24191] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.8827 (24191) [ 969.698063][T24191] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 969.729786][T24191] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 969.770620][T24191] BTRFS info (device loop0): setting nodatacow, compression disabled [ 969.828039][T24191] BTRFS info (device loop0): force clearing of disk cache [ 969.859213][T24191] BTRFS info (device loop0): enabling ssd optimizations [ 969.880190][T24221] loop2: detected capacity change from 0 to 16 [ 969.899760][T24191] BTRFS info (device loop0): using spread ssd allocation scheme [ 969.907496][T24191] BTRFS info (device loop0): turning off barriers [ 969.915069][T24221] erofs: (device loop2): mounted with root inode @ nid 36. [ 969.998674][T24191] BTRFS info (device loop0): disabling free space tree [ 970.005809][T24191] BTRFS info (device loop0): not using ssd optimizations [ 970.058403][T24191] BTRFS info (device loop0): not using spread ssd allocation scheme [ 970.470162][T24191] BTRFS info (device loop0): rebuilding free space tree [ 970.492643][T24254] xt_TCPMSS: Only works on TCP SYN packets [ 970.533498][T24191] BTRFS info (device loop0): disabling free space tree [ 970.588763][T24191] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 970.605920][T24191] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 970.620403][T24256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8850'. [ 970.913332][T24264] loop2: detected capacity change from 0 to 256 [ 970.947996][ T4271] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 971.158468][ T4389] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (4389) [ 971.828478][T12931] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 971.932264][T24285] loop0: detected capacity change from 0 to 4096 [ 971.960103][T24285] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 972.030946][T12931] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 972.049606][T12931] usb 4-1: config 0 has no interface number 0 [ 972.055776][T12931] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 972.124193][T12931] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 972.165124][T12931] usb 4-1: config 0 interface 255 has no altsetting 0 [ 972.177499][T12931] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 972.207345][T12931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.246366][T12931] usb 4-1: config 0 descriptor?? [ 972.276341][T12931] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 972.471980][T12940] usb 4-1: USB disconnect, device number 8 [ 972.556918][T24307] netlink: 'syz.5.8873': attribute type 2 has an invalid length. [ 972.596190][T24307] netlink: 'syz.5.8873': attribute type 1 has an invalid length. [ 973.240046][T24327] ax25_connect(): syz.2.8883 uses autobind, please contact jreuter@yaina.de [ 973.267648][T24301] loop1: detected capacity change from 0 to 32768 [ 973.598140][T24335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8887'. [ 974.351392][T24370] netlink: 25 bytes leftover after parsing attributes in process `syz.3.8903'. [ 974.757269][T24376] loop3: detected capacity change from 0 to 4096 [ 975.005122][T24376] ntfs3: loop3: ino=5, "/" directory corrupted [ 975.026953][T24376] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 975.185027][T12931] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 975.409126][T12931] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 975.454976][T12931] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 975.490805][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 975.490821][ T26] audit: type=1326 audit(975.740:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24406 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7ffc0000 [ 975.499452][T12931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.550366][T12931] usb 3-1: Product: syz [ 975.554601][T12931] usb 3-1: Manufacturer: syz [ 975.559780][T12931] usb 3-1: SerialNumber: syz [ 975.584992][T12931] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 975.597238][T24410] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8923'. [ 975.614278][ T26] audit: type=1326 audit(975.790:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24406 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f359639c747 code=0x7ffc0000 [ 975.656496][T12931] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 975.728391][T12950] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 975.799669][ T26] audit: type=1326 audit(975.790:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24406 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f359635b78e code=0x7ffc0000 [ 975.847181][ T26] audit: type=1326 audit(975.790:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24406 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f359635b78e code=0x7ffc0000 [ 975.876811][ C0] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM [ 975.904840][T24416] loop1: detected capacity change from 0 to 512 [ 975.918424][ T26] audit: type=1326 audit(975.790:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24406 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f359635b78e code=0x7ffc0000 [ 975.951280][T12950] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 975.972207][T12950] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 976.003356][T24416] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.8924: couldn't read orphan inode 26 (err -116) [ 976.017461][ T26] audit: type=1326 audit(975.790:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24406 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f359635b78e code=0x7ffc0000 [ 976.037020][T12950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.056191][T24416] EXT4-fs (loop1): Remounting filesystem read-only [ 976.076386][T12950] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 976.084360][T24276] usb 3-1: USB disconnect, device number 15 [ 976.093013][T24416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 976.181172][ T26] audit: type=1326 audit(975.810:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24406 comm="syz.5.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7ffc0000 [ 976.244728][T24416] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #3: comm syz.1.8924: corrupted inode contents [ 976.298900][T24416] EXT4-fs (loop1): Remounting filesystem read-only [ 976.305557][T24416] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #3: comm syz.1.8924: mark_inode_dirty error [ 976.337483][T24416] EXT4-fs (loop1): Remounting filesystem read-only [ 976.389280][T24416] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8924: bg 0: block 64: padding at end of block bitmap is not set [ 976.432016][T24430] netlink: 'syz.5.8931': attribute type 2 has an invalid length. [ 976.442749][T24416] EXT4-fs (loop1): Remounting filesystem read-only [ 976.450019][T24416] Quota error (device loop1): write_blk: dquota write failed [ 976.458442][T24416] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 976.468707][T24416] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.8924: Failed to acquire dquot type 0 [ 976.488445][T24416] EXT4-fs (loop1): Remounting filesystem read-only [ 976.615001][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 976.760243][T12931] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 976.767325][T12931] ath9k_htc: Failed to initialize the device [ 976.781918][T24276] usb 3-1: ath9k_htc: USB layer deinitialized [ 976.821234][T24437] loop2: detected capacity change from 0 to 1024 [ 976.857755][T24437] EXT4-fs: Ignoring removed orlov option [ 976.880965][T24437] EXT4-fs (loop2): Test dummy encryption mode enabled [ 976.956758][T24437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 977.263051][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 977.348502][T12476] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 977.359522][T12950] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 977.378230][T12950] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 977.391130][T12950] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 977.414177][T12950] usb 1-1: USB disconnect, device number 4 [ 977.510000][T24461] netlink: 'syz.5.8946': attribute type 10 has an invalid length. [ 977.550369][T12476] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 977.568425][T12931] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 977.581486][T12476] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 977.602628][T12476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.648415][T12476] usb 4-1: Product: syz [ 977.654028][T12476] usb 4-1: Manufacturer: syz [ 977.670000][T12476] usb 4-1: SerialNumber: syz [ 977.689174][T12476] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 977.736153][T12476] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 977.767587][T12931] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 977.794331][T12931] usb 2-1: config 0 has no interface number 1 [ 977.812577][T12931] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 977.856329][T12931] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 977.906917][T12931] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 977.928416][ T52] block nbd2: Attempted send on invalid socket [ 977.934821][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 977.953154][T24449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.969594][T24449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.977599][ T93] block nbd2: Attempted send on invalid socket [ 977.983909][ T93] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 977.988783][T12931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 977.993397][T24471] Mount JFS Failure: -5 [ 977.993410][T24471] jfs_mount failed w/return code = -5 [ 978.088845][T12931] usb 2-1: SerialNumber: syz [ 978.103542][T12931] usb 2-1: config 0 descriptor?? [ 978.121113][T12940] usb 4-1: USB disconnect, device number 9 [ 978.137966][T12931] usb 2-1: Found UVC 0.00 device (0002:0000) [ 978.165667][T12931] usb 2-1: No valid video chain found. [ 978.340073][T12931] usb 2-1: USB disconnect, device number 102 [ 978.758400][T12476] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 978.765477][T12476] ath9k_htc: Failed to initialize the device [ 978.789707][T12940] usb 4-1: ath9k_htc: USB layer deinitialized [ 978.915458][T24477] loop0: detected capacity change from 0 to 32768 [ 978.994980][T24495] xt_TCPMSS: Only works on TCP SYN packets [ 979.014803][T24477] [ 979.014803][T24477] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 979.014803][T24477] [ 979.068014][T24477] __jfs_setxattr: xattr_size = 72, new_size = 166 [ 979.220608][ T75] [ 979.220608][ T75] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 979.220608][ T75] [ 979.268037][ T75] [ 979.268037][ T75] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 979.268037][ T75] [ 979.343214][ T108] [ 979.343214][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 979.343214][ T108] [ 979.383797][ T4271] [ 979.383797][ T4271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 979.383797][ T4271] [ 979.438493][ T4271] [ 979.438493][ T4271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 979.438493][ T4271] [ 979.759801][T24509] loop3: detected capacity change from 0 to 4096 [ 979.813480][T24509] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 980.776340][T24547] device sit0 entered promiscuous mode [ 980.870215][T24547] netlink: 'syz.3.8989': attribute type 1 has an invalid length. [ 980.909227][T24547] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8989'. [ 980.955263][T24520] loop5: detected capacity change from 0 to 32768 [ 981.165394][T24520] XFS (loop5): Mounting V5 Filesystem [ 981.180785][T24562] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8994'. [ 981.433620][T24520] XFS (loop5): Ending clean mount [ 981.469073][T24520] XFS (loop5): Quotacheck needed: Please wait. [ 981.508419][T24276] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 981.626310][T24520] XFS (loop5): Quotacheck: Done. [ 981.708477][T24276] usb 3-1: Using ep0 maxpacket: 8 [ 981.715657][T24276] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 981.748817][T24276] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 981.788179][T24276] usb 3-1: config 6 has no interface number 0 [ 981.796823][T24276] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 981.810213][T24277] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 981.831653][T24276] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 981.835452][T22967] XFS (loop5): Unmounting Filesystem [ 981.847330][T24276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.873697][T24581] netlink: 'syz.3.9002': attribute type 6 has an invalid length. [ 981.922302][T24276] usb 3-1: Product: syz [ 981.929799][T24276] usb 3-1: Manufacturer: syz [ 981.958588][T24276] usb 3-1: SerialNumber: syz [ 981.999502][T24276] hso 3-1:6.2: Failed to find INT IN ep [ 982.002743][T24585] loop3: detected capacity change from 0 to 512 [ 982.038557][T24277] usb 2-1: Using ep0 maxpacket: 16 [ 982.045647][T24277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 982.087521][T24585] EXT4-fs error (device loop3): __ext4_fill_super:5423: inode #2: comm syz.3.9005: casefold flag without casefold feature [ 982.106954][T24277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 982.136939][T24585] EXT4-fs (loop3): get root inode failed [ 982.154254][T24585] EXT4-fs (loop3): mount failed [ 982.163127][T24277] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 982.187827][T24277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.207901][T24277] usb 2-1: Product: syz [ 982.214001][T24277] usb 2-1: Manufacturer: syz [ 982.218980][T24277] usb 2-1: SerialNumber: syz [ 982.233940][T24277] usb 2-1: config 0 descriptor?? [ 982.240813][T24276] usb 3-1: USB disconnect, device number 16 [ 982.284321][T24277] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 982.452550][ T46] usb 2-1: Failed to submit usb control message: -71 [ 982.462466][T24277] usb 2-1: USB disconnect, device number 103 [ 982.488367][ T46] usb 2-1: unable to send the bmi data to the device: -71 [ 982.498700][ T46] usb 2-1: unable to get target info from device [ 982.505091][ T46] usb 2-1: could not get target info (-71) [ 982.533529][ T46] usb 2-1: could not probe fw (-71) [ 982.752557][T24601] netlink: 3648 bytes leftover after parsing attributes in process `syz.5.9003'. [ 982.762627][T24601] netlink: 3648 bytes leftover after parsing attributes in process `syz.5.9003'. [ 983.197642][T24617] tmpfs: Bad value for 'mpol' [ 983.582352][T24635] loop1: detected capacity change from 0 to 256 [ 983.764236][T24635] FAT-fs (loop1): Directory bread(block 64) failed [ 983.778415][T24635] FAT-fs (loop1): Directory bread(block 65) failed [ 983.792444][T24635] FAT-fs (loop1): Directory bread(block 66) failed [ 983.819790][T24635] FAT-fs (loop1): Directory bread(block 67) failed [ 983.826574][T24635] FAT-fs (loop1): Directory bread(block 68) failed [ 983.848391][T24635] FAT-fs (loop1): Directory bread(block 69) failed [ 983.894422][T24635] FAT-fs (loop1): Directory bread(block 70) failed [ 983.914755][T24635] FAT-fs (loop1): Directory bread(block 71) failed [ 983.940507][T24635] FAT-fs (loop1): Directory bread(block 72) failed [ 983.968815][T24635] FAT-fs (loop1): Directory bread(block 73) failed [ 984.500935][T24664] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9041'. [ 984.586416][T24670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9044'. [ 984.608603][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9044'. [ 985.164588][T24689] loop3: detected capacity change from 0 to 1024 [ 985.220161][T24693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9054'. [ 985.758038][T24678] loop2: detected capacity change from 0 to 32768 [ 986.017415][T24714] loop0: detected capacity change from 0 to 128 [ 986.089308][T24714] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 986.143048][T24714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 986.277401][T24703] loop1: detected capacity change from 0 to 32768 [ 986.307214][T24703] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9060 (24703) [ 986.367441][T24703] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 986.418537][T24703] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 986.458619][T24703] BTRFS info (device loop1): force zlib compression, level 3 [ 986.466085][T24703] BTRFS info (device loop1): force clearing of disk cache [ 986.495050][T24703] BTRFS info (device loop1): use zlib compression, level 3 [ 986.545995][T24703] BTRFS info (device loop1): turning on async discard [ 986.585765][T24703] BTRFS info (device loop1): allowing degraded mounts [ 986.608450][T24703] BTRFS info (device loop1): enabling disk space caching [ 986.633937][T24703] BTRFS info (device loop1): disk space caching is enabled [ 986.815685][T24731] loop5: detected capacity change from 0 to 1024 [ 986.844305][T24731] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 987.089810][T24703] BTRFS info (device loop1): enabling ssd optimizations [ 987.103866][T24703] BTRFS info (device loop1): rebuilding free space tree [ 987.129905][T24703] BTRFS info (device loop1): disabling free space tree [ 987.136983][T24703] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 987.175746][T24703] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 987.456171][ T4267] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 987.480297][T24720] loop0: detected capacity change from 0 to 32768 [ 987.526265][T24720] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.9069 (24720) [ 987.547809][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.722736][T24720] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 987.744669][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.747372][T24720] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 987.759093][T24764] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 987.806581][T24720] BTRFS info (device loop0): turning on flush-on-commit [ 987.834837][ T4389] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (4389) [ 987.835597][T24720] BTRFS info (device loop0): enabling disk space caching [ 987.900967][T24720] BTRFS info (device loop0): disabling tree log [ 987.919406][T24720] BTRFS info (device loop0): enabling ssd optimizations [ 987.952872][T24720] BTRFS info (device loop0): force clearing of disk cache [ 987.998382][T24720] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 988.062331][T24720] BTRFS info (device loop0): use lzo compression, level 0 [ 988.098350][T24720] BTRFS info (device loop0): setting nodatacow, compression disabled [ 988.106509][T24720] BTRFS info (device loop0): disk space caching is enabled [ 988.408522][T24778] loop2: detected capacity change from 0 to 1024 [ 988.497222][T24720] BTRFS info (device loop0): rebuilding free space tree [ 988.510432][ T4569] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 988.547375][T24720] BTRFS info (device loop0): disabling free space tree [ 988.578603][T24720] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 988.619736][T24720] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 988.720653][T24720] BTRFS info (device loop0): checking UUID tree [ 988.831432][T24720] BTRFS info (device loop0: state M): setting datasum, datacow enabled [ 988.869108][T24720] BTRFS info (device loop0: state M): force clearing of disk cache [ 988.877144][T24720] BTRFS info (device loop0: state M): use lzo compression, level 0 [ 988.948792][T24720] BTRFS info (device loop0: state M): setting nodatacow, compression disabled [ 989.183921][ T4271] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 989.201520][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9096'. [ 989.268820][T24815] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9096'. [ 989.766822][T24829] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 990.381709][T24853] netlink: 'syz.2.9112': attribute type 1 has an invalid length. [ 990.418643][T24845] loop3: detected capacity change from 0 to 4096 [ 990.491772][T24845] ntfs: volume version 3.1. [ 990.948470][T24869] xt_hashlimit: max too large, truncated to 1048576 [ 991.345613][ T26] audit: type=1326 audit(997.592:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24884 comm="syz.0.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0779aeb9 code=0x7ffc0000 [ 991.394773][ T26] audit: type=1326 audit(997.592:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24884 comm="syz.0.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0779aeb9 code=0x7ffc0000 [ 991.456174][ T26] audit: type=1326 audit(997.632:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24884 comm="syz.0.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fde0779aeb9 code=0x7ffc0000 [ 991.478101][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.535313][ T26] audit: type=1326 audit(997.632:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24884 comm="syz.0.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0779aeb9 code=0x7ffc0000 [ 991.615701][ T26] audit: type=1326 audit(997.632:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24884 comm="syz.0.