last executing test programs: 1m59.298250838s ago: executing program 3 (id=4893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x3, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 1m59.11244228s ago: executing program 3 (id=4895): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x8}, {0x10, 0x84, 0x1}], 0x20}, 0x41) 1m58.889077733s ago: executing program 3 (id=4900): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x3, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffe4}}, 0x20) 1m58.634099577s ago: executing program 3 (id=4905): openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1m58.41285819s ago: executing program 3 (id=4908): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 1m57.305526845s ago: executing program 3 (id=4926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x9a6c8c4cd10ead26}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m42.191064406s ago: executing program 32 (id=4926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x9a6c8c4cd10ead26}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.701183432s ago: executing program 4 (id=6474): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) 2.511192165s ago: executing program 4 (id=6478): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1210450, &(0x7f0000000080), 0x6, 0x4f0, &(0x7f0000000f40)="$eJzs3c9vVFsdAPDvnXZoX9/wCspCjQoiioYw/QE0BBfCRmMIiZG4cgG1HZqmM0zTaZFWFmXp3kQSV/onuHNhwsqFO3e6c4MLE1SioSYuxtw7l3ZoO536aDvQ+XySO/eecy/zPWeGc87c005PAH3rXESsR8SJiLgfEaN5fpJvcbO1pde9fvVkZuPVk5kkms27/0iy82letP2b1Mf5cw5HxA++G/HjZGfcxurawnS1WlnK02PLtcWxxura5flCnjM5NTE1fv3KtckDq+vZ2m9efmf+9g9/99svvfjj+jd/mhar9LOT2bn2ehykVtWLUWrLG4yI24cRrEcG8/8/fHjS1vaZiDiftf/RGMjeTQDgOGs2R6M52p4GAI679P6/FEmhnM8FlKJQKJdbc3hnYqRQrTeWL43WVx7ORjaHdSqKhQfz1cp4Pld4KopJmp7IjrfSk9vSVyLidET8fOijLF2eqVdne/nBBwD62Mfbxv9/D7XGfwDgmBvudQEAgCNn/AeA/mP8B4D+83+M/74dCADHhPt/AOg/xn8A6D9dx/+nR1MOAOBIfP/OnXRrbuR//3r20erKt0qPLs9WGgvl2spMeaa+tFieq9fnqpXyTLPZ7fmq9frixNXNZGN17V6tvvJw+d58bXqucq9SPOT6AADdnT77/M9JRKzf+Cjbom0tB2M1HG+FXhcA6JmBXhcA6Bnf54H+tdc9/nD3S4BjYJclet/S8VeEnln8FT5UFz9v/h/6lfl/6F+fbv7/2wdeDuDomf+H/tVsJtb8B4A+Y44feKef/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfKmVbUihna4Gvp4+FcjniZEScimLyYL5aGY+ITyLiT0PFoTQ90etCAwDvqPC3JF//6+LohdL2syeS/wxl+4j4yS/v/uLx9PLy0kSa/8/N/OVnef7kiV5UAABod3NnVmuczvdtN/KvXz2ZebMdZRFf3motLprG3ci31pnBGMz2w1GMiJF/JXm6Jf28MnAA8defRsTntur/uC1CKZsDaa18uj1+GvvkIcTfev23xy+8Fb+QnUv3xey1+OwBlAX6zfNbrX4yb3tpE8vbXyHOZfvd2/9w1kO9uzf938aO/q+w2f8N7IifZG3+3GZ675K8vPr77+3IbI62zj2N+MLgbvGTzfhJh/73wj7r+Jcvfvl8p3PNX0VcjN3jt9SybnZsubY41lhduzxfm56rzFUeTk5OTUyNX79ybXIsm6NuPf5htxh/v3Hpk07x0/qPdIg/3KX+X9tn/X/93/s/+soe8b/x1d3f/zN7xE/HxK/vM/70yM2Oy3en8Wc71L/b+39pn/Ff/HVtdp+XAgBHoLG6tjBdrVaWuhyknzW7XePgIA6aQ0cdNNYj3o+6O3h/DnrdMwGHbavR97okAAAAAAAAAAAAAABAJ43VtYWhONyvE/W6jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxf/wsAAP//Zp/PMA==") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x2b7, 0x13b3, 0x9f7fb60e3296f8a7, 0x2}) 2.086091161s ago: executing program 4 (id=6483): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x25, 0x7, 0x1ff, 0x3, 0x5, 0x2, 0x7ff, 0x8001, 0x1}}) 1.47601791s ago: executing program 1 (id=6493): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) 1.47296834s ago: executing program 4 (id=6494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast2, 0x9de}}, 0xfffd}, 0x90) 1.374098181s ago: executing program 0 (id=6495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x20040080) 1.345652532s ago: executing program 5 (id=6497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x215, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 1.209006703s ago: executing program 1 (id=6498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000000101f90000000000000000000200000006001240000400002c0001800c0002800500010000000000060003400000000014000180080001"], 0x54}}, 0x0) 1.207246173s ago: executing program 4 (id=6499): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [], {}, [{0x8, 0x1}, {0x8, 0x1}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x4}, {0x8, 0x6}, {}], {}, {0x20, 0x2}}, 0x5c, 0x0) 1.157809754s ago: executing program 5 (id=6500): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x4}}) 1.126140384s ago: executing program 2 (id=6501): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x3a, 0x20, 0x0, 0x0) 1.105957155s ago: executing program 0 (id=6502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}}, 0x0) 1.006027646s ago: executing program 1 (id=6503): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000140)='2', 0x1}], 0x2, 0x0, 0x0) 912.369397ms ago: executing program 2 (id=6504): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$tipc(r0, 0x0, 0x0, 0x0) 868.007168ms ago: executing program 0 (id=6505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff76, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_ZONE]}, 0xa4}}, 0x0) 866.494468ms ago: executing program 5 (id=6506): process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x1) 758.12505ms ago: executing program 1 (id=6507): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfeedcafe, 0x3, 0x3, 0x1}}) 684.706421ms ago: executing program 2 (id=6508): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000040)={@default, @null}) 637.447931ms ago: executing program 1 (id=6509): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) 636.821101ms ago: executing program 0 (id=6510): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6c733d63703433372c0048ca270c0631e68e9f27c07a0df7959631d47264826c44d5b9b8c0ba0b11ba380938d0cb3c338fd574048dfccf8e9759444d0d0000006043c5bdce833718465359e254e6914e522fade2eafeba7e38c6a9fdb445aad42de8bf67c4c87770a5837c0b16"], 0x1, 0x5d4, &(0x7f0000001980)="$eJzs3cFvHFcdB/DvbGLHDlK6SZOmICSscgA1IlnvRiZISEApyEIVqsSlVyvZ1FY2aWRvkdsDCohz+y+Ugzlz4ISClANn/gWjHhHcfQua2Vl7k2xdu3a96/D5SG/fe/tm3vzeL7OjmbWiDfB/a/m9zDxJkeVr72yW/e2tTm97q3N/2E5yLkkjmUtSlG//NcnnyaMMSr45HBipX1B8unx79fEnVwe9ubpU2xf77Xcwu7E0B7FW9XHN1z7yfHsrXEhyqa5h4p4O/Wvs8BE/lwDANCuSM+Pebybn65v18jlgcFc8uMc+1R5NOgAAAAA4Aa/sZCebuTDpOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA0qX//v6hLY9heSDH8/f/Z+r3U7VPtyaQDAAAAAAAAAIBj8J2d7GQzF4b9p0X1N/83qs7l6vUb+TAb6WY917OZlfTTz3oWkzRHJprdXOn31xcPsGd77J7tk1kvAAAAAAAAALyk/pDlvb//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANCiSM4OqKpeH7WYaZ5PMJZktt3uUPB62T7Mnkw4AAAAATsArO9nJZi4M+0+L6pn/teq5fy4f5kH6WUs/vXRzp/ouYPDU39je6vS2tzr3y/LivD/776HCqGbM4LuH8UduVVtc2d1jOb/Mb3ItC3k361nLb7OSfrpZyNtVayVFmvW3F81hnOPj/ekzvXe/LNbXq0jmczdrVWzXczsfpJc7aVRrqLbZ/4i/L7NT/KR2wBzdqetyRb+q6+nQrDIys5uRVp37MhsX98/EIc+T54+0mMbud1CXv4acn6/rMtdvT3XO2yNn32v7ZyJptf8zXMm16VnSV/R8Jjojmbh6gEw8XO09uLd6d+P0Z2K2zsbgKnq4q+Ub1b4XspZf54PcSTe30sqtLOVmOlnKj7I0ktcrB/isNQ73Wfvu9+vGTJJf1PV0KPN6cSSvo1e6ZjU2+s5eli4d/xXp7LfqRnmyvjV1V6SLz12bh5l4df9M/Olp+brRe3BvfXXl4QGP9726LjPw86nKRHm+XCr/sares2dHOfbq2LHFauzy7ljjhbEru2Nf9kmdre/hXpypXY1dHTvWqcZeHxkbd5cDwNQ7/+b52fl/z/9z/rP5P86vzr8z99a5W+e+PZuZf5z925m/NP7c+HHxZj7L7/ae/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK9u46OP7630et11DY1T15iZjjBeysakr0zA1+1G//7DGxsfffyDtfsr73ff7z64ubjUvnmztfTDWzfurvW6rcHrpMMEAI7R3k3/pCMBAAAAAAAAAAAAAAC+yEn8d+JJrxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHi5Lb+XmScpsti63ir721udXlmG7b0t55IUZePvST5PHmVQ0hyZrvii4xSfLt9effzJ1b255obbV2XmSKt4JpbGczEddb72kecrdjOzkORSXcPE/S8AAP//njD/fg==") listxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000200)=""/12, 0xc) 588.223042ms ago: executing program 5 (id=6511): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x30314752, 0x0, 0x0, 0x0, 0x0, 0x2}}) 472.738554ms ago: executing program 2 (id=6512): unshare(0x22020400) shutdown(0xffffffffffffffff, 0xfffffffffffffffd) 367.675945ms ago: executing program 5 (id=6513): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x101) 295.831126ms ago: executing program 0 (id=6514): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x7, 0x3], [0x0, 0x20000232]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {0x0, 0x1}]}) 234.392267ms ago: executing program 2 (id=6515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x8090) 173.401748ms ago: executing program 5 (id=6516): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$eJzs3cFLk38YAPBnOtGf8GMeAkmC3ug+1OiuhII0KJId6pSkUjgTEoQ6qJ06d+pS/0Jdgq5Bh+jaPxBBWNBFO3kIFvqq07nlrLZFfj6XPez7PPt+33cv+26HPe/NM/Nz0wuLsxsba9HTk+nKjsTLgc1M9EVHdEZqNQCAf8lmuRzr5VS71wIAtIb9HwBOnsr+nzm0/2dW974TXG39ygCAZvH7HwBOnsnrNy6PFgpj19aTnoj5R0vFpWL6mI6PzsadKMVMDEYuvkeU96Txk4nC2GCy5XNfFOdXdupXloqdB+uHIhd9h+vHJwpjQ0nqYH1X9O7Uf+iNmRiOXJyqXT9cq74rIs7vmz8fuXh/KxaiFNOxVVupXx5KkktXClXzd2/nAQAAAAAAAAAAAAAAAAAAAABAM+Q7tlvnlLuTpGb/nnw+2VU1ntbv7w/0X43+QON7/YGq+/tkYyDb3mMHAAAAAAAAAAAAAAAAAACAv8Xi/QdzU6XSzL2fBXffPX9zVE6DQWZn3po53RHx+1M0GPx/7tPT+jkPj3N+/mzw+myLJ9067cetert2+/SFxf6L9XIi27Q1d/zKm/I117RL68VuMPLtyOTHk626wjurn+l/NjL1avnjl0Zfp40fSgAAAAAAAAAAAAAAAAAAcEJV/vTb7pUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtU7v9fJ8hE3aEGg9V2HyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwIAAD//8pHpIo=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 83.250309ms ago: executing program 0 (id=6517): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 0s ago: executing program 2 (id=6518): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x0, 0x33524742}) kernel console output (not intermixed with test programs): 7ffc0000 [ 405.896748][T19868] bridge0: port 3(batadv0) entered disabled state [ 405.924988][T19868] bridge0: port 3(batadv0) entered blocking state [ 405.931708][T19868] bridge0: port 3(batadv0) entered forwarding state [ 405.985670][ T4486] usb 2-1: USB disconnect, device number 21 [ 406.090773][ T4299] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 406.101199][ T4299] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 406.511839][T19915] loop2: detected capacity change from 0 to 256 [ 406.570749][T19915] FAT-fs (loop2): bogus sectors per cluster 255 [ 406.611289][T19915] FAT-fs (loop2): Can't find a valid FAT filesystem [ 406.722260][T19928] netlink: 'syz.4.4771': attribute type 27 has an invalid length. [ 406.987066][T19928] bond0: (slave bond_slave_0): Releasing backup interface [ 407.028264][T19945] usb usb1: usbfs: process 19945 (syz.2.4776) did not claim interface 0 before use [ 407.222504][ T27] audit: type=1326 audit(1746639118.868:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.2.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6b8e969 code=0x7ffc0000 [ 407.330419][ T27] audit: type=1326 audit(1746639118.868:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.2.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6b8e969 code=0x7ffc0000 [ 407.445459][ T27] audit: type=1326 audit(1746639118.918:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.2.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f6fd6b8e969 code=0x7ffc0000 [ 407.500110][T19971] loop2: detected capacity change from 0 to 512 [ 407.555211][ T27] audit: type=1326 audit(1746639118.918:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.2.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6b8e969 code=0x7ffc0000 [ 407.589280][T19971] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 407.617529][T19978] xt_cgroup: xt_cgroup: no path or classid specified [ 407.660587][ T27] audit: type=1326 audit(1746639118.918:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19954 comm="syz.2.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6b8e969 code=0x7ffc0000 [ 407.664733][T19971] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.4784: invalid indirect mapped block 83886080 (level 1) [ 407.726584][T19971] EXT4-fs (loop2): Remounting filesystem read-only [ 407.747060][T19971] EXT4-fs (loop2): 1 orphan inode deleted [ 407.752866][T19971] EXT4-fs (loop2): 1 truncate cleaned up [ 407.824832][T19971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 407.874734][ T27] audit: type=1326 audit(1746639119.158:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19969 comm="syz.0.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ead58e969 code=0x7ffc0000 [ 407.985691][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 408.141492][T19993] loop4: detected capacity change from 0 to 4096 [ 408.194761][T19993] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 408.276611][T19993] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 408.295391][T19993] ntfs3: loop4: Failed to load $Extend. [ 409.385809][T20064] loop3: detected capacity change from 0 to 256 [ 409.973493][T20088] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 410.058398][T20092] loop0: detected capacity change from 0 to 1024 [ 410.112900][T20092] EXT4-fs: Ignoring removed oldalloc option [ 410.155339][T20092] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 410.230179][T20092] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 410.282735][T20092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 410.381362][T20116] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4825'. [ 410.413846][T20092] fscrypt (loop0, inode 15): Error -61 getting encryption context [ 410.552156][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 411.179121][T20159] loop3: detected capacity change from 0 to 256 [ 411.210629][T20159] exfat: Deprecated parameter 'utf8' [ 411.234737][T20159] exfat: Deprecated parameter 'namecase' [ 411.240487][T20159] exfat: Deprecated parameter 'namecase' [ 411.270561][T20159] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 411.827361][T20197] loop0: detected capacity change from 0 to 16 [ 411.898035][T20197] cramfs: Error -3 while decompressing! [ 411.903744][T20197] cramfs: ffffffff96b4c568(27)->ffff888048a99000(4096) [ 411.940050][T20197] cramfs: Error -3 while decompressing! [ 411.958715][T20203] loop3: detected capacity change from 0 to 512 [ 411.961587][T20197] cramfs: ffffffff96b4c583(16)->ffff88804e5b0000(4096) [ 411.995102][T20197] cramfs: Error -3 while decompressing! [ 412.018900][T20197] cramfs: ffffffff96b4c568(27)->ffff888048a99000(4096) [ 412.041181][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 412.041196][ T27] audit: type=1800 audit(1746639123.688:324): pid=20197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4850" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 412.085712][T20203] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 412.135775][T20213] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4854'. [ 412.145185][T20213] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4854'. [ 412.192343][T20203] EXT4-fs (loop3): orphan cleanup on readonly fs [ 412.241313][T20203] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4851: bg 0: block 328: padding at end of block bitmap is not set [ 412.341260][T20203] EXT4-fs (loop3): Remounting filesystem read-only [ 412.361165][T20203] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 412.380999][T20203] EXT4-fs (loop3): Remounting filesystem read-only [ 412.394811][T20203] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4851: invalid indirect mapped block 65280 (level 0) [ 412.456429][T20203] EXT4-fs (loop3): Remounting filesystem read-only [ 412.476028][T20203] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.4851: attempt to clear invalid blocks 33619980 len 1 [ 412.508050][T20229] loop4: detected capacity change from 0 to 764 [ 412.546663][T20203] EXT4-fs (loop3): Remounting filesystem read-only [ 412.556554][T20229] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 412.584385][T20203] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4851: invalid indirect mapped block 1819239214 (level 0) [ 412.596363][T20226] loop0: detected capacity change from 0 to 8192 [ 412.625404][T20203] EXT4-fs (loop3): Remounting filesystem read-only [ 412.632013][T20203] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4851: invalid indirect mapped block 1819239214 (level 1) [ 412.662458][T20226] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 