last executing test programs: 5m38.661351327s ago: executing program 0 (id=7618): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat6\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 5m38.367461944s ago: executing program 0 (id=7620): syz_mount_image$vfat(&(0x7f00000190c0), &(0x7f0000000000)='./file2\x00', 0x2000006, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x25, 0x34f, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) 5m37.476355806s ago: executing program 0 (id=7626): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8902, &(0x7f0000000040)) 5m37.186134552s ago: executing program 0 (id=7630): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m36.816606664s ago: executing program 0 (id=7634): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 5m36.068837537s ago: executing program 0 (id=7642): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m35.558441207s ago: executing program 32 (id=7642): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m2.255783411s ago: executing program 3 (id=8000): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2000}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 5m1.998720586s ago: executing program 3 (id=8005): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000001e00)=0x8001) 5m1.730758731s ago: executing program 3 (id=8011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 5m1.05987645s ago: executing program 3 (id=8022): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m0.622506555s ago: executing program 3 (id=8027): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffff7fff, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000540)=@fd={0xca2, 0x3, 0x4, 0x0, 0xccec, {0x77359400}, {0x5, 0x0, 0xd1, 0xf, 0x61, 0x2, "f43d974a"}, 0x7ff, 0x4, {}, 0xb02d}) 4m59.965177523s ago: executing program 3 (id=8037): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x11, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 4m59.578449335s ago: executing program 33 (id=8037): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x11, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 2m35.606355439s ago: executing program 6 (id=9886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) 2m35.41095736s ago: executing program 6 (id=9889): r0 = socket(0x18, 0x0, 0x1) read(r0, &(0x7f00000005c0)=""/127, 0xd7) 2m35.182141313s ago: executing program 6 (id=9892): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x1d, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20004010) 2m35.081361738s ago: executing program 6 (id=9893): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x900, 0x0, 0x34424752}}) 2m34.89132756s ago: executing program 6 (id=9897): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m33.782331153s ago: executing program 6 (id=9913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x44}}, 0x0) 2m17.599669713s ago: executing program 34 (id=9913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x44}}, 0x0) 1.589696519s ago: executing program 5 (id=12092): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000600000000000081100000000002070000000008000f"], 0x24}}, 0x0) 1.525776882s ago: executing program 2 (id=12093): r0 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$F_GET_RW_HINT(r0, 0x11, 0x0) 1.351854803s ago: executing program 4 (id=12096): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 1.324622324s ago: executing program 5 (id=12097): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x40000800, 0x12) 1.318789435s ago: executing program 7 (id=12098): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)) 1.316979565s ago: executing program 2 (id=12099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) 1.289954366s ago: executing program 1 (id=12100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8a, 0x0, &(0x7f0000000580)="3d25ab324119c4c3d0017085080092624cf49be9fbbd5374e2fa661b06c17e47c2d1684d79f28f9bd20d1923b2c0393eacd4b0568a2496183e2f31a4f3604ddc812984c2c4421e003acee09eacfc5e71c0685600000000520f26b52ad6d6f29066a24ac006f48112ba92d081e8baeb53a0bb305ee421114079f5e45327ae0c9e71a25f4b1551d0357cda", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.104854917s ago: executing program 1 (id=12101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x7, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) 1.090722518s ago: executing program 5 (id=12102): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x88402) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0xbd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x2, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x20000000000800, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0xf2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3f07, 0x1000000000000000]}) 1.079640658s ago: executing program 2 (id=12103): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294f4777c", 0x31}], 0x1}, 0x0) 1.034466651s ago: executing program 7 (id=12104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 964.551395ms ago: executing program 4 (id=12105): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241383160608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 918.045728ms ago: executing program 1 (id=12106): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') read$FUSE(r0, 0x0, 0x500) 828.114983ms ago: executing program 5 (id=12107): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 721.100729ms ago: executing program 7 (id=12108): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7, 0x2) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000480)={0x10, 0x8, &(0x7f0000000400), {0x80000000, 0x507, 0x32315659, 0x3, 0x5, 0x4, 0x1, 0x5}}) 720.968839ms ago: executing program 4 (id=12109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 720.252569ms ago: executing program 2 (id=12110): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) 608.765295ms ago: executing program 1 (id=12111): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x70be, 0x400) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000001540)=0x6) 537.65314ms ago: executing program 7 (id=12112): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bond_slave_0\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4b, 0x41, 0x81, 0x8, 0x9, 0x1, 0x5, 0x0, 0x43, 0x5e, [0x8, 0x49, 0x1, 0x972d, 0x10001, 0x8010000, 0x6, 0xffffffff]}}) 536.99918ms ago: executing program 5 (id=12113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}]}, 0x70}}, 0x0) 486.426182ms ago: executing program 4 (id=12114): r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvfrom(r0, 0x0, 0x0, 0x2003, 0x0, 0x0) 485.854452ms ago: executing program 2 (id=12115): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x9, 0x4) 337.500771ms ago: executing program 7 (id=12116): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x400, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x179}, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x8, 0x4, 0x6, 0x6e, 0xfffffc01, 0x2, 0x6, 0x7]}}, 0x5c) 314.977292ms ago: executing program 1 (id=12117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x1, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc243, 0x242}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x3, {0x0, 0x2}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}, 0x1, 0xba01, 0x0, 0x4009}, 0x0) 310.085813ms ago: executing program 4 (id=12118): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x5, 0x0, 0x0) 268.342425ms ago: executing program 2 (id=12119): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES16], 0x6a) 169.175211ms ago: executing program 5 (id=12120): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x3}}, 0x1e) 104.133385ms ago: executing program 7 (id=12121): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000004, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,iocharset=1,uni_xlate=0,rodir,utf8=1,utf8=0,flush,uni_xlate=0,nonumtail=0,tz=UTC,codepage=1251,utf8=0,shortname=lower,iocharset=cp852,iocharset=koi8-ru,nonumtail=0,\x00'/188], 0x1, 0x380, &(0x7f0000000940)="$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") creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 72.894056ms ago: executing program 4 (id=12122): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000800)={[{@fileset={'fileset', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x10002}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uid_ignore}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@volume={'volume', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x1, 0xc37, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 0s ago: executing program 1 (id=12123): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000280)=@v1={0x1000000, [{0x31, 0xc6}]}, 0xc, 0x2) kernel console output (not intermixed with test programs): SB device number 82 using dummy_hcd [ 1179.453262][ T125] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1179.473522][ T125] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1179.484538][ T125] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1179.498454][ T125] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1179.504903][T28239] loop5: detected capacity change from 0 to 32768 [ 1179.512005][ T125] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1179.532678][ T125] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1179.539713][ T125] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1179.542693][T28239] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.10135 (28239) [ 1179.549222][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.587902][T28239] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1179.599750][ T125] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1179.606833][T28239] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1179.617214][T28239] BTRFS info (device loop5): turning on sync discard [ 1179.626729][T28239] BTRFS info (device loop5): turning on async discard [ 1179.634241][T28239] BTRFS info (device loop5): using free space tree [ 1179.699435][ T8009] usb 5-1: Using ep0 maxpacket: 16 [ 1179.714442][ T8009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1179.746781][ T8009] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1179.766900][ T8009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.776724][ T8009] usb 5-1: Product: syz [ 1179.821161][ T8009] usb 5-1: Manufacturer: syz [ 1179.833178][ T125] scsi host1: usb-storage 3-1:1.0 [ 1179.841923][ T8009] usb 5-1: SerialNumber: syz [ 1179.874383][T28239] BTRFS info (device loop5): enabling ssd optimizations [ 1179.896046][ T8009] usb 5-1: config 0 descriptor?? [ 1179.933854][ T8009] hub 5-1:0.0: bad descriptor, ignoring hub [ 1179.944142][ T8009] hub: probe of 5-1:0.0 failed with error -5 [ 1179.957111][ T8009] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input67 [ 1180.142751][ T8009] usb 3-1: USB disconnect, device number 35 [ 1180.304565][T22193] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1180.851016][T28290] xt_hashlimit: max too large, truncated to 1048576 [ 1180.882772][ T5812] usb 5-1: USB disconnect, device number 82 [ 1181.055861][T28300] Unknown options in mask b7f2 [ 1181.381529][T28313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10161'. [ 1181.509482][T28316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10163'. [ 1181.742331][T28328] loop2: detected capacity change from 0 to 16 [ 1181.815929][T28328] erofs: (device loop2): mounted with root inode @ nid 36. [ 1182.209367][T28340] loop5: detected capacity change from 0 to 1024 [ 1182.323379][ T5817] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1182.537097][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 1182.546125][ T5817] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1182.589741][ T5817] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 1182.600552][ T5817] usb 2-1: config 0 has no interface number 0 [ 1182.620691][ T5817] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1182.636186][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.676820][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1182.694372][ T5817] usb 2-1: Product: syz [ 1182.700296][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1182.710545][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1182.714433][ T5817] usb 2-1: Manufacturer: syz [ 1182.726754][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1182.734974][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1182.743067][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1182.787303][ T5817] usb 2-1: SerialNumber: syz [ 1182.836171][ T5817] usb 2-1: config 0 descriptor?? [ 1182.853154][T28350] vcan0 speed is unknown, defaulting to 1000 [ 1182.872154][ T5817] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1182.878598][ T5817] usb 2-1: No valid video chain found. [ 1183.092704][ T5503] usb 2-1: USB disconnect, device number 65 [ 1183.517782][T28378] loop2: detected capacity change from 0 to 256 [ 1183.549734][T28378] exfat: Deprecated parameter 'utf8' [ 1183.569279][T28378] exfat: Deprecated parameter 'namecase' [ 1183.626466][T28378] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1183.979974][T28350] chnl_net:caif_netlink_parms(): no params data found [ 1184.212840][T28405] overlayfs: missing 'lowerdir' [ 1184.231111][T28350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.269016][T28350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.304639][T28350] device bridge_slave_0 entered promiscuous mode [ 1184.364896][T28350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.392196][T28350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.404136][T28350] device bridge_slave_1 entered promiscuous mode [ 1184.471531][T28350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.523126][T28350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.630654][T28413] loop5: detected capacity change from 0 to 1764 [ 1184.654753][T28350] team0: Port device team_slave_0 added [ 1184.683258][T28350] team0: Port device team_slave_1 added [ 1184.759726][T28350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.798655][T28350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.834382][T28350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.879040][T28350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.886041][T28350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.973607][T28350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.137095][T28350] device hsr_slave_0 entered promiscuous mode [ 1185.167502][T28350] device hsr_slave_1 entered promiscuous mode [ 1185.197067][T28350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1185.227297][T28350] Cannot create hsr debugfs directory [ 1185.427292][T28443] UBIFS error (pid: 28443): cannot open "(null)", error -22 [ 1185.497544][T28444] loop5: detected capacity change from 0 to 512 [ 1185.685913][T28444] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10220: bg 0: block 248: padding at end of block bitmap is not set [ 1185.734736][T28444] Quota error (device loop5): write_blk: dquota write failed [ 1185.742329][T28444] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1185.775541][T28444] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.10220: Failed to acquire dquot type 1 [ 1185.789099][T28444] EXT4-fs (loop5): 1 truncate cleaned up [ 1185.794804][T28444] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1185.826968][T28444] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1185.854322][T28444] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1185.876124][T28459] loop1: detected capacity change from 0 to 256 [ 1185.898435][T28350] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1185.901706][T28444] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.10220: Failed to acquire dquot type 1 [ 1185.932401][T28350] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1185.986976][T28350] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1185.994610][T28463] QAT: Stopping all acceleration devices. [ 1186.023273][T28350] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1186.092788][T22193] EXT4-fs (loop5): unmounting filesystem. [ 1186.112425][T24461] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 1186.161128][T24461] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:13: Failed to release dquot type 1 [ 