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0779aeb9 code=0x7ffc0000 [ 991.700037][T24899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9137'. [ 992.306390][ T26] audit: type=1326 audit(998.552:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24924 comm="syz.3.9148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x7ffc0000 [ 992.328253][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.408369][T12940] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 992.431242][ T26] audit: type=1326 audit(998.592:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24924 comm="syz.3.9148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f14bef9aeb9 code=0x7ffc0000 [ 992.499066][ T26] audit: type=1326 audit(998.592:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24924 comm="syz.3.9148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x7ffc0000 [ 992.548488][ T26] audit: type=1326 audit(998.592:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24924 comm="syz.3.9148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x7ffc0000 [ 992.610622][T12940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 992.657596][T24934] netlink: 'syz.1.9154': attribute type 12 has an invalid length. [ 992.660037][T12940] usb 3-1: not running at top speed; connect to a high speed hub [ 992.689785][T12940] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 992.698158][T12940] usb 3-1: config 12 has no interface number 0 [ 992.718953][T24934] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9154'. [ 992.736601][T12940] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 992.749659][T24936] x_tables: duplicate underflow at hook 3 [ 992.761485][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.767872][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.798584][T12940] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 992.817876][T12940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.849559][T12940] usb 3-1: Product: syz [ 992.853811][T12940] usb 3-1: Manufacturer: syz [ 992.859557][T12940] usb 3-1: SerialNumber: syz [ 992.931943][T24942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9158'. [ 993.110404][T24946] loop0: detected capacity change from 0 to 2048 [ 993.163265][T12940] usb 3-1: USB disconnect, device number 17 [ 993.227264][T24951] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 993.267071][T24950] loop1: detected capacity change from 0 to 2048 [ 993.282471][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.301698][T24946] NILFS (loop0): error -2 truncating bmap (ino=16) [ 993.338330][T24950] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 993.437840][T24955] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 993.606029][T24958] netlink: 360 bytes leftover after parsing attributes in process `syz.0.9165'. [ 993.760812][T24962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9167'. [ 993.906971][T24968] netlink: 'syz.3.9171': attribute type 3 has an invalid length. [ 994.351560][T24986] x_tables: unsorted underflow at hook 2 [ 994.589315][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9183'. [ 994.848137][T25006] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9187'. [ 994.978363][ T26] audit: type=1326 audit(1001.222:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25009 comm="syz.5.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7ffc0000 [ 995.166076][T25018] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 995.310508][T25016] loop1: detected capacity change from 0 to 4096 [ 995.378822][T25016] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 996.053108][T25046] Unknown options in mask b7f2 [ 996.077413][T25045] loop3: detected capacity change from 0 to 1024 [ 996.142329][T25048] netlink: 'syz.2.9211': attribute type 1 has an invalid length. [ 996.172383][T25048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9211'. [ 996.419894][T25054] loop5: detected capacity change from 0 to 164 [ 996.947328][T25070] loop5: detected capacity change from 0 to 4096 [ 997.051737][T25070] ntfs: volume version 3.1. [ 997.086837][T25070] __ntfs_error: 12 callbacks suppressed [ 997.086860][T25070] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 997.177743][T25070] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota. [ 997.239363][T25070] ntfs: (device loop5): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 997.285125][T25070] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 997.339212][T25070] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 997.391896][T25070] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 997.519900][T25092] netlink: 'syz.0.9232': attribute type 21 has an invalid length. [ 997.537338][T25092] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9232'. [ 998.248800][T25117] xt_TCPMSS: Only works on TCP SYN packets [ 998.470872][T25125] loop2: detected capacity change from 0 to 64 [ 998.778677][T25137] netlink: 45 bytes leftover after parsing attributes in process `syz.2.9253'. [ 998.999139][T25142] loop1: detected capacity change from 0 to 2048 [ 999.039514][T25142] loop1: p1 < > p3 [ 999.044819][T25142] loop1: p3 size 134217728 extends beyond EOD, truncated [ 999.501933][ T4560] udevd[4560]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 999.515369][ T4389] udevd[4389]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 999.554713][T25160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 999.562048][T25160] IPv6: NLM_F_CREATE should be set when creating new route [ 999.569569][T25160] IPv6: NLM_F_CREATE should be set when creating new route [ 999.576873][T25160] IPv6: NLM_F_CREATE should be set when creating new route [ 1000.119875][T25174] loop3: detected capacity change from 0 to 4096 [ 1000.158435][T25174] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1000.257186][T25174] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1000.751039][T25195] loop0: detected capacity change from 0 to 4096 [ 1000.788444][T22629] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1000.802095][T25195] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1000.848140][T25195] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1000.878918][T25195] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1000.911466][T25195] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1000.947517][T25195] ntfs: volume version 3.1. [ 1000.990622][T22629] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.032513][T22629] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1001.066800][T22629] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1001.117076][T22629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1001.125529][T22629] usb 3-1: SerialNumber: syz [ 1001.170070][T22629] usb 3-1: 0:2 : does not exist [ 1001.234102][T25180] loop5: detected capacity change from 0 to 32768 [ 1001.584000][T22629] usb 3-1: USB disconnect, device number 18 [ 1001.684885][T25217] loop3: detected capacity change from 0 to 4096 [ 1001.699729][T25221] loop0: detected capacity change from 0 to 1024 [ 1001.722029][T25217] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1001.818607][T25217] ntfs3: loop3: try to read out of volume at offset 0xffffffff0000 [ 1002.328177][T25210] loop1: detected capacity change from 0 to 32768 [ 1002.444313][T25210] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1002.488390][T25210] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1002.518672][T25210] BTRFS info (device loop1): force zlib compression, level 3 [ 1002.558325][T25210] BTRFS info (device loop1): turning on flush-on-commit [ 1002.565433][T25210] BTRFS info (device loop1): max_inline at 4096 [ 1002.617314][T25210] BTRFS info (device loop1): using free space tree [ 1002.694654][T25237] loop5: detected capacity change from 0 to 4096 [ 1002.742768][T25237] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 1002.806056][T25248] CIFS mount error: No usable UNC path provided in device string! [ 1002.806056][T25248] [ 1002.907720][T25248] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1003.172262][T25210] BTRFS info (device loop1): enabling ssd optimizations [ 1003.331810][ T4267] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1003.394137][T25275] ./file0: Can't open blockdev [ 1003.545147][T25279] fuse: blksize only supported for fuseblk [ 1003.647755][ T4389] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop1 scanned by udevd (4389) [ 1003.667858][T25283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9311'. [ 1003.754477][T25286] netlink: 'syz.0.9312': attribute type 4 has an invalid length. [ 1004.071947][T25286] device veth1_macvtap left promiscuous mode [ 1004.507800][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9325'. [ 1004.579533][T25314] xt_cgroup: invalid path, errno=-2 [ 1005.051902][T25332] cgroup: name respecified [ 1005.826941][T25363] SET target dimension over the limit! [ 1005.835440][T25366] Invalid ELF header magic: != ELF [ 1006.279597][T25382] loop3: detected capacity change from 0 to 8 [ 1006.286683][T25382] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1006.325883][T25381] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9361'. [ 1006.405726][T25386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9362'. [ 1006.607881][T25395] loop3: detected capacity change from 0 to 128 [ 1006.917732][T25402] loop5: detected capacity change from 0 to 4096 [ 1007.029040][T25408] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1007.048774][T25402] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1007.187812][T25414] tmpfs: Bad value for 'mpol' [ 1007.233690][T22967] EXT4-fs (loop5): unmounting filesystem. [ 1007.623063][T25429] loop3: detected capacity change from 0 to 4096 [ 1007.785482][T25435] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1007.811709][T25429] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1007.843029][T25429] Remounting filesystem read-only [ 1007.968113][T25441] loop5: detected capacity change from 0 to 64 [ 1008.472404][ T93] block nbd1: Attempted send on invalid socket [ 1008.478747][ T93] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.510086][T25456] vxfs: unable to read disk superblock at 1 [ 1008.551698][ T52] block nbd1: Attempted send on invalid socket [ 1008.558113][ T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1008.567779][T25456] vxfs: unable to read disk superblock at 8 [ 1008.573847][T25456] vxfs: can't find superblock. [ 1009.098436][T12940] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1009.310210][T12940] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1009.328819][T12940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.381288][T12940] usb 4-1: config 0 has no interface number 0 [ 1009.444260][T12940] usb 4-1: config 0 interface 4 has no altsetting 0 [ 1009.458315][T12940] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1009.467430][T12940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.545811][T12940] usb 4-1: config 0 descriptor?? [ 1009.582140][T12940] usb 4-1: selecting invalid altsetting 0 [ 1009.708696][T25498] loop0: detected capacity change from 0 to 1764 [ 1009.772378][T12940] usb 4-1: USB disconnect, device number 10 [ 1009.796164][T25498] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1010.219095][T25515] loop2: detected capacity change from 0 to 1024 [ 1010.260183][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1010.260200][ T26] audit: type=1326 audit(1016.512:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.285460][T25515] EXT4-fs: Ignoring removed bh option [ 1010.353363][ T26] audit: type=1326 audit(1016.562:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.384895][ T26] audit: type=1326 audit(1016.562:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.446926][ T26] audit: type=1326 audit(1016.562:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.454453][T25515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1010.469190][ T26] audit: type=1326 audit(1016.562:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.500563][ T26] audit: type=1326 audit(1016.562:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.523007][ T26] audit: type=1326 audit(1016.562:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.545387][ T26] audit: type=1326 audit(1016.562:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.573503][ T26] audit: type=1326 audit(1016.562:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.598590][T25515] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.9420: reserved inode found cleared - inode=18 [ 1010.619337][ T26] audit: type=1326 audit(1016.562:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25516 comm="syz.5.