412.696392][T20226] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 412.705918][T20226] REISERFS (device loop0): using ordered data mode [ 412.713146][T20226] reiserfs: using flush barriers [ 412.749925][T20226] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 412.766867][T20226] REISERFS (device loop0): checking transaction log (loop0) [ 412.783045][T20203] EXT4-fs (loop3): Remounting filesystem read-only [ 412.791289][T20203] EXT4-fs (loop3): 1 orphan inode deleted [ 412.798157][T20203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 412.802360][T20226] REISERFS (device loop0): Using r5 hash to sort names [ 412.825476][T20203] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.4851: Unrecognised inode hash code 15 [ 412.885373][T20226] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 412.914792][T20203] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4851: Corrupt directory, running e2fsck is recommended [ 413.047653][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 413.198824][T20254] loop4: detected capacity change from 0 to 512 [ 413.313802][T20254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 413.352243][T20254] ext4 filesystem being mounted at /957/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 413.650227][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 413.780836][T20291] loop2: detected capacity change from 0 to 256 [ 414.067851][T20314] loop0: detected capacity change from 0 to 512 [ 414.071923][T20309] loop4: detected capacity change from 0 to 1024 [ 414.261342][T20314] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.4875: attempt to clear invalid blocks 1 len 1 [ 414.331279][T20314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4875: bg 0: block 343: padding at end of block bitmap is not set [ 414.352366][T20314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 414.352523][ T9] hfsplus: b-tree write err: -5, ino 4 [ 414.391648][T20314] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4875: invalid indirect mapped block 1819239214 (level 0) [ 414.427813][T20314] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4875: invalid indirect mapped block 1819239214 (level 1) [ 414.518726][T20314] EXT4-fs (loop0): 1 truncate cleaned up [ 414.563008][T20314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 414.823787][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 414.989406][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4889'. [ 415.039549][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4889'. [ 415.086019][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4889'. [ 415.115004][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4889'. [ 415.152741][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4889'. [ 415.172616][T20393] x_tables: unsorted entry at hook 1 [ 415.194792][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4889'. [ 415.247911][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4889'. [ 415.756484][T20419] No such timeout policy "syz0" [ 415.797305][T20424] __nla_validate_parse: 41 callbacks suppressed [ 415.797326][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4904'. [ 416.062531][T20437] loop3: detected capacity change from 0 to 8 [ 416.096939][T20438] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4909'. [ 416.308314][T20437] SQUASHFS error: Failed to read block 0x106: -5 [ 416.360669][T20450] binder: 20449:20450 ioctl 40046210 0 returned -14 [ 416.801013][T20469] loop4: detected capacity change from 0 to 1024 [ 416.907247][ T27] audit: type=1800 audit(1746639128.558:325): pid=20437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4908" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 417.288219][T20502] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 417.288219][T20502] program syz.0.4929 not setting count and/or reply_len properly [ 417.350696][T20506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4931'. [ 417.708427][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4937'. [ 417.940349][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4943'. [ 417.994938][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4943'. [ 418.014279][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4943'. [ 418.040485][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4943'. [ 418.096363][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4943'. [ 418.099199][T20550] loop2: detected capacity change from 0 to 2048 [ 418.124247][T20554] loop4: detected capacity change from 0 to 8 [ 418.133561][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4943'. [ 418.175461][T20550] loop2: p2 < > [ 418.186074][T20554] SQUASHFS error: Failed to read block 0x6a4: -5 [ 418.204736][T20554] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 418.212101][T20554] SQUASHFS error: Unable to read inode 0x87 [ 418.479684][T20579] loop4: detected capacity change from 0 to 8 [ 418.582243][T20579] SQUASHFS error: Unable to read inode 0xa7 [ 419.604854][T20646] netlink: 'syz.1.4970': attribute type 95 has an invalid length. [ 419.741980][T20652] loop0: detected capacity change from 0 to 128 [ 419.761860][T20653] device veth1_macvtap left promiscuous mode [ 420.483138][T20699] loop0: detected capacity change from 0 to 256 [ 421.438913][T20758] __nla_validate_parse: 48 callbacks suppressed [ 421.438932][T20758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5006'. [ 421.489442][T20758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5006'. [ 421.503295][T20761] x_tables: duplicate entry at hook 3 [ 421.514730][T20758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5006'. [ 421.831112][T20778] netlink: 'syz.2.5013': attribute type 1 has an invalid length. [ 421.861044][T20778] netlink: 'syz.2.5013': attribute type 3 has an invalid length. [ 421.869819][T20778] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5013'. [ 422.072766][T20799] netlink: 'syz.2.5017': attribute type 21 has an invalid length. [ 422.081410][T20799] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5017'. [ 422.098928][T20799] netlink: 'syz.2.5017': attribute type 4 has an invalid length. [ 422.106936][T20799] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5017'. [ 422.170664][ T4297] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 422.330181][T20812] xt_nat: multiple ranges no longer supported [ 422.357234][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 422.365989][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 422.393061][ T4297] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 422.412759][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.432587][ T4297] usb 5-1: Product: syz [ 422.441082][ T4297] usb 5-1: Manufacturer: syz [ 422.449303][ T4297] usb 5-1: SerialNumber: syz [ 422.467198][ T4297] usb 5-1: config 0 descriptor?? [ 422.491593][ T4297] hub 5-1:0.0: bad descriptor, ignoring hub [ 422.505626][ T4297] hub: probe of 5-1:0.0 failed with error -5 [ 422.523398][ T4297] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 422.725080][ T4294] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 422.831584][T20846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5029'. [ 422.927065][ T4294] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 422.936672][ T4294] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.947045][ T4294] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 422.958040][ T4294] usb 3-1: config 1 has no interface number 1 [ 422.964990][ T4294] usb 3-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 422.979994][ T4294] usb 3-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 422.998842][ T4294] usb 3-1: config 1 interface 2 has no altsetting 1 [ 423.014413][ T4294] usb 3-1: string descriptor 0 read error: -22 [ 423.022629][ T4294] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.033747][ T4493] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 423.052669][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.075365][ T4294] usb 3-1: MIDIStreaming interface descriptor not found [ 423.227489][ T4493] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 423.245646][ T4493] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.275276][ T4493] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 423.289277][ T4493] usb 2-1: config 1 has no interface number 1 [ 423.303984][ T4493] usb 2-1: string descriptor 0 read error: -22 [ 423.311104][ T4493] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.320570][ T4493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.371757][ T4493] usb 2-1: MIDIStreaming interface descriptor not found [ 423.401032][ T4784] usb 3-1: USB disconnect, device number 19 [ 423.452396][ T4493] snd-usb-audio: probe of 2-1:1.2 failed with error -16 [ 423.580385][ T4493] usb 2-1: USB disconnect, device number 22 [ 423.887842][T20948] netlink: 'syz.0.5035': attribute type 30 has an invalid length. [ 424.041209][T20956] netlink: 'syz.2.5036': attribute type 11 has an invalid length. [ 424.069527][T20956] netlink: 428 bytes leftover after parsing attributes in process `syz.2.5036'. [ 424.224675][T20960] delete_channel: no stack [ 424.516672][ T52] block nbd1: Attempted send on invalid socket [ 424.522942][ T52] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.534701][T20977] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 424.983172][T21010] xt_nfacct: accounting object `syz0' does not exists [ 425.033407][T21002] loop2: detected capacity change from 0 to 4096 [ 425.148611][T21016] netlink: 'syz.0.5058': attribute type 13 has an invalid length. [ 425.238928][T21002] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 425.265607][T21002] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 425.461797][T21029] gfs2: not a GFS2 filesystem [ 426.188315][T21077] netlink: 'syz.1.5074': attribute type 1 has an invalid length. [ 426.204790][T21077] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5074'. [ 426.428387][T21092] netlink: 'syz.1.5077': attribute type 11 has an invalid length. [ 426.445445][T21092] netlink: 428 bytes leftover after parsing attributes in process `syz.1.5077'. [ 426.723111][T21067] loop4: detected capacity change from 0 to 32768 [ 426.773381][T21067] XFS (loop4): Mounting V5 Filesystem [ 426.851281][T21067] XFS (loop4): Ending clean mount [ 426.967055][ T4259] XFS (loop4): Unmounting Filesystem [ 427.121682][T21123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.470611][ T4486] usb 5-1: USB disconnect, device number 21 [ 427.507496][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'. [ 427.612726][T21153] loop4: detected capacity change from 0 to 256 [ 427.879158][T21171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5096'. [ 428.177334][T21187] loop0: detected capacity change from 0 to 16 [ 428.206591][T21187] erofs: (device loop0): mounted with root inode @ nid 36. [ 428.412357][T21193] loop2: detected capacity change from 0 to 4096 [ 428.888360][T21221] tmpfs: Bad value for 'mpol' [ 428.901804][T21220] netlink: 'syz.4.5111': attribute type 10 has an invalid length. [ 429.238983][T21240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5115'. [ 429.253187][T16838] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 429.445002][T16838] usb 3-1: Using ep0 maxpacket: 32 [ 429.466412][T16838] usb 3-1: config 0 interface 0 has no altsetting 0 [ 429.503222][T16838] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 429.525804][T16838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.533866][T16838] usb 3-1: Product: syz [ 429.544372][T16838] usb 3-1: Manufacturer: syz [ 429.549670][T16838] usb 3-1: SerialNumber: syz [ 429.571566][T16838] usb 3-1: config 0 descriptor?? [ 429.665183][ T4294] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 429.684689][ T4264] Bluetooth: hci4: command 0x0405 tx timeout [ 429.790445][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5126'. [ 429.857408][ T4294] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 429.872066][ T4294] usb 1-1: config 0 has no interface number 1 [ 429.879644][ T4294] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 429.900363][T21279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5128'. [ 429.909600][ T4294] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 429.932264][ T4294] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 429.961232][T21281] loop4: detected capacity change from 0 to 2048 [ 429.964339][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.977594][ T4294] usb 1-1: SerialNumber: syz [ 429.985781][ T4294] usb 1-1: config 0 descriptor?? [ 429.997015][ T4294] usb 1-1: Found UVC 0.00 device (0002:0000) [ 430.024844][ T4294] usb 1-1: No valid video chain found. [ 430.044295][T16838] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 430.067006][T16838] gs_usb: probe of 3-1:0.0 failed with error -71 [ 430.081116][T21281] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 430.101290][T16838] usb 3-1: USB disconnect, device number 20 [ 430.110365][T21281] UDF-fs: Scanning with blocksize 512 failed [ 430.142162][T21281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.255171][ T4293] usb 1-1: USB disconnect, device number 17 [ 430.592039][T21326] openvswitch: netlink: Flow key attr not present in new flow. [ 431.511223][T21334] loop4: detected capacity change from 0 to 32768 [ 431.532122][T21334] XFS: ikeep mount option is deprecated. [ 431.566506][T21334] XFS: ikeep mount option is deprecated. [ 431.670807][T21334] XFS (loop4): Mounting V5 Filesystem [ 431.898889][T21334] XFS (loop4): Ending clean mount [ 431.960902][T21334] XFS (loop4): Quotacheck needed: Please wait. [ 432.054741][T16838] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 432.074337][T21334] XFS (loop4): Quotacheck: Done. [ 432.192705][ T4259] XFS (loop4): Unmounting Filesystem [ 432.258237][T16838] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 432.292503][T16838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.310189][T16838] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 432.325188][ T4294] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 432.330547][T16838] usb 1-1: config 1 has no interface number 1 [ 432.357763][T16838] usb 1-1: string descriptor 0 read error: -22 [ 432.395575][T16838] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.421965][T16838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.478419][T16838] usb 1-1: MIDIStreaming interface descriptor not found [ 432.523220][T16838] snd-usb-audio: probe of 1-1:1.2 failed with error -16 [ 432.534913][ T4294] usb 3-1: Using ep0 maxpacket: 16 [ 432.559448][ T4294] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 170, changing to 7 [ 432.572642][ T4294] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.592893][ T4294] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.629307][ T4294] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.644939][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.742388][ T4294] usb 3-1: Product: syz [ 432.769067][ T4294] usb 3-1: Manufacturer: syz [ 432.783994][ T4294] usb 3-1: SerialNumber: syz [ 432.807150][ T4253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 432.818684][ T4253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 432.821302][ T4494] usb 1-1: USB disconnect, device number 18 [ 432.835764][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 432.847898][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 432.863639][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 432.871234][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 433.096391][ T4294] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 433.219833][ T4294] usb 3-1: USB disconnect, device number 21 [ 433.354866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 433.541491][ T4337] udevd[4337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 433.640163][T21445] chnl_net:caif_netlink_parms(): no params data found [ 433.765155][ T4494] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 433.976616][ T4494] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 433.986184][T21445] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.993414][T21445] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.008394][ T4494] usb 1-1: config 0 has no interface number 0 [ 434.021374][T21445] device bridge_slave_0 entered promiscuous mode [ 434.033988][T21445] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.047596][ T4494] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 434.057772][T21683] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 434.084895][T21445] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.092145][ T4494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.096596][T21445] device bridge_slave_1 entered promiscuous mode [ 434.121063][ T4494] usb 1-1: Product: syz [ 434.125448][ T4494] usb 1-1: Manufacturer: syz [ 434.130088][ T4494] usb 1-1: SerialNumber: syz [ 434.186806][ T4494] usb 1-1: config 0 descriptor?? [ 434.246147][T21445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.270398][T21445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.355807][T21728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5191'. [ 434.405887][ T4494] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 434.450087][ T4494] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 434.451722][T21445] team0: Port device team_slave_0 added [ 434.484241][ T4494] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 434.511165][T21445] team0: Port device team_slave_1 added [ 434.514409][ T4494] usb 1-1: media controller created [ 434.621251][ T4494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.647274][T21745] loop4: detected capacity change from 0 to 4096 [ 434.663975][T21445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.694698][T21445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.695496][T21745] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 434.803171][T21445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.817721][ T4494] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 434.873134][T21445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.904182][T21445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.930415][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.964780][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 434.998784][ T4494] usb 1-1: USB disconnect, device number 19 [ 435.013227][T21445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.128763][ T27] audit: type=1326 audit(1746639146.778:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21816 comm="syz.4.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422738e969 code=0x7ffc0000 [ 435.152417][ T4297] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 435.218791][T21445] device hsr_slave_0 entered promiscuous mode [ 435.237880][T21445] device hsr_slave_1 entered promiscuous mode [ 435.244672][ T27] audit: type=1326 audit(1746639146.848:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21816 comm="syz.4.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f422738e969 code=0x7ffc0000 [ 435.274219][T21445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.284416][T21445] Cannot create hsr debugfs directory [ 435.315414][ T27] audit: type=1326 audit(1746639146.848:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21816 comm="syz.4.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422738e969 code=0x7ffc0000 [ 435.378164][ T4297] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 435.394329][ T27] audit: type=1326 audit(1746639146.848:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21816 comm="syz.4.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422738e969 code=0x7ffc0000 [ 435.406901][ T4297] usb 2-1: config 0 has no interface number 1 [ 435.448652][T21856] loop2: detected capacity change from 0 to 256 [ 435.496414][ T4297] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 435.547358][ T4297] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 435.596236][ T4297] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 435.615664][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.623861][ T4297] usb 2-1: SerialNumber: syz [ 435.639609][ T4297] usb 2-1: config 0 descriptor?? [ 435.652427][ T4297] usb 2-1: Found UVC 0.00 device (0002:0000) [ 435.660841][ T4297] usb 2-1: No valid video chain found. [ 435.894831][ T4784] usb 2-1: USB disconnect, device number 23 [ 436.294502][T21947] loop4: detected capacity change from 0 to 2048 [ 436.312712][T21445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 436.333805][T21445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 436.387800][T21445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 436.434201][T21947] Alternate GPT is invalid, using primary GPT. [ 436.455374][T21947] loop4: p2 p3 p7 [ 436.456321][T21445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 436.818229][T21445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.883034][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 436.896156][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.926641][T21445] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.957767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 436.979450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.989681][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.996987][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.045180][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 437.076001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.158313][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.164929][T16838] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 437.170861][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.206817][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.214041][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.275302][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.291293][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.318466][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.369779][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.380399][T16838] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 437.394714][T16838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.409504][T22010] loop0: detected capacity change from 0 to 4096 [ 437.413498][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.429551][T22010] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 437.454255][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.465969][T22010] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 437.472127][T16838] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 437.489647][T22010] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 437.512165][T22010] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 437.514949][T16838] usb 3-1: config 1 has no interface number 1 [ 437.527604][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.558599][T22010] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 437.567988][T22010] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 437.580919][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.581756][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.610607][T16838] usb 3-1: string descriptor 0 read error: -22 [ 437.620726][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 437.621377][T16838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.628944][ T4486] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 437.646057][T22010] ntfs: volume version 3.1. [ 437.656622][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.691187][T21445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 437.701117][T16838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.741639][T16838] usb 3-1: MIDIStreaming interface descriptor not found [ 437.813951][T16838] snd-usb-audio: probe of 3-1:1.2 failed with error -16 [ 437.858655][ T4486] usb 5-1: config 6 has an invalid interface number: 109 but max is 0 [ 437.873599][ T4486] usb 5-1: config 6 has no interface number 0 [ 437.900732][ T4486] usb 5-1: config 6 interface 109 has no altsetting 0 [ 437.938366][ T4486] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=62.59 [ 437.985532][ T4486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.003644][T16838] usb 3-1: USB disconnect, device number 22 [ 438.043111][ T4486] usb 5-1: Found UVC 0.00 device (046d:0821) [ 438.078836][ T4486] usb 5-1: No valid video chain found. [ 438.288241][T16838] usb 5-1: USB disconnect, device number 22 [ 438.326826][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.338053][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.355472][T22075] netlink: 'syz.0.5219': attribute type 4 has an invalid length. [ 438.366927][T22075] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5219'. [ 438.402038][T22075] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 438.432589][T21445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.125551][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 439.214076][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 439.228773][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.238311][T22114] tmpfs: Bad value for 'mpol' [ 439.314027][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.326247][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.347631][T21445] device veth0_vlan entered promiscuous mode [ 439.357584][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.395560][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.434318][T21445] device veth1_vlan entered promiscuous mode [ 439.558502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 439.567605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 439.586993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 439.634286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.674996][T21445] device veth0_macvtap entered promiscuous mode [ 439.692029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 439.730015][T21445] device veth1_macvtap entered promiscuous mode [ 439.766872][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.773272][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.793824][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.805060][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.819731][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.836556][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.872799][T21445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.884864][ T4493] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 439.888873][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 439.932026][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 439.963085][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.969167][T22151] loop0: detected capacity change from 0 to 256 [ 440.007553][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.038796][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.084757][ T4493] usb 2-1: Using ep0 maxpacket: 16 [ 440.090136][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.102498][ T4493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.128917][T21445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.150634][ T4493] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 440.195862][T22157] netlink: 'syz.2.5242': attribute type 10 has an invalid length. [ 440.204863][ T4493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.212906][ T4493] usb 2-1: Product: syz [ 440.226360][ T4493] usb 2-1: Manufacturer: syz [ 440.231177][ T4493] usb 2-1: SerialNumber: syz [ 440.239588][ T4493] usb 2-1: config 0 descriptor?? [ 440.260093][T22157] team0: Cannot enslave team device to itself [ 440.275907][ T4493] hub 2-1:0.0: bad descriptor, ignoring hub [ 440.282128][ T4493] hub: probe of 2-1:0.0 failed with error -5 [ 440.295052][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 440.309630][ T4493] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 440.342187][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.388878][T21445] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.411747][T21445] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.440217][T21445] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.449397][T22173] loop0: detected capacity change from 0 to 512 [ 440.466081][T21445] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.560530][T22173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 440.667307][T22173] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz.0.5245: unexpected EA_INODE flag [ 440.696951][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5247'. [ 440.851499][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 440.884330][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.931737][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.005854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 441.047737][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.073727][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.104228][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 441.206947][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 441.242704][T22235] set match dimension is over the limit! [ 441.415883][T22245] netlink: 'syz.1.5255': attribute type 10 has an invalid length. [ 441.591374][T22245] device veth0_vlan left promiscuous mode [ 441.637467][T22245] device veth0_vlan entered promiscuous mode [ 441.675565][T22245] team0: Device veth0_vlan failed to register rx_handler [ 441.717037][T22258] loop4: detected capacity change from 0 to 1764 [ 441.801675][T22258] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 441.869863][T22249] netlink: 'syz.2.5257': attribute type 10 has an invalid length. [ 441.934521][T22249] team0: Port device wlan1 added [ 442.010036][T22268] netlink: 'syz.0.5271': attribute type 5 has an invalid length. [ 442.036368][T22268] netlink: 'syz.0.5271': attribute type 11 has an invalid length. [ 442.059650][T22245] syz.1.5255 (22245) used greatest stack depth: 19904 bytes left [ 442.445612][T22312] loop2: detected capacity change from 0 to 64 [ 442.999659][T22335] netlink: 'syz.4.5275': attribute type 10 has an invalid length. [ 443.095064][T22335] team0: Cannot enslave team device to itself [ 443.695012][ T4294] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 443.884845][ T4294] usb 1-1: Using ep0 maxpacket: 16 [ 443.892238][ T4294] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 170, changing to 7 [ 443.934162][ T4294] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 443.952037][ T4294] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.005004][ T4294] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.035325][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.047553][T22339] loop5: detected capacity change from 0 to 32768 [ 444.052081][ T4294] usb 1-1: Product: syz [ 444.085008][ T4294] usb 1-1: Manufacturer: syz [ 444.094943][ T4294] usb 1-1: SerialNumber: syz [ 444.154735][ T26] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 444.166599][T22339] XFS (loop5): Mounting V5 Filesystem [ 444.224258][T22400] loop4: detected capacity change from 0 to 2048 [ 444.261513][T22400] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 444.284418][T22339] XFS (loop5): Ending clean mount [ 444.309655][T22400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.327072][ T4294] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 444.367452][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 444.381248][ T26] usb 3-1: not running at top speed; connect to a high speed hub [ 444.394251][ T4294] usb 1-1: USB disconnect, device number 20 [ 444.403722][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.421144][ T26] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 444.472394][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 444.484470][T21445] XFS (loop5): Unmounting Filesystem [ 444.518157][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 444.548553][ T26] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 444.605067][ T26] usb 3-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 444.614506][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.622919][ T26] usb 3-1: Product: syz [ 444.627833][ T26] usb 3-1: Manufacturer: syz [ 444.632484][ T26] usb 3-1: SerialNumber: syz [ 444.644130][ T26] ipaq 3-1:1.0: PocketPC PDA converter detected [ 444.652705][ T4337] udevd[4337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.879071][ T26] usb 3-1: PocketPC PDA converter now attached to ttyUSB0 [ 445.039146][ T4486] usb 2-1: USB disconnect, device number 24 [ 445.139489][ T26] usb 3-1: USB disconnect, device number 23 [ 445.177156][ T26] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 445.237321][ T26] ipaq 3-1:1.0: device disconnected [ 445.474741][ T4338] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 445.686855][ T4338] usb 1-1: config 6 has an invalid interface number: 109 but max is 0 [ 445.698454][ T4338] usb 1-1: config 6 has no interface number 0 [ 445.762327][ T4338] usb 1-1: config 6 interface 109 has no altsetting 0 [ 445.771935][ T4338] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=62.59 [ 445.822409][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.910974][ T4338] usb 1-1: Found UVC 0.00 device (046d:0821) [ 445.934651][ T4338] usb 1-1: No valid video chain found. [ 446.050447][T22485] loop4: detected capacity change from 0 to 32768 [ 446.145807][ T26] usb 1-1: USB disconnect, device number 21 [ 446.158489][T22485] JBD2: Ignoring recovery information on journal [ 446.212321][T22485] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 446.472369][ T4259] ocfs2: Unmounting device (7,4) on (node local) [ 446.603385][T22561] netlink: 'syz.5.5315': attribute type 15 has an invalid length. [ 446.931338][T22550] loop2: detected capacity change from 0 to 32768 [ 446.947788][T22576] netlink: 'syz.0.5319': attribute type 1 has an invalid length. [ 446.974995][T22550] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.5312 (22550) [ 447.028037][T22550] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 447.074874][T22550] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 447.084195][T22550] BTRFS info (device loop2): force zlib compression, level 3 [ 447.154964][T22550] BTRFS info (device loop2): force clearing of disk cache [ 447.190671][T22550] BTRFS info (device loop2): setting nodatasum [ 447.240562][T22550] BTRFS info (device loop2): doing ref verification [ 447.264716][T22550] BTRFS info (device loop2): allowing degraded mounts [ 447.267204][T22589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.275096][T22550] BTRFS info (device loop2): enabling disk space caching [ 447.329336][T22589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.332255][T22550] BTRFS info (device loop2): disk space caching is enabled [ 447.349998][T22589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.395634][T22589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.421733][T22589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.454856][T22589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.711276][T22550] BTRFS info (device loop2): enabling ssd optimizations [ 447.738850][T22550] BTRFS info (device loop2): rebuilding free space tree [ 447.792891][T22628] loop5: detected capacity change from 0 to 1764 [ 447.803642][T22550] BTRFS info (device loop2): disabling free space tree [ 447.819506][T22550] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 447.840799][T22550] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 448.126676][T22550] BTRFS info (device loop2): balance: start -d -m -s [ 448.134493][T22550] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 448.407682][T22665] loop0: detected capacity change from 0 to 16 [ 448.428349][T22550] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 448.441930][T22665] erofs: (device loop0): mounted with root inode @ nid 36. [ 448.474940][ T4338] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 448.576800][T22550] BTRFS info (device loop2): balance: canceled [ 448.684768][ T4338] usb 5-1: Using ep0 maxpacket: 16 [ 448.692004][ T4338] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 170, changing to 7 [ 448.754281][ T4338] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 448.782302][ T4338] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.830937][ T4262] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 448.886042][ T4338] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.917924][ T4338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.943393][ T4338] usb 5-1: Product: syz [ 448.947740][ T4338] usb 5-1: Manufacturer: syz [ 448.952380][ T4338] usb 5-1: SerialNumber: syz [ 449.153043][T22704] loop0: detected capacity change from 0 to 16 [ 449.204164][T22704] erofs: (device loop0): mounted with root inode @ nid 36. [ 449.223300][ T4338] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 449.287733][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 449.315979][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 449.323005][ T4338] usb 5-1: USB disconnect, device number 23 [ 449.357974][ T4264] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 449.370151][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 449.392754][ T4337] udevd[4337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.464893][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 449.484856][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 449.495197][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 449.514899][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 449.546969][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 449.566730][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 449.609282][T22704] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 449.622037][T22704] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 449.633063][T22704] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 449.652270][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 449.652287][ T27] audit: type=1800 audit(1746639161.298:330): pid=22704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5349" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 449.764802][ T2120] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 449.779142][T22740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5343'. [ 449.994305][ T2120] usb 6-1: unable to get BOS descriptor or descriptor too short [ 450.035261][ T2120] usb 6-1: not running at top speed; connect to a high speed hub [ 450.051364][ T2120] usb 6-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 450.075845][ T2120] usb 6-1: config 219 interface 0 has no altsetting 0 [ 450.113729][ T2120] usb 6-1: config 219 interface 0 has no altsetting 1 [ 450.142231][ T2120] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 450.182712][ T2120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.213187][ T2120] usb 6-1: Product: syz [ 450.223319][ T2120] usb 6-1: Manufacturer: syz [ 450.243623][ T2120] usb 6-1: SerialNumber: syz [ 450.484241][ T2120] usb 6-1: selecting invalid altsetting 0 [ 450.589329][T22784] netlink: 'syz.1.5362': attribute type 11 has an invalid length. [ 450.651739][ T2120] snd-usb-audio: probe of 6-1:219.0 failed with error -22 [ 450.689153][ T2120] usb 6-1: USB disconnect, device number 2 [ 450.740471][ T5436] udevd[5436]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.215971][T22757] loop0: detected capacity change from 0 to 32768 [ 451.281738][T22757] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.5355 (22757) [ 451.344104][T22757] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 451.406328][T22757] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 451.443311][T22757] BTRFS info (device loop0): force zlib compression, level 3 [ 451.472921][T22757] BTRFS info (device loop0): force clearing of disk cache [ 451.515499][T22757] BTRFS info (device loop0): setting nodatasum [ 451.521850][T22757] BTRFS info (device loop0): doing ref verification [ 451.592410][T22757] BTRFS info (device loop0): allowing degraded mounts [ 451.642505][T22757] BTRFS info (device loop0): enabling disk space caching [ 451.684754][T22757] BTRFS info (device loop0): disk space caching is enabled [ 452.064722][T22757] BTRFS info (device loop0): enabling ssd optimizations [ 452.077766][T22757] BTRFS info (device loop0): rebuilding free space tree [ 452.104143][T22757] BTRFS info (device loop0): disabling free space tree [ 452.120122][T22757] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 452.154754][T22757] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 452.383426][T22757] BTRFS info (device loop0): balance: start -d -m -s [ 452.455482][T22757] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 452.580710][T22885] loop4: detected capacity change from 0 to 4096 [ 452.643617][T22757] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 452.764491][T22757] BTRFS info (device loop0): balance: canceled [ 452.893013][ T4254] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 453.058222][T22912] SET target dimension over the limit! [ 453.527969][ T27] audit: type=1326 audit(1746639165.178:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22937 comm="syz.5.5401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01eef8e969 code=0x0 [ 454.147872][T22962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 454.149753][T22962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 454.198260][T22962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 454.326842][T22962] team0: Port device wlan1 removed [ 454.755320][T22994] binder: 22992:22994 ioctl c018620c 0 returned -14 [ 454.814058][T22987] xt_CT: No such helper "snmp_trap" [ 454.981157][T23007] netlink: 'syz.0.5419': attribute type 10 has an invalid length. [ 455.121950][T23016] tmpfs: Bad value for 'mpol' [ 455.202209][T23007] team0: Device veth0_vlan failed to register rx_handler [ 455.355931][T23008] device vlan0 entered promiscuous mode [ 455.383673][T23022] netlink: 'syz.5.5426': attribute type 7 has an invalid length. [ 455.639903][T23033] netlink: zone id is out of range [ 455.639920][T23033] netlink: zone id is out of range [ 455.639930][T23033] netlink: zone id is out of range [ 455.639938][T23033] netlink: zone id is out of range [ 455.639946][T23033] netlink: zone id is out of range [ 455.639955][T23033] netlink: zone id is out of range [ 455.639963][T23033] netlink: zone id is out of range [ 455.639971][T23033] netlink: zone id is out of range [ 455.639980][T23033] netlink: zone id is out of range [ 455.639989][T23033] netlink: zone id is out of range [ 455.684206][T23037] VFS: could not find a valid V7 on nullb0. [ 455.972189][T23050] netlink: 'syz.0.5435': attribute type 2 has an invalid length. [ 455.972267][T23050] netlink: 'syz.0.5435': attribute type 1 has an invalid length. [ 456.255616][T23052] loop5: detected capacity change from 0 to 8192 [ 456.279486][T23052] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 456.299824][T23052] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 456.315347][T23052] REISERFS (device loop5): using ordered data mode [ 456.321937][T23052] reiserfs: using flush barriers [ 456.433815][T23052] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 456.515497][T23052] REISERFS (device loop5): checking transaction log (loop5) [ 456.556447][T23052] REISERFS (device loop5): Using r5 hash to sort names [ 456.599292][T23052] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 456.633757][T23052] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 456.644316][T23078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5444'. [ 456.699022][T23078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5444'. [ 456.781256][T23055] loop2: detected capacity change from 0 to 32768 [ 456.841410][T23055] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 456.895929][T23055] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 457.207983][ T4262] ocfs2: Unmounting device (7,2) on (node local) [ 457.555927][T23118] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551610) [ 457.604067][T23118] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 457.910804][T23133] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5459'. [ 458.041620][T23139] loop5: detected capacity change from 0 to 128 [ 458.157704][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5463'. [ 458.177600][T23147] device bridge_slave_1 left promiscuous mode [ 458.184340][T23147] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.227073][T23147] device bridge_slave_0 left promiscuous mode [ 458.262455][T23147] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.271937][T23104] loop4: detected capacity change from 0 to 32768 [ 458.368233][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 458.409701][T23104] XFS (loop4): Mounting V5 Filesystem [ 458.529221][T23176] x_tables: duplicate entry at hook 2 [ 458.575523][T23104] XFS (loop4): Ending clean mount [ 458.629558][T23104] XFS (loop4): Quotacheck needed: Please wait. [ 458.783926][T23104] XFS (loop4): Quotacheck: Done. [ 459.029055][ T4259] XFS (loop4): Unmounting Filesystem [ 459.553473][T23178] loop5: detected capacity change from 0 to 32768 [ 459.598595][T23178] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.5469 (23178) [ 459.708761][T23178] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 459.768685][T23178] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 459.839803][T23178] BTRFS info (device loop5): force zlib compression, level 3 [ 459.866987][T23178] BTRFS info (device loop5): setting nodatasum [ 459.873340][T23178] BTRFS info (device loop5): metadata ratio 2 [ 459.920762][T23178] BTRFS info (device loop5): using free space tree [ 460.309769][T23269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5491'. [ 460.572221][T21445] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 460.674763][T22731] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 460.722587][T23243] loop4: detected capacity change from 0 to 32768 [ 460.865978][T22731] usb 3-1: not running at top speed; connect to a high speed hub [ 460.894954][T23243] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 460.910851][T22731] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 460.929279][T22731] usb 3-1: config 95 has no interface number 0 [ 460.936358][ T4328] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 460.962397][T22731] usb 3-1: config 95 interface 1 has no altsetting 0 [ 460.998709][T22731] usb 3-1: string descriptor 0 read error: -22 [ 461.054752][T22731] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 461.074104][T22731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.164837][ T4328] usb 1-1: Using ep0 maxpacket: 8 [ 461.172762][ T4328] usb 1-1: unable to get BOS descriptor or descriptor too short [ 461.203314][ T4328] usb 1-1: config 4 interface 0 has no altsetting 0 [ 461.215976][ T4328] usb 1-1: string descriptor 0 read error: -22 [ 461.233031][ T4259] ocfs2: Unmounting device (7,4) on (node local) [ 461.264782][ T4328] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 461.321040][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.415676][ T4328] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 461.462968][ T4328] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 461.484031][ T4328] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 461.515053][ T4328] usb 1-1: media controller created [ 461.554178][ T4328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.569268][ T4784] usb 3-1: USB disconnect, device number 24 [ 461.926124][ T4328] usb 1-1: USB disconnect, device number 22 [ 462.662884][T23405] loop0: detected capacity change from 0 to 2048 [ 462.685402][T23406] loop5: detected capacity change from 0 to 2048 [ 462.716052][T23405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.755461][T23406] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 462.784298][T23416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5519'. [ 462.805983][T23406] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.038452][T21445] EXT4-fs (loop5): unmounting filesystem. [ 463.300151][T23395] loop4: detected capacity change from 0 to 40427 [ 463.334163][T23395] F2FS-fs (loop4): invalid crc value [ 463.362554][T23395] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 463.403025][T23440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5524'. [ 463.443120][T23440] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5524'. [ 463.479065][T23395] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 463.495035][T23395] F2FS-fs (loop4): Start checkpoint disabled! [ 463.538419][T23395] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 463.613676][T23395] F2FS-fs (loop4): disabling checkpoint not compatible with read-only [ 463.888257][T23457] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 464.960723][T23512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5546'. [ 465.033038][T23512] netlink: 'syz.4.5546': attribute type 2 has an invalid length. [ 465.077213][T23512] netlink: 'syz.4.5546': attribute type 1 has an invalid length. [ 465.115925][T23512] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5546'. [ 465.145002][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5549'. [ 465.525766][T23483] syz.1.5537 (23483): drop_caches: 2 [ 466.290748][T23584] device vlan0 entered promiscuous mode [ 466.331883][T23581] loop2: detected capacity change from 0 to 2048 [ 466.446749][T23581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.612367][T23599] netlink: 'syz.1.5574': attribute type 1 has an invalid length. [ 466.634734][T23599] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5574'. [ 466.679261][T23606] netlink: 'syz.4.5575': attribute type 1 has an invalid length. [ 466.714764][T23606] netlink: 'syz.4.5575': attribute type 3 has an invalid length. [ 466.754832][T23606] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5575'. [ 467.037927][T23624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.218157][T23640] overlayfs: unrecognized mount option "\" or missing value [ 467.364923][T22731] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 467.584741][T22731] usb 6-1: Using ep0 maxpacket: 32 [ 467.596716][T22731] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 467.631187][T22731] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 467.672220][T22731] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 467.703852][T22731] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 467.715308][T22731] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 467.729054][T22731] usb 6-1: config 0 interface 0 has no altsetting 0 [ 467.765738][T22731] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 467.785238][T22731] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 467.803754][T22731] usb 6-1: Product: syz [ 467.833544][T22731] usb 6-1: Manufacturer: syz [ 467.842155][T22731] usb 6-1: SerialNumber: syz [ 467.875328][T22731] usb 6-1: config 0 descriptor?? [ 467.893271][T22731] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 467.935647][T22731] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 468.157013][T23629] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 468.177897][T22731] usb 6-1: USB disconnect, device number 3 [ 468.215692][T22731] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 468.226067][T23690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5600'. [ 469.032948][T23717] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 469.161212][T23717] device bond3 entered promiscuous mode [ 469.189388][T23717] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.280395][T23699] loop0: detected capacity change from 0 to 40427 [ 469.313866][T23699] F2FS-fs (loop0): invalid crc value [ 469.365153][T23699] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 469.430203][T23768] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5612'. [ 469.510415][T23699] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 469.537400][T23699] F2FS-fs (loop0): Start checkpoint disabled! [ 469.619929][T23699] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 469.768355][T23699] F2FS-fs (loop0): disabling checkpoint not compatible with read-only [ 470.817933][T23832] loop4: detected capacity change from 0 to 4096 [ 471.582856][T23832] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 471.645197][T23818] syz.5.5627 (23818): drop_caches: 2 [ 471.837800][T23840] loop2: detected capacity change from 0 to 40427 [ 471.898063][T23840] F2FS-fs (loop2): invalid crc value [ 471.945899][T23840] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 472.215865][T23840] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 472.232831][T23840] F2FS-fs (loop2): Start checkpoint disabled! [ 472.305297][T23840] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 472.434286][T23840] F2FS-fs (loop2): disabling checkpoint not compatible with read-only [ 472.798626][T23907] loop0: detected capacity change from 0 to 8 [ 473.043538][T23913] loop5: detected capacity change from 0 to 4096 [ 473.109506][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 473.129913][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 473.154194][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 473.186057][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 473.194505][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 473.203241][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 473.241833][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 473.254079][ T4328] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 473.263470][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 473.273725][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 473.282980][T23913] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00 [ 473.454892][ T4328] usb 2-1: Using ep0 maxpacket: 8 [ 473.462602][ T4328] usb 2-1: unable to get BOS descriptor or descriptor too short [ 473.505390][ T4328] usb 2-1: config 4 interface 0 has no altsetting 0 [ 473.528178][ T4328] usb 2-1: string descriptor 0 read error: -22 [ 473.578398][ T4328] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 473.598456][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.629921][ T4328] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 473.678565][ T4328] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 473.709741][ T4328] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 473.751925][ T4328] usb 2-1: media controller created [ 473.789543][ T4328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.207353][ T4774] usb 2-1: USB disconnect, device number 25 [ 474.629674][T24013] loop0: detected capacity change from 0 to 8192 [ 474.683591][T24013] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 474.708625][T24013] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 474.753609][T24013] REISERFS (device loop0): using ordered data mode [ 474.761536][T24013] reiserfs: using flush barriers [ 474.790051][T24013] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 474.815817][T24013] REISERFS (device loop0): checking transaction log (loop0) [ 474.893680][T24013] REISERFS (device loop0): Using r5 hash to sort names [ 474.902823][T24013] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 474.944870][T24013] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 474.965115][T24038] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 475.879819][T24034] loop4: detected capacity change from 0 to 32768 [ 476.304230][T24088] netlink: 'syz.1.5699': attribute type 2 has an invalid length. [ 476.589268][T24067] loop0: detected capacity change from 0 to 32768 [ 477.064286][T24051] loop5: detected capacity change from 0 to 65536 [ 477.077818][T24110] loop2: detected capacity change from 0 to 1024 [ 477.260619][T24051] XFS (loop5): Mounting V5 Filesystem [ 477.356772][T24051] XFS (loop5): Ending clean mount [ 477.636456][T21445] XFS (loop5): Unmounting Filesystem [ 477.676629][T24107] loop4: detected capacity change from 0 to 32768 [ 477.690939][T24107] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.5697 (24107) [ 477.776653][T24107] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 477.781805][T24135] loop0: detected capacity change from 0 to 2048 [ 477.798297][T24107] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 477.814121][T24107] BTRFS info (device loop4): force zlib compression, level 3 [ 477.857351][T24135] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 477.885216][T24143] loop2: detected capacity change from 0 to 128 [ 477.892186][T24107] BTRFS info (device loop4): force clearing of disk cache [ 477.906167][T24107] BTRFS info (device loop4): setting nodatasum [ 477.924703][T24107] BTRFS info (device loop4): doing ref verification [ 477.947978][T24135] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 477.956101][T24107] BTRFS info (device loop4): allowing degraded mounts [ 477.988809][T24107] BTRFS info (device loop4): enabling disk space caching [ 477.992488][T24135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 478.015179][T24107] BTRFS info (device loop4): disk space caching is enabled [ 478.520342][T24188] loop0: detected capacity change from 0 to 8 [ 478.527467][T24188] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 478.542282][T24188] cramfs: Error -3 while decompressing! [ 478.543262][T24107] BTRFS info (device loop4): enabling ssd optimizations [ 478.578289][T24107] BTRFS info (device loop4): rebuilding free space tree [ 478.587470][T24188] cramfs: ffffffff96b4c568(26)->ffff888047862000(4096) [ 478.618682][T24107] BTRFS info (device loop4): disabling free space tree [ 478.634787][T24188] cramfs: Error -3 while decompressing! [ 478.640403][T24188] cramfs: ffffffff96b4c582(26)->ffff888047863000(4096) [ 478.667702][T24107] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 478.705045][T24107] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 478.736655][T24188] cramfs: Error -3 while decompressing! [ 478.742282][T24188] cramfs: ffffffff96b4c568(26)->ffff888047862000(4096) [ 478.874220][T24107] BTRFS info (device loop4): balance: start -d -m -s [ 478.891104][T24107] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 479.058216][T24107] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 479.190866][T24107] BTRFS info (device loop4): balance: canceled [ 479.312490][ T4259] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 479.723599][ T27] audit: type=1326 audit(1746639191.368:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552438e969 code=0x7ffc0000 [ 479.795670][ T27] audit: type=1326 audit(1746639191.368:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552438e969 code=0x7ffc0000 [ 479.859966][ T27] audit: type=1326 audit(1746639191.398:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f552438e969 code=0x7ffc0000 [ 479.964755][ T27] audit: type=1326 audit(1746639191.398:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552438e969 code=0x7ffc0000 [ 480.008460][ T27] audit: type=1326 audit(1746639191.398:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.1.5728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552438e969 code=0x7ffc0000 [ 480.279099][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5734'. [ 480.334193][T24255] net_ratelimit: 5 callbacks suppressed [ 480.334211][T24255] netlink: get zone limit has 8 unknown bytes [ 480.409995][T24209] loop5: detected capacity change from 0 to 40427 [ 480.449164][T24209] F2FS-fs (loop5): invalid crc value [ 480.535535][T24209] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 480.756642][T24279] loop4: detected capacity change from 0 to 256 [ 480.767318][T24209] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 480.775306][T24209] F2FS-fs (loop5): Start checkpoint disabled! [ 480.795014][T24209] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 480.840557][T24209] F2FS-fs (loop5): disabling checkpoint not compatible with read-only [ 480.883385][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 480.964815][T24279] FAT-fs (loop4): Filesystem has been set read-only [ 480.971571][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 481.095629][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 481.104408][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 481.184820][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 481.193618][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 481.255742][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 481.295597][T24305] netlink: 'syz.2.5748': attribute type 8 has an invalid length. [ 481.305437][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 481.314200][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 481.375041][T24279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 481.396600][ T27] audit: type=1800 audit(1746639193.048:337): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5740" name="file1" dev="loop4" ino=1048660 res=0 errno=0 [ 481.554766][T24316] netlink: 'syz.5.5744': attribute type 16 has an invalid length. [ 481.593284][T24316] netlink: 'syz.5.5744': attribute type 17 has an invalid length. [ 481.656556][T24316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 481.694923][T24316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 481.730672][T24316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.784952][T24316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.991721][T24336] loop4: detected capacity change from 0 to 24 [ 482.532385][T24313] loop2: detected capacity change from 0 to 32768 [ 483.534220][T24411] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 483.858494][T24429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5786'. [ 483.888013][T24429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5786'. [ 483.913621][T24378] loop5: detected capacity change from 0 to 32768 [ 483.998862][T24378] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.5768 (24378) [ 484.071448][T24378] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 484.119162][T24378] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 484.139064][T24378] BTRFS info (device loop5): force zlib compression, level 3 [ 484.178967][T24378] BTRFS info (device loop5): force clearing of disk cache [ 484.197304][T24378] BTRFS info (device loop5): setting nodatasum [ 484.203545][T24378] BTRFS info (device loop5): doing ref verification [ 484.311797][T24378] BTRFS info (device loop5): allowing degraded mounts [ 484.321467][T24378] BTRFS info (device loop5): enabling disk space caching [ 484.372095][T24378] BTRFS info (device loop5): disk space caching is enabled [ 484.411093][T24454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5793'. [ 484.468142][T24459] netlink: 'syz.2.5794': attribute type 16 has an invalid length. [ 484.494685][T24459] netlink: 'syz.2.5794': attribute type 17 has an invalid length. [ 484.515052][T24459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 484.523754][T24459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 484.536038][T24459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 484.543925][T24459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 484.645479][T24378] BTRFS info (device loop5): enabling ssd