1186.413906][T28350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.477703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1186.515537][T28481] loop2: detected capacity change from 0 to 128 [ 1186.530258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1186.547249][T28350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.575968][T28478] loop5: detected capacity change from 0 to 4096 [ 1186.601080][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1186.612081][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1186.620683][T24454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.627877][T24454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.632541][T28478] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1186.669520][T28481] Process accounting paused [ 1186.670152][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1186.685376][ T4340] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1186.737537][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1186.773503][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1186.807532][T24454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.814764][T24454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.824906][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1186.857158][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1186.886729][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1186.920601][ T4340] usb 5-1: Using ep0 maxpacket: 8 [ 1186.927663][ T4340] usb 5-1: unable to get BOS descriptor set [ 1186.940877][ T4340] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 1186.950670][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1186.958757][ T4340] usb 5-1: config 0 has no interface number 0 [ 1186.978332][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1186.989815][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1186.990033][ T4340] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1187.000966][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1187.025370][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1187.063587][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1187.074860][ T4340] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 1187.095078][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.108037][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1187.127458][ T4340] usb 5-1: Product: syz [ 1187.149038][ T4340] usb 5-1: Manufacturer: syz [ 1187.153697][ T4340] usb 5-1: SerialNumber: syz [ 1187.173740][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1187.204835][ T4340] usb 5-1: config 0 descriptor?? [ 1187.211770][T28350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1187.258775][ T4340] hub 5-1:0.125: bad descriptor, ignoring hub [ 1187.275992][ T4340] hub: probe of 5-1:0.125 failed with error -5 [ 1187.297921][ T4340] usb 5-1: Found UVC 0.00 device syz (17dc:0202) [ 1187.304338][ T4340] usb 5-1: No valid video chain found. [ 1187.536541][T28499] loop1: detected capacity change from 0 to 1024 [ 1187.604701][ T4340] usb 5-1: USB disconnect, device number 83 [ 1187.796416][T24452] hfsplus: b-tree write err: -5, ino 4 [ 1188.106652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1188.117381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1188.194279][T28350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.394973][T28521] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1188.717264][T28534] loop2: detected capacity change from 0 to 1024 [ 1188.732592][T28534] EXT4-fs: Ignoring removed orlov option [ 1188.855809][T28534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1189.044088][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 1189.153110][T28552] netlink: 'syz.4.10261': attribute type 27 has an invalid length. [ 1189.408387][T28557] Scaler: ================= START STATUS ================= [ 1189.444986][T28557] Scaler: ================== END STATUS ================== [ 1189.597886][T24452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1189.621348][T24452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1189.719862][T28350] device veth0_vlan entered promiscuous mode [ 1189.751779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1189.778941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1189.823536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1189.860935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1189.917845][T28350] device veth1_vlan entered promiscuous mode [ 1190.051470][T24452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1190.066371][T24452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1190.086749][T24452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1190.096485][T24452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1190.107294][T28350] device veth0_macvtap entered promiscuous mode [ 1190.126633][T28350] device veth1_macvtap entered promiscuous mode [ 1190.179080][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.246161][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.277119][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.331570][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.362559][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.394595][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.457703][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.504079][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.530069][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.583322][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.620785][T28350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.675788][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.720056][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.741813][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.784188][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.796569][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.807751][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.820162][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.852581][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.919199][T28350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.937478][T28350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.959093][T28350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.967872][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1190.981157][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1190.989618][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1190.999784][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1191.011676][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1191.022732][T24461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1191.095193][T28591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1191.134068][T28350] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.142847][T28350] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.217792][T28350] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.226561][T28350] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.528876][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.542757][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.639739][T24452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1191.660368][T24461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.676906][T24461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.696609][T24454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1192.218947][T28625] loop1: detected capacity change from 0 to 1024 [ 1192.316370][T28625] hfsplus: invalid extended attribute record [ 1192.370433][T28628] loop4: detected capacity change from 0 to 256 [ 1192.528151][T28632] block nbd2: NBD_DISCONNECT [ 1192.535661][T24461] hfsplus: b-tree write err: -5, ino 4 [ 1192.759518][T28638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10304'. [ 1192.822874][T28638] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 1192.833327][T28638] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1193.099378][ T8009] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1193.313292][ T8009] usb 3-1: Using ep0 maxpacket: 32 [ 1193.322621][ T8009] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1193.358403][ T8009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.377324][ T8009] usb 3-1: Product: syz [ 1193.388234][ T8009] usb 3-1: Manufacturer: syz [ 1193.404121][ T8009] usb 3-1: SerialNumber: syz [ 1193.421739][ T8009] usb 3-1: config 0 descriptor?? [ 1193.681768][T28662] loop7: detected capacity change from 0 to 256 [ 1193.820954][T28662] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 1193.822896][T28664] loop4: detected capacity change from 0 to 64 [ 1193.876726][ T8009] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 1193.901126][ T8009] airspy 3-1:0.0: Could not detect board [ 1193.922895][ T8009] airspy: probe of 3-1:0.0 failed with error -71 [ 1193.942292][ T8009] usb 3-1: USB disconnect, device number 36 [ 1193.962524][T28664] hfs: request for non-existent node -117440513 in B*Tree [ 1194.033289][T28664] hfs: request for non-existent node -117440513 in B*Tree [ 1194.239647][T28670] loop1: detected capacity change from 0 to 1024 [ 1194.269978][T28670] EXT4-fs: Ignoring removed mblk_io_submit option [ 1194.292119][T28670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1194.373987][T28670] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.10320: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1194.489752][T28670] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.10320: couldn't read orphan inode 11 (err -117) [ 1194.584557][T28670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1194.738047][T28670] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.10320: Invalid block bitmap block 0 in block_group 0 [ 1194.806137][T28670] Quota error (device loop1): write_blk: dquota write failed [ 1194.832695][T28670] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1194.884176][T28670] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.10320: Failed to acquire dquot type 0 [ 1194.932750][T28686] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1195.049457][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1195.316405][T28699] loop4: detected capacity change from 0 to 128 [ 1195.529361][T28705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10336'. [ 1196.509116][T28731] loop4: detected capacity change from 0 to 256 [ 1197.863845][T28776] loop5: detected capacity change from 0 to 164 [ 1197.961805][T28776] iso9660: Corrupted directory entry in block 3 of inode 1792 [ 1198.004121][T28782] overlayfs: missing 'workdir' [ 1198.201702][T28786] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1199.045057][T28818] loop7: detected capacity change from 0 to 1024 [ 1199.052298][T28818] EXT4-fs: Ignoring removed mblk_io_submit option [ 1199.076095][T28818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1199.138895][T28818] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.10392: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1199.173128][T28818] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.10392: couldn't read orphan inode 11 (err -117) [ 1199.197076][T28818] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1199.214148][T28818] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.10392: Invalid block bitmap block 0 in block_group 0 [ 1199.254505][T28818] Quota error (device loop7): write_blk: dquota write failed [ 1199.262399][T28818] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1199.272742][T28818] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.10392: Failed to acquire dquot type 0 [ 1199.440106][T28350] EXT4-fs (loop7): unmounting filesystem. [ 1200.028017][T28859] loop7: detected capacity change from 0 to 256 [ 1200.126184][T28859] FAT-fs (loop7): Directory bread(block 64) failed [ 1200.166213][T28859] FAT-fs (loop7): Directory bread(block 65) failed [ 1200.172906][T28859] FAT-fs (loop7): Directory bread(block 66) failed [ 1200.249415][T28859] FAT-fs (loop7): Directory bread(block 67) failed [ 1200.277294][T28859] FAT-fs (loop7): Directory bread(block 68) failed [ 1200.288550][T28859] FAT-fs (loop7): Directory bread(block 69) failed [ 1200.299896][T28859] FAT-fs (loop7): Directory bread(block 70) failed [ 1200.321257][T28859] FAT-fs (loop7): Directory bread(block 71) failed [ 1200.355804][T28859] FAT-fs (loop7): Directory bread(block 72) failed [ 1200.382348][T28859] FAT-fs (loop7): Directory bread(block 73) failed [ 1200.528506][T28875] overlayfs: bad mount option "redirect_dir=on:/" [ 1200.973388][T28880] loop2: detected capacity change from 0 to 4096 [ 1200.995705][T28889] loop5: detected capacity change from 0 to 512 [ 1201.028945][T28889] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1201.053271][T28889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 1201.062387][T28889] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1201.149619][T28889] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.10426: iget: bad i_size value: 12154761577498 [ 1201.178709][T28880] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1201.194440][T28896] netlink: 'syz.7.10430': attribute type 32 has an invalid length. [ 1201.202540][T28889] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.10426: couldn't read orphan inode 13 (err -117) [ 1201.239825][T28889] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1201.277672][ T27] audit: type=1800 audit(45936654.549:316): pid=28880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10422" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 1201.291658][T28880] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 1201.298218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.350041][T28889] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1201.371146][T28889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 1201.519013][T22193] EXT4-fs (loop5): unmounting filesystem. [ 1201.652640][T24452] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1201.660514][ T4270] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1201.671214][ T4270] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1201.688439][T28906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10434'. [ 1201.701428][ T4270] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1201.719084][ T27] audit: type=1326 audit(45936654.970:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28907 comm="syz.4.10435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facf839aeb9 code=0x0 [ 1201.742481][T24454] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1201.753857][ T4270] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 1202.181788][T28923] loop4: detected capacity change from 0 to 512 [ 1202.211353][T28923] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1202.301068][T28923] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1202.877701][T28949] openvswitch: netlink: Key type 29 is not supported [ 1203.388092][T28968] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1204.199082][T29000] tc_dump_action: action bad kind [ 1204.581259][ T8009] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1204.810779][ T8009] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1204.827098][ T8009] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.864977][ T8009] usb 8-1: Product: syz [ 1204.875115][ T8009] usb 8-1: Manufacturer: syz [ 1204.885711][ T8009] usb 8-1: SerialNumber: syz [ 1204.917716][ T8009] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1204.959773][T29024] loop2: detected capacity change from 0 to 4096 [ 1204.972449][ T8009] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1205.009062][T29024] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1205.185543][ T4270] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 1205.211033][ T4270] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1205.243996][ C1] usb 8-1: ath: unknown panic pattern! [ 1205.254946][T29030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10494'. [ 1205.309372][ T4270] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 1205.496635][T29036] Cannot find map_set index 33 as target [ 1205.545119][ T4376] usb 8-1: USB disconnect, device number 2 [ 1206.007125][T29054] netlink: 'syz.4.10506': attribute type 21 has an invalid length. [ 