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359639aeb9 code=0x7fc00000 [ 1010.641883][T25515] EXT4-fs (loop2): Remounting filesystem read-only [ 1010.724258][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 1010.778985][T25505] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1011.116837][T25538] loop2: detected capacity change from 0 to 128 [ 1011.238536][T22641] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1011.428547][T25548] kernel profiling enabled (shift: 9) [ 1011.442876][T22641] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1011.484332][T22641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.505206][T22641] usb 2-1: config 0 descriptor?? [ 1011.726515][T25555] netlink: 'syz.0.9439': attribute type 21 has an invalid length. [ 1011.735568][T22641] snd-usb-hiface: probe of 2-1:0.0 failed with error -22 [ 1011.937026][T22641] usb 2-1: USB disconnect, device number 104 [ 1012.106129][T25566] loop0: detected capacity change from 0 to 512 [ 1012.197579][T25566] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 1012.207224][T25566] System zones: 0-2, 18-18, 34-34 [ 1012.243131][T25566] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #3: comm syz.0.9442: corrupted inode contents [ 1012.269345][T25566] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #3: comm syz.0.9442: mark_inode_dirty error [ 1012.332086][T25566] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #3: comm syz.0.9442: corrupted inode contents [ 1012.389293][T25566] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.9442: mark_inode_dirty error [ 1012.409239][T25566] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.9442: Failed to acquire dquot type 0 [ 1012.471085][T25576] loop3: detected capacity change from 0 to 64 [ 1012.509960][T25566] EXT4-fs (loop0): 1 orphan inode deleted [ 1012.528346][T25566] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1012.540818][ T4354] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 1 [ 1012.591664][T25576] Trying to free block not in datazone [ 1012.597765][T25576] Trying to free block not in datazone [ 1012.622649][T25578] loop2: detected capacity change from 0 to 64 [ 1012.750212][T25576] Trying to free block not in datazone [ 1012.765058][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 1013.743760][T25609] loop5: detected capacity change from 0 to 512 [ 1013.770849][T25609] EXT4-fs: Ignoring removed bh option [ 1013.784841][T25614] loop1: detected capacity change from 0 to 512 [ 1013.819220][T25609] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1013.833690][T25614] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9465: bg 0: block 248: padding at end of block bitmap is not set [ 1013.851378][T25614] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.9465: Failed to acquire dquot type 1 [ 1013.868428][T25609] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1013.898563][T25614] EXT4-fs (loop1): 1 truncate cleaned up [ 1013.904336][T25614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1013.934934][T25609] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1013.945584][T25614] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.9465: Failed to acquire dquot type 1 [ 1014.029421][T25609] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1014.094701][T25609] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1014.217727][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1014.230655][T21226] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 1 [ 1014.318701][T22967] EXT4-fs (loop5): unmounting filesystem. [ 1015.386484][T25637] loop0: detected capacity change from 0 to 32768 [ 1015.397891][T25657] loop1: detected capacity change from 0 to 8192 [ 1015.424124][T25637] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.9474 (25637) [ 1015.448055][T25668] netlink: 'syz.2.9489': attribute type 10 has an invalid length. [ 1015.456703][T25657] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1015.471091][T25668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9489'. [ 1015.482840][T25668] device dummy0 entered promiscuous mode [ 1015.488616][T25637] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1015.499530][T25637] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1015.509453][T25637] BTRFS info (device loop0): turning off barriers [ 1015.516069][T25637] BTRFS info (device loop0): enabling auto defrag [ 1015.523278][T25637] BTRFS info (device loop0): force zlib compression, level 3 [ 1015.531441][T25637] BTRFS info (device loop0): enabling ssd optimizations [ 1015.538675][T25657] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1015.539182][T25637] BTRFS info (device loop0): using spread ssd allocation scheme [ 1015.549573][T25657] REISERFS (device loop1): using ordered data mode [ 1015.563331][T25657] reiserfs: using flush barriers [ 1015.569672][T25668] bridge0: port 3(dummy0) entered blocking state [ 1015.576390][T25657] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1015.600896][T25657] REISERFS (device loop1): checking transaction log (loop1) [ 1015.614260][T25637] BTRFS info (device loop0): using free space tree [ 1015.625247][T25668] bridge0: port 3(dummy0) entered disabled state [ 1015.657636][T25637] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 1015.681909][T25668] bridge0: port 3(dummy0) entered blocking state [ 1015.688443][T25668] bridge0: port 3(dummy0) entered forwarding state [ 1015.738597][T25637] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 1015.878994][T25637] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 1015.972515][T25637] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 1016.013275][T25637] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 1016.038785][T25657] REISERFS (device loop1): Using tea hash to sort names [ 1016.040320][T25637] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 1016.088535][T25637] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 1016.110288][T25637] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 1016.138633][T25657] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1016.198965][T25637] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 1016.223487][T25657] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1016.665347][ T4271] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1017.174418][T25719] loop3: detected capacity change from 0 to 4096 [ 1017.220431][T25721] loop5: detected capacity change from 0 to 4096 [ 1017.362736][T25726] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1017.437264][T25719] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1017.509250][T25719] ntfs3: loop3: ino=5, "/" directory corrupted [ 1017.878471][T22629] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1017.985102][T25741] xt_ecn: cannot match TCP bits for non-tcp packets [ 1018.012285][T22641] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1018.070368][T22629] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1018.088025][T25743] loop2: detected capacity change from 0 to 2048 [ 1018.094782][T22629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.123207][T22629] usb 1-1: config 0 descriptor?? [ 1018.159817][T25743] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1018.174409][T22629] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1018.210898][T22641] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1018.225533][T22641] usb 6-1: config 0 has no interface number 0 [ 1018.242254][T22641] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1018.268425][T22641] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1018.274870][T25746] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1018.297466][T25725] loop1: detected capacity change from 0 to 40427 [ 1018.313670][T22641] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1018.338546][T25725] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 1018.347764][T22641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.370436][T25725] F2FS-fs (loop1): invalid crc value [ 1018.398966][T22641] usb 6-1: Product: syz [ 1018.403391][T25725] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1018.411081][T22641] usb 6-1: Manufacturer: syz [ 1018.415774][T22641] usb 6-1: SerialNumber: syz [ 1018.470895][T22641] usb 6-1: config 0 descriptor?? [ 1018.482236][T25735] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1018.541883][T22641] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1018.581463][T22629] gp8psk: usb in 128 operation failed. [ 1018.588056][T25725] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1018.589798][T22629] gp8psk: usb in 137 operation failed. [ 1018.607866][T25750] loop3: detected capacity change from 0 to 64 [ 1018.617132][T22641] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1018.619958][T25725] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 1018.654885][T22629] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1018.694196][T25750] hfs: keylen 94 too large [ 1018.723885][T22629] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1018.778490][T25725] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1018.816305][T22629] usb 1-1: USB disconnect, device number 5 [ 1018.970373][T22641] usb 6-1: USB