last executing test programs: 6.585094031s ago: executing program 2 (id=3664): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xda2, &(0x7f0000000000)="$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") syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902540001010000000904000000020600001524"], 0x0) 3.304675876s ago: executing program 2 (id=3705): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 3.045227878s ago: executing program 4 (id=3708): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c) 2.874233132s ago: executing program 2 (id=3711): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0xe, 0x0, 0x0) 2.79729823s ago: executing program 4 (id=3712): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x57c, &(0x7f0000000b80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 2.584600404s ago: executing program 2 (id=3716): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f00000002c0)='./file1\x00', 0x808050, &(0x7f00000000c0)={[{@pquota}, {@usrquota}, {@noalign}, {@lazytime}, {@ikeep}, {@noalign}, {@noalign}]}, 0x1, 0x9925, &(0x7f000001ca40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) 2.330849107s ago: executing program 5 (id=3721): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x800}}, 0x6}, 0x90) 2.192717856s ago: executing program 1 (id=3723): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vdZNNsdmv384Fp39t5M/O+O+/tvJm3mwD61kj2TxKxKyJ+i4ihWnZlgZHafzcXL5X/WbxUTmJp6a0/k2q5G4uXykXRYrudeWY0jUg/SfKDxNb63c5duHhmqlKZOZ/nx+fPvjc+d+His6fPTp2aOTVzbvLYsaNHJl54fvK5tuJI1lifxXXjwIezB/e/9s7V18snrr7707fZNrvy9fVxdMpIFvhfS1WN657o9MF6bHddOhnoYUVYl1JEZKdrsNr/h6IUt07eULz6cU8rB2yq7Nq0tfXqhSXgHpbE2mX+7kZFgC4rLvTZ/W+xdGnocVe4/lLtBiiL+2a+1NYMRJqXGWy4v+2kkYg4sfDvV9kSm/QcAgCg3mflL4/HM83Gf2k8WFduTz6HMhwR90XE3oi4PyL2RcQDEVnZxiFlW0Ya8rePf9JrdxhaW7Lx34v53NbK8V8x+ovhUp7bXY1/MDl5ujJzOH9PRmNwa5afWOUY37/y6+et1tWP/7IlO34xFszrcW2g4QHd9NT8VHVQ2gHXP4o4MNAs/mR5JiCJiP0RcWB9u95TJE4/9c3B7QebF1o7/lV0YJ5p6euIJ2vnfyEa4i8kq89Pjm+Lyszh8aJV3O7nX6682er4LeLfsvHI2pOd/x0r239jkeGkfr52bv3HuPL7py3vae60/W9J3q6el+KN+mBqfv78RMSW5Hg1v+L1yVvbFvmifBb/6KHm/X9vvk12nIciImvCD0fEIxHxaF73xyLi8Yg4tEr8P76cJ5q01w21/w7I4p9u+vm33P4bzv/6E6UzP3xX7GzbuuPPzv/Ramo0f6X6+beGdiu40fcPAAAA/g/S6nfgk3RsOZ2mY2O17/Dvix1pZXZu/umTs++fm659V344BtPiSddQ3fPQiWQh32MtP5k/Ky7WH8mfG39R2l7Nj5VnK9M9jh363c4W/T/zR6nXtQM2XbN5tMmuTUEBvdTY/9OV2ctvdLMyQFf5vTb0rzX6f9qtegDd5/oP/atZ/7/ckDcXAPcm13/oX/o/9C/9H/qX/g99aSO/65fo50Sklcr0tojVCxd/EOjuqLNE+4lefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD///xQ9VA=") listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.182764725s ago: executing program 4 (id=3724): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xc81, 0x0) write$UHID_CREATE2(r0, 0x0, 0x194) 2.0908154s ago: executing program 3 (id=3725): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2.051954419s ago: executing program 5 (id=3726): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002d40), 0x101, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000002d80)={0x7f, 0x9}) 1.735746613s ago: executing program 3 (id=3728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.734790129s ago: executing program 0 (id=3729): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000b00)="a905000000007464000100000000000000f3053f0b21830cc06434a8b726a5533f209cb2ec1bb73daac77191ba0e51e618f0dc3a88ddbfbe8243d8180260cd35e1006a9c86d38fedbbb75a513ab8b9815c08ac94d115ec0cfe250b63d27e60377153", 0x62}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="e170163452140072d00000000000000000070000"], 0x18}}], 0x2, 0x2800) 1.730762723s ago: executing program 5 (id=3730): futex(0x0, 0x6, 0x1, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x20, 0x0) 1.663464839s ago: executing program 4 (id=3731): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002020800020003000100040003a1eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.498347555s ago: executing program 3 (id=3732): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)=0xb) 1.488744593s ago: executing program 5 (id=3733): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, 0x0, 0x0) 1.465518495s ago: executing program 1 (id=3734): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x260dec, 0x0, 0x0, 0x10001}) 1.434023868s ago: executing program 0 (id=3735): r0 = socket(0x1e, 0x805, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000899) 1.417055573s ago: executing program 4 (id=3736): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newneigh={0x38, 0x1c, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4, 0x46, 0x9}, [@NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @NDA_PROTOCOL={0x5, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x4) 1.301347439s ago: executing program 3 (id=3737): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1]}}) 1.174748122s ago: executing program 5 (id=3738): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.158649849s ago: executing program 3 (id=3739): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.122578938s ago: executing program 4 (id=3740): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f393563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1.084916564s ago: executing program 0 (id=3741): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x3}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}]}, 0x48}}, 0x0) 910.29667ms ago: executing program 1 (id=3742): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x8, 0xa8, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 909.253915ms ago: executing program 5 (id=3743): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000640)={[{@uni_xlateno}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@debug}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_winnt}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@utf8}]}, 0x25, 0x355, &(0x7f0000000100)="$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") syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c02200006060309050710003e8fad67020102070824"], 0x0) 855.692892ms ago: executing program 3 (id=3744): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b85c393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 789.96632ms ago: executing program 0 (id=3745): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x3, 0x80, @loopback}}}, 0x108) 748.791864ms ago: executing program 2 (id=3746): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x10d, 0xb, &(0x7f0000000040)=0xd, 0x4) 717.431088ms ago: executing program 1 (id=3747): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000001480)={"8f00fe56", 0xffff, 0x1, 0xfb, 0x101, 0xc, "636a40d58c2696d3c8c477c69a28b5", "033a8c12", "e63b0270", "312cb81b", ["feee5ddc013b862f1e45d646", "25d0973615d58aa6a3cc9fe1", "e7096561749b4462b2856ff8", "437ce95c1e6f99944cbc7788"]}) 531.603323ms ago: executing program 0 (id=3748): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) getpgrp(0xffffffffffffffff) 490.108906ms ago: executing program 1 (id=3749): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x0, 