1206.009211][T29056] loop5: detected capacity change from 0 to 64 [ 1206.045835][T29054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10506'. [ 1206.152619][ T8009] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1206.177125][ T8009] ath9k_htc: Failed to initialize the device [ 1206.183748][ T4376] usb 8-1: ath9k_htc: USB layer deinitialized [ 1206.654823][T29076] loop4: detected capacity change from 0 to 512 [ 1206.745790][T29076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1206.939879][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 1207.386625][T29105] netlink: 'syz.4.10530': attribute type 46 has an invalid length. [ 1207.403374][T29105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10530'. [ 1207.420212][T29109] No such timeout policy "syz0" [ 1207.478324][ T5501] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1207.670865][ T5501] usb 2-1: Using ep0 maxpacket: 16 [ 1207.696297][ T5501] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1207.736163][ T5501] usb 2-1: config 4 has an invalid interface number: 108 but max is 0 [ 1207.744434][ T5501] usb 2-1: config 4 has no interface number 0 [ 1207.761914][ T5501] usb 2-1: config 4 interface 108 has no altsetting 0 [ 1207.784319][ T5501] usb 2-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 1207.809629][ T5501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.840248][ T5501] usb 2-1: Product: syz [ 1207.850301][ T5501] usb 2-1: Manufacturer: syz [ 1207.869575][ T5501] usb 2-1: SerialNumber: syz [ 1208.117121][ T5501] usb 2-1: active config #4 != 1 ?? [ 1208.136389][ T5501] usb 2-1: USB disconnect, device number 66 [ 1208.771932][ T4376] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1208.975372][ T4376] usb 6-1: Using ep0 maxpacket: 8 [ 1208.985191][ T4376] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1209.006972][ T4376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.018134][ T4376] usb 6-1: Product: syz [ 1209.022343][ T4376] usb 6-1: Manufacturer: syz [ 1209.026962][ T4376] usb 6-1: SerialNumber: syz [ 1209.061519][ T4376] usb 6-1: config 0 descriptor?? [ 1209.085428][ T4376] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1209.380497][T29154] loop4: detected capacity change from 0 to 32768 [ 1209.451804][T29154] ERROR: (device loop4): diAllocBit: iag inconsistent [ 1209.451804][T29154] [ 1209.483562][T29154] ialloc: diAlloc returned -5! [ 1209.520309][ T4376] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1209.533848][ T4376] sq905: probe of 6-1:0.0 failed with error -71 [ 1209.575855][ T4376] usb 6-1: USB disconnect, device number 12 [ 1209.610172][ T27] audit: type=1326 audit(45936662.350:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29175 comm="syz.1.10566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1209.682233][ T27] audit: type=1326 audit(45936662.397:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29175 comm="syz.1.10566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1209.773750][ T27] audit: type=1326 audit(45936662.397:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29175 comm="syz.1.10566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1209.867755][ T1077] block nbd1: Attempted send on invalid socket [ 1209.874279][ T1077] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1209.907542][T29184] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 1210.242140][ T5817] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1210.450348][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 1210.462328][ T5817] usb 5-1: config 0 has no interfaces? [ 1210.475430][ T5817] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1210.497277][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.524026][ T5817] usb 5-1: Product: syz [ 1210.557278][ T5817] usb 5-1: Manufacturer: syz [ 1210.561957][ T5817] usb 5-1: SerialNumber: syz [ 1210.610302][ T5817] r8152-cfgselector 5-1: config 0 descriptor?? [ 1210.861420][ T5817] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1210.915559][T29216] netlink: 'syz.2.10585': attribute type 1 has an invalid length. [ 1210.937020][T29216] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10585'. [ 1210.974422][T29216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10585'. [ 1211.089870][ T5817] usb 5-1: USB disconnect, device number 84 [ 1211.225844][T29194] loop1: detected capacity change from 0 to 32768 [ 1212.150182][T29254] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10603'. [ 1212.423260][T29264] netlink: 292 bytes leftover after parsing attributes in process `syz.5.10609'. [ 1212.448361][T29266] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10611'. [ 1212.572967][T29270] dlm: no locking on control device [ 1212.827335][T29280] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1212.886998][ T27] audit: type=1326 audit(45936665.409:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29281 comm="syz.1.10618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1212.962843][ T27] audit: type=1326 audit(45936665.427:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29281 comm="syz.1.10618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1213.058467][T29288] device bridge2 entered promiscuous mode [ 1213.079193][ T27] audit: type=1326 audit(45936665.427:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29281 comm="syz.1.10618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1213.135541][T29290] netlink: 'syz.1.10622': attribute type 4 has an invalid length. [ 1213.143627][T29290] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10622'. [ 1213.172886][ T27] audit: type=1326 audit(45936665.427:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29281 comm="syz.1.10618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1213.221623][T29290] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1214.528581][T29344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1215.159729][T29366] xt_CT: No such helper "pptp" [ 1215.178173][ T8009] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1215.421542][ T8009] usb 3-1: Using ep0 maxpacket: 32 [ 1215.455912][ T8009] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1215.477995][ T8009] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1215.502410][ T8009] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.539777][ T8009] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1215.574614][ T8009] usb 3-1: string descriptor 0 read error: -22 [ 1215.591364][T29386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10669'. [ 1215.601106][ T8009] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1215.613289][ T8009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.626098][T29386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10669'. [ 1215.670290][ T8009] usb 3-1: 0:2 : does not exist [ 1215.875308][ T8009] usb 3-1: USB disconnect, device number 37 [ 1216.360206][T29414] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1216.675929][T29425] syz.1.10687 uses old SIOCAX25GETINFO [ 1216.822228][T29433] loop2: detected capacity change from 0 to 1024 [ 1216.829540][T29433] EXT4-fs: inline encryption not supported [ 1216.942651][T29433] EXT4-fs error (device loop2): ext4_free_blocks:6221: comm syz.2.10691: Freeing blocks not in datazone - block = 0, count = 4096 [ 1216.990796][T29433] EXT4-fs (loop2): Remounting filesystem read-only [ 1217.046787][T29433] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.10691: Invalid inode bitmap blk 0 in block_group 0 [ 1217.110749][T29433] EXT4-fs (loop2): Remounting filesystem read-only [ 1217.151028][T29433] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 1217.214277][T29433] EXT4-fs (loop2): Remounting filesystem read-only [ 1217.231832][T29433] EXT4-fs (loop2): 1 orphan inode deleted [ 1217.237636][T29433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1217.319157][T29433] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.10691: Invalid inode table block 0 in block_group 0 [ 1217.384129][T29433] EXT4-fs (loop2): Remounting filesystem read-only [ 1217.494690][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 1217.502889][T29458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10701'. [ 1217.538279][ T4376] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1217.549698][T29458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10701'. [ 1217.571800][T29458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10701'. [ 1217.698935][T29462] loop7: detected capacity change from 0 to 8 [ 1217.764773][ T4376] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1217.779911][ T4376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.816432][ T4376] usb 6-1: config 0 descriptor?? [ 1217.838841][ T4376] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1217.997881][ T8009] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1218.007638][T29468] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10706'. [ 1218.052791][ T4376] gspca_spca508: reg_read err -71 [ 1218.064303][ T4376] gspca_spca508: reg_read err -71 [ 1218.085223][ T4376] gspca_spca508: reg_read err -71 [ 1218.122581][ T4376] gspca_spca508: reg_read err -71 [ 1218.136873][ T4376] gspca_spca508: reg_read err -71 [ 1218.147732][ T4376] gspca_spca508: reg write: error -71 [ 1218.155072][ T4376] spca508: probe of 6-1:0.0 failed with error -71 [ 1218.168669][ T4376] usb 6-1: USB disconnect, device number 13 [ 1218.190325][ T8009] usb 3-1: Using ep0 maxpacket: 32 [ 1218.210303][ T8009] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1218.242724][ T8009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.251829][ T8009] usb 3-1: Product: syz [ 1218.260686][ T8009] usb 3-1: Manufacturer: syz [ 1218.265929][ T8009] usb 3-1: SerialNumber: syz [ 1218.316528][ T8009] usb 3-1: config 0 descriptor?? [ 1218.332072][ T8009] smsc75xx v1.0.0 [ 1218.335900][ T8009] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1218.361354][ T8009] smsc75xx: probe of 3-1:0.0 failed with error -22 [ 1218.496003][T29476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1218.503365][T29476] IPv6: NLM_F_CREATE should be set when creating new route [ 1218.510653][T29476] IPv6: NLM_F_CREATE should be set when creating new route [ 1218.586170][ T4376] usb 3-1: USB disconnect, device number 38 [ 1218.881718][T29486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10715'. [ 1219.242196][T29494] dlm: plock device version mismatch: kernel (1.2.0), user (1.512.4294901762) [ 1219.926818][ T5817] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1220.137731][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.160420][ T5817] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1220.173086][ T5817] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1220.193765][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.221672][ T5817] usb 3-1: Product: syz [ 1220.225924][ T5817] usb 3-1: Manufacturer: syz [ 1220.230544][ T5817] usb 3-1: SerialNumber: syz [ 1220.254479][ T5817] usb 3-1: config 0 descriptor?? [ 1220.284124][ T5817] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1220.297593][ T8009] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1220.319832][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1220.331463][T29498] loop7: detected capacity change from 0 to 32768 [ 1220.350305][ T5817] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1220.362573][ T5817] usb 3-1: media controller created [ 1220.440325][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1220.523129][ T8009] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1220.536495][T29498] XFS (loop7): Mounting V5 Filesystem [ 1220.549726][ T8009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.582563][ T8009] usb 6-1: config 0 descriptor?? [ 1220.610981][ T8009] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1220.656996][T29533] loop4: detected capacity change from 0 to 16 [ 1220.690208][T29498] XFS (loop7): Ending clean mount [ 1220.724175][T29533] erofs: (device loop4): mounted with root inode @ nid 36. [ 1220.894136][ T5817] DVB: Unable to find symbol tda10046_attach() [ 1220.903974][ T5817] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1220.921674][ T5817] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1220.934879][T28350] XFS (loop7): Unmounting Filesystem [ 1221.041347][ T8009] gp8psk: usb in 128 operation failed. [ 1221.055400][ T8009] gp8psk: usb in 137 operation failed. [ 1221.070041][ T8009] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1221.098023][ T8009] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1221.150726][ T8009] usb 6-1: USB disconnect, device number 14 [ 1221.156824][ T5817] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 1221.183804][ T5817] usb 3-1: USB disconnect, device number 39 [ 1222.428949][T29565] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1222.767216][T29577] loop4: detected capacity change from 0 to 1024 [ 1222.840902][ T5817] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1223.030473][T29585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10758'. [ 1223.054567][ T5817] usb 8-1: Using ep0 maxpacket: 8 [ 1223.063740][ T5817] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1223.101996][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.140032][ T5817] usb 8-1: Product: syz [ 1223.144303][ T5817] usb 8-1: Manufacturer: syz [ 1223.148942][ T5817] usb 8-1: SerialNumber: syz [ 1223.202865][ T5817] usb 8-1: config 0 descriptor?? [ 1223.213076][ T5817] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1223.299738][T29591] netlink: 'syz.4.10762': attribute type 21 has an invalid length. [ 1223.319723][T29591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10762'. [ 1223.578289][ T5397] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1223.617727][T29599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10767'. [ 1223.647078][ T5817] gspca_sq930x: ucbus_write failed -71 [ 1223.652701][ T5817] sq930x: probe of 8-1:0.0 failed with error -71 [ 1223.700800][ T5817] usb 8-1: USB disconnect, device number 3 [ 1223.730693][T29602] loop1: detected capacity change from 0 to 4096 [ 1223.756955][T29602] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1223.804805][ T5397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1223.832033][ T5397] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1223.848705][ T5397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.876259][ T5397] usb 3-1: config 0 descriptor?? [ 1224.001423][T29602] ntfs3: loop1: failed to convert "c46c" to iso8859-9 [ 1224.111605][ T5397] ath6kl: Failed to submit usb control message: -71 [ 1224.122187][ T5397] ath6kl: unable to send the bmi data to the device: -71 [ 1224.151974][ T5397] ath6kl: Unable to send get target info: -71 [ 1224.169847][ T5397] ath6kl: Failed to init ath6kl core: -71 [ 1224.293982][ T5397] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1224.329612][ T5397] usb 3-1: USB disconnect, device number 40 [ 1224.414188][T29618] ieee802154 phy0 wpan0: encryption failed: -22 [ 1224.631595][ T27] audit: type=1326 audit(45936676.400:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.4.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf839aeb9 code=0x7ffc0000 [ 1224.665196][T29630] loop1: detected capacity change from 0 to 64 [ 1224.732303][ T27] audit: type=1326 audit(45936676.428:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.4.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7facf839aeb9 code=0x7ffc0000 [ 1224.827691][ T27] audit: type=1326 audit(45936676.428:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.4.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf839aeb9 code=0x7ffc0000 [ 1224.861400][ T4376] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1224.920952][ T27] audit: type=1326 audit(45936676.428:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.4.