disconnect, device number 2 [ 1019.011000][T22641] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1019.067375][T22641] cyberjack 6-1:0.69: device disconnected [ 1019.329918][ T9036] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1019.530198][ T9036] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 1019.549137][ T9036] usb 4-1: config 0 has no interface number 0 [ 1019.578713][ T9036] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1019.598752][ T9036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.630098][ T9036] usb 4-1: Product: syz [ 1019.634359][ T9036] usb 4-1: Manufacturer: syz [ 1019.649600][ T9036] usb 4-1: SerialNumber: syz [ 1019.678065][ T9036] usb 4-1: config 0 descriptor?? [ 1019.708414][ T9036] qmi_wwan 4-1:0.207: bogus CDC Union: master=0, slave=1 [ 1019.910002][ T9036] qmi_wwan: probe of 4-1:0.207 failed with error -22 [ 1020.113325][ T9036] usb 4-1: USB disconnect, device number 11 [ 1020.187955][T25766] loop1: detected capacity change from 0 to 32768 [ 1020.289882][T25766] JBD2: Invalid start block of journal: 67108866 [ 1020.296384][T25766] (syz.1.9522,25766,0):ocfs2_journal_wipe:1183 ERROR: status = -22 [ 1020.300100][T25791] loop5: detected capacity change from 0 to 256 [ 1020.371210][T25766] (syz.1.9522,25766,0):ocfs2_check_volume:2420 ERROR: status = -22 [ 1020.392067][T25791] FAT-fs (loop5): Directory bread(block 64) failed [ 1020.412476][T25766] (syz.1.9522,25766,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 1020.417857][T25791] FAT-fs (loop5): Directory bread(block 65) failed [ 1020.421678][T25766] (syz.1.9522,25766,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 1020.445708][T25766] (syz.1.9522,25766,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1020.468000][T25791] FAT-fs (loop5): Directory bread(block 66) failed [ 1020.478414][T25791] FAT-fs (loop5): Directory bread(block 67) failed [ 1020.485109][T25791] FAT-fs (loop5): Directory bread(block 68) failed [ 1020.513502][T25766] FAT-fs (loop1): invalid media value (0x66) [ 1020.522692][T25791] FAT-fs (loop5): Directory bread(block 69) failed [ 1020.549072][T25766] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1020.556075][T25791] FAT-fs (loop5): Directory bread(block 70) failed [ 1020.566121][T25791] FAT-fs (loop5): Directory bread(block 71) failed [ 1020.608573][T25791] FAT-fs (loop5): Directory bread(block 72) failed [ 1020.615193][T25791] FAT-fs (loop5): Directory bread(block 73) failed [ 1021.174591][T25813] netlink: 180 bytes leftover after parsing attributes in process `syz.5.9548'. [ 1021.785862][T25839] loop0: detected capacity change from 0 to 764 [ 1021.804315][T25839] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1021.913339][T25843] netlink: 'syz.1.9562': attribute type 1 has an invalid length. [ 1021.941879][T25843] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9562'. [ 1022.295681][T25850] loop5: detected capacity change from 0 to 4096 [ 1022.361162][T25850] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1022.423886][T25850] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 1022.442046][T25850] System zones: 0-5 [ 1022.476031][T25850] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1022.789001][T22967] EXT4-fs (loop5): unmounting filesystem. [ 1022.805673][T25872] loop3: detected capacity change from 0 to 764 [ 1022.885425][T25872] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1022.943907][T25878] netlink: 'syz.2.9580': attribute type 1 has an invalid length. [ 1022.992714][T25878] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9580'. [ 1023.231184][T25886] autofs4:pid:25886:autofs_fill_super: called with bogus options [ 1023.559255][T25892] loop0: detected capacity change from 0 to 4096 [ 1023.598519][T25892] __ntfs_warning: 2148 callbacks suppressed [ 1023.598538][T25892] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1023.910758][T25892] ntfs: (device loop0): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 1023.941643][T25892] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1023.983433][T25892] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1024.079203][T25892] ntfs: volume version 3.1. [ 1024.142036][T25892] ntfs: (device loop0): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 1024.169658][T25892] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 1024.198023][T25892] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 1025.218002][T25949] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1025.513369][ T26] audit: type=1326 audit(1031.762:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25959 comm="syz.0.9629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0779aeb9 code=0x7ffc0000 [ 1025.628465][ T26] audit: type=1326 audit(1031.812:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25959 comm="syz.0.9629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fde0779aeb9 code=0x7ffc0000 [ 1025.738320][ T26] audit: type=1326 audit(1031.812:2537): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=25959 comm="syz.0.9629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0779aeb9 code=0x7ffc0000 [ 1026.867694][T26011] loop3: detected capacity change from 0 to 2048 [ 1026.951187][T26011] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1026.981883][T26011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.000732][T26019] program syz.1.9646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1027.034693][T26019] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1027.792253][T26043] autofs4:pid:26043:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 1027.883525][T26049] loop0: detected capacity change from 0 to 164 [ 1028.191778][T26021] loop5: detected capacity change from 0 to 32768 [ 1028.228650][T26057] netlink: 'syz.0.9667': attribute type 17 has an invalid length. [ 1028.252130][T26057] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9667'. [ 1028.577829][T26065] IPv6: Can't replace route, no match found [ 1028.694328][T26073] loop1: detected capacity change from 0 to 64 [ 1029.134871][T26090] loop0: detected capacity change from 0 to 256 [ 1029.323479][T26090] FAT-fs (loop0): Directory bread(block 64) failed [ 1029.344460][T26090] FAT-fs (loop0): Directory bread(block 65) failed [ 1029.378565][T26090] FAT-fs (loop0): Directory bread(block 66) failed [ 1029.385220][T26090] FAT-fs (loop0): Directory bread(block 67) failed [ 1029.429251][T26090] FAT-fs (loop0): Directory bread(block 68) failed [ 1029.458513][T26090] FAT-fs (loop0): Directory bread(block 69) failed [ 1029.465248][T26090] FAT-fs (loop0): Directory bread(block 70) failed [ 1029.508990][T26090] FAT-fs (loop0): Directory bread(block 71) failed [ 1029.516131][T26090] FAT-fs (loop0): Directory bread(block 72) failed [ 1029.572765][T26090] FAT-fs (loop0): Directory bread(block 73) failed [ 1030.118673][T26116] loop1: detected capacity change from 0 to 2048 [ 1030.194001][T26116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1030.561743][T26130] device sit0 entered promiscuous mode [ 1030.609012][T26130] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9703'. [ 1030.815635][T26141] netlink: 'syz.3.9707': attribute type 3 has an invalid length. [ 1030.827793][T26141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9707'. [ 1030.849604][T26138] loop5: detected capacity change from 0 to 4096 [ 1031.226009][T26151] ieee802154 phy0 wpan0: encryption failed: -22 [ 1032.011539][T26155] loop3: detected capacity change from 0 to 32768 [ 1032.038573][T12950] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1032.059769][T26155] syz.3.9714: attempt to access beyond end of device [ 1032.059769][T26155] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 1032.098443][T26155] metapage_write_end_io: I/O error [ 1032.144408][T26155] blkno = 8ed2c, nblocks = 1 [ 1032.160346][T26155] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 1032.160346][T26155] [ 1032.195074][T26155] ERROR: (device loop3): remounting filesystem as read-only [ 1032.228428][T26155] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 1032.228428][T26155] [ 1032.240480][T12950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.258343][T26155] ERROR: (device loop3): duplicateIXtree: [ 1032.258343][T26155] [ 1032.266638][T12950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.297549][T12950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1032.336498][T12950] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1032.378441][T12950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.389379][T12950] usb 1-1: config 0 descriptor?? [ 1032.399737][T12950] hub 1-1:0.0: USB hub found [ 1032.433091][T26167] loop2: detected capacity change from 0 to 32768 [ 1032.446149][ T108] blkno = 8ed2c, nblocks = 4 [ 1032.458293][ T108] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 1032.458293][ T108] [ 1032.505948][ T4278] syz-executor: attempt to access beyond end of device [ 1032.505948][ T4278] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 1032.545878][ T4278] metapage_write_end_io: I/O error [ 1032.562653][ T4278] JFS: metapage_get_blocks failed [ 1032.588935][ T4278] JFS: metapage_get_blocks failed [ 1032.594139][ T4278] JFS: metapage_get_blocks failed [ 1032.607573][T12950] hub 1-1:0.0: 14 ports detected [ 1032.610784][ T4278] JFS: metapage_get_blocks failed [ 1032.614232][T12950] hub 1-1:0.0: insufficient power available to use all downstream ports [ 1032.651553][T26179] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.9727'. [ 1032.820429][T12950] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1032.828433][T12950] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1032.911415][T12950] usb 1-1: USB disconnect, device number 6 [ 1033.151400][T26177] loop1: detected capacity change from 0 to 32768 [ 1033.287127][T12476] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1033.501892][T12476] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1033.526530][T12476] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1033.548346][T12476] usb 6-1: Product: syz [ 1033.552591][T12476] usb 6-1: SerialNumber: syz [ 1033.589371][T12476] usb 6-1: config 0 descriptor?? [ 1033.825916][T12476] hso 6-1:0.0: Failed to find BULK IN ep [ 1034.036146][T12476] usb 6-1: USB disconnect, device number 3 [ 1034.211905][T26218] ieee802154 phy0 wpan0: encryption failed: -90 [ 1035.007621][T26233] loop3: detected capacity change from 0 to 4096 [ 1035.447972][T26248] netlink: 'syz.3.9761': attribute type 19 has an invalid length. [ 1035.484727][T26248] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9761'. [ 1035.492549][T26250] netlink: 'syz.2.9762': attribute type 5 has an invalid length. [ 1035.515958][T26254] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.9763'. [ 