0x0, 0xffffffff, 0x8, 0xfffffffd}) 345.610946ms ago: executing program 0 (id=3750): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x28) 31.625135ms ago: executing program 1 (id=3751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x31}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048844}, 0x4008040) 0s ago: executing program 2 (id=3752): r0 = io_uring_setup(0x6f36, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0xa7}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_op={0x1, 0x13}], 0x1) kernel console output (not intermixed with test programs): ][ T5901] hub 6-1:0.0: probe with driver hub failed with error -5 [ 245.496531][ T5901] usb 6-1: USB disconnect, device number 17 [ 245.756241][T10805] netlink: 'syz.2.2205': attribute type 1 has an invalid length. [ 246.231888][T10820] ip6erspan0: entered allmulticast mode [ 247.047590][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'. [ 247.181209][T10854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2230'. [ 247.272693][ T30] audit: type=1326 audit(1744148823.147:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.5.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 247.399194][ T30] audit: type=1326 audit(1744148823.147:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.5.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 247.471690][T10862] loop4: detected capacity change from 0 to 2048 [ 247.513759][T10866] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.525821][T10864] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 247.532624][ T30] audit: type=1326 audit(1744148823.147:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.5.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 247.600223][ T30] audit: type=1326 audit(1744148823.147:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.5.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 247.659292][T10862] NILFS (loop4): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 247.693026][T10828] loop2: detected capacity change from 0 to 32768 [ 247.703236][T10862] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=13) [ 247.713069][ T30] audit: type=1326 audit(1744148823.147:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.5.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 247.770060][T10862] Remounting filesystem read-only [ 247.776192][T10862] NILFS (loop4): error -5 truncating bmap (ino=13) [ 247.827273][T10828] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 248.012927][ T5847] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 248.024029][T10889] netlink: 'syz.0.2243': attribute type 10 has an invalid length. [ 248.030387][T10887] ÿ: renamed from bond_slave_0 (while UP) [ 248.072821][T10889] veth1_vlan: left allmulticast mode [ 248.100327][T10828] XFS (loop2): Ending clean mount [ 248.123867][T10889] bridge0: port 1(macvlan1) entered disabled state [ 248.199352][T10889] macvlan1: left promiscuous mode [ 248.209983][T10889] bridge0: port 1(macvlan1) entered disabled state [ 248.257340][T10889] veth1_vlan: entered allmulticast mode [ 248.293709][ T5839] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 248.314004][T10889] team0: Port device macvlan1 added [ 248.502780][ T30] audit: type=1326 audit(1744148824.377:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10902 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d18d169 code=0x7ffc0000 [ 248.546065][T10904] syz.1.2250 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 248.619070][ T30] audit: type=1326 audit(1744148824.377:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10902 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d18d169 code=0x7ffc0000 [ 248.737697][ T30] audit: type=1326 audit(1744148824.417:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10902 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f481d18d169 code=0x7ffc0000 [ 248.844327][ T30] audit: type=1326 audit(1744148824.477:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10902 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d18d169 code=0x7ffc0000 [ 248.934223][ T30] audit: type=1326 audit(1744148824.477:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10902 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d18d169 code=0x7ffc0000 [ 249.029824][T10921] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.142249][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2260'. [ 249.164165][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2260'. [ 249.341904][T10931] netlink: 'syz.2.2263': attribute type 11 has an invalid length. [ 249.390410][T10931] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2263'. [ 249.772072][T10950] loop3: detected capacity change from 0 to 512 [ 249.803136][T10947] loop2: detected capacity change from 0 to 2048 [ 249.847715][T10950] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.875739][T10953] loop5: detected capacity change from 0 to 164 [ 249.891443][T10950] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 249.911209][T10956] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.945679][T10950] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 249.972183][T10950] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002] [ 249.989406][T10950] System zones: 0-2, 18-18, 34-34 [ 250.022010][T10947] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 250.049080][T10950] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #15: comm syz.3.2272: iget: bogus i_mode (115) [ 250.084273][T10947] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 250.101130][T10950] EXT4-fs (loop3): Remounting filesystem read-only [ 250.108150][T10947] Remounting filesystem read-only [ 250.136372][T10947] NILFS (loop2): error -5 truncating bmap (ino=16) [ 250.162168][T10950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.228674][T10919] loop0: detected capacity change from 0 to 32768 [ 250.278273][ T5839] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 250.403936][T10919] ERROR: (device loop0): duplicateIXtree: [ 250.403936][T10919] [ 250.473097][T10919] ERROR: (device loop0): remounting filesystem as read-only [ 250.479161][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.558660][T10971] netlink: 'syz.1.2281': attribute type 3 has an invalid length. [ 250.855978][T10983] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2288'. [ 250.919288][T10987] xt_nfacct: accounting object `syz1' does not exists [ 251.254323][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 251.461675][T11001] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2297'. [ 251.535504][T11001] 0ªX¹¦D: renamed from gretap0 (while UP) [ 251.602136][T11001] 0ªX¹¦D: entered allmulticast mode [ 251.652828][T11001] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 251.828930][ T5898] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 251.985296][T11024] netlink: 'syz.3.2304': attribute type 3 has an invalid length. [ 252.015348][T11024] netlink: 'syz.3.2304': attribute