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf839aeb9 code=0x7ffc0000 [ 1224.925582][T29634] netlink: 'syz.4.10782': attribute type 21 has an invalid length. [ 1225.006093][T29634] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10782'. [ 1225.093029][ T4376] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1225.121331][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1225.175351][ T4376] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1225.220334][ T4376] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1225.246070][ T4376] usb 8-1: Product: syz [ 1225.250368][ T4376] usb 8-1: Manufacturer: syz [ 1225.279715][ T4376] usb 8-1: SerialNumber: syz [ 1225.298559][ T4376] usb 8-1: config 0 descriptor?? [ 1225.308446][ T4376] usb 8-1: selecting invalid altsetting 0 [ 1225.571726][ T4376] usb 8-1: USB disconnect, device number 4 [ 1226.380504][T29684] loop7: detected capacity change from 0 to 736 [ 1226.539814][ T5501] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1226.744633][ T5501] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1226.780760][ T5501] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1226.792494][T29692] loop5: detected capacity change from 0 to 4096 [ 1226.803357][ T5501] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1226.823691][ T5501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.853501][T29678] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1226.869604][T29692] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1226.896399][T29692] ntfs3: loop5: Failed to load $Extend. [ 1227.160332][ T5397] usb 5-1: USB disconnect, device number 85 [ 1227.170344][ T8009] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1227.377589][ T8009] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1227.394828][ T8009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.403208][ T8009] usb 3-1: Product: syz [ 1227.408046][ T4376] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1227.438260][ T8009] usb 3-1: Manufacturer: syz [ 1227.442927][ T8009] usb 3-1: SerialNumber: syz [ 1227.463152][ T8009] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1227.509676][ T8009] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1227.561489][T29697] loop7: detected capacity change from 0 to 32768 [ 1227.619458][ T4376] usb 2-1: Using ep0 maxpacket: 16 [ 1227.626997][ T4376] usb 2-1: config 0 has no interfaces? [ 1227.635404][T29697] ERROR: (device loop7): dbAlloc: unable to allocate blocks [ 1227.635404][T29697] [ 1227.654682][ T4376] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1227.673256][ T4376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.736926][ T4376] usb 2-1: Product: syz [ 1227.741273][ T4376] usb 2-1: Manufacturer: syz [ 1227.745947][ T4376] usb 2-1: SerialNumber: syz [ 1227.812316][ T4376] r8152-cfgselector 2-1: config 0 descriptor?? [ 1228.012234][ T5501] usb 3-1: USB disconnect, device number 41 [ 1228.041347][ T4376] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1228.162279][ T27] audit: type=1326 audit(45936679.692:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29717 comm="syz.4.10825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facf839aeb9 code=0x0 [ 1228.194812][T29720] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10821'. [ 1228.289943][ T7269] usb 2-1: USB disconnect, device number 67 [ 1228.297693][T29723] loop5: detected capacity change from 0 to 1024 [ 1228.342913][T29723] hfsplus: Filesystem is marked locked, mounting read-only. [ 1228.645650][ T8009] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1228.663638][ T8009] ath9k_htc: Failed to initialize the device [ 1228.695325][ T5501] usb 3-1: ath9k_htc: USB layer deinitialized [ 1229.821719][ T5817] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1229.940898][T29781] loop2: detected capacity change from 0 to 64 [ 1230.028099][ T5817] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 1230.047544][ T5817] usb 2-1: config 0 has no interface number 0 [ 1230.091871][ T5817] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1230.114321][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.133089][ T5817] usb 2-1: Product: syz [ 1230.148406][ T5817] usb 2-1: Manufacturer: syz [ 1230.167085][ T5817] usb 2-1: SerialNumber: syz [ 1230.196763][ T5817] usb 2-1: config 0 descriptor?? [ 1230.294292][T29791] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1230.448700][ T5817] usb 2-1: USB disconnect, device number 68 [ 1230.605134][T29803] netlink: 45 bytes leftover after parsing attributes in process `syz.2.10863'. [ 1230.709576][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.083234][ T5817] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1231.286276][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 1231.293398][ T5817] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1231.308188][ T5817] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1231.341162][ T5817] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1231.371711][ T5817] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1231.390828][ T5817] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1231.446639][ T5817] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1231.470239][ T5817] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1231.475802][T29811] loop7: detected capacity change from 0 to 32768 [ 1231.507230][ T5817] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1231.526816][ T5817] usb 3-1: Product: syz [ 1231.537623][ T5817] usb 3-1: Manufacturer: syz [ 1231.557862][ T5817] usb 3-1: SerialNumber: syz [ 1231.584140][T29811] ERROR: (device loop7): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 1231.584140][T29811] [ 1231.602320][ T5817] usb 3-1: config 0 descriptor?? [ 1231.632191][T29811] ERROR: (device loop7): remounting filesystem as read-only [ 1231.633961][ T5817] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1231.663148][T29811] ERROR: (device loop7): jfs_unlink: [ 1231.663148][T29811] [ 1231.728895][ T5817] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1231.896127][T28350] ERROR: (device loop7): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1231.896127][T28350] [ 1231.962624][T29807] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1232.002960][ T5501] usb 3-1: USB disconnect, device number 42 [ 1232.024340][ T5501] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1232.158492][T29815] loop4: detected capacity change from 0 to 32768 [ 1232.232249][T29815] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 1232.232249][T29815] [ 1232.532838][T29823] loop1: detected capacity change from 0 to 32768 [ 1233.370715][T29863] cgroup: name respecified [ 1233.514875][T29865] sctp: [Deprecated]: syz.5.10896 (pid 29865) Use of int in max_burst socket option. [ 1233.514875][T29865] Use struct sctp_assoc_value instead [ 1233.931869][T29883] loop2: detected capacity change from 0 to 256 [ 1233.994157][T29883] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1234.028411][T29883] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1234.056556][T29883] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1234.339552][T29897] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10911'. [ 1234.788845][T29913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10920'. [ 1235.645488][T29918] loop4: detected capacity change from 0 to 32768 [ 1235.658901][T29915] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1235.727522][T29918] (syz.4.10922,29918,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1235.795615][T29918] (syz.4.10922,29918,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1235.855997][T29918] JBD2: Ignoring recovery information on journal [ 1235.874044][T29947] netlink: 'syz.7.10934': attribute type 21 has an invalid length. [ 1236.047298][T29918] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1236.155555][T29954] netlink: 'syz.7.10937': attribute type 1 has an invalid length. [ 1236.429833][T29960] netlink: 'syz.7.10940': attribute type 21 has an invalid length. [ 1236.498633][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 1236.710236][T29934] loop1: detected capacity change from 0 to 40427 [ 1236.753093][T29970] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10946'. [ 1236.764521][T29934] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1236.800591][T29934] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1236.910958][T29934] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1237.129470][T29934] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1237.146935][T29934] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1237.355562][T29934] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 1237.415653][T29993] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 1237.680278][ T27] audit: type=1326 audit(45936688.607:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.2.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681599aeb9 code=0x7ffc0000 [ 1237.723518][T30002] loop5: detected capacity change from 0 to 1024 [ 1237.744464][T30002] EXT4-fs: Ignoring removed orlov option [ 1237.764853][ T27] audit: type=1326 audit(45936688.625:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.2.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f681599aeb9 code=0x7ffc0000 [ 1237.839571][ T27] audit: type=1326 audit(45936688.625:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.2.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681599aeb9 code=0x7ffc0000 [ 1237.895661][T30002] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1237.942269][ T27] audit: type=1326 audit(45936688.635:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.2.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681599aeb9 code=0x7ffc0000 [ 1238.110272][T22193] EXT4-fs (loop5): unmounting filesystem. [ 1238.117873][ T8009] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1238.309106][T30022] loop1: detected capacity change from 0 to 1024 [ 1238.335309][ T8009] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.370139][ T8009] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1238.388048][ T8009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.414896][ T8009] usb 5-1: Product: syz [ 1238.420295][ T8009] usb 5-1: Manufacturer: syz [ 1238.441710][ T8009] usb 5-1: SerialNumber: syz [ 1238.475298][ T8009] usb 5-1: config 0 descriptor?? [ 1238.675295][T24452] hfsplus: b-tree write err: -5, ino 4 [ 1238.737381][ T8009] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 1238.743848][T30034] cgroup: none used incorrectly [ 1238.799268][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.964095][ T7269] usb 5-1: USB disconnect, device number 86 [ 1239.439483][T30058] tmpfs: Bad value for 'mpol' [ 1239.647112][T30064] i2c i2c-0: Invalid block write size 252 [ 1239.871752][T30075] bpf: Bad value for 'mode' [ 1239.882426][T30077] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10994'. [ 1240.106147][ T4376] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1240.321794][ T4376] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1240.330026][ T4376] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.353727][ T4376] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1240.384000][ T4376] usb 3-1: config 1 has no interface number 1 [ 1240.394766][ T8009] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1240.402617][ T4376] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1240.434593][ T4376] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1240.460773][ T4376] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1240.490869][ T4376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.498929][ T4376] usb 3-1: Product: syz [ 1240.546874][ T4376] usb 3-1: Manufacturer: syz [ 1240.551546][ T4376] usb 3-1: SerialNumber: syz [ 1240.622143][ T8009] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 1240.651455][ T8009] usb 5-1: config 0 has no interface number 0 [ 1240.665755][ T8009] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1240.690445][ T8009] usb 5-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 1240.724202][ T8009] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 1240.744997][ T8009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.774883][ T8009] usb 5-1: Product: syz [ 1240.795018][ T8009] usb 5-1: Manufacturer: syz [ 1240.799930][ T4376] aqc111: probe of 3-1:1.105 failed with error -22 [ 1240.807009][ T8009] usb 5-1: SerialNumber: syz [ 1240.829332][ T8009] usb 5-1: config 0 descriptor?? [ 1240.846631][T30084] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1240.980628][T30110] autofs4:pid:30110:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 1241.002251][T30110] autofs4:pid:30110:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1241.066544][ T4376] usb 3-1: USB disconnect, device number 43 [ 1241.108254][ T8009] kaweth 5-1:0.58: Firmware present in device. [ 1241.318579][ T8009] kaweth 5-1:0.58: Error reading configuration (-71), no net device created [ 1241.338808][ T8009] kaweth: probe of 5-1:0.58 failed with error -5 [ 1241.375962][ T8009] usb 5-1: USB disconnect, device number 87 [ 1241.481538][T30124] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1241.503961][T30124] overlayfs: missing 'lowerdir' [ 1241.524217][ T27] audit: type=1326 audit(45936692.199:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30125 comm="syz.5.11018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cb9aeb9 code=0x7ffc0000 [ 1241.577505][ T27] audit: type=1326 audit(45936692.227:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30125 comm="syz.5.11018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cb9aeb9 code=0x7ffc0000 [ 1241.625864][ T27] audit: type=1326 audit(45936692.227:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30125 comm="syz.5.11018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fe04cb9aeb9 code=0x7ffc0000 [ 1241.723250][T30128] loop1: detected capacity change from 0 to 256 [ 1241.732277][ T27] audit: type=1326 audit(45936692.227:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30125 comm="syz.5.11018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cb9aeb9 code=0x7ffc0000 [ 1241.775203][T30128] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1241.790643][ T27] audit: type=1326 audit(45936692.227:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30125 comm="syz.5.11018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04cb9aeb9 code=0x7ffc0000 [ 1241.854001][T30128] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1241.937248][T30128] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1242.514375][T30141] xt_CT: No such helper "pptp" [ 1243.446480][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.452914][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.491167][T30181] futex_wake_op: syz.2.11045 tries to shift op by -1; fix this program [ 1243.755495][T30187] loop2: detected capacity change from 0 to 512 [ 1243.815777][T30187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1243.902392][T30187] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.11048: bg 0: block 384: padding at end of block bitmap is not set [ 1244.008456][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.015061][T30187] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 1244.062061][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.069081][T30187] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.11048: attempt to clear invalid blocks 983260 len 1 [ 1244.147347][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.184195][T30187] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.11048: Invalid inode table block 0 in block_group 0 [ 1244.219543][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.254050][T30187] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1244.284207][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.307484][T30187] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1244.371592][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.382830][T30187] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.11048: Invalid inode table block 0 in block_group 0 [ 1244.428647][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.435254][T30187] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1244.439491][T30211] netlink: 'syz.1.11059': attribute type 2 has an invalid length. [ 1244.481974][T30211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11059'. [ 1244.491746][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.498305][T30187] EXT4-fs error (device loop2): ext4_truncate:4318: inode #11: comm syz.2.11048: mark_inode_dirty error [ 