1035.707641][T26258] loop2: detected capacity change from 0 to 8 [ 1035.786352][T26258] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1035.852528][T26258] SQUASHFS error: Failed to read block 0x4de: -5 [ 1035.902579][T26258] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1035.925390][T26258] SQUASHFS error: Failed to read block 0x4df: -5 [ 1036.169082][T26258] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1036.178377][T26258] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1036.198673][T26258] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1036.244381][T26258] SQUASHFS error: Failed to read block 0x4de: -5 [ 1036.260451][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1036.260466][ T26] audit: type=1800 audit(1042.512:2539): pid=26258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9767" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1036.331445][T26270] netlink: 'syz.1.9772': attribute type 5 has an invalid length. [ 1036.554376][T26280] loop2: detected capacity change from 0 to 256 [ 1036.744418][T26280] FAT-fs (loop2): Directory bread(block 64) failed [ 1036.765389][T26280] FAT-fs (loop2): Directory bread(block 65) failed [ 1036.789448][T26280] FAT-fs (loop2): Directory bread(block 66) failed [ 1036.806283][T26280] FAT-fs (loop2): Directory bread(block 67) failed [ 1036.823686][T26280] FAT-fs (loop2): Directory bread(block 68) failed [ 1036.833199][T26289] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 1036.841561][T26280] FAT-fs (loop2): Directory bread(block 69) failed [ 1036.858529][T26280] FAT-fs (loop2): Directory bread(block 70) failed [ 1036.875372][T26280] FAT-fs (loop2): Directory bread(block 71) failed [ 1036.886942][T26280] FAT-fs (loop2): Directory bread(block 72) failed [ 1036.902788][T26280] FAT-fs (loop2): Directory bread(block 73) failed [ 1037.060092][T26296] loop5: detected capacity change from 0 to 16 [ 1037.119109][T26296] cramfs: empty filesystem [ 1037.693979][T26317] loop5: detected capacity change from 0 to 2048 [ 1037.743303][T26317] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1037.769741][T26317] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1038.012124][T22967] EXT4-fs (loop5): unmounting filesystem. [ 1038.062780][T26334] loop1: detected capacity change from 0 to 512 [ 1038.103680][T26334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1038.247085][T26334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1038.460052][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1038.751509][T12950] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1038.799447][ T26] audit: type=1326 audit(1045.052:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.3.9815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x50000 [ 1038.834618][ T26] audit: type=1326 audit(1045.052:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.3.9815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x50000 [ 1038.877104][ T26] audit: type=1326 audit(1045.052:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.3.9815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x50000 [ 1038.898888][ C0] vkms_vblank_simulate: vblank timer overrun [ 1038.966865][ T26] audit: type=1326 audit(1045.052:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.3.9815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x50000 [ 1038.998976][T12950] usb 6-1: Using ep0 maxpacket: 32 [ 1039.016443][T12950] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1039.028613][ T26] audit: type=1326 audit(1045.052:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.3.9815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x50000 [ 1039.050978][T12950] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1039.062385][T26370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9819'. [ 1039.071871][T26370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9819'. [ 1039.086572][T12950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1039.089233][ T26] audit: type=1326 audit(1045.052:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.3.9815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x50000 [ 1039.116994][T12950] usb 6-1: config 1 has no interface number 0 [ 1039.137851][T12950] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1039.148863][ T26] audit: type=1326 audit(1045.052:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.3.9815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x50000 [ 1039.148909][ T26] audit: type=1326 audit(1045.052:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.3.9815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x50000 [ 1039.156825][ T26] audit: type=1326 audit(1045.052:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.3.9815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14bef9aeb9 code=0x50000 [ 1039.267305][T12950] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 1039.304459][T12950] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1039.358753][T12950] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1039.388112][T12950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.418201][T26352] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1039.437938][T12950] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1039.637399][T26382] loop2: detected capacity change from 0 to 512 [ 1039.645570][T26352] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1039.665331][T12950] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1039.783619][T26382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1039.956369][T12476] usb 6-1: USB disconnect, device number 4 [ 1039.972217][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 1039.974056][T12476] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1039.988372][T12950] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1040.050553][T26395] netlink: 'syz.3.9831': attribute type 4 has an invalid length. [ 1040.058622][T26395] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9831'. [ 1040.194982][T12950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 1040.233598][T12950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 1040.266354][T12950] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1040.288568][T12950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.301909][T12950] usb 1-1: Product: syz [ 1040.306143][T12950] usb 1-1: Manufacturer: syz [ 1040.311289][T12950] usb 1-1: SerialNumber: syz [ 1040.342835][T12950] usb 1-1: config 0 descriptor?? [ 1040.556992][T12950] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59 [ 1040.745629][T26417] loop5: detected capacity change from 0 to 2048 [ 1040.770415][T12950] usb 1-1: USB disconnect, device number 7 [ 1040.833772][T26418] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1040.867915][T26420] loop2: detected capacity change from 0 to 256 [ 1041.147405][T26427] vivid-007: disconnect [ 1041.170800][T26426] vivid-007: reconnect [ 1041.680454][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9856'. [ 1041.698508][T26448] netlink: 312 bytes leftover after parsing attributes in process `syz.1.9856'. [ 1041.728044][T26448] netlink: 'syz.1.9856': attribute type 1 has an invalid length. [ 1041.860995][T26454] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9859'. [ 1042.359718][T26476] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9870'. [ 1042.426401][T26479] loop3: detected capacity change from 0 to 128 [ 1042.813432][T26493] loop5: detected capacity change from 0 to 16 [ 1042.844933][T26493] erofs: (device loop5): mounted with root inode @ nid 36. [ 1043.130204][T26505] xt_TCPMSS: Only works on TCP SYN packets [ 1043.342249][T26513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9887'. [ 1043.568057][T26523] loop3: detected capacity change from 0 to 256 [ 1044.036668][T26538] netlink: 'syz.2.9910': attribute type 2 has an invalid length. [ 1044.065080][T26538] netlink: 'syz.2.9910': attribute type 1 has an invalid length. [ 1044.263298][T26515] loop5: detected capacity change from 0 to 32768 [ 1044.281717][T26515] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.9888 (26515) [ 1044.344383][T26515] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1044.380479][T26515] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1044.435839][T26515] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1044.475079][T26515] BTRFS info (device loop5): force clearing of disk cache [ 1044.528337][T26515] BTRFS info (device loop5): enabling ssd optimizations [ 1044.547319][T26515] BTRFS info (device loop5): using spread ssd allocation scheme [ 1044.587599][T26548] loop2: detected capacity change from 0 to 4096 [ 1044.596379][T26515] BTRFS info (device loop5): turning off barriers [ 1044.638409][T26515] BTRFS info (device loop5): disabling free space tree [ 1044.645370][T26515] BTRFS info (device loop5): not using ssd optimizations [ 1044.668651][T26548] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1044.716015][T26515] BTRFS info (device loop5): not using spread ssd allocation scheme [ 1045.048406][T26515] BTRFS info (device loop5): rebuilding free space tree [ 1045.139674][T26515] BTRFS info (device loop5): disabling free space tree [ 1045.146694][T26515] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1045.198348][T26515] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1045.511863][T22967] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1045.718626][ T9036] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1045.897271][T26596] ax25_connect(): syz.3.9920 uses autobind, please contact jreuter@yaina.de [ 1045.943366][ T9036] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1045.982893][ T9036] usb 2-1: config 0 has no interface number 0 [ 1046.015293][ T9036] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1046.042097][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 1046.105067][ T9036] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1046.120888][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.199030][ T9036] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1046.219974][ T9036] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1046.249600][ T9036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.280182][ T9036] usb 2-1: config 0 descriptor?? [ 1046.308902][ T9036] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 1046.500859][T22641] usb 2-1: USB disconnect, device number 105 [ 1046.979168][T26618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9927'. [ 1047.053079][T26603] loop5: detected capacity change from 0 to 32768 [ 1047.975102][T26645] netlink: 25 bytes leftover after parsing attributes in process `syz.5.9940'. [ 1048.254578][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 1048.254595][ T26] audit: type=1326 