optimizations [ 484.697419][T24378] BTRFS info (device loop5): rebuilding free space tree [ 484.800981][T24378] BTRFS info (device loop5): disabling free space tree [ 484.820954][T24486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5798'. [ 484.835421][T24378] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 484.882705][T24486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5798'. [ 484.904129][T24378] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 485.032572][T24496] binder: 24494:24496 ioctl c018620c 200000000380 returned -22 [ 485.088357][T24378] BTRFS info (device loop5): balance: start -d -m -s [ 485.115627][T24378] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 485.193241][T24378] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 485.367969][T24378] BTRFS info (device loop5): balance: canceled [ 485.547444][T21445] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 485.815093][T24532] netlink: 'syz.0.5813': attribute type 2 has an invalid length. [ 485.892042][T24532] netlink: 'syz.0.5813': attribute type 1 has an invalid length. [ 486.074267][T24542] xt_TCPMSS: Only works on TCP SYN packets [ 487.316835][T24619] loop4: detected capacity change from 0 to 47 [ 487.484447][T24626] loop0: detected capacity change from 0 to 512 [ 487.539505][T24633] netlink: 'syz.1.5842': attribute type 1 has an invalid length. [ 487.575269][T24626] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5841: bg 0: block 393: padding at end of block bitmap is not set [ 487.645306][T24633] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5842'. [ 487.674768][T24626] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 487.766985][T24626] EXT4-fs (loop0): 2 truncates cleaned up [ 487.775372][T24626] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 487.942171][T24646] sp0: Synchronizing with TNC [ 487.961600][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 488.007958][T24645] [U] è [ 488.668019][T24704] 9pnet_fd: p9_fd_create_tcp (24704): problem binding to privport [ 489.160784][T24733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5872'. [ 489.575279][T24759] netlink: 272 bytes leftover after parsing attributes in process `syz.5.5878'. [ 489.878291][T24774] netlink: 'syz.0.5886': attribute type 1 has an invalid length. [ 490.529512][T24807] loop4: detected capacity change from 0 to 64 [ 490.602449][T24807] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 490.683199][T24815] loop0: detected capacity change from 0 to 256 [ 490.745755][T24815] FAT-fs (loop0): Unrecognized mount option "ìoûZǺ [ 490.745755][T24815] e=1" or missing value [ 490.782970][T24821] netlink: 'syz.2.5899': attribute type 10 has an invalid length. [ 490.851197][T24821] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 491.079993][T24815] loop0: detected capacity change from 0 to 4096 [ 491.117086][T24815] ntfs: (device loop0): parse_options(): Unrecognized mount option nonumtail. [ 491.142462][T24815] ntfs: (device loop0): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 491.171030][T24837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5902'. [ 491.214962][T24815] ntfs: (device loop0): parse_options(): Unrecognized mount option check. [ 491.223533][T24815] ntfs: (device loop0): parse_options(): Unrecognized mount option shortname. [ 491.277833][T24815] ntfs: (device loop0): parse_options(): Unrecognized mount option shortname. [ 491.313451][T24815] ntfs: (device loop0): parse_options(): Unrecognized mount option nonumtail. [ 491.334724][T24815] ntfs: (device loop0): parse_options(): Unrecognized mount option shortname. [ 491.375894][T24815] ntfs: (device loop0): parse_options(): Unrecognized mount option shortname. [ 491.399870][T24815] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 491.495474][T24815] ntfs: (device loop0): parse_options(): Unrecognized mount option ìoûZǺ [ 491.495474][T24815] e. [ 491.609786][T24855] loop2: detected capacity change from 0 to 256 [ 491.741304][T24855] FAT-fs (loop2): Directory bread(block 64) failed [ 491.784653][T24855] FAT-fs (loop2): Directory bread(block 65) failed [ 491.824929][T24855] FAT-fs (loop2): Directory bread(block 66) failed [ 491.831532][T24855] FAT-fs (loop2): Directory bread(block 67) failed [ 491.863237][T24866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5911'. [ 491.883469][T24855] FAT-fs (loop2): Directory bread(block 68) failed [ 491.905637][T24855] FAT-fs (loop2): Directory bread(block 69) failed [ 491.924891][T24855] FAT-fs (loop2): Directory bread(block 70) failed [ 491.931538][T24855] FAT-fs (loop2): Directory bread(block 71) failed [ 491.944757][T24855] FAT-fs (loop2): Directory bread(block 72) failed [ 491.955708][T24855] FAT-fs (loop2): Directory bread(block 73) failed [ 492.221532][T24881] loop0: detected capacity change from 0 to 1024 [ 492.316181][T24881] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 492.420795][T24881] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.5915: Failed to acquire dquot type 0 [ 492.447980][T24881] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 492.485288][T24881] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #13: comm syz.0.5915: corrupted inode contents [ 492.552232][T24881] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #13: comm syz.0.5915: mark_inode_dirty error [ 492.586509][T24881] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #13: comm syz.0.5915: corrupted inode contents [ 492.628486][T24881] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.5915: mark_inode_dirty error [ 492.685175][T24881] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #13: comm syz.0.5915: corrupted inode contents [ 492.708903][T24881] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 492.733878][T24881] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #13: comm syz.0.5915: corrupted inode contents [ 492.772748][T24881] EXT4-fs error (device loop0): ext4_truncate:4312: inode #13: comm syz.0.5915: mark_inode_dirty error [ 492.799355][T24881] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 492.863201][T24910] loop4: detected capacity change from 0 to 4096 [ 492.875912][T24881] EXT4-fs (loop0): 1 truncate cleaned up [ 492.895962][T24881] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 492.917754][T24920] program syz.5.5926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.958596][T24910] ntfs3: loop4: ino=3, Correct links count -> 2. [ 492.991256][T24881] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.5915: Failed to acquire dquot type 0 [ 493.052555][T24910] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 493.191031][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 493.201113][T24933] loop5: detected capacity change from 0 to 512 [ 493.337857][T24933] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 493.386286][T24933] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.505676][T24933] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.5929: Failed to acquire dquot type 0 [ 493.666870][T21445] EXT4-fs (loop5): unmounting filesystem. [ 493.869847][T24978] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5943'. [ 495.816187][T25094] loop0: detected capacity change from 0 to 1024 [ 495.824853][T16838] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 495.987388][T25104] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5981'. [ 496.017647][T16838] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 496.032414][T16838] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 496.042281][T25104] 0ªX¹¦À: renamed from caif0 [ 496.065123][T16838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.099275][T16838] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 496.117597][T16838] usb 5-1: config 0 has no interface number 0 [ 496.123930][T16838] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 496.136072][T16838] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 496.143377][T25112] loop0: detected capacity change from 0 to 1024 [ 496.146825][T16838] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 496.170606][T16838] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 496.189308][T16838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.197321][T25112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.229793][T25104] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 496.257246][T16838] usb 5-1: config 0 descriptor?? [ 496.281215][T25109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5982'. [ 496.290878][T16838] gspca_main: spca561-2.14.0 probing abcd:cdee [ 496.490475][T16838] spca561: probe of 5-1:0.156 failed with error -22 [ 496.514435][T16838] usb 5-1: MIDIStreaming interface descriptor not found [ 496.599818][T16838] usb 5-1: USB disconnect, device number 24 [ 496.823807][T25166] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5991'. [ 496.849270][T25166] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 496.916329][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.194829][T25185] netlink: 'syz.1.5998': attribute type 15 has an invalid length. [ 497.224718][T25185] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5998'. [ 497.281842][T25192] loop2: detected capacity change from 0 to 8 [ 497.372863][T25198] loop4: detected capacity change from 0 to 128 [ 497.471782][T25203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6001'. [ 497.519199][T25203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6001'. [ 498.045062][T25239] netlink: 'syz.1.6012': attribute type 6 has an invalid length. [ 498.081504][T25240] device geneve3 entered promiscuous mode [ 498.324486][T25257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6018'. [ 498.749096][T25313] loop0: detected capacity change from 0 to 1024 [ 498.759590][T25318] netlink: 'syz.4.6027': attribute type 27 has an invalid length. [ 498.846953][T25313] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 498.865187][T25313] ext4 filesystem being mounted at /1241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.991471][T25313] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.6025: inode #458752: comm syz.0.6025: iget: illegal inode # [ 499.054210][T25313] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.6025: error while reading EA inode 458752 err=-117 [ 499.161422][T25339] netlink: 'syz.5.6033': attribute type 4 has an invalid length. [ 499.194100][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 499.194839][T25339] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.6033'. [ 499.700825][T25369] loop4: detected capacity change from 0 to 164 [ 499.750156][T25369] rock: directory entry would overflow storage [ 499.774339][T25369] rock: sig=0x66, size=4, remaining=3 [ 499.972792][T25383] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6043'. [ 500.020250][T25334] loop2: detected capacity change from 0 to 32768 [ 500.062798][T25334] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.6029 (25334) [ 500.096078][ T4293] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 500.154729][T25334] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 500.196735][T25334] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 500.224873][T25334] BTRFS info (device loop2): metadata ratio 4 [ 500.255438][T25334] BTRFS info (device loop2): force zlib compression, level 3 [ 500.262906][T25334] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 500.306527][ T4293] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 500.335164][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.366558][ T4293] usb 5-1: config 0 descriptor?? [ 500.372310][T25334] BTRFS info (device loop2): trying to use backup root at mount time [ 500.425261][ T4293] usb 5-1: selecting invalid altsetting 1 [ 500.441982][T25405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6048'. [ 500.444279][T25334] BTRFS info (device loop2): doing ref verification [ 500.482192][ T4293] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 500.496023][T25334] BTRFS info (device loop2): enabling auto defrag [ 500.516636][T25334] BTRFS info (device loop2): disabling tree log [ 500.534384][T25334] BTRFS info (device loop2): using free space tree [ 500.569303][ T5437] udevd[5437]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.595046][T22731] usb 5-1: USB disconnect, device number 25 [ 500.705969][T25406] loop0: detected capacity change from 0 to 4096 [ 500.722715][T25406] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 500.832261][T25406] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 500.906431][T25406] ntfs3: loop0: Failed to load $Extend. [ 500.937519][ T4319] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 500.986519][T25334] BTRFS warning (device loop2): couldn't read tree root [ 501.017914][T25334] BTRFS warning (device loop2): try to load backup roots slot 1 [ 501.039873][ T4299] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 501.047078][T25449] cgroup: none used incorrectly [ 501.128019][T25334] BTRFS warning (device loop2): couldn't read tree root [ 501.145602][T25334] BTRFS warning (device loop2): try to load backup roots slot 2 [ 501.167151][T25334] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 501.192367][T25334] BTRFS warning (device loop2): couldn't read tree root [ 501.200902][T25334] BTRFS warning (device loop2): try to load backup roots slot 3 [ 501.212383][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.218799][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.283528][T25334] BTRFS info (device loop2): enabling ssd optimizations [ 501.296367][T25334] BTRFS info (device loop2): rebuilding free space tree [ 501.311581][T25334] BTRFS info (device loop2): checking UUID tree [ 501.514812][T16838] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 501.675937][ T4262] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 501.735817][T16838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.785007][T16838] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 501.793966][T16838] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 501.814126][T16838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.842065][T16838] usb 1-1: config 0 descriptor?? [ 502.276670][T16838] Bluetooth: Can't get version to change to load ram patch err [ 502.284290][T16838] Bluetooth: Loading patch file failed [ 502.324863][T16838] ath3k: probe of 1-1:0.0 failed with error -71 [ 502.353063][T16838] usb 1-1: USB disconnect, device number 23 [ 502.867540][T25489] loop4: detected capacity change from 0 to 32768 [ 503.054664][T25545] Zero length message leads to an empty skb [ 503.093711][T25489] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 503.112976][T25489] XFS (loop4): Mounting V5 Filesystem [ 503.314723][T25489] XFS (loop4): Ending clean mount [ 503.358020][T25489] XFS (loop4): Quotacheck needed: Please wait. [ 503.472703][T25489] XFS (loop4): Quotacheck: Done. [ 503.759416][ T4259] XFS (loop4): Unmounting Filesystem [ 503.897903][T25588] binder: 25587:25588 ioctl c018620b 0 returned -14 [ 504.279875][T25606] openvswitch: netlink: Missing key (keys=40, expected=80) [ 504.404103][T25610] loop2: detected capacity change from 0 to 256 [ 504.448819][T25614] loop0: detected capacity change from 0 to 256 [ 504.468672][T25610] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 504.483860][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 504.483877][ T27] audit: type=1400 audit(1746639216.128:338): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=25615 comm="syz.1.6096" [ 504.520533][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.526944][T25610] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 504.536980][T25614] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 505.351651][T25661] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6108'. [ 505.375852][T25658] loop0: detected capacity change from 0 to 1764 [ 505.457891][ T27] audit: type=1326 audit(1746639217.108:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552438e969 code=0x7ffc0000 [ 505.480361][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.591331][ T27] audit: type=1326 audit(1746639217.158:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552438e969 code=0x7ffc0000 [ 505.613840][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.685965][T25675] xt_connbytes: Forcing CT accounting to be enabled [ 505.729543][T25675] xt_bpf: check failed: parse error [ 505.744986][ T27] audit: type=1326 audit(1746639217.158:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552438e969 code=0x7ffc0000 [ 505.767351][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.897921][ T27] audit: type=1326 audit(1746639217.158:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552438e969 code=0x7ffc0000 [ 506.769876][T25737] kAFS: unparsable volume name [ 506.873984][T25746] loop5: detected capacity change from 0 to 512 [ 506.995851][T25746] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.6135: Invalid block bitmap block 0 in block_group 0 [ 507.072521][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.082522][T25759] Non-string source [ 507.143025][T25746] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 507.185575][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.195105][T25746] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.6135: attempt to clear invalid blocks 983260 len 1 [ 507.237688][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.292425][T25746] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.6135: invalid indirect mapped block 2683928664 (level 0) [ 507.335204][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.344772][T25746] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.6135: invalid indirect mapped block 1701603686 (level 1) [ 507.381356][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.393398][T25746] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.6135: Invalid inode table block 0 in block_group 0 [ 507.408185][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.416084][ T4296] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 507.421435][T25746] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 507.434343][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.442065][T25746] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 507.459519][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.472779][T25746] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.6135: Invalid inode table block 0 in block_group 0 [ 507.510231][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.521291][T25746] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 507.546871][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.554827][T25746] EXT4-fs error (device loop5): ext4_truncate:4312: inode #13: comm syz.5.6135: mark_inode_dirty error [ 507.568746][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.579451][T25746] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 507.589196][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.597223][T25746] EXT4-fs (loop5): 1 truncate cleaned up [ 507.602927][T25746] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 507.614996][ T4296] usb 1-1: Using ep0 maxpacket: 16 [ 507.622648][ T4296] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 507.666379][ T4296] usb 1-1: config 0 has no interface number 0 [ 507.680831][ T4296] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 507.707939][T25746] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.6135: Invalid inode table block 0 in block_group 0 [ 507.729457][ T4296] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 507.739981][T25746] EXT4-fs (loop5): Remounting filesystem read-only [ 507.759896][ T4296] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 507.798562][ T4296] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 507.823126][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.840877][ T4296] usb 1-1: Product: syz [ 507.868619][ T4296] usb 1-1: Manufacturer: syz [ 507.888489][ T4296] usb 1-1: SerialNumber: syz [ 507.900553][T21445] EXT4-fs (loop5): unmounting filesystem. [ 507.918174][ T4296] usb 1-1: config 0 descriptor?? [ 507.924317][T25766] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 508.175236][ T4296] usb 1-1: USB disconnect, device number 24 [ 508.263447][T25825] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6156'. [ 508.307029][T25825] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6156'. [ 508.344872][T25825] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6156'. [ 508.658372][T25844] tmpfs: Bad value for 'mpol' [ 508.953139][T25863] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6166'. [ 508.956375][T25860] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6167'. [ 508.963960][T25863] ksmbd: Unknown IPC event: 10, ignore. [ 509.138638][T25869] xt_hashlimit: overflow, rate too high: 0 [ 509.164754][ T4296] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 509.364773][ T4296] usb 2-1: Using ep0 maxpacket: 32 [ 509.376777][ T4296] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.427071][ T4296] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 509.461208][ T4296] usb 2-1: config 0 interface 0 has no altsetting 0 [ 509.471337][ T4296] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 509.499788][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.545184][ T4296] usb 2-1: config 0 descriptor?? [ 509.811736][T25855] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 509.818323][T25855] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 509.834944][T25855] vhci_hcd vhci_hcd.0: Device attached [ 509.848113][T25900] vhci_hcd: connection closed [ 509.849930][ T4296] usbhid 2-1:0.0: can't add hid device: -71 [ 509.863241][ T46] vhci_hcd: stop threads [ 509.888746][ T4296] usbhid: probe of 2-1:0.0 failed with error -71 [ 509.896182][T25909] No such timeout policy "syz1" [ 509.904315][ T46] vhci_hcd: release socket [ 509.930292][ T4296] usb 2-1: USB disconnect, device number 26 [ 509.937073][ T46] vhci_hcd: disconnect device [ 510.111729][T25925] SET target dimension over the limit! [ 510.316374][T25937] rdma_rxe: rxe creation allowed on top of a real device only [ 510.590862][T25956] usb usb1: usbfs: process 25956 (syz.1.6193) did not claim interface 63 before use [ 510.674662][ T7] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 510.877014][ T7] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 510.893391][ T7] usb 5-1: config 0 has no interface number 0 [ 510.922461][ T7] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 510.969055][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.987536][ T7] usb 5-1: Product: syz [ 510.991886][ T7] usb 5-1: Manufacturer: syz [ 511.012573][ T7] usb 5-1: SerialNumber: syz [ 511.029642][ T7] usb 5-1: config 0 descriptor?? [ 511.051320][ T7] qmi_wwan 5-1:0.207: bogus CDC Union: master=0, slave=1 [ 511.255170][ T7] qmi_wwan: probe of 5-1:0.207 failed with error -22 [ 511.468486][ T7] usb 5-1: USB disconnect, device number 26 [ 511.614930][T26016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6210'. [ 511.763069][T26023] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6213'. [ 511.788989][T26023] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6213'. [ 512.161355][T26042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6218'. [ 512.704637][ T4293] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 512.871779][T26077] Cannot find set identified by id 0 to match [ 512.902902][ T4293] usb 5-1: config 0 has an invalid interface number: 142 but max is 0 [ 512.917573][ T4293] usb 5-1: config 0 has no interface number 0 [ 512.939658][ T4293] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 512.971740][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.001477][ T4293] usb 5-1: Product: syz [ 513.017747][ T4293] usb 5-1: Manufacturer: syz [ 513.034227][ T4293] usb 5-1: SerialNumber: syz [ 513.059780][ T4293] usb 5-1: config 0 descriptor?? [ 513.340221][T26097] loop2: detected capacity change from 0 to 1024 [ 513.598958][ T4293] msi2500 5-1:0.142: Registered as swradio24 [ 513.619531][ T4293] msi2500 5-1:0.142: SDR API is still slightly experimental and functionality changes may follow [ 513.682560][ T4293] usb 5-1: USB disconnect, device number 27 [ 513.816430][T26116] netlink: 'syz.5.6235': attribute type 16 has an invalid length. [ 513.864694][T26116] netlink: 'syz.5.6235': attribute type 3 has an invalid length. [ 513.873790][T26116] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6235'. [ 514.529603][T26159] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6246'. [ 514.607226][ T27] audit: type=1326 audit(1746639226.258:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26161 comm="syz.4.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422738e969 code=0x7ffc0000 [ 514.629591][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.740285][ T27] audit: type=1326 audit(1746639226.318:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26161 comm="syz.4.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422738e969 code=0x7ffc0000 [ 514.762720][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.848712][ T27] audit: type=1326 audit(1746639226.318:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26161 comm="syz.4.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f422738e969 code=0x7ffc0000 [ 514.951207][ T27] audit: type=1326 audit(1746639226.318:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26161 comm="syz.4.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422738e969 code=0x7ffc0000 [ 515.039772][ T27] audit: type=1326 audit(1746639226.318:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26161 comm="syz.4.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422738e969 code=0x7ffc0000 [ 515.062180][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.864909][T26218] tmpfs: Bad value for 'nr_blocks' [ 516.028004][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6268'. [ 516.031981][T26185] loop2: detected capacity change from 0 to 32768 [ 516.076219][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6270'. [ 516.093736][T26185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.6254 (26185) [ 516.129769][T26185] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 516.172364][T26185] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 516.212203][T26185] BTRFS info (device loop2): using free space tree [ 516.427866][T26185] BTRFS info (device loop2): enabling ssd optimizations [ 516.623278][ T4262] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 517.084674][ T4784] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 517.274707][ T4784] usb 6-1: Using ep0 maxpacket: 8 [ 517.291979][ T4784] usb 6-1: config 0 has an invalid interface number: 78 but max is 0 [ 517.316819][ T4784] usb 6-1: config 0 has no interface number 0 [ 517.368107][ T4784] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 517.418013][ T4784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.450532][ T4784] usb 6-1: Product: syz [ 517.467858][ T4784] usb 6-1: Manufacturer: syz [ 517.472649][ T4784] usb 6-1: SerialNumber: syz [ 517.510120][ T4784] usb 6-1: config 0 descriptor?? [ 517.729504][ T4784] usbhid 6-1:0.78: couldn't find an input interrupt endpoint [ 517.765004][ T4784] usb 6-1: USB disconnect, device number 4 [ 518.050786][T26334] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 518.287924][T26312] loop0: detected capacity change from 0 to 32768 [ 518.384377][T26312] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 518.481652][T26312] XFS (loop0): Mounting V5 Filesystem [ 518.720521][T26312] XFS (loop0): Ending clean mount [ 518.730923][T26312] XFS (loop0): Quotacheck needed: Please wait. [ 518.866814][T26312] XFS (loop0): Quotacheck: Done. [ 519.013176][T26385] i2c i2c-0: Invalid block write size 34 [ 519.098702][ T4254] XFS (loop0): Unmounting Filesystem [ 519.928936][T26417] loop2: detected capacity change from 0 to 8192 [ 519.981075][T26417] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 520.004609][T26417] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 520.013919][T26417] REISERFS (device loop2): using ordered data mode [ 520.063087][T26425] loop0: detected capacity change from 0 to 4096 [ 520.084758][ T4264] Bluetooth: hci0: command 0x0c1a tx timeout [ 520.090966][T26417] reiserfs: using flush barriers [ 520.105309][T26425] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 520.120100][T26425] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 520.133750][T26425] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 520.148223][T26425] ntfs: volume version 3.1. [ 520.162139][T26417] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 520.256037][T26417] REISERFS (device loop2): checking transaction log (loop2) [ 520.258072][T26425] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 520.268323][T26417] REISERFS (device loop2): Using r5 hash to sort names [ 520.294341][T26417] REISERFS (device loop2): using 3.5.x disk format [ 520.294978][T26425] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 520.314426][T26417] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 520.423214][ T4487] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 520.499421][ T11] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 520.549964][ T4254] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 520.628766][ T4487] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 520.655228][ T4487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.684485][ T4487] usb 5-1: Product: syz [ 520.689278][ T4487] usb 5-1: Manufacturer: syz [ 520.693908][ T4487] usb 5-1: SerialNumber: syz [ 520.742561][ T4487] usb 5-1: config 0 descriptor?? [ 520.812901][ T4487] usb 5-1: interface 1 not found [ 521.028496][ T4487] usb 5-1: USB disconnect, device number 28 [ 521.153229][T26436] loop5: detected capacity change from 0 to 32768 [ 521.192829][ T93] block nbd0: Attempted send on invalid socket [ 521.199354][ T93] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 521.211401][T26489] EXT4-fs (nbd0): unable to read superblock [ 521.279476][T26436] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 521.311692][T26436] XFS (loop5): Mounting V5 Filesystem [ 521.358805][T26501] loop0: detected capacity change from 0 to 512 [ 521.375190][T26501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 521.442158][T26501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 521.495083][T26501] ext4 filesystem being mounted at /1297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.522537][T26514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6341'. [ 521.532018][T26436] XFS (loop5): Ending clean mount [ 521.544185][T26436] XFS (loop5): Quotacheck needed: Please wait. [ 521.692631][T26436] XFS (loop5): Quotacheck: Done. [ 521.883529][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 521.925650][T21445] XFS (loop5): Unmounting Filesystem [ 522.042304][T26540] loop0: detected capacity change from 0 to 8 [ 522.062378][T26536] loop4: detected capacity change from 0 to 2048 [ 522.107124][T26536] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 522.179402][T26536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 522.314948][T26555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6352'. [ 522.349789][T26555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6352'. [ 522.521675][T26565] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 522.729225][T26579] loop4: detected capacity change from 0 to 8 [ 522.778769][T26579] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 524.048116][T26643] loop2: detected capacity change from 0 to 4096 [ 524.073626][T26643] EXT4-fs: Ignoring removed orlov option [ 524.103257][T26643] EXT4-fs: Ignoring removed nobh option [ 524.171633][T26643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 524.221077][T26643] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 524.244780][ T4264] Bluetooth: hci5: command 0x0405 tx timeout [ 524.275033][T26643] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 524.294749][T26643] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.6378: Failed to acquire dquot type 1 [ 524.378445][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 524.454645][ T4784] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 524.504844][ T2120] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 524.546972][ T4296] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 524.652336][ T4784] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.681465][ T4784] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.713901][ T4784] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 524.740839][ T4784] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 524.742085][ T2120] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 524.764608][ T4296] usb 5-1: Using ep0 maxpacket: 16 [ 524.769046][ T4784] usb 1-1: Product: syz [ 524.771796][ T4296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.773927][ T4784] usb 1-1: Manufacturer: syz [ 524.794611][ T2120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.802795][ T4296] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 524.827140][ T4296] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 524.844569][ T2120] pwc: Logitech ViewPort AV 100 webcam detected. [ 524.855030][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.858108][ T4784] hub 1-1:4.0: USB hub found [ 524.863343][ T4296] usb 5-1: Product: syz [ 524.872856][ T4296] usb 5-1: Manufacturer: syz [ 524.884695][ T4296] usb 5-1: SerialNumber: syz [ 524.897899][ T4296] r8152-cfgselector 5-1: config 0 descriptor?? [ 524.907530][T26678] loop5: detected capacity change from 0 to 32768 [ 524.943759][T26678] XFS (loop5): Mounting V5 Filesystem [ 525.040022][T26678] XFS (loop5): Ending clean mount [ 525.052861][ T4784] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 525.080687][T26678] XFS (loop5): Quotacheck needed: Please wait. [ 525.124395][ T4296] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 525.177641][ T4319] usb 5-1: config 0 descriptor?? [ 525.205621][T26678] XFS (loop5): Quotacheck: Done. [ 525.253889][ T2120] pwc: send_video_command error -71 [ 525.264611][ T2120] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 525.285212][ T2120] Philips webcam: probe of 2-1:127.0 failed with error -71 [ 525.337169][ T4319] usb 5-1: can't set config #0, error -71 [ 525.345954][ T4784] usb 5-1: USB disconnect, device number 29 [ 525.348317][ T2120] usb 2-1: USB disconnect, device number 27 [ 525.439722][T21445] XFS (loop5): Unmounting Filesystem [ 525.486001][ T7] usb 1-1: USB disconnect, device number 25 [ 526.292581][T26780] program syz.2.6405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.851185][ T4784] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 527.039880][ T4784] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 527.065045][ T4784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.086773][ T4784] usb 1-1: Product: syz [ 527.098255][ T4784] usb 1-1: Manufacturer: syz [ 527.109938][ T4784] usb 1-1: SerialNumber: syz [ 527.122427][ T4784] usb 1-1: config 0 descriptor?? [ 527.142040][ T4784] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 527.551064][ T4784] gspca_sunplus: reg_r err -71 [ 527.559287][ T4784] sunplus: probe of 1-1:0.0 failed with error -71 [ 527.592923][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6419'. [ 527.597933][ T4784] usb 1-1: USB disconnect, device number 26 [ 528.115700][T26851] loop5: detected capacity change from 0 to 2048 [ 528.155413][T26851] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 528.189622][T26851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.204906][ T4487] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 528.297368][T26855] loop4: detected capacity change from 0 to 8192 [ 528.332245][T26855] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 528.384608][T26855] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 528.393870][T26855] REISERFS (device loop4): using ordered data mode [ 528.430146][ T4487] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 528.464886][T26855] reiserfs: using flush barriers [ 528.487563][ T4487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.522600][ T4487] usb 3-1: Product: syz [ 528.527246][ T4487] usb 3-1: Manufacturer: syz [ 528.531880][ T4487] usb 3-1: SerialNumber: syz [ 528.546069][T26855] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 528.579313][ T4487] usb 3-1: config 0 descriptor?? [ 528.585903][T26855] REISERFS (device loop4): checking transaction log (loop4) [ 528.617542][ T4487] usb 3-1: interface 1 not found [ 528.817337][ T4487] usb 3-1: USB disconnect, device number 25 [ 528.944731][T26855] REISERFS (device loop4): Using tea hash to sort names [ 528.961438][T26855] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 531.898882][T26977] loop0: detected capacity change from 0 to 32768 [ 531.985466][T26977] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 531.994978][T27034] loop4: detected capacity change from 0 to 512 [ 532.023045][T26977] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 532.093814][T27034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 532.124677][T26977] (syz.0.6459,26977,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 532.137587][T27034] ext4 filesystem being mounted at /1271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.287615][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 532.325785][ T4254] ocfs2: Unmounting device (7,0) on (node local) [ 532.465055][T27067] 9pnet: Found fid 0 not clunked [ 532.738147][T27078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6489'. [ 532.791441][T27084] netlink: 'syz.0.6486': attribute type 21 has an invalid length. [ 533.164773][T27107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6498'. [ 533.173894][T27107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 533.216742][T27107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 533.565634][T27128] netlink: 'syz.0.6505': attribute type 1 has an invalid length. [ 533.825686][T27142] loop0: detected capacity change from 0 to 1024 [ 534.194152][T27110] loop4: detected capacity change from 0 to 32768 [ 534.289855][T27164] loop5: detected capacity change from 0 to 256 [ 534.322831][T27110] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 534.355765][T27164] FAT-fs (loop5): Directory bread(block 1285) failed [ 534.369291][T27164] FAT-fs (loop5): Directory bread(block 1285) failed [ 534.446114][T27173] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 534.457166][T27164] FAT-fs (loop5): Directory bread(block 1285) failed [ 534.464014][T27164] FAT-fs (loop5): Directory bread(block 1285) failed [ 534.502272][T27110] [ 534.504744][T27110] ====================================================== [ 534.511790][T27110] WARNING: possible circular locking dependency detected [ 534.518846][T27110] 6.1.137-syzkaller #0 Not tainted [ 534.523982][T27110] ------------------------------------------------------ [ 534.531034][T27110] syz.4.6499/27110 is trying to acquire lock: [ 534.537126][T27110] ffff88804cc12648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_xattr_set+0xad6/0x11e0 [ 534.549374][T27110] [ 534.549374][T27110] but task is already holding lock: [ 534.556772][T27110] ffff888068f586f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 534.566338][T27110] [ 534.566338][T27110] which lock already depends on the new lock. [ 534.566338][T27110] [ 534.576994][T27110] [ 534.576994][T27110] the existing dependency chain (in reverse order) is: [ 534.586205][T27110] [ 534.586205][T27110] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 534.594082][T27110] down_read+0x42/0x2d0 [ 534.598825][T27110] ocfs2_init_acl+0x2fb/0x720 [ 534.604169][T27110] ocfs2_mknod+0x1463/0x2350 [ 534.609335][T27110] ocfs2_create+0x1b6/0x4a0 [ 534.614431][T27110] vfs_create+0x2db/0x460 [ 534.619329][T27110] do_mknodat+0x399/0x4c0 [ 534.624769][T27110] __x64_sys_mknod+0x8a/0xa0 [ 534.630202][T27110] do_syscall_64+0x4c/0xa0 [ 534.635289][T27110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.641774][T27110] [ 534.641774][T27110] -> #1 (jbd2_handle){++++}-{0:0}: [ 534.649121][T27110] jbd2_journal_lock_updates+0xa7/0x380 [ 534.655239][T27110] __ocfs2_flush_truncate_log+0x2cd/0x11d0 [ 534.661623][T27110] ocfs2_truncate_log_shutdown+0x13e/0x2e0 [ 534.668004][T27110] ocfs2_dismount_volume+0x1fc/0x920 [ 534.673857][T27110] generic_shutdown_super+0x130/0x340 [ 534.679803][T27110] kill_block_super+0x7c/0xe0 [ 534.685057][T27110] deactivate_locked_super+0x93/0xf0 [ 534.690927][T27110] cleanup_mnt+0x463/0x4f0 [ 534.695921][T27110] task_work_run+0x1ca/0x250 [ 534.701198][T27110] exit_to_user_mode_loop+0xe6/0x110 [ 534.707049][T27110] exit_to_user_mode_prepare+0xb1/0x140 [ 534.713172][T27110] syscall_exit_to_user_mode+0x16/0x40 [ 534.719192][T27110] do_syscall_64+0x58/0xa0 [ 534.724635][T27110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.731118][T27110] [ 534.731118][T27110] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 534.741855][T27110] __lock_acquire+0x2cf8/0x7c50 [ 534.747273][T27110] lock_acquire+0x1b4/0x490 [ 534.752334][T27110] down_write+0x36/0x60 [ 534.757043][T27110] ocfs2_xattr_set+0xad6/0x11e0 [ 534.762458][T27110] ocfs2_set_acl+0x4e1/0x590 [ 534.767622][T27110] ocfs2_iop_set_acl+0x16f/0x270 [ 534.773134][T27110] posix_acl_xattr_set+0x387/0x3f0 [ 534.778834][T27110] __vfs_setxattr+0x3e0/0x420 [ 534.784257][T27110] __vfs_setxattr_noperm+0x129/0x5e0 [ 534.790220][T27110] vfs_setxattr+0x168/0x2f0 [ 534.795330][T27110] setxattr+0x2b2/0x2d0 [ 534.800064][T27110] path_setxattr+0x142/0x280 [ 534.805221][T27110] __x64_sys_setxattr+0xb7/0xd0 [ 534.810603][T27110] do_syscall_64+0x4c/0xa0 [ 534.815576][T27110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.822040][T27110] [ 534.822040][T27110] other info that might help us debug this: [ 534.822040][T27110] [ 534.832364][T27110] Chain exists of: [ 534.832364][T27110] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle --> &oi->ip_xattr_sem [ 534.832364][T27110] [ 534.848210][T27110] Possible unsafe locking scenario: [ 534.848210][T27110] [ 534.855754][T27110] CPU0 CPU1 [ 534.861164][T27110] ---- ---- [ 534.866531][T27110] lock(&oi->ip_xattr_sem); [ 534.871222][T27110] lock(jbd2_handle); [ 534.877819][T27110] lock(&oi->ip_xattr_sem); [ 534.884938][T27110] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 534.892232][T27110] [ 534.892232][T27110] *** DEADLOCK *** [ 534.892232][T27110] [ 534.900376][T27110] 3 locks held by syz.4.6499/27110: [ 534.905575][T27110] #0: ffff88807c54e460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 534.914821][T27110] #1: ffff888068f589c8 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: vfs_setxattr+0x141/0x2f0 [ 534.925022][T27110] #2: ffff888068f586f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 534.935080][T27110] [ 534.935080][T27110] stack backtrace: [ 534.940968][T27110] CPU: 0 PID: 27110 Comm: syz.4.6499 Not tainted 6.1.137-syzkaller #0 [ 534.949212][T27110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 534.959358][T27110] Call Trace: [ 534.962643][T27110] [ 534.965643][T27110] dump_stack_lvl+0x168/0x22e [ 534.970338][T27110] ? load_image+0x3b0/0x3b0 [ 534.974846][T27110] ? show_regs_print_info+0x12/0x12 [ 534.980060][T27110] ? print_circular_bug+0x12b/0x1a0 [ 534.985269][T27110] check_noncircular+0x274/0x310 [ 534.990306][T27110] ? add_chain_block+0x940/0x940 [ 534.995255][T27110] ? lockdep_lock+0xdc/0x1e0 [ 534.999854][T27110] ? lockdep_unlock+0x133/0x2d0 [ 535.004715][T27110] ? lockdep_lock+0x1e0/0x1e0 [ 535.009405][T27110] ? _find_first_zero_bit+0xcf/0x100 [ 535.014699][T27110] __lock_acquire+0x2cf8/0x7c50 [ 535.019577][T27110] ? verify_lock_unused+0x140/0x140 [ 535.024786][T27110] ? posix_acl_xattr_set+0x387/0x3f0 [ 535.030087][T27110] ? __rwlock_init+0x140/0x140 [ 535.034867][T27110] lock_acquire+0x1b4/0x490 [ 535.039401][T27110] ? ocfs2_xattr_set+0xad6/0x11e0 [ 535.044790][T27110] ? ocfs2_xattr_block_find+0x150/0x4b0 [ 535.050410][T27110] ? __might_sleep+0xd0/0xd0 [ 535.055029][T27110] ? preempt_count_add+0x8d/0x190 [ 535.060065][T27110] ? read_lock_is_recursive+0x10/0x10 [ 535.065444][T27110] ? rwsem_write_trylock+0x12f/0x1b0 [ 535.070737][T27110] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0 [ 535.076354][T27110] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 535.081825][T27110] down_write+0x36/0x60 [ 535.086090][T27110] ? ocfs2_xattr_set+0xad6/0x11e0 [ 535.091127][T27110] ocfs2_xattr_set+0xad6/0x11e0 [ 535.095996][T27110] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 535.101726][T27110] ? __kasan_kmalloc+0x8e/0xa0 [ 535.106496][T27110] ? ocfs2_set_acl+0x11e/0x590 [ 535.111266][T27110] ? ocfs2_iop_set_acl+0x16f/0x270 [ 535.116383][T27110] ? posix_acl_xattr_set+0x387/0x3f0 [ 535.121684][T27110] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 535.127157][T27110] ? setxattr+0x2b2/0x2d0 [ 535.131511][T27110] ? from_kgid+0x159/0x680 [ 535.135933][T27110] ? make_kgid+0x640/0x640 [ 535.140349][T27110] ? ocfs2_set_acl+0x11e/0x590 [ 535.145122][T27110] ? rcu_is_watching+0x11/0xa0 [ 535.149893][T27110] ? ocfs2_set_acl+0x11e/0x590 [ 535.154664][T27110] ? __kmalloc+0xe1/0x240 [ 535.159000][T27110] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 535.164606][T27110] ocfs2_set_acl+0x4e1/0x590 [ 535.169251][T27110] ocfs2_iop_set_acl+0x16f/0x270 [ 535.174381][T27110] ? ocfs2_xattr_get+0x220/0x220 [ 535.179442][T27110] ? from_kgid+0x159/0x680 [ 535.183870][T27110] ? __kmem_cache_alloc_node+0x140/0x260 [ 535.189532][T27110] ? make_kgid+0x640/0x640 [ 535.193959][T27110] ? posix_acl_valid+0x320/0x3a0 [ 535.198910][T27110] posix_acl_xattr_set+0x387/0x3f0 [ 535.204118][T27110] ? posix_acl_xattr_get+0x550/0x550 [ 535.209765][T27110] __vfs_setxattr+0x3e0/0x420 [ 535.214486][T27110] __vfs_setxattr_noperm+0x129/0x5e0 [ 535.219794][T27110] vfs_setxattr+0x168/0x2f0 [ 535.224305][T27110] ? xattr_permission+0x500/0x500 [ 535.229338][T27110] ? _copy_from_user+0x10b/0x170 [ 535.234285][T27110] ? setxattr+0x243/0x2d0 [ 535.238652][T27110] setxattr+0x2b2/0x2d0 [ 535.242841][T27110] ? path_setxattr+0x280/0x280 [ 535.247631][T27110] ? __mnt_want_write+0x21f/0x2a0 [ 535.252664][T27110] path_setxattr+0x142/0x280 [ 535.257279][T27110] ? simple_xattr_list_add+0xf0/0xf0 [ 535.262579][T27110] ? lock_chain_count+0x20/0x20 [ 535.267444][T27110] __x64_sys_setxattr+0xb7/0xd0 [ 535.272308][T27110] do_syscall_64+0x4c/0xa0 [ 535.276740][T27110] ? clear_bhb_loop+0x45/0xa0 [ 535.281418][T27110] ? clear_bhb_loop+0x45/0xa0 [ 535.286098][T27110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.292011][T27110] RIP: 0033:0x7f422738e969 [ 535.296428][T27110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.316044][T27110] RSP: 002b:00007f4228135038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 535.324550][T27110] RAX: ffffffffffffffda RBX: 00007f42275b5fa0 RCX: 00007f422738e969 [ 535.332636][T27110] RDX: 0000200000000100 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 535.340612][T27110] RBP: 00007f4227410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 535.348587][T27110] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000000 [ 535.356569][T27110] R13: 0000000000000000 R14: 00007f42275b5fa0 R15: 00007ffd32339328 [ 535.364577][T27110] [ 535.521404][ T4259] ocfs2: Unmounting device (7,4) on (node local)