1244.551482][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.578350][T30187] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1244.620998][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.638503][T30187] EXT4-fs (loop2): 1 truncate cleaned up [ 1244.653244][T30187] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1244.762354][T30187] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.11048: Invalid inode table block 0 in block_group 0 [ 1244.865681][T30187] EXT4-fs (loop2): Remounting filesystem read-only [ 1244.904452][T30221] loop5: detected capacity change from 0 to 128 [ 1244.953187][T30221] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1244.999268][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 1245.014740][T30221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1245.151477][T30225] loop4: detected capacity change from 0 to 256 [ 1245.262895][T30225] FAT-fs (loop4): Directory bread(block 64) failed [ 1245.280274][T30225] FAT-fs (loop4): Directory bread(block 65) failed [ 1245.299854][T30225] FAT-fs (loop4): Directory bread(block 66) failed [ 1245.340166][T30225] FAT-fs (loop4): Directory bread(block 67) failed [ 1245.366077][T30225] FAT-fs (loop4): Directory bread(block 68) failed [ 1245.389891][T30225] FAT-fs (loop4): Directory bread(block 69) failed [ 1245.396581][T30225] FAT-fs (loop4): Directory bread(block 70) failed [ 1245.419325][T30225] FAT-fs (loop4): Directory bread(block 71) failed [ 1245.447671][T30225] FAT-fs (loop4): Directory bread(block 72) failed [ 1245.458380][T30225] FAT-fs (loop4): Directory bread(block 73) failed [ 1245.710231][T30239] loop2: detected capacity change from 0 to 256 [ 1246.342035][T30256] PKCS7: Unknown OID: [4] 0.0 [ 1246.347578][T30257] loop4: detected capacity change from 0 to 64 [ 1246.357435][T30256] PKCS7: Only support pkcs7_signedData type [ 1246.436820][T30259] loop1: detected capacity change from 0 to 1024 [ 1246.493858][T30259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1246.548165][T30259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1246.614791][T30259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1246.667325][T30259] System zones: 0-1, 3-36 [ 1246.710305][T30259] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1247.046895][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1247.354530][T30272] loop1: detected capacity change from 0 to 1024 [ 1247.424345][T30276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11090'. [ 1247.681242][T30262] loop5: detected capacity change from 0 to 32768 [ 1247.740709][T30262] [ 1247.740709][T30262] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1247.740709][T30262] [ 1247.746419][T30281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11093'. [ 1247.985573][T22193] [ 1247.985573][T22193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1247.985573][T22193] [ 1248.018218][T22193] [ 1248.018218][T22193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1248.018218][T22193] [ 1248.174664][T30288] PKCS7: Unknown OID: [4] 0.0 [ 1248.199082][T30288] PKCS7: Only support pkcs7_signedData type [ 1248.953610][T30278] loop4: detected capacity change from 0 to 32768 [ 1249.019519][T30278] ERROR: (device loop4): diAllocAG: numfree > numinos [ 1249.019519][T30278] [ 1249.104287][T30278] ERROR: (device loop4): remounting filesystem as read-only [ 1249.139840][T30278] ialloc: diAlloc returned -5! [ 1249.173148][T30312] loop5: detected capacity change from 0 to 512 [ 1249.388381][T30312] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1249.595046][T22193] EXT4-fs (loop5): unmounting filesystem. [ 1250.226432][T30336] loop2: detected capacity change from 0 to 4096 [ 1250.253064][T30336] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1250.312226][T30336] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1250.379700][T30336] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1250.452737][T30336] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1250.491355][T30336] ntfs: volume version 3.1. [ 1250.552458][T30336] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1250.602126][T30336] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1250.639543][T30336] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1250.698598][T30336] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 1250.759122][T30336] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 1250.810067][T30355] loop4: detected capacity change from 0 to 128 [ 1250.822689][T30336] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1250.864092][T30355] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1250.918747][T30360] netlink: 'syz.5.11130': attribute type 5 has an invalid length. [ 1251.116646][T30363] loop7: detected capacity change from 0 to 1024 [ 1251.196373][T30369] loop4: detected capacity change from 0 to 16 [ 1251.297141][T30369] erofs: (device loop4): mounted with root inode @ nid 36. [ 1251.306571][T30370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1251.347056][T30369] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 1251.394279][T30369] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 1251.427809][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1251.429562][T30369] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 1251.718397][T30382] xt_hashlimit: max too large, truncated to 1048576 [ 1251.816894][T30384] loop4: detected capacity change from 0 to 512 [ 1251.914246][T30384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1252.177354][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 1253.783738][T30417] loop5: detected capacity change from 0 to 32768 [ 1253.884753][T30417] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 1253.884753][T30417] [ 1253.926637][T30417] ERROR: (device loop5): remounting filesystem as read-only [ 1253.950676][T30417] xtLookup: xtSearch returned -5 [ 1254.090342][T30417] syz.5.11157 (30417) used greatest stack depth: 19472 bytes left [ 1254.839314][ T52] block nbd7: Attempted send on invalid socket [ 1254.845555][ T52] I/O error, dev nbd7, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1254.876210][ T52] block nbd7: Attempted send on invalid socket [ 1254.882842][ T52] I/O error, dev nbd7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1254.902444][ T52] Buffer I/O error on dev nbd7p5, logical block 1, async page read [ 1255.236272][ T5618] udevd[5618]: inotify_add_watch(7, /dev/nbd7p5, 10) failed: No such file or directory [ 1255.654978][T30517] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1255.840962][T30522] netlink: 'syz.7.11210': attribute type 7 has an invalid length. [ 1256.343456][T30538] tmpfs: Bad value for 'nr_inodes' [ 1256.885132][T30558] loop1: detected capacity change from 0 to 256 [ 1256.963836][T30558] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1257.839515][T30549] loop5: detected capacity change from 0 to 40427 [ 1257.892167][T30549] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1257.920683][T30549] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1258.182609][T30549] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1258.355968][T30549] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1258.363309][T30549] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1259.018094][ T8009] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1259.231495][ T8009] usb 2-1: Using ep0 maxpacket: 32 [ 1259.238552][ T8009] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1259.263769][ T8009] usb 2-1: config 0 has no interface number 0 [ 1259.290268][ T8009] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1259.326950][ T8009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.363422][ T8009] usb 2-1: Product: syz [ 1259.367732][ T8009] usb 2-1: Manufacturer: syz [ 1259.402547][ T8009] usb 2-1: SerialNumber: syz [ 1259.416809][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11259'. [ 1259.424943][ T8009] usb 2-1: config 0 descriptor?? [ 1259.465342][ T8009] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1259.515191][ T8009] usb 2-1: selecting invalid altsetting 1 [ 1259.521644][ T8009] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1259.539129][ T8009] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1259.562647][ T8009] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1259.606707][ T8009] usb 2-1: media controller created [ 1259.664772][ T8009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1259.833943][T30638] loop2: detected capacity change from 0 to 256 [ 1259.900923][T30638] FAT-fs (loop2): Directory bread(block 64) failed [ 1259.929524][T30638] FAT-fs (loop2): Directory bread(block 65) failed [ 1259.958698][T30638] FAT-fs (loop2): Directory bread(block 66) failed [ 1259.976223][T30638] FAT-fs (loop2): Directory bread(block 67) failed [ 1260.019637][T30638] FAT-fs (loop2): Directory bread(block 68) failed [ 1260.026590][ T8009] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1260.045566][T30638] FAT-fs (loop2): Directory bread(block 69) failed [ 1260.066965][T30638] FAT-fs (loop2): Directory bread(block 70) failed [ 1260.073737][T30638] FAT-fs (loop2): Directory bread(block 71) failed [ 1260.085068][ T8009] usb 2-1: USB disconnect, device number 69 [ 1260.099849][T30638] FAT-fs (loop2): Directory bread(block 72) failed [ 1260.136322][T30638] FAT-fs (loop2): Directory bread(block 73) failed [ 1260.337141][T30649] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 1260.762350][T30663] loop2: detected capacity change from 0 to 64 [ 1261.334716][T30684] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11284'. [ 1261.388155][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11284'. [ 1261.431230][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11284'. [ 1261.498860][T30690] loop1: detected capacity change from 0 to 1764 [ 1261.880983][T30702] netlink: 'syz.7.11295': attribute type 1 has an invalid length. [ 1261.897276][T30702] netlink: 'syz.7.11295': attribute type 3 has an invalid length. [ 1261.936264][T30702] netlink: 224 bytes leftover after parsing attributes in process `syz.7.11295'. [ 1261.947168][ T8009] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1261.975419][T30702] NCSI netlink: No device for ifindex 52229 [ 1262.163066][ T8009] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1262.194179][ T8009] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.227510][ T8009] usb 6-1: New USB device found, idVendor=04b8, idProduct=ef02, bcdDevice= 0.3f [ 1262.246219][ T8009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.267775][ T8009] usb 6-1: Product: syz [ 1262.272036][ T8009] usb 6-1: Manufacturer: syz [ 1262.298178][ T8009] usb 6-1: SerialNumber: syz [ 1262.557195][ T8009] usb 6-1: USB disconnect, device number 15 [ 1263.766799][T30728] loop1: detected capacity change from 0 to 32768 [ 1263.844508][T30728] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1263.875307][T30728] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1264.384711][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 1264.564565][T30771] loop1: detected capacity change from 0 to 24 [ 1264.622127][T30771] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1264.651853][T30771] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1264.727932][T30771] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 1265.217923][T30787] sctp: [Deprecated]: syz.5.11336 (pid 30787) Use of int in maxseg socket option. [ 1265.217923][T30787] Use struct sctp_assoc_value instead [ 1265.914717][T30807] nft_compat: unsupported protocol 5 [ 1266.109182][T30815] loop7: detected capacity change from 0 to 128 [ 1266.190611][T30819] loop5: detected capacity change from 0 to 256 [ 1266.212990][T30815] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1266.249928][T30815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1266.309573][T30819] FAT-fs (loop5): Directory bread(block 64) failed [ 1266.344453][T30819] FAT-fs (loop5): Directory bread(block 65) failed [ 1266.373550][T30819] FAT-fs (loop5): Directory bread(block 66) failed [ 1266.400856][T30823] netlink: 'syz.2.11353': attribute type 1 has an invalid length. [ 1266.407055][T30819] FAT-fs (loop5): Directory bread(block 67) failed [ 1266.408771][T30823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11353'. [ 1266.415357][T30819] FAT-fs (loop5): Directory bread(block 68) failed [ 1266.474321][T30819] FAT-fs (loop5): Directory bread(block 69) failed [ 1266.497470][T30819] FAT-fs (loop5): Directory bread(block 70) failed [ 1266.519332][T30819] FAT-fs (loop5): Directory bread(block 71) failed [ 1266.552654][T30819] FAT-fs (loop5): Directory bread(block 72) failed [ 1266.579227][T30819] FAT-fs (loop5): Directory bread(block 73) failed [ 1267.081301][T30838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11361'. [ 1267.336500][T30845] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 1267.862030][T30858] netlink: 'syz.1.11370': attribute type 16 has an invalid length. [ 1267.898306][T30858] netlink: 'syz.1.11370': attribute type 17 has an invalid length. [ 1267.917968][T30858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1268.008810][T30858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1268.023566][T30858] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1268.060365][T30858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1268.073236][T30858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1268.307814][ T7269] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1268.310620][T30862] comedi comedi0: pcl724: I/O port conflict (0x9,4) [ 1268.359699][T30843] loop5: detected capacity change from 0 to 32768 [ 1268.436608][T30843] ialloc: diAlloc returned -5! [ 1268.532517][ T7269] usb 3-1: Using ep0 maxpacket: 8 [ 1268.535869][T30866] xt_hashlimit: overflow, rate too high: 0 [ 1268.548859][ T7269] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1268.584549][ T7269] usb 3-1: config 0 has no interface number 0 [ 1268.605408][ T7269] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1268.628746][ T7269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.668217][ T7269] usb 3-1: Product: syz [ 1268.679026][T30869] Error parsing options; rc = [-22] [ 1268.707429][ T7269] usb 3-1: Manufacturer: syz [ 1268.712137][ T7269] usb 3-1: SerialNumber: syz [ 1268.749657][ T7269] usb 3-1: config 0 descriptor?? [ 1268.988960][ T7269] usb 3-1: USB disconnect, device number 44 [ 1269.782883][T30902] loop7: detected capacity change from 0 to 256 [ 1270.732073][T30923] CIFS mount error: No usable UNC path provided in device string! [ 1270.732073][T30923] [ 1270.757061][T30926] loop5: detected capacity change from 0 to 64 [ 1270.772699][T30923] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1270.889088][T30898] loop1: detected capacity change from 0 to 32768 [ 1270.977380][T30898] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1271.398165][ T4375] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1271.550051][T30943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11410'. [ 1271.600725][ T7269] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1271.814583][ T7269] usb 3-1: Using ep0 maxpacket: 32 [ 1271.821615][ T7269] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1271.889227][ T7269] usb 3-1: config 0 has no interface number 0 [ 1271.906324][ T7269] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1271.945136][T30918] loop4: detected capacity change from 0 to 40427 [ 1271.964030][ T7269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.972186][ T7269] usb 3-1: Product: syz [ 1271.980885][T30953] netlink: 'syz.1.11414': attribute type 21 has an invalid length. [ 1272.000234][T30953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11414'. [ 1272.018606][T30918] F2FS-fs (loop4): invalid crc value [ 1272.025023][ T7269] usb 3-1: Manufacturer: syz [ 1272.037924][ T7269] usb 3-1: SerialNumber: syz [ 1272.087384][T30918] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1272.088697][ T7269] usb 3-1: config 0 descriptor?? [ 1272.114037][ T7269] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1272.122887][ T7269] usb 3-1: selecting invalid altsetting 1 [ 1272.157910][T30958] xt_l2tp: v2 sid > 0xffff: 262144 [ 1272.194956][ T7269] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1272.227909][ T7269] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1272.238479][T30918] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1272.277287][ T7269] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1272.338193][ T7269] usb 3-1: media controller created [ 1272.388212][ T7269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1272.697276][ T7269] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1272.734783][T30945] loop5: detected capacity change from 0 to 32768 [ 1272.782306][T30945] (syz.5.11411,30945,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1272.830256][ T7269] usb 3-1: USB disconnect, device number 45 [ 1272.890897][T30945] (syz.5.11411,30945,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1273.000144][T30945] JBD2: Ignoring recovery information on journal [ 1273.184041][T30945] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1273.231967][T30961] loop1: detected capacity change from 0 to 32768 [ 1273.324345][T30961] (syz.1.11418,30961,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1273.387654][T30961] (syz.1.11418,30961,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1273.417647][T30978] QAT: Invalid ioctl 1075883590 [ 1273.468355][T30978] QAT: Invalid ioctl 1075883590 [ 1273.499484][T30978] QAT: Invalid ioctl 1075883590 [ 1273.516004][T30961] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 1273.546665][T30978] QAT: Invalid ioctl 1075883590 [ 1273.560732][T30978] QAT: Invalid ioctl 1075883590 [ 1273.575575][T22193] ocfs2: Unmounting device (7,5) on (node local) [ 1273.589188][T30978] QAT: Invalid ioctl 1075883590 [ 1273.594241][T30978] QAT: Invalid ioctl 1075883590 [ 1273.610562][T30961] JBD2: Ignoring recovery information on journal [ 1273.631992][T30978] QAT: Invalid ioctl 1075883590 [ 1273.664077][T30978] QAT: Invalid ioctl 1075883590 [ 1273.702824][T30978] QAT: Invalid ioctl 1075883590 [ 1273.755987][T30961] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1274.085572][T30992] loop4: detected capacity change from 0 to 256 [ 1274.121197][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 1274.701215][T31008] device wlan0 left promiscuous mode [ 1274.706682][T31008] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1275.062562][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11445'. [ 1275.476764][T31034] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1275.676284][T31042] afs: Bad value for 'source' [ 1275.964243][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11460'. [ 1276.064042][ T4376] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1276.284937][ T4376] usb 8-1: Using ep0 maxpacket: 16 [ 1276.296778][ T4376] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1276.338789][ T4376] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1276.371073][ T4376] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1276.391852][ T4376] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1276.429223][ T4376] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1276.450833][ T4376] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1276.464950][ T4376] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1276.485512][ T4376] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.512061][ T4376] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 1276.785823][ T4376] ums-sddr09: probe of 8-1:1.0 failed with error -22 [ 1276.802302][T31080] SET target dimension over the limit! [ 1276.837093][ T4376] usb 8-1: USB disconnect, device number 5 [ 1277.096489][T31087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11475'. [ 1277.205779][T31093] sctp: [Deprecated]: syz.2.11477 (pid 31093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1277.205779][T31093] Use struct sctp_sack_info instead [ 1277.251905][T31092] loop1: detected capacity change from 0 to 764 [ 1277.307981][T31092] Symlink component flag not implemented [ 1277.338230][T31092] Symlink component flag not implemented [ 1277.367228][T31097] netlink: 'syz.5.11479': attribute type 1 has an invalid length. [ 1277.384587][T31097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11479'. [ 1277.630267][ T4376] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1277.657842][T31105] loop5: detected capacity change from 0 to 512 [ 1277.692620][T31105] EXT4-fs: Ignoring removed oldalloc option [ 1277.729067][T31109] autofs4:pid:31109:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 1277.747913][T31107] netlink: 'syz.1.11484': attribute type 10 has an invalid length. [ 1277.779729][T31109] autofs4:pid:31109:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1277.823923][T31105] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1277.846011][ T4376] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1277.857931][ T4376] usb 5-1: config 0 has no interface number 0 [ 1277.872614][ T4376] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1277.892995][ T4376] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1277.902392][ T4376] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1277.917197][ T4376] usb 5-1: Manufacturer: syz [ 1277.922832][ T4376] usb 5-1: SerialNumber: syz [ 1277.932157][ T4376] usb 5-1: config 0 descriptor?? [ 1278.009564][T22193] EXT4-fs (loop5): unmounting filesystem. [ 1278.171853][T31119] libceph: resolve '4.' (ret=-3): failed [ 1278.350352][T31126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11493'. [ 1278.398144][ T4376] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 1278.427367][ T4376] usb 5-1: USB disconnect, device number 88 [ 1278.606940][T31133] loop1: detected capacity change from 0 to 1024 [ 1278.655722][T31133] EXT4-fs: Ignoring removed oldalloc option [ 1278.667523][T31135] loop5: detected capacity change from 0 to 2048 [ 1278.689433][T31133] EXT4-fs: Ignoring removed bh option [ 1278.719874][T31133] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1278.726004][T31138] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1278.824723][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1278.825804][T31133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1278.879088][T31135] Remounting filesystem read-only [ 1278.885340][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1278.895380][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1278.906052][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1278.935358][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1278.953823][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1279.012278][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1279.073808][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1279.091903][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1279.101949][T31135] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1279.113826][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1279.113843][ T27] audit: type=1800 audit(45936727.360:350): pid=31135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11498" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1279.298970][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1279.413560][T31152] device bridge4 entered promiscuous mode [ 1279.557470][T31157] loop1: detected capacity change from 0 to 2048 [ 1279.641720][T31157] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1279.685738][T31163] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11510'. [ 1279.791005][T31166] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1279.809805][ T5618] udevd[5618]: incorrect nilfs2 checksum on /dev/loop1 [ 1279.853921][T31157] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=56, inode=12, rec_len=2584, name_len=5 [ 1279.914935][T31171] ip6t_rpfilter: unknown options [ 1280.014212][T31157] Remounting filesystem read-only [ 1280.441771][T31184] raw_sendmsg: syz.5.11520 forgot to set AF_INET. Fix it! [ 1280.829267][ T7269] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1280.854124][T31199] netlink: 'syz.5.11527': attribute type 2 has an invalid length. [ 1280.898501][T31199] netlink: 'syz.5.11527': attribute type 2 has an invalid length. [ 1280.912122][T31199] netlink: 'syz.5.11527': attribute type 1 has an invalid length. [ 1280.993241][T31199] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11527'. [ 1281.042249][ T7269] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1281.062538][ T7269] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.106633][ T7269] usb 8-1: config 0 descriptor?? [ 1281.285870][T31212] loop5: detected capacity change from 0 to 256 [ 1281.563892][ T7269] [drm:udl_init] *ERROR* Selecting channel failed [ 1281.614750][ T7269] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2 [ 1281.658281][ T7269] [drm] Initialized udl on minor 2 [ 1281.678143][ T7269] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1281.730255][ T7269] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1281.769860][ T7269] usb 8-1: USB disconnect, device number 6 [ 1281.831961][ T5501] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1281.850810][ T5501] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1281.870054][ T5501] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1281.962503][T31231] loop5: detected capacity change from 0 to 256 [ 1282.083627][T31231] FAT-fs (loop5): Directory bread(block 64) failed [ 1282.152190][T31231] FAT-fs (loop5): Directory bread(block 65) failed [ 1282.159047][T31231] FAT-fs (loop5): Directory bread(block 66) failed [ 1282.179665][T31236] netlink: 'syz.2.11545': attribute type 16 has an invalid length. [ 1282.196195][T31231] FAT-fs (loop5): Directory bread(block 67) failed [ 1282.214903][T31231] FAT-fs (loop5): Directory bread(block 68) failed [ 1282.267603][T31231] FAT-fs (loop5): Directory bread(block 69) failed [ 1282.274813][T31236] netlink: 'syz.2.11545': attribute type 17 has an invalid length. [ 1282.291891][T31231] FAT-fs (loop5): Directory bread(block 70) failed [ 1282.299261][T31231] FAT-fs (loop5): Directory bread(block 71) failed [ 1282.315231][T31231] FAT-fs (loop5): Directory bread(block 72) failed [ 1282.321992][T31236] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1282.335862][T31231] FAT-fs (loop5): Directory bread(block 73) failed [ 1282.343726][T31236] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1282.372718][T31236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1282.389339][ T27] audit: type=1800 audit(45936730.428:351): pid=31231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11543" name="file1" dev="loop5" ino=1048661 res=0 errno=0 [ 1282.420723][T31236] infiniband syz1: set active [ 1282.434984][T31236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1282.458718][T31236] infiniband syz1: set active [ 1282.467075][ T4376] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1282.499831][T31236] infiniband syz0: set active [ 1282.510326][T31236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1282.535029][T31236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1282.636696][T31236] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 1282.673047][T31236] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 1282.681268][ T4376] usb 2-1: Using ep0 maxpacket: 32 [ 1282.692591][T31247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11551'. [ 1282.705980][ T8009] vcan0 speed is unknown, defaulting to 1000 [ 1282.721176][ T4376] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1282.741091][ T5397] vcan0 speed is unknown, defaulting to 1000 [ 1282.749554][ T4376] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 1282.772164][ T4376] usb 2-1: config 7 has no interface number 0 [ 1282.793275][ T4376] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1282.814688][ T4376] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 1282.846442][ T4376] usb 2-1: config 7 interface 187 has no altsetting 0 [ 1282.881931][ T4376] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1282.900493][ T4376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.931852][ T4376] usb 2-1: Product: syz [ 1282.937659][ T4376] usb 2-1: Manufacturer: syz [ 1282.945248][T31257] loop5: detected capacity change from 0 to 64 [ 1282.956608][ T4376] usb 2-1: SerialNumber: syz [ 1282.985447][ T7269] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1283.201648][ T7269] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 1283.227098][ T4376] usb 2-1: Unknown endpoint type found, address 0x07 [ 1283.231658][ T7269] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.253391][ T4376] usb 2-1: Not enough endpoints found in device, aborting! [ 1283.296480][ T7269] usb 8-1: config 0 has no interface number 0 [ 1283.319470][ T7269] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1283.392253][ T7269] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.400324][ T7269] usb 8-1: Product: syz [ 1283.430913][ T7269] usb 8-1: Manufacturer: syz [ 1283.444105][ T7269] usb 8-1: SerialNumber: syz [ 1283.482460][ T7269] usb 8-1: config 0 descriptor?? [ 1283.500233][ T5817] usb 2-1: USB disconnect, device number 70 [ 1283.503239][T31271] loop5: detected capacity change from 0 to 1764 [ 1283.622372][T31271] gfs2: Unexpected value for 'discard' [ 1283.752798][ T5501] usb 8-1: USB disconnect, device number 7 [ 1283.912480][T31279] loop4: detected capacity change from 0 to 4096 [ 1283.941653][T31279] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1284.336766][T31294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11573'. [ 1284.390205][T31294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11573'. [ 1284.435542][T31294] netlink: 'syz.4.11573': attribute type 6 has an invalid length. [ 1284.496563][T31298] netlink: 'syz.2.11575': attribute type 10 has an invalid length. [ 1284.549517][T31298] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1284.589760][T31298] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1284.662807][T31298] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1284.782280][T31298] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1285.017249][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11583'. [ 1285.722769][ T8009] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1285.745580][T31344] loop5: detected capacity change from 0 to 4096 [ 1285.758731][T31345] loop7: detected capacity change from 0 to 4096 [ 1285.770832][T31349] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1285.805074][T31345] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1285.958718][ T8009] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1285.995996][ T8009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.033864][ T8009] usb 2-1: Product: syz [ 1286.045015][T31345] ntfs: (device loop7): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 1286.067231][ T8009] usb 2-1: Manufacturer: syz [ 1286.071894][ T8009] usb 2-1: SerialNumber: syz [ 1286.084612][T31345] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1286.109008][ T8009] usb 2-1: config 0 descriptor?? [ 1286.121312][T31345] ntfs: (device loop7): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1286.236829][T31345] ntfs: volume version 3.1. [ 1286.281851][T31357] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.11603'. [ 1286.291400][T31345] ntfs: (device loop7): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 1286.330044][T31345] ntfs: (device loop7): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 1286.350175][ T27] audit: type=1326 audit(45936734.123:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31358 comm="syz.4.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf839aeb9 code=0x7ffc0000 [ 1286.383907][ T8009] usb 2-1: ignoring: not an USB2CAN converter [ 1286.385707][T31345] ntfs: (device loop7): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 1286.457512][ T27] audit: type=1326 audit(45936734.151:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31358 comm="syz.4.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7facf839aeb9 code=0x7ffc0000 [ 1286.579700][ T27] audit: type=1326 audit(45936734.151:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31358 comm="syz.4.