audit(1054.502:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26653 comm="syz.1.9957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855af9aeb9 code=0x7ffc0000 [ 1048.347323][ T26] audit: type=1326 audit(1054.542:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26653 comm="syz.1.9957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855af9aeb9 code=0x7ffc0000 [ 1048.448390][ T26] audit: type=1326 audit(1054.542:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26653 comm="syz.1.9957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f855af9c747 code=0x7ffc0000 [ 1048.538351][ T26] audit: type=1326 audit(1054.542:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26653 comm="syz.1.9957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f855af5b78e code=0x7ffc0000 [ 1048.608357][ T26] audit: type=1326 audit(1054.542:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26653 comm="syz.1.9957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f855af5b78e code=0x7ffc0000 [ 1048.630244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.690493][ T26] audit: type=1326 audit(1054.542:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26653 comm="syz.1.9957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f855af5b78e code=0x7ffc0000 [ 1048.737944][T26661] loop5: detected capacity change from 0 to 4096 [ 1048.817219][ T26] audit: type=1326 audit(1054.542:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26653 comm="syz.1.9957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f855af5b78e code=0x7ffc0000 [ 1048.898376][ T26] audit: type=1326 audit(1054.552:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26653 comm="syz.1.9957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855af9aeb9 code=0x7ffc0000 [ 1048.948465][T26661] ntfs3: loop5: ino=5, "/" directory corrupted [ 1048.968394][T26661] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1049.055778][ T26] audit: type=1326 audit(1054.552:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26653 comm="syz.1.9957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855af9aeb9 code=0x7ffc0000 [ 1049.118443][T26675] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9956'. [ 1049.626640][T26692] netlink: 'syz.1.9965': attribute type 2 has an invalid length. [ 1049.647341][T26693] loop3: detected capacity change from 0 to 512 [ 1049.790561][T26693] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.9966: couldn't read orphan inode 26 (err -116) [ 1049.854926][T26693] EXT4-fs (loop3): Remounting filesystem read-only [ 1049.861830][T26693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1049.967948][T26693] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #3: comm syz.3.9966: corrupted inode contents [ 1050.002721][T26693] EXT4-fs (loop3): Remounting filesystem read-only [ 1050.018436][T26693] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #3: comm syz.3.9966: mark_inode_dirty error [ 1050.048324][T22629] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1050.056530][T26693] EXT4-fs (loop3): Remounting filesystem read-only [ 1050.069541][T26693] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.9966: bg 0: block 64: padding at end of block bitmap is not set [ 1050.104848][T26693] EXT4-fs (loop3): Remounting filesystem read-only [ 1050.119740][T26693] Quota error (device loop3): write_blk: dquota write failed [ 1050.148463][T26693] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.9966: Failed to acquire dquot type 0 [ 1050.192929][T26693] EXT4-fs (loop3): Remounting filesystem read-only [ 1050.239133][T22629] usb 6-1: too many configurations: 241, using maximum allowed: 8 [ 1050.262926][T22629] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1050.288306][T22629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.296421][T22629] usb 6-1: Product: syz [ 1050.363284][T22629] usb 6-1: Manufacturer: syz [ 1050.378419][T22629] usb 6-1: SerialNumber: syz [ 1050.400621][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 1050.407653][T22629] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1050.467476][T22629] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1050.728729][ C1] usb 6-1: ath9k_htc: over RX MAX_PKT_NUM [ 1050.830605][T26722] loop3: detected capacity change from 0 to 1024 [ 1050.869959][T26722] EXT4-fs: Ignoring removed orlov option [ 1050.897680][T26722] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1050.965437][T22641] usb 6-1: USB disconnect, device number 5 [ 1051.042498][T26722] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1051.204876][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 1051.298363][T12476] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1051.356501][T26735] netlink: 'syz.3.9981': attribute type 10 has an invalid length. [ 1051.490767][T12476] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 1051.503564][T12476] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1051.543342][T12476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.558793][T22629] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1051.566078][T22629] ath9k_htc: Failed to initialize the device [ 1051.594114][T12476] usb 3-1: Product: syz [ 1051.608876][T22641] usb 6-1: ath9k_htc: USB layer deinitialized [ 1051.616643][T12476] usb 3-1: Manufacturer: syz [ 1051.638782][T12476] usb 3-1: SerialNumber: syz [ 1051.666590][T12476] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1051.681522][ T52] block nbd5: Attempted send on invalid socket [ 1051.687827][ T52] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1051.698422][ T93] block nbd5: Attempted send on invalid socket [ 1051.704713][ T93] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1051.717753][T26742] Mount JFS Failure: -5 [ 1051.722507][T26742] jfs_mount failed w/return code = -5 [ 1051.763090][T12476] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1051.968390][T12940] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1052.007254][T26727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.026588][T26727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.061601][T12950] usb 3-1: USB disconnect, device number 19 [ 1052.185742][T12940] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.205258][T12940] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1052.224996][T12940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.260454][T12940] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1052.766206][T26763] xt_TCPMSS: Only works on TCP SYN packets [ 1052.808390][T22641] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1052.850403][T12476] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1052.857493][T12476] ath9k_htc: Failed to initialize the device [ 1052.882809][T12950] usb 3-1: ath9k_htc: USB layer deinitialized [ 1053.000174][T22641] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 1053.018338][T22641] usb 6-1: config 0 has no interface number 1 [ 1053.024652][T22641] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1053.045229][T22641] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1053.069676][T22641] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1053.088345][T22641] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1053.106767][T22641] usb 6-1: SerialNumber: syz [ 1053.126477][T22641] usb 6-1: config 0 descriptor?? [ 1053.144624][T22641] usb 6-1: Found UVC 0.00 device (0002:0000) [ 1053.162866][T22641] usb 6-1: No valid video chain found. [ 1053.386831][T12950] usb 6-1: USB disconnect, device number 6 [ 1053.467810][T26765] loop2: detected capacity change from 0 to 32768 [ 1053.502109][T26765] [ 1053.502109][T26765] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1053.502109][T26765] [ 1053.529944][T12940] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1053.542759][T12940] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1053.558817][T12940] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 1053.577493][T12940] usb 4-1: USB disconnect, device number 12 [ 1053.591259][T26765] __jfs_setxattr: xattr_size = 72, new_size = 166 [ 1053.657921][ T75] [ 1053.657921][ T75] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1053.657921][ T75] [ 1053.691879][ T75] [ 1053.691879][ T75] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1053.691879][ T75] [ 1053.715277][ T107] [ 1053.715277][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1053.715277][ T107] [ 1053.748335][ T4280] [ 1053.748335][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1053.748335][ T4280] [ 1053.769084][ T4280] [ 1053.769084][ T4280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1053.769084][ T4280] [ 1054.201167][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.207552][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.857491][T26795] loop2: detected capacity change from 0 to 4096 [ 1054.893137][T26795] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1055.541096][T26816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1055.708957][T26821] device sit0 entered promiscuous mode [ 1055.750730][T26821] netlink: 'syz.1.10026': attribute type 1 has an invalid length. [ 1055.776720][T26821] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10026'. [ 1056.040047][T26829] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10030'. [ 1056.403480][T26841] netlink: 'syz.5.10037': attribute type 6 has an invalid length. [ 1056.549434][T26847] loop2: detected capacity change from 0 to 512 [ 1056.629351][T26847] EXT4-fs error (device loop2): __ext4_fill_super:5423: inode #2: comm syz.2.10040: casefold flag without casefold feature [ 1056.709206][T26847] EXT4-fs (loop2): get root inode failed [ 1056.714953][T26847] EXT4-fs (loop2): mount failed [ 1056.758829][ T27] INFO: task syz-executor:4275 blocked for more than 143 seconds. [ 1056.766809][ T27] Not tainted syzkaller #0 [ 1056.778354][T24277] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1056.792549][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1056.817788][ T27] task:syz-executor state:D stack:21232 pid:4275 ppid:1 flags:0x00004004 [ 1056.827529][ T27] Call Trace: [ 1056.843958][ T27] [ 1056.853733][ T27] __schedule+0x11d1/0x40e0 [ 1056.870781][ T27] ? mark_lock+0x94/0x320 [ 1056.887744][ T27] ? __sched_text_start+0x8/0x8 [ 1056.905639][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1056.929139][ T27] ? lock_chain_count+0x20/0x20 [ 1056.953557][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1056.964584][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1056.970640][ T27] schedule+0xb9/0x180 [ 1056.974871][ T27] io_schedule+0x7c/0xd0 [ 1056.979836][T24277] usb 1-1: Using ep0 maxpacket: 16 [ 1056.985427][ T27] folio_wait_bit_common+0x70a/0xfa0 [ 1056.992485][ T27] ? folio_wait_bit+0x30/0x30 [ 1056.997578][ T27] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 1056.997825][T24277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1057.015952][ T27] ? folio_mapping+0x1ba/0x4d0 [ 1057.021150][ T27] truncate_inode_pages_range+0x9fe/0x1090 [ 1057.027190][ T27] ? mapping_evict_folio+0x520/0x520 [ 1057.032989][T24277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1057.044855][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1057.051295][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1057.056805][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1057.063196][ T27] evict+0x4dc/0x8d0 [ 1057.068976][T24277] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1057.079028][T24277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.087247][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 1057.092942][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1057.098629][T24277] usb 1-1: Product: syz [ 1057.102987][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 1057.108747][T24277] usb 1-1: Manufacturer: syz [ 1057.113545][ T27] evict_inodes+0x60c/0x6a0 [ 1057.118184][T24277] usb 1-1: SerialNumber: syz [ 1057.123305][ T27] ? clear_inode+0x150/0x150 [ 1057.138729][T24277] usb 1-1: config 0 descriptor?? [ 1057.143916][ T27] generic_shutdown_super+0x93/0x340 [ 1057.155902][ T27] kill_block_super+0x7c/0xe0 [ 1057.161398][ T27] deactivate_locked_super+0x93/0xf0 [ 1057.167203][ T27] cleanup_mnt+0x42c/0x4b0 [ 1057.172863][T24277] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1057.182621][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1057.208301][ T27] task_work_run+0x1d0/0x260 [ 1057.213057][ T27] ? task_work_cancel+0x220/0x220 [ 1057.218179][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 1057.234711][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 1057.248398][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 1057.257845][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 1057.272893][ T27] do_syscall_64+0x58/0xa0 [ 1057.277437][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1057.286271][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1057.296538][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.303006][ T27] RIP: 0033:0x7f626759c117 [ 1057.307617][ T27] RSP: 002b:00007fff872ebee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1057.324636][T26835] loop1: detected capacity change from 0 to 32768 [ 1057.332196][ T27] RAX: 0000000000000000 RBX: 00007f626760471f RCX: 00007f626759c117 [ 1057.345681][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff872ebfa0 [ 1057.355658][ T27] RBP: 00007fff872ebfa0 R08: 00007fff872ecfa0 R09: 00000000ffffffff [ 1057.377577][T21226] usb 1-1: Failed to submit usb control message: -71 [ 1057.381285][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff872ed030 [ 1057.386129][T24277] usb 1-1: USB disconnect, device number 8 [ 1057.397002][ T27] R13: 00007f626760471f R14: 00000000000dda2e R15: 00007fff872ed070 [ 1057.412389][T21226] usb 1-1: unable to send the bmi data to the device: -71 [ 1057.415068][ T27] [ 1057.424972][ T27] [ 1057.424972][ T27] Showing all locks held in the system: [ 1057.433272][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1057.439684][ T27] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1057.450394][ T27] 1 lock held by rcu_tasks_trace/13: [ 1057.455884][ T27] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1057.467037][ T27] 1 lock held by khungtaskd/27: [ 1057.472104][ T27] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1057.482348][ T27] 2 locks held by getty/4029: [ 1057.485022][T21226] usb 1-1: unable to get target info from device [ 1057.487061][ T27] #0: ffff88802fe5a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1057.501112][T26835] XFS (loop1): Mounting V5 Filesystem [ 1057.503884][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 1057.519537][ T27] 1 lock held by syz-executor/4275: [ 1057.524789][ T27] #0: ffff888076d160e0 (&type->s_umount_key#128){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1057.529842][T21226] usb 1-1: could not get target info (-71) [ 1057.535323][ T27] 2 locks held by kworker/u4:5/4307: [ 1057.535347][ T27] 2 locks held by udevd/4389: [ 1057.535367][ T27] 2 locks held by kworker/u4:8/21226: [ 1057.535385][ T27] 5 locks held by kworker/1:19/24277: [ 1057.562458][ T27] #0: ffff88801cab2938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1057.573517][ T27] #1: ffffc9000c977d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1057.585013][T21226] usb 1-1: could not probe fw (-71) [ 1057.590592][ T27] #2: ffff888145bed190 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x5560 [ 1057.612516][ T27] #3: ffff888053e06190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x107/0x8a0 [ 1057.634497][T26835] XFS (loop1): Ending clean mount [ 1057.646143][T26835] XFS (loop1): Quotacheck needed: Please wait. [ 1057.646891][ T27] #4: ffff888053e05118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb2/0x850 [ 1057.679143][ T27] 1 lock held by syz.1.10035/26835: [ 1057.684425][ T27] #0: ffff88802654c0e0 (&type->s_umount_key#69/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 1057.695072][ T27] [ 1057.697454][ T27] ============================================= [ 1057.697454][ T27] [ 1057.710098][ T27] NMI backtrace for cpu 0 [ 1057.714511][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1057.721757][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1057.731854][ T27] Call Trace: [ 1057.735180][ T27] [ 1057.738139][ T27] dump_stack_lvl+0x188/0x24e [ 1057.742889][ T27] ? irq_work_queue+0xb8/0x140 [ 1057.747696][ T27] ? show_regs_print_info+0x12/0x12 [ 1057.752934][ T27] ? load_image+0x400/0x400 [ 1057.757474][ T27] ? vprintk_emit+0x59f/0x6a0 [ 1057.762215][ T27] ? printk_sprint+0x460/0x460 [ 1057.767017][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 1057.771987][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1057.778171][ T27] ? _printk+0xda/0x130 [ 1057.782354][ T27] ? load_image+0x400/0x400 [ 1057.786885][ T27] ? load_image+0x400/0x400 [ 1057.791416][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1057.797517][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1057.803616][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1057.809632][ T27] watchdog+0xeee/0xf30 [ 1057.813831][ T27] ? watchdog+0x1ed/0xf30 [ 1057.818195][ T27] kthread+0x29d/0x330 [ 1057.822306][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1057.827408][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1057.832046][ T27] ret_from_fork+0x1f/0x30 [ 1057.836507][ T27] [ 1057.840176][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1057.845722][ C1] NMI backtrace for cpu 1 [ 1057.845735][ C1] CPU: 1 PID: 4307 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1057.845753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1057.845764][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1057.845793][ C1] RIP: 0010:asm_exc_int3+0x0/0x40 [ 1057.845815][ C1] Code: 00 90 90 90 90 90 90 90 90 90 0f 01 ca fc 6a ff e8 35 06 00 00 48 89 c4 48 89 e7 e8 2a 14 ec ff e9 15 07 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff f6 44 24 10 03 75 18 ff 74 24 28 ff 74 24 28 ff [ 1057.845831][ C1] RSP: 0018:ffffc90004117a28 EFLAGS: 00000082 [ 1057.845846][ C1] RAX: ffff888017442140 RBX: 0000000000000000 RCX: 0000000000000000 [ 1057.845858][ C1] RDX: 0000000000000001 RSI: 0000000000001000 RDI: ffffffff8cc1e920 [ 1057.845870][ C1] RBP: 0000000000082a20 R08: 0000000000082a20 R09: ffff888045655140 [ 1057.845882][ C1] R10: 00000000372af1a3 R11: fffff52000822edd R12: ffffffff8612ec8f [ 1057.845895][ C1] R13: 00000000ffffffff R14: ffff888017442140 R15: 0000000000001000 [ 1057.845908][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1057.845923][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1057.845936][ C1] CR2: 00007fc8a741f000 CR3: 000000005de5e000 CR4: 00000000003506e0 [ 1057.845952][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1057.845962][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1057.845974][ C1] Call Trace: [ 1057.845980][ C1] [ 1057.845986][ C1] RIP: 0010:__kmem_cache_alloc_node+0x60/0x260 [ 1057.846007][ C1] Code: 00 00 00 31 db 48 8d 54 24 08 b9 01 00 00 00 31 f6 41 89 e8 e8 b1 15 00 00 48 85 c0 0f 84 ed 00 00 00 49 89 c6 4c 89 3c 24 cc <1f> 44 00 00 49 8b 06 65 48 03 05 29 8e 2f 7e 48 8b 50 08 4c 8b 38 [ 1057.846022][ C1] RSP: 0018:ffffc90004117a58 EFLAGS: 00000282 [ 1057.846036][ C1] ? __kmem_cache_alloc_node+0x4f/0x260 [ 1057.846057][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 1057.846080][ C1] __kmalloc_node_track_caller+0x9e/0x230 [ 1057.846109][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 1057.846132][ C1] __alloc_skb+0x22a/0x7e0 [ 1057.846154][ C1] ? kmem_cache_free+0xf7/0x290 [ 1057.846175][ C1] nsim_dev_trap_report_work+0x28f/0xaf0 [ 1057.846213][ C1] ? process_one_work+0x7b0/0x1160 [ 1057.846234][ C1] process_one_work+0x8a2/0x1160 [ 1057.846261][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1057.846284][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1057.846311][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1057.846338][ C1] ? kthread_data+0x4b/0xc0 [ 1057.846366][ C1] worker_thread+0xaa2/0x1270 [ 1057.846394][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1057.846423][ C1] kthread+0x29d/0x330 [ 1057.846448][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1057.846468][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1057.846495][ C1] ret_from_fork+0x1f/0x30 [ 1057.846525][ C1] [ 1058.030292][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1058.030343][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1058.030400][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1058.030442][ T27] Call Trace: [ 1058.030463][ T27] [ 1058.030493][ T27] dump_stack_lvl+0x188/0x24e [ 1058.030588][ T27] ? memcpy+0x3c/0x60 [ 1058.030643][ T27] ? show_regs_print_info+0x12/0x12 [ 1058.030719][ T27] ? load_image+0x400/0x400 [ 1058.030805][ T27] panic+0x2e5/0x730 [ 1058.030890][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1058.030976][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1058.031061][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1058.031158][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1058.200227][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1058.206451][ T27] watchdog+0xf2d/0xf30 [ 1058.210678][ T27] ? watchdog+0x1ed/0xf30 [ 1058.215074][ T27] kthread+0x29d/0x330 [ 1058.219216][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1058.224302][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1058.228966][ T27] ret_from_fork+0x1f/0x30 [ 1058.233582][ T27] [ 1058.246291][ T27] Kernel Offset: disabled [ 1058.250655][ T27] Rebooting in 86400 seconds..