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf839aeb9 code=0x7ffc0000 [ 1286.614028][ T4376] usb 2-1: USB disconnect, device number 71 [ 1287.038714][T31373] loop7: detected capacity change from 0 to 128 [ 1287.468615][T31389] program syz.4.11618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1287.606340][T31381] loop7: detected capacity change from 0 to 8192 [ 1287.657486][T31381] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1287.699418][T31381] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 1287.709235][T31381] REISERFS (device loop7): using ordered data mode [ 1287.716611][T31381] reiserfs: using flush barriers [ 1287.723955][T31381] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1287.872182][T31381] REISERFS (device loop7): checking transaction log (loop7) [ 1287.899587][T31381] REISERFS (device loop7): Using r5 hash to sort names [ 1288.131469][T31410] loop1: detected capacity change from 0 to 512 [ 1288.195843][T31410] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1289.004380][T31436] loop5: detected capacity change from 0 to 512 [ 1289.109633][T31444] netlink: 340 bytes leftover after parsing attributes in process `syz.2.11644'. [ 1289.121669][T31436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1289.260984][T31436] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.11643: corrupted xattr block 33 [ 1289.266910][T31444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11644'. [ 1289.493820][T22193] EXT4-fs (loop5): unmounting filesystem. [ 1289.731861][ T4318] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1289.948216][ T4318] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1289.973392][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.005303][ T4318] usb 2-1: config 0 descriptor?? [ 1290.191757][ T8009] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1290.243645][ T4318] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1290.255405][ T4318] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1290.412535][ T8009] usb 8-1: Using ep0 maxpacket: 16 [ 1290.417973][ T5397] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1290.428632][ T8009] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1290.446051][ T8009] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1290.467767][ T4318] [drm:udl_init] *ERROR* Selecting channel failed [ 1290.483845][ T8009] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1290.504708][ T4318] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1290.512428][ T8009] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.520455][ T8009] usb 8-1: Product: syz [ 1290.531432][ T4318] [drm] Initialized udl on minor 2 [ 1290.540636][ T4318] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1290.548979][ T8009] usb 8-1: Manufacturer: syz [ 1290.553631][ T8009] usb 8-1: SerialNumber: syz [ 1290.566287][ T4318] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1290.585199][T31491] loop4: detected capacity change from 0 to 1764 [ 1290.588981][ T8009] usb 8-1: config 0 descriptor?? [ 1290.608501][ T4318] usb 2-1: USB disconnect, device number 72 [ 1290.619796][ T4376] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1290.626986][T31491] gfs2: Unexpected value for 'discard' [ 1290.627991][ T4376] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1290.643310][ T5397] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1290.652952][ T8009] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1290.672693][ T5397] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1290.681934][ T5397] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.712257][ T4376] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1290.719251][ T5397] usb 3-1: config 220 has no interface number 2 [ 1290.758559][ T5397] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1290.790133][ T5397] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1290.808413][ T5397] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1290.821304][T24454] usb 8-1: Failed to submit usb control message: -71 [ 1290.830721][ T5397] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1290.847907][T24454] usb 8-1: unable to send the bmi data to the device: -71 [ 1290.883347][T24454] usb 8-1: unable to get target info from device [ 1290.894518][ T4376] usb 8-1: USB disconnect, device number 8 [ 1290.904927][T24454] usb 8-1: could not get target info (-71) [ 1290.915808][ T5397] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1290.927546][ T5397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.936286][ T5397] usb 3-1: Product: syz [ 1290.937416][T24454] usb 8-1: could not probe fw (-71) [ 1290.940743][ T5397] usb 3-1: Manufacturer: syz [ 1290.950956][ T5397] usb 3-1: SerialNumber: syz [ 1291.212808][ T5397] usb 3-1: selecting invalid altsetting 0 [ 1291.224624][T31508] tmpfs: Bad value for 'mpol' [ 1291.243521][ T5397] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1291.266437][ T5397] usb 3-1: No valid video chain found. [ 1291.323863][ T5397] usb 3-1: selecting invalid altsetting 0 [ 1291.346350][ T5397] usbtest: probe of 3-1:220.1 failed with error -22 [ 1291.379285][ T5397] usb 3-1: USB disconnect, device number 46 [ 1291.823301][T31526] loop1: detected capacity change from 0 to 512 [ 1291.886821][T31530] netlink: 'syz.5.11685': attribute type 1 has an invalid length. [ 1291.914812][T31526] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.11684: bg 0: block 473: padding at end of block bitmap is not set [ 1291.919482][T31530] netlink: 'syz.5.11685': attribute type 12 has an invalid length. [ 1291.966381][T31530] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11685'. [ 1291.988588][T31526] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 1292.063673][T31526] EXT4-fs (loop1): 1 orphan inode deleted [ 1292.069571][T31526] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1292.088990][ T4368] __quota_error: 9 callbacks suppressed [ 1292.089007][ T4368] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1292.158736][ T4368] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 1 [ 1292.187897][T31526] Invalid option length (230) for dns_resolver key [ 1292.351735][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1293.176545][T31573] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.11705'. [ 1293.231919][T31573] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1293.285482][T31580] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11707'. [ 1293.334525][T31580] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11707'. [ 1293.690366][T31593] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11714'. [ 1294.055128][T31607] netlink: 'syz.4.11721': attribute type 12 has an invalid length. [ 1294.083271][T31607] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11721'. [ 1294.131182][T31611] loop7: detected capacity change from 0 to 512 [ 1294.261781][T31611] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1294.316752][T31611] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.11724: iget: checksum invalid [ 1294.569735][T28350] EXT4-fs (loop7): unmounting filesystem. [ 1295.513858][T31660] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.11747'. [ 1295.571160][T31660] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1295.879083][T31666] loop4: detected capacity change from 0 to 256 [ 1295.912555][T31666] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1295.943312][T31666] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1296.198706][T31672] openvswitch: netlink: Tunnel attr 6 has unexpected len 4 expected 0 [ 1296.470750][T31682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11756'. [ 1296.540429][T31658] loop5: detected capacity change from 0 to 32768 [ 1296.668504][T31658] XFS (loop5): Mounting V5 Filesystem [ 1296.789288][T31698] loop4: detected capacity change from 0 to 512 [ 1296.888959][T31698] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1296.911482][T31698] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.11765: iget: checksum invalid [ 1296.912816][T31658] XFS (loop5): Ending clean mount [ 1297.166822][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 1297.263429][T22193] XFS (loop5): Unmounting Filesystem [ 1297.517300][T31720] netlink: 'syz.2.11773': attribute type 1 has an invalid length. [ 1297.577943][T31723] CIFS mount error: No usable UNC path provided in device string! [ 1297.577943][T31723] [ 1297.588441][T31723] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1298.070622][T31739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11782'. [ 1298.115521][T31739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11782'. [ 1298.318864][T31747] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1298.360182][T31750] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.11786'. [ 1299.907222][T31810] loop1: detected capacity change from 0 to 1024 [ 1299.913944][ T4318] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1299.940176][T31810] EXT4-fs: Ignoring removed bh option [ 1299.958877][T31810] EXT4-fs: Ignoring removed nobh option [ 1299.985194][T31812] device wlan0 entered promiscuous mode [ 1300.002550][T31810] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1300.003818][T31812] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1300.113532][T31810] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1300.157660][ T4318] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1300.176995][ T4318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.196258][ T4318] usb 8-1: config 0 descriptor?? [ 1300.313799][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1300.338238][T31820] sock: sock_timestamping_bind_phc: sock not bind to device [ 1300.445147][ T4318] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1300.458680][ T4318] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1300.659561][ T4318] [drm:udl_init] *ERROR* Selecting channel failed [ 1300.686451][ T4318] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2 [ 1300.722171][ T4318] [drm] Initialized udl on minor 2 [ 1300.727508][T31831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11826'. [ 1300.748478][ T4318] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1300.769807][ T4318] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1300.775262][T31828] loop4: detected capacity change from 0 to 2048 [ 1300.802774][ T4318] usb 8-1: USB disconnect, device number 9 [ 1300.835327][T31831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11826'. [ 1300.845851][ T5396] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1300.850030][T31828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1300.863109][ T5396] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1300.882413][ T5396] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1300.912223][T31831] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11826'. [ 1301.535859][T31852] ubi5: attaching mtd0 [ 1301.540659][T31852] ubi5 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 1301.913219][T31864] xt_l2tp: wrong L2TP version: 0 [ 1301.961878][ T5817] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1302.091788][T31843] loop4: detected capacity change from 0 to 32768 [ 1302.177638][ T5817] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1302.191684][T31843] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1302.197049][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.219755][ T5817] usb 2-1: config 0 descriptor?? [ 1302.273225][T31843] (syz.4.11831,31843,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1302.297280][T31843] (syz.4.11831,31843,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 1302.306746][T31843] (syz.4.11831,31843,0):ocfs2_mknod:298 ERROR: status = -2 [ 1302.314096][T31843] (syz.4.11831,31843,0):ocfs2_mknod:502 ERROR: status = -2 [ 1302.328002][T31874] loop5: detected capacity change from 0 to 1764 [ 1302.337329][T31843] (syz.4.11831,31843,0):ocfs2_create:676 ERROR: status = -2 [ 1302.339606][T31876] binfmt_misc: register: failed to install interpreter file ./file0 [ 1302.415700][T31874] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1302.495219][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 1302.676214][ T5817] [drm:udl_init] *ERROR* Selecting channel failed [ 1302.682754][T31882] netlink: 300 bytes leftover after parsing attributes in process `syz.4.11849'. [ 1302.733560][ T5817] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1302.767065][ T5817] [drm] Initialized udl on minor 2 [ 1302.807944][ T5817] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1302.859225][ T5817] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1302.909362][ T5817] usb 2-1: USB disconnect, device number 73 [ 1302.912847][T31889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11853'. [ 1302.937656][ T7269] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1302.968809][ T7269] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1303.009815][ T7269] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1303.515848][T31910] netlink: 'syz.4.11864': attribute type 5 has an invalid length. [ 1304.804129][T31959] device netdevsim0 entered promiscuous mode [ 1304.815390][T31959] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1305.458396][T31982] netlink: 'syz.1.11899': attribute type 32 has an invalid length. [ 1306.369909][ T27] audit: type=1326 audit(45936752.850:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.1.11914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1306.459776][ T27] audit: type=1326 audit(45936752.859:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.1.11914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1306.544391][ T27] audit: type=1326 audit(45936752.859:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.1.11914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1306.660433][ T27] audit: type=1326 audit(45936752.859:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.1.11914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9c19aeb9 code=0x7ffc0000 [ 1306.816007][T32028] device netdevsim0 entered promiscuous mode [ 1306.850512][T32028] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1307.540226][T32056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11933'. [ 1307.585285][T32056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11933'. [ 1308.317977][T32078] loop4: detected capacity change from 0 to 128 [ 1308.372833][T32078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1308.444175][T32048] loop7: detected capacity change from 0 to 32768 [ 1308.529986][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 1308.563553][T32048] XFS (loop7): Mounting V5 Filesystem [ 1308.708897][T32048] XFS (loop7): Ending clean mount [ 1308.754803][T32048] XFS (loop7): Quotacheck needed: Please wait. [ 1308.847291][T32048] XFS (loop7): Quotacheck: Done. [ 1308.857848][T32048] XFS (loop7): Unmounting Filesystem [ 1309.036098][T32106] xt_hashlimit: size too large, truncated to 1048576 [ 1309.045317][T32106] xt_hashlimit: invalid interval [ 1309.067452][T32107] netlink: 'syz.4.11954': attribute type 10 has an invalid length. [ 1309.129042][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.135620][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.464204][T32116] netlink: 'syz.1.11959': attribute type 3 has an invalid length. [ 1309.506689][T32116] netlink: 766 bytes leftover after parsing attributes in process `syz.1.11959'. [ 1309.518817][T32120] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.11961'. [ 1309.568111][T32120] openvswitch: netlink: Flow actions attr not present in new flow. [ 1310.084502][T32130] loop4: detected capacity change from 0 to 8192 [ 1310.131470][T32130] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1310.161536][ T5501] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1310.169102][T32130] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1310.179030][T32130] REISERFS (device loop4): using ordered data mode [ 1310.186280][T32130] reiserfs: using flush barriers [ 1310.194065][T32130] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1310.210961][T32130] REISERFS (device loop4): checking transaction log (loop4) [ 1310.219833][T32130] REISERFS (device loop4): Using rupasov hash to sort names [ 1310.244240][T32130] REISERFS (device loop4): using 3.5.x disk format [ 1310.252453][T32130] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1310.264493][T32130] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1310.276609][T32130] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1310.316908][T32130] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 1310.343337][T32130] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1310.410246][ T5501] usb 2-1: Using ep0 maxpacket: 32 [ 1310.426782][T32130] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1310.432949][ T5501] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 1310.462898][T32130] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1310.511179][ T5501] usb 2-1: config 0 has no interface number 0 [ 1310.521728][ T5501] usb 2-1: config 0 interface 47 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1310.540220][ T5501] usb 2-1: config 0 interface 47 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1310.551284][T32147] device bridge_slave_1 left promiscuous mode [ 1310.560713][T32147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.573163][ T5501] usb 2-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=7b.76 [ 1310.583014][ T5501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.596632][ T5501] usb 2-1: Product: syz [ 1310.603336][ T5501] usb 2-1: Manufacturer: syz [ 1310.611584][ T5501] usb 2-1: SerialNumber: syz [ 1310.646972][ T5501] usb 2-1: config 0 descriptor?? [ 1310.652735][T32147] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1310.680804][T32133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1310.691104][T32133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1310.953812][ T5501] asix: probe of 2-1:0.47 failed with error -71 [ 1310.987021][ T5501] usb 2-1: USB disconnect, device number 74 [ 1311.270797][T32163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11982'. [ 1311.975427][T32185] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1312.063001][T32191] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11996'. [ 1312.301580][T32197] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1312.456536][T32199] loop7: detected capacity change from 0 to 1024 [ 1312.525583][T32199] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1312.538132][T32199] EXT4-fs (loop7): 1 truncate cleaned up [ 1312.551954][T32199] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1312.611713][T28350] EXT4-fs (loop7): unmounting filesystem. [ 1312.835127][T32214] netlink: 'syz.5.12005': attribute type 1 has an invalid length. [ 1313.154230][T32224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12013'. [ 1313.698511][T32245] loop5: detected capacity change from 0 to 2048 [ 1313.752733][T32245] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1313.771846][T32249] erofs: (device loop15): erofs_read_superblock: cannot find valid erofs superblock [ 1313.784442][T32250] nfs: Unknown parameter 'ntext' [ 1314.181339][ T4318] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1314.420755][ T4318] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1314.443179][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.469955][ T4318] usb 3-1: Product: syz [ 1314.474504][ T4318] usb 3-1: Manufacturer: syz [ 1314.512027][ T4318] usb 3-1: SerialNumber: syz [ 1314.546649][ T4318] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1314.630418][ T4318] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1314.856245][ C1] usb 3-1: ath9k_htc: invalid pkt_len (ffd7) [ 1315.024783][T32288] kcapi: manufacturer command 18446744073709551608 unknown. [ 1315.078397][T32290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12045'. [ 1315.094848][ T4376] usb 3-1: USB disconnect, device number 47 [ 1315.117639][T32292] xt_limit: Overflow, try lower: 1207959552/384 [ 1315.227586][T32296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12048'. [ 1315.299424][T32296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12048'. [ 1315.353902][T32303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12051'. [ 1315.424437][T32305] loop1: detected capacity change from 0 to 8 [ 1315.795525][ T4318] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1315.802587][ T4318] ath9k_htc: Failed to initialize the device [ 1315.817534][ T4376] usb 3-1: ath9k_htc: USB layer deinitialized [ 1315.870393][ T7269] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1316.086181][ T7269] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.118521][ T7269] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1316.149712][ T7269] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1316.200773][ T7269] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1316.221404][ T7269] usb 8-1: SerialNumber: syz [ 1316.478901][ T7269] usb 8-1: 0:2 : does not exist [ 1316.516888][ T7269] usb 8-1: USB disconnect, device number 10 [ 1316.580836][T32344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12071'. [ 1316.780074][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1316.991423][T32355] loop5: detected capacity change from 0 to 64 [ 1317.105594][T32355] Trying to free block not in datazone [ 1317.117048][T32355] Trying to free block not in datazone [ 1317.173339][T32355] Trying to free block not in datazone [ 1317.206135][T32355] Trying to free block not in datazone [ 1317.265270][T32355] Trying to free block not in datazone [ 1317.294600][T32355] minix_free_block (loop5:6): bit already cleared [ 1317.317752][T32355] Trying to free block not in datazone [ 1317.343615][T32355] Trying to free block not in datazone [ 1318.174144][T32395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12099'. [ 1318.434204][T32409] netlink: 'syz.2.12103': attribute type 10 has an invalid length. [ 1318.536786][T32409] team0: Port device syz_tun added [ 1318.713718][T32417] xt_ecn: cannot match TCP bits for non-tcp packets [ 1319.227359][T32438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12117'. [ 1319.398334][ T28] INFO: task syz-executor:23227 blocked for more than 143 seconds. [ 1319.437426][ T28] Not tainted syzkaller #0 [ 1319.455576][T32446] loop7: detected capacity change from 0 to 256 [ 1319.464834][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1319.480379][ T28] task:syz-executor state:D stack:22064 pid:23227 ppid:1 flags:0x00004004 [ 1319.520111][ T28] Call Trace: [ 1319.532183][T32446] FAT-fs (loop7): Directory bread(block 64) failed [ 1319.541318][ T28] [ 1319.547923][ T28] __schedule+0x11d1/0x40e0 [ 1319.554521][T32446] FAT-fs (loop7): Directory bread(block 65) failed [ 1319.561403][T32447] loop4: detected capacity change from 0 to 2048 [ 1319.564869][ T28] ? mark_lock+0x94/0x320 [ 1319.587415][T32446] FAT-fs (loop7): Directory bread(block 66) failed [ 1319.602434][ T28] ? __sched_text_start+0x8/0x8 [ 1319.617217][T32446] FAT-fs (loop7): Directory bread(block 67) failed [ 1319.629591][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1319.637943][T32447] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1319.650320][T32446] FAT-fs (loop7): Directory bread(block 68) failed [ 1319.663857][ T28] ? lock_chain_count+0x20/0x20 [ 1319.679569][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1319.694077][T32446] FAT-fs (loop7): Directory bread(block 69) failed [ 1319.710217][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1319.722006][T32446] FAT-fs (loop7): Directory bread(block 70) failed [ 1319.735836][ T28] schedule+0xb9/0x180 [ 1319.751068][T32446] FAT-fs (loop7): Directory bread(block 71) failed [ 1319.756224][ T28] io_schedule+0x7c/0xd0 [ 1319.757728][T32446] FAT-fs (loop7): Directory bread(block 72) failed [ 1319.771366][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 1319.786693][ T28] ? folio_wait_bit+0x30/0x30 [ 1319.796397][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 1319.806828][ T28] ? folio_mapping+0x1ba/0x4d0 [ 1319.823520][ T28] truncate_inode_pages_range+0x9fe/0x1090 [ 1319.836753][ T28] ? mapping_evict_folio+0x520/0x520 [ 1319.843166][T32446] FAT-fs (loop7): Directory bread(block 73) failed [ 1319.848085][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1319.864212][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1319.875746][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1319.887188][ T28] evict+0x4dc/0x8d0 [ 1319.896172][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 1319.907263][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1319.916253][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1319.921578][ T28] evict_inodes+0x60c/0x6a0 [ 1319.934075][ T28] ? clear_inode+0x150/0x150 [ 1319.941222][ T28] generic_shutdown_super+0x93/0x340 [ 1319.950278][ T28] kill_block_super+0x7c/0xe0 [ 1319.957516][ T28] deactivate_locked_super+0x93/0xf0 [ 1319.966492][ T28] cleanup_mnt+0x42c/0x4b0 [ 1319.971065][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1319.976988][ T28] task_work_run+0x1d0/0x260 [ 1319.981712][ T28] ? task_work_cancel+0x220/0x220 [ 1319.987487][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1319.993001][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 1320.007588][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 1320.013298][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 1320.022419][ T28] do_syscall_64+0x58/0xa0 [ 1320.026907][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1320.031700][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1320.036402][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1320.042380][ T28] RIP: 0033:0x7fe46dd9c117 [ 1320.046816][ T28] RSP: 002b:00007ffeb76b4ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1320.055323][ T28] RAX: 0000000000000000 RBX: 00007fe46de0471f RCX: 00007fe46dd9c117 [ 1320.063358][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb76b4b70 [ 1320.071355][ T28] RBP: 00007ffeb76b4b70 R08: 00007ffeb76b5b70 R09: 00000000ffffffff [ 1320.083348][ T5398] kworker/dying (5398) used greatest stack depth: 15672 bytes left [ 1320.092554][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb76b5c00 [ 1320.100828][ T28] R13: 00007fe46de0471f R14: 000000000010da64 R15: 00007ffeb76b5c40 [ 1320.108991][ T28] [ 1320.112143][ T28] [ 1320.112143][ T28] Showing all locks held in the system: [ 1320.120483][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1320.135987][ T28] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1320.185876][ T28] 1 lock held by rcu_tasks_trace/13: [ 1320.191289][ T28] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1320.214434][ T28] 1 lock held by khungtaskd/28: [ 1320.219349][ T28] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1320.237692][ T28] 2 locks held by getty/4026: [ 1320.242425][ T28] #0: ffff88802fd3c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1320.256198][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 1320.267982][ T28] 2 locks held by kworker/0:17/5817: [ 1320.273333][ T28] 2 locks held by kworker/0:19/7269: [ 1320.278786][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1320.289345][ T28] #1: ffffc9000deb7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1320.301010][ T28] 1 lock held by syz-executor/23227: [ 1320.306320][ T28] #0: ffff88804f76a0e0 (&type->s_umount_key#122){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1320.316767][ T28] 1 lock held by syz-executor/28350: [ 1320.322306][ T28] #0: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 1320.333602][ T28] [ 1320.335958][ T28] ============================================= [ 1320.335958][ T28] [ 1320.362685][ T28] NMI backtrace for cpu 1 [ 1320.367083][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1320.374422][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1320.384507][ T28] Call Trace: [ 1320.387822][ T28] [ 1320.390785][ T28] dump_stack_lvl+0x188/0x24e [ 1320.395508][ T28] ? irq_work_queue+0xb8/0x140 [ 1320.400312][ T28] ? show_regs_print_info+0x12/0x12 [ 1320.405549][ T28] ? load_image+0x400/0x400 [ 1320.410079][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1320.414800][ T28] ? printk_sprint+0x460/0x460 [ 1320.419597][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1320.424556][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1320.430722][ T28] ? _printk+0xda/0x130 [ 1320.434889][ T28] ? load_image+0x400/0x400 [ 1320.439407][ T28] ? load_image+0x400/0x400 [ 1320.443921][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1320.450004][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1320.456079][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1320.462081][ T28] watchdog+0xeee/0xf30 [ 1320.466257][ T28] ? watchdog+0x1ed/0xf30 [ 1320.470689][ T28] kthread+0x29d/0x330 [ 1320.474776][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1320.479820][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1320.484516][ T28] ret_from_fork+0x1f/0x30 [ 1320.488960][ T28] [ 1320.492421][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1320.497662][ C0] NMI backtrace for cpu 0 [ 1320.497673][ C0] CPU: 0 PID: 5817 Comm: kworker/0:17 Not tainted syzkaller #0 [ 1320.497689][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1320.497699][ C0] Workqueue: events_power_efficient gc_worker [ 1320.497724][ C0] RIP: 0010:lock_acquire+0x19b/0x4a0 [ 1320.497747][ C0] Code: 3d 08 f8 fa 48 c7 c7 00 1f 8c 8a e8 5f 29 c8 08 65 ff 05 a8 38 9e 7e 45 31 c9 41 f7 c6 00 02 00 00 41 0f 94 c1 48 8b 7c 24 20 <8b> 74 24 14 89 da 48 8b 4c 24 28 4c 8b 44 24 30 6a 00 6a 00 ff 75 [ 1320.497760][ C0] RSP: 0018:ffffc90005967900 EFLAGS: 00000046 [ 1320.497773][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 16d2a51a8589b100 [ 1320.497784][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c1f00 RDI: ffffffff8e206858 [ 1320.497795][ C0] RBP: ffffc90005967a08 R08: ffffffff8e1fc32f R09: 0000000000000001 [ 1320.497805][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f866 R12: 0000000000000000 [ 1320.497816][ C0] R13: 1ffff92000b2cf2c R14: 0000000000000046 R15: dffffc0000000000 [ 1320.497828][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1320.497841][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1320.497860][ C0] CR2: 00007ffc27c91ff8 CR3: 000000007e5fb000 CR4: 00000000003506f0 [ 1320.497876][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1320.497885][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1320.497895][ C0] Call Trace: [ 1320.497900][ C0] [ 1320.497909][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1320.497932][ C0] ? gc_worker+0x30c/0x13c0 [ 1320.497952][ C0] seqcount_lockdep_reader_access+0x10f/0x1d0 [ 1320.497972][ C0] ? gc_worker+0x30c/0x13c0 [ 1320.497991][ C0] ? nf_conntrack_hash_check_insert+0x9c0/0x9c0 [ 1320.498015][ C0] gc_worker+0x30c/0x13c0 [ 1320.498038][ C0] ? gc_worker+0x25e/0x13c0 [ 1320.498058][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1320.498073][ C0] ? init_conntrack+0x11a0/0x11a0 [ 1320.498094][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1320.498109][ C0] ? process_one_work+0x7b0/0x1160 [ 1320.498125][ C0] process_one_work+0x8a2/0x1160 [ 1320.498146][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1320.498164][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1320.498184][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1320.498205][ C0] ? kthread_data+0x4b/0xc0 [ 1320.498226][ C0] worker_thread+0xaa2/0x1270 [ 1320.498251][ C0] kthread+0x29d/0x330 [ 1320.498270][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1320.498286][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1320.498306][ C0] ret_from_fork+0x1f/0x30 [ 1320.498330][ C0] [ 1320.752774][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1320.759670][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1320.766897][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1320.776973][ T28] Call Trace: [ 1320.780258][ T28] [ 1320.783213][ T28] dump_stack_lvl+0x188/0x24e [ 1320.787904][ T28] ? memcpy+0x3c/0x60 [ 1320.791972][ T28] ? show_regs_print_info+0x12/0x12 [ 1320.797186][ T28] ? load_image+0x400/0x400 [ 1320.801712][ T28] panic+0x2e5/0x730 [ 1320.805643][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1320.811302][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1320.815808][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1320.821976][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1320.828147][ T28] watchdog+0xf2d/0xf30 [ 1320.832307][ T28] ? watchdog+0x1ed/0xf30 [ 1320.836636][ T28] kthread+0x29d/0x330 [ 1320.840720][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1320.845759][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1320.850353][ T28] ret_from_fork+0x1f/0x30 [ 1320.854796][ T28] [ 1320.858217][ T28] Kernel Offset: disabled [ 1320.862556][ T28] Rebooting in 86400 seconds..