type 3 has an invalid length. [ 252.059282][ T5898] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 252.069671][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2304'. [ 252.077646][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.104344][ T5898] usb 1-1: Product: syz [ 252.119034][ T5898] usb 1-1: Manufacturer: syz [ 252.125983][ T5898] usb 1-1: SerialNumber: syz [ 252.194403][ T5898] usb 1-1: config 0 descriptor?? [ 252.254228][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2307'. [ 252.536159][T11040] loop3: detected capacity change from 0 to 512 [ 252.635711][ T5898] usb 1-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 252.663927][T11040] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.2310: corrupted in-inode xattr: invalid ea_ino [ 252.701792][ T5898] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 252.739040][T11050] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2314'. [ 252.740187][T11002] loop5: detected capacity change from 0 to 32768 [ 252.757319][T11002] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2298 (11002) [ 252.768328][ T5898] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 252.782098][T11040] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.2310: couldn't read orphan inode 15 (err -117) [ 252.797856][ T5898] usb 1-1: USB disconnect, device number 8 [ 252.809043][T11050] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2314'. [ 252.846656][T11002] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.869626][T11054] loop4: detected capacity change from 0 to 64 [ 252.892454][T11002] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 252.910807][T11002] BTRFS info (device loop5): using free-space-tree [ 252.911830][T11040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.177372][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.228551][T11078] loop1: detected capacity change from 0 to 512 [ 253.378686][T11078] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 253.454689][T11078] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2317: invalid indirect mapped block 63488 (level 2) [ 253.501521][ T5836] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.557401][T11078] EXT4-fs (loop1): Remounting filesystem read-only [ 253.583697][T11078] EXT4-fs (loop1): 1 truncate cleaned up [ 253.636471][T11078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.758986][ T5901] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 253.781690][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.959035][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.004567][ T5901] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 254.048907][ T5901] usb 4-1: config 1 has no interface number 1 [ 254.055031][ T5901] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 254.118930][ T5901] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 254.156036][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 254.175806][ T5901] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.194856][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.224992][ T5901] usb 4-1: low speed audio streaming not supported [ 254.433540][ T9] usb 4-1: USB disconnect, device number 9 [ 254.678571][T11122] loop1: detected capacity change from 0 to 256 [ 254.804141][T11122] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 254.813868][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.026553][T11136] loop2: detected capacity change from 0 to 2048 [ 255.082993][T11136] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 255.150929][T11136] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 255.170999][T11136] UDF-fs: Scanning with blocksize 512 failed [ 255.234027][T11146] loop4: detected capacity change from 0 to 256 [ 255.270399][T11136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.374713][T11146] FAT-fs (loop4): Directory bread(block 64) failed [ 255.405270][T11146] FAT-fs (loop4): Directory bread(block 65) failed [ 255.437794][T11146] FAT-fs (loop4): Directory bread(block 66) failed [ 255.481543][T11146] FAT-fs (loop4): Directory bread(block 67) failed [ 255.488181][T11146] FAT-fs (loop4): Directory bread(block 68) failed [ 255.519110][T11146] FAT-fs (loop4): Directory bread(block 69) failed [ 255.525730][T11146] FAT-fs (loop4): Directory bread(block 70) failed [ 255.576146][T11146] FAT-fs (loop4): Directory bread(block 71) failed [ 255.613663][T11146] FAT-fs (loop4): Directory bread(block 72) failed [ 255.623617][T11158] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 255.633615][T11146] FAT-fs (loop4): Directory bread(block 73) failed [ 255.640755][T11158] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 255.663354][T11158] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2358'. [ 255.720228][T11158] NCSI netlink: No device for ifindex 0 [ 256.070858][T11172] loop0: detected capacity change from 0 to 4096 [ 256.084192][T11172] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 256.336409][T11172] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 257.051167][T11202] loop5: detected capacity change from 0 to 16 [ 257.120568][T11202] erofs (device loop5): mounted with root inode @ nid 36. [ 257.180546][T11202] erofs (device loop5): readahead error at folio 0 @ nid 89 [ 257.209761][T11202] syz.5.2378: attempt to access beyond end of device [ 257.209761][T11202] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 257.284595][T11202] syz.5.2378: attempt to access beyond end of device [ 257.284595][T11202] loop5: rw=524288, sector=8, nr_sectors = 48 limit=16 [ 257.329518][T11202] syz.5.2378: attempt to access beyond end of device [ 257.329518][T11202] loop5: rw=0, sector=16, nr_sectors = 16 limit=16 [ 257.387351][T11202] erofs (device loop5): read error -5 @ 0 of nid 89 [ 257.409482][ T30] audit: type=1800 audit(1744148833.287:64): pid=11202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2378" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 257.581107][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'. [ 257.624382][T11222] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2388'. [ 257.757926][T11228] loop5: detected capacity change from 0 to 1024 [ 257.848405][T11228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.852040][T11230] loop0: detected capacity change from 0 to 512 [ 257.947926][T11230] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 257.980389][T11228] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.2391: missing EA_INODE flag [ 258.010211][T11230] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 258.043554][T11228] EXT4-fs (loop5): Remounting filesystem read-only [ 258.062237][T11228] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 258.201131][T11230] EXT4-fs (loop0): 1 truncate cleaned up [ 258.239869][T11246] loop3: detected capacity change from 0 to 8 [ 258.252843][T11230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.273965][T11210] loop4: detected capacity change from 0 to 32768 [ 258.280108][T11230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.297881][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.300164][T11210] [ 258.300164][T11210] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.300164][T11210] [ 258.477869][T11210] __jfs_setxattr: xattr_size = 243, new_size = 337 [ 258.547928][T11255] netlink: 'syz.5.2400': attribute type 1 has an invalid length. [ 258.659760][T11259] sctp: [Deprecated]: syz.3.2404 (pid 11259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.659760][T11259] Use struct sctp_sack_info instead [ 258.700546][ T1093] [ 258.700546][ T1093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.700546][ T1093] [ 258.732035][ T1093] [ 258.732035][ T1093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.732035][ T1093] [ 258.792890][ T5847] [ 258.792890][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.792890][ T5847] [ 258.804876][ T5855] Bluetooth: hci2: unexpected event for opcode 0x2036 [ 258.837578][T11265] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 258.840462][ T113] [ 258.840462][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.840462][ T113] [ 258.846706][T11265] overlayfs: missing 'lowerdir' [ 258.949130][ T5847] [ 258.949130][ T5847] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 258.949130][ T5847] [ 259.354006][T11281] loop1: detected capacity change from 0 to 128 [ 259.419103][T11281] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 259.566963][ T36] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 259.804865][T11302] loop3: detected capacity change from 0 to 16 [ 259.812117][T11298] bridge2: entered promiscuous mode [ 259.836111][T11302] erofs: DAX unsupported by block device. Turning off DAX. [ 259.877019][T11302] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 259.926298][T11302] erofs (device loop3): mounted with root inode @ nid 36. [ 259.935322][T11307] loop0: detected capacity change from 0 to 64 [ 259.982668][T11302] syz.3.2424: attempt to access beyond end of device [ 259.982668][T11302] loop3: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 260.004990][T11302] erofs (device loop3): read error -5 @ 0 of nid 36 [ 260.187214][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.199348][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.592403][T11326] netlink: 'syz.0.2436': attribute type 3 has an invalid length. [ 260.615327][T11326] netlink: 'syz.0.2436': attribute type 1 has an invalid length. [ 260.657317][T11326] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2436'. [ 260.675858][T11326] NCSI netlink: No device for ifindex 33022 [ 260.739792][T11330] [U]  [ 260.804431][T11331] loop5: detected capacity change from 0 to 2048 [ 260.881287][T11331] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 260.908740][T11335] netlink: 'syz.0.2440': attribute type 3 has an invalid length. [ 260.929308][T11335] netlink: 'syz.0.2440': attribute type 1 has an invalid length. [ 260.957165][T11339] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.969279][T11331] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 260.984610][T11335] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2440'. [ 260.986928][T11313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.023088][T11313] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 261.032665][T11331] Remounting filesystem read-only [ 261.059446][T11331] NILFS (loop5): the device already has a read-only mount. [ 261.168957][T11313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.199055][T11313] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 261.285599][T11313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.329210][T11313] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 261.376271][T11316] loop4: detected capacity change from 0 to 32768 [ 261.414995][T11313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.446240][T11313] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 261.545426][T11313] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 261.579098][T11313] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 261.862762][T11363] loop3: detected capacity change from 0 to 128 [ 261.922162][T11363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 262.004389][T11363] System zones: 1-3, 19-19, 35-36 [ 262.066171][T11363] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.145823][T11363] ext4 filesystem being mounted at /422/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.157519][T11369] loop2: detected capacity change from 0 to 4096 [ 262.197175][T11363] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 262.406473][ T5838] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.705107][T11394] netlink: 'syz.0.2468': attribute type 12 has an invalid length. [ 262.894363][T11399] loop3: detected capacity change from 0 to 512 [ 262.940403][T11399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.008600][T11399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.125168][T11399] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.261394][T11399] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.2470: verity file corrupted; can't find descriptor [ 263.295612][T11399] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 263.456680][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.541441][T11423] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.597202][T11425] loop0: detected capacity change from 0 to 164 [ 263.719032][T11428] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2484'. [ 263.790149][T11429] loop3: detected capacity change from 0 to 1024 [ 264.009780][T11396] loop1: detected capacity change from 0 to 40427 [ 264.046829][T11396] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3fffff [ 264.074416][T11396] F2FS-fs (loop1): Image doesn't support compression [ 264.102179][T11396] F2FS-fs (loop1): Image doesn't support compression [ 264.126484][T11396] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 264.152889][T11396] F2FS-fs (loop1): invalid crc value [ 264.179040][ T5898] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 264.349014][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 264.375563][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.460435][ T5898] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 264.496573][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.518445][ T5898] usb 1-1: Product: syz [ 264.528999][T11396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 264.542604][ T5898] usb 1-1: Manufacturer: syz [ 264.557480][ T5898] usb 1-1: SerialNumber: syz [ 264.590410][ T5898] usb 1-1: config 0 descriptor?? [ 264.621566][ T5898] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 264.627772][ T5898] usb 1-1: selecting invalid altsetting 1 [ 265.045800][ T5898] usb 1-1: USB disconnect, device number 9 [ 265.496153][T11479] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2508'. [ 265.747689][T11458] loop5: detected capacity change from 0 to 32768 [ 266.111329][T11503] loop1: detected capacity change from 0 to 64 [ 266.322530][T11458] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 266.425330][T11458] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 266.452139][T11458] bcachefs (loop5): Version upgrade required: [ 266.452139][T11458] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 266.452139][T11458] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 266.452139][T11458] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 266.708663][T11458] bcachefs (loop5): dropping and reconstructing all alloc info [ 266.836250][T11458] bcachefs (loop5): accounting_read... done [ 266.858561][T11534] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2525'. [ 266.885289][T11458] bcachefs (loop5): alloc_read... done [ 266.902651][T11458] bcachefs (loop5): snapshots_read... done [ 266.948945][T11458] bcachefs (loop5): check_allocations... [ 267.114799][T11540] loop2: detected capacity change from 0 to 64 [ 267.143586][T11458] done [ 267.172269][T11458] bcachefs (loop5): going read-write [ 267.303942][T11458] bcachefs (loop5): done starting filesystem [ 267.686035][ T5836] bcachefs (loop5): shutting down [ 267.706004][ T5836] bcachefs (loop5): going read-only [ 267.729105][ T5836] bcachefs (loop5): finished waiting for writes to stop [ 267.823488][ T5836] bcachefs (loop5): flushing journal and stopping allocators, journal seq 10 [ 267.870850][ T5836] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10 [ 267.966247][ T5836] bcachefs (loop5): unclean shutdown complete, journal seq 11 [ 268.080911][T11575] loop1: detected capacity change from 0 to 1024 [ 268.100169][ T5836] bcachefs (loop5): done going read-only, filesystem not clean [ 268.125244][T11577] loop4: detected capacity change from 0 to 512 [ 268.222489][T11577] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 268.269342][ T53] hfsplus: b-tree write err: -5, ino 4 [ 268.288032][T11577] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 268.325962][T11577] System zones: 0-1, 15-15, 18-18, 34-34 [ 268.372557][T11577] EXT4-fs (loop4): orphan cleanup on readonly fs [ 268.391779][ T5836] bcachefs (loop5): shutdown complete [ 268.399005][T11577] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 268.408443][T11577] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 268.487489][T11577] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 268.528072][T11577] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.2545: bad orphan inode 16 [ 268.554689][T11577] ext4_test_bit(bit=15, block=18) = 1 [ 268.573353][T11577] is_bad_inode(inode)=0 [ 268.577538][T11577] NEXT_ORPHAN(inode)=0 [ 268.618922][T11577] max_ino=32 [ 268.622177][T11577] i_nlink=2 [ 268.675956][T11577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.105978][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.147231][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 269.432881][ T30] audit: type=1326 audit(1744148845.297:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11610 comm="syz.4.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c38d169 code=0x7ffc0000 [ 269.455230][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.558935][ T30] audit: type=1326 audit(1744148845.297:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11610 comm="syz.4.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f451c38d169 code=0x7ffc0000 [ 269.645075][ T30] audit: type=1326 audit(1744148845.297:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11610 comm="syz.4.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c38d169 code=0x7ffc0000 [ 269.758556][ T30] audit: type=1326 audit(1744148845.297:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11610 comm="syz.4.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c38d169 code=0x7ffc0000 [ 269.932124][T11628] loop1: detected capacity change from 0 to 16 [ 269.978559][T11628] erofs (device loop1): mounted with root inode @ nid 36. [ 270.023076][T11628] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 270.062269][T11628] erofs (device loop1): read error -117 @ 43 of nid 36 [ 270.553665][T11647] kAFS: unparsable volume name [ 271.330798][T11629] loop3: detected capacity change from 0 to 32768 [ 271.433714][T11629] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 271.538790][T11636] loop4: detected capacity change from 0 to 32768 [ 271.636788][T11636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2574 (11636) [ 271.727739][T11636] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.774896][T11636] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 271.788165][T11673] loop0: detected capacity change from 0 to 4096 [ 271.809815][T11636] BTRFS info (device loop4): using free-space-tree [ 271.832232][T11673] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 271.942183][T11629] XFS (loop3): Ending clean mount [ 271.976277][T11629] XFS (loop3): Quotacheck needed: Please wait. [ 272.037196][T11673] ntfs3(loop0): ino=b, mi_enum_attr [ 272.068360][T11673] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 272.091696][T11673] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 272.104486][T11629] XFS (loop3): Quotacheck: Done. [ 272.110049][T11673] ntfs3(loop0): Failed to load $Extend (-22). [ 272.122948][T11673] ntfs3(loop0): Failed to initialize $Extend. [ 272.277029][ T5847] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.321867][ T5838] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.355105][ T1093] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 272.583374][T11706] loop0: detected capacity change from 0 to 64 [ 272.931956][T11713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.067654][T11719] loop4: detected capacity change from 0 to 512 [ 273.128089][T11721] netlink: 'syz.3.2596': attribute type 5 has an invalid length. [ 273.213605][T11719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.269086][T11719] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.402816][T11732] loop3: detected capacity change from 0 to 8 [ 273.545206][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.974865][T11752] loop2: detected capacity change from 0 to 16 [ 273.997974][T11752] erofs (device loop2): mounted with root inode @ nid 36. [ 274.031684][T11752] erofs (device loop2): read error -22 @ 43 of nid 36 [ 274.246811][T11758] openvswitch: netlink: Message has 736 unknown bytes. [ 274.678046][T11740] loop0: detected capacity change from 0 to 32768 [ 274.735342][T11740] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2610 (11740) [ 274.834689][T11740] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 274.866285][T11740] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 274.959772][T11740] BTRFS info (device loop0): disk space caching is enabled [ 274.966994][T11740] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 275.219539][T11745] loop1: detected capacity change from 0 to 32768 [ 275.331776][T11745] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.396908][T11805] loop2: detected capacity change from 0 to 4096 [ 275.419368][T11740] BTRFS info (device loop0): rebuilding free space tree [ 275.444411][T11740] BTRFS info (device loop0): disabling free space tree [ 275.462880][T11740] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 275.480387][T11805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.522612][T11740] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 275.557681][T11745] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 275.577606][T11805] Quota error (device loop2): do_check_range: Getting block 589829 out of range 1-5 [ 275.629062][T11805] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 275.654627][T11745] XFS (loop1): Starting recovery (logdev: internal) [ 275.658996][T11805] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2631: Failed to acquire dquot type 0 [ 275.672805][T11815] loop5: detected capacity change from 0 to 164 [ 275.698329][T11815] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 275.753431][T11740] BTRFS info (device loop0): balance: start -d -m -slimit=0 [ 275.776305][T11745] XFS (loop1): Ending recovery (logdev: internal) [ 275.815106][T11740] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 275.895418][ T5834] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.931310][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.976364][T11740] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 276.105795][T11740] BTRFS info (device loop0): balance: canceled [ 276.396003][ T5835] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 276.451414][T11828] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 276.577325][T11812] loop3: detected capacity change from 0 to 32768 [ 276.642589][T11812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2633 (11812) [ 276.692776][T11812] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.739021][T11812] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 276.774045][T11812] BTRFS info (device loop3): using free-space-tree [ 277.412728][T11869] loop1: detected capacity change from 0 to 256 [ 277.423033][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 277.455874][T11869] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 277.490624][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 277.748051][ T13] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 277.786260][T11883] ksmbd: Unknown IPC event: 3, ignore. [ 278.912407][T11919] xt_hashlimit: max too large, truncated to 1048576 [ 278.987901][T11923] xt_TPROXY: Can be used only with -p tcp or -p udp [ 279.334961][T11901] loop3: detected capacity change from 0 to 32768 [ 279.355312][T11901] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2656 (11901) [ 279.403159][T11901] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.436910][T11901] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 279.462230][T11901] BTRFS info (device loop3): disk space caching is enabled [ 279.489171][T11901] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 279.503715][T11899] loop2: detected capacity change from 0 to 32768 [ 279.621199][T11899] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.739993][T11901] BTRFS info (device loop3): rebuilding free space tree [ 279.797080][T11901] BTRFS info (device loop3): disabling free space tree [ 279.831324][T11901] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 279.860313][T11901] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 280.057231][T11926] loop0: detected capacity change from 0 to 32768 [ 280.078453][T11899] XFS (loop2): Ending clean mount [ 280.098048][T11899] XFS (loop2): Quotacheck needed: Please wait. [ 280.225863][T11970] loop4: detected capacity change from 0 to 2048 [ 280.226168][T11899] XFS (loop2): Quotacheck: Done. [ 280.313778][T11970] EXT4-fs (loop4): failed to initialize system zone (-117) [ 280.353146][ T5839] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.374208][T11970] EXT4-fs (loop4): mount failed [ 280.398188][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.608784][T11926] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=gzip,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc [ 280.729343][T11926] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 280.757128][T11926] bcachefs (loop0): Version upgrade required: [ 280.757128][T11926] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 280.757128][T11926] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 280.757128][T11926] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 281.059749][T11926] bcachefs (loop0): dropping and reconstructing all alloc info [ 281.164391][T11926] bcachefs (loop0): accounting_read... done [ 281.213225][T11926] bcachefs (loop0): alloc_read... done [ 281.218759][T11926] bcachefs (loop0): snapshots_read... done [ 281.286990][T11926] bcachefs (loop0): done starting filesystem [ 281.552184][ T5835] bcachefs (loop0): shutting down [ 281.621886][T12013] x_tables: duplicate entry at hook 3 [ 281.627463][T12004] loop4: detected capacity change from 0 to 4096 [ 281.671076][ T5835] bcachefs (loop0): shutdown complete [ 281.736717][T12017] netlink: 'syz.1.2710': attribute type 1 has an invalid length. [ 281.776165][T12017] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2710'. [ 282.008076][T12023] sp0: Synchronizing with TNC [ 282.320876][T12034] xt_hashlimit: size too large, truncated to 1048576 [ 282.338377][T12034] xt_hashlimit: max too large, truncated to 1048576 [ 282.624808][T12047] ERROR: device name not specified. [ 282.657931][T12048] loop4: detected capacity change from 0 to 256 [ 283.158426][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 283.349099][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 283.371185][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 283.420058][ T9] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.451561][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 283.483330][ T9] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 283.499176][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.511216][ T9] usb 5-1: Product: syz [ 283.515397][ T9] usb 5-1: Manufacturer: syz [ 283.520533][ T9] usb 5-1: SerialNumber: syz [ 283.885667][T12066] loop1: detected capacity change from 0 to 32768 [ 283.949629][T12066] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 283.963037][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 283.997121][T12066] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 284.007339][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 284.080244][ T9] usb 5-1: USB disconnect, device number 8 [ 284.088239][T12066] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 284.129327][T12066] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 284.161218][T12066] OCFS2: File system is now read-only. [ 284.173428][T12066] (syz.1.2734,12066,1):ocfs2_search_one_group:1736 ERROR: status = -30 [ 284.203241][T12066] (syz.1.2734,12066,1):ocfs2_claim_suballoc_bits:1975 ERROR: status = -30 [ 284.227979][T12066] (syz.1.2734,12066,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 284.233607][T12081] loop3: detected capacity change from 0 to 4096 [ 284.257235][T12066] (syz.1.2734,12066,1):ocfs2_claim_new_inode:2273 ERROR: status = -30 [ 284.287433][T12066] (syz.1.2734,12066,1):ocfs2_claim_new_inode:2288 ERROR: status = -30 [ 284.329534][T12066] (syz.1.2734,12066,1):ocfs2_mknod_locked:638 ERROR: status = -30 [ 284.337373][T12066] (syz.1.2734,12066,1):ocfs2_mknod:385 ERROR: status = -30 [ 284.345538][T12066] (syz.1.2734,12066,1):ocfs2_mknod:502 ERROR: status = -30 [ 284.371294][T12081] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 284.496063][ T5834] ocfs2: Unmounting device (7,1) on (node local) [ 284.705973][T12098] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.995444][T12106] loop4: detected capacity change from 0 to 256 [ 285.052764][T12106] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 285.105163][T12109] loop0: detected capacity change from 0 to 512 [ 285.131848][ T5973] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 285.172670][T12109] EXT4-fs: Ignoring removed orlov option [ 285.201954][T12109] EXT4-fs (loop0): Test dummy encryption mode enabled [ 285.208736][T12109] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 285.301858][ T5973] usb 6-1: Using ep0 maxpacket: 32 [ 285.307266][T12109] EXT4-fs (loop0): 1 truncate cleaned up [ 285.341535][T12109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.364630][T12120] loop1: detected capacity change from 0 to 128 [ 285.375051][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.390817][T12120] EXT4-fs (loop1): Test dummy encryption mode enabled [ 285.426549][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.445976][T12109] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:298: inode #15: comm syz.0.2755: verity file has no extents [ 285.467128][ T5973] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 285.491558][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.505063][T12120] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.539225][T12109] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 285.581867][ T5973] usb 6-1: config 0 descriptor?? [ 285.586827][T12120] ext4 filesystem being mounted at /492/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.665974][ T5834] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.672301][ T5973] hub 6-1:0.0: USB hub found [ 285.782629][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.889018][ T5973] hub 6-1:0.0: 1 port detected [ 286.052750][T12140] loop4: detected capacity change from 0 to 2048 [ 286.099470][ T5973] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 286.118254][ T5973] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 286.162473][T12140] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 286.180347][ T5973] usbhid 6-1:0.0: can't add hid device: -71 [ 286.189564][ T5973] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 286.238980][ T5973] usb 6-1: USB disconnect, device number 18 [ 286.573105][T12159] openvswitch: netlink: Actions may not be safe on all matching packets [ 287.308039][T12191] loop4: detected capacity change from 0 to 128 [ 287.382149][T12191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 287.472936][T12191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.581961][T12203] loop3: detected capacity change from 0 to 512 [ 287.607703][T12203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.637519][T12203] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 287.645950][T12203] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 287.660277][T12203] EXT4-fs (loop3): orphan cleanup on readonly fs [ 287.666691][T12203] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 287.677025][T12203] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 287.693251][T12203] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 287.707173][T12203] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2799: bg 0: block 40: padding at end of block bitmap is not set [ 287.728160][T12203] EXT4-fs (loop3): Remounting filesystem read-only [ 287.735269][T12203] EXT4-fs (loop3): 1 truncate cleaned up [ 287.743079][T12203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.855033][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.999221][T12220] loop1: detected capacity change from 0 to 16 [ 288.047910][T12220] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 288.083613][T12220] cramfs: Error -3 while decompressing! [ 288.110427][T12220] cramfs: ffffffff9a86f2c8(453)->ffff8880326a0000(4096) [ 288.334386][T12234] loop4: detected capacity change from 0 to 64 [ 288.583848][T12244] trusted_key: encrypted_key: master key parameter '' is invalid [ 288.923971][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2824'. [ 288.986740][T12260] loop4: detected capacity change from 0 to 256 [ 289.006507][T12256] loop2: detected capacity change from 0 to 256 [ 289.094167][ T30] audit: type=1800 audit(1744148864.967:69): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2822" name="file1" dev="loop2" ino=35 res=0 errno=0 [ 289.129460][T12260] FAT-fs (loop4): Directory bread(block 64) failed [ 289.145638][T12260] FAT-fs (loop4): Directory bread(block 65) failed [ 289.193766][T12260] FAT-fs (loop4): Directory bread(block 66) failed [ 289.223257][T12260] FAT-fs (loop4): Directory bread(block 67) failed [ 289.279004][T12260] FAT-fs (loop4): Directory bread(block 68) failed [ 289.321730][T12260] FAT-fs (loop4): Directory bread(block 69) failed [ 289.371178][T12260] FAT-fs (loop4): Directory bread(block 70) failed [ 289.377741][T12260] FAT-fs (loop4): Directory bread(block 71) failed [ 289.431122][T12260] FAT-fs (loop4): Directory bread(block 72) failed [ 289.440219][T12260] FAT-fs (loop4): Directory bread(block 73) failed [ 289.857489][T12285] delete_channel: no stack [ 289.952504][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'. [ 290.088072][T12293] loop4: detected capacity change from 0 to 64 [ 290.114778][T12295] ipt_ECN: cannot use operation on non-tcp rule [ 290.824251][T12276] loop5: detected capacity change from 0 to 32768 [ 290.890571][T12276] (syz.5.2833,12276,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 290.977534][T12276] (syz.5.2833,12276,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 291.112212][T12276] JBD2: Ignoring recovery information on journal [ 291.203266][T12276] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 291.259000][ T5973] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 291.343737][T12276] (syz.5.2833,12276,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xe37077ba. Applying ECC. [ 291.394511][T12276] (syz.5.2833,12276,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0xe37077ba [ 291.438918][ T5973] usb 4-1: Using ep0 maxpacket: 16 [ 291.455675][T12276] (syz.5.2833,12276,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 291.479360][T12343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.495103][ T5973] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 291.506525][T12276] (syz.5.2833,12276,0):ocfs2_quota_read:201 ERROR: status = -5 [ 291.517464][ T5973] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.526331][T12346] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2867'. [ 291.536472][T12276] Quota error (device loop5): find_block_dqentry: Can't read quota tree block 6 [ 291.539547][ T5973] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.557010][T12276] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 291.585959][ T5973] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 291.598675][T12276] (syz.5.2833,12276,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 291.616319][ T5973] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 291.633693][T12276] (syz.5.2833,12276,1):ocfs2_mknod:314 ERROR: status = -5 [ 291.662438][ T5973] usb 4-1: config 0 has no interface number 0 [ 291.672142][T12276] (syz.5.2833,12276,1):ocfs2_mknod:502 ERROR: status = -5 [ 291.681492][ T5973] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 291.719222][T12276] (syz.5.2833,12276,1):ocfs2_mkdir:658 ERROR: status = -5 [ 291.745763][ T5973] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 291.777304][ T5973] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.792189][T12348] loop2: detected capacity change from 0 to 2048 [ 291.800350][ T5973] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.824939][T12354] virtio-fs: tag <(null)> not found [ 291.832688][ T5973] usb 4-1: config 0 interface 125 has no altsetting 0 [ 291.845910][T12348] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.859779][ T5836] ocfs2: Unmounting device (7,5) on (node local) [ 291.868268][ T5973] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 291.892147][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.950486][ T5973] usb 4-1: Product: syz [ 291.954678][ T5973] usb 4-1: Manufacturer: syz [ 291.991500][ T5973] usb 4-1: SerialNumber: syz [ 292.009113][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 292.021464][ T5973] usb 4-1: config 0 descriptor?? [ 292.192610][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 292.214935][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.258086][ T24] usb 5-1: Product: syz [ 292.272030][ T24] usb 5-1: Manufacturer: syz [ 292.290488][ T24] usb 5-1: SerialNumber: syz [ 292.334062][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 292.371670][ T5898] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 292.405822][T12364] loop0: detected capacity change from 0 to 512 [ 292.432639][T12364] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 292.483560][ T5973] usb 4-1: USB disconnect, device number 10 [ 292.533134][T12364] EXT4-fs (loop0): 1 truncate cleaned up [ 292.568296][T12364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.621121][T12364] EXT4-fs error (device loop0): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.0.2877: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 292.654250][T12364] EXT4-fs error (device loop0) in ext4_delete_entry:2741: Corrupt filesystem [ 292.686818][T12364] EXT4-fs warning (device loop0): ext4_rename_delete:3728: inode #2: comm syz.0.2877: Deleting old file: nlink 4, error=-117 [ 292.814229][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.020849][T12380] loop1: detected capacity change from 0 to 8 [ 293.063932][T12380] SQUASHFS error: lzo decompression failed, data probably corrupt [ 293.108010][T12380] SQUASHFS error: Failed to read block 0x91: -5 [ 293.135100][T12380] SQUASHFS error: Unable to read metadata cache entry [8f] [ 293.172226][T12380] SQUASHFS error: Unable to read inode 0x11f [ 293.339878][T12382] loop5: detected capacity change from 0 to 4096 [ 293.458401][T12382] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 293.627881][T12386] loop3: detected capacity change from 0 to 256 [ 293.685766][T12386] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 293.984563][T12382] ntfs3(loop5): Failed to load $Extend (-22). [ 294.046001][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 294.055088][T12382] ntfs3(loop5): Failed to initialize $Extend. [ 294.104307][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 294.696925][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2893'. [ 294.793785][ T5898] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 294.949988][ T3421] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 295.193387][ T3421] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 295.238976][ T3421] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 295.372277][ T3421] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.453611][ T5898] ath9k_htc: Failed to initialize the device [ 295.462800][ T24] usb 5-1: USB disconnect, device number 9 [ 295.473915][ T3421] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.483843][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 295.559605][ T3421] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 295.611171][ T3421] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 295.618603][ T3421] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 295.674366][ T3421] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.712749][ T3421] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.758938][ T3421] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 295.813011][ T3421] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 295.858946][ T3421] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 295.891847][ T3421] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.950473][ T3421] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.964341][T12426] loop2: detected capacity change from 0 to 512 [ 296.008442][ T3421] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 296.036543][T12426] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 296.062665][ T3421] usb 2-1: string descriptor 0 read error: -22 [ 296.079249][ T3421] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 296.117502][T12426] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.2906: corrupted in-inode xattr: e_value out of bounds [ 296.139190][ T3421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.164538][T12426] EXT4-fs (loop2): Remounting filesystem read-only [ 296.183749][ T3421] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 296.227330][T12426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.400982][ T5973] usb 2-1: USB disconnect, device number 11 [ 296.432889][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.568437][T12445] loop3: detected capacity change from 0 to 512 [ 296.602621][T12445] EXT4-fs: Ignoring removed oldalloc option [ 296.667981][T12445] EXT4-fs (loop3): 1 truncate cleaned up [ 296.692117][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'. [ 296.705108][T12445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.796277][T12419] loop5: detected capacity change from 0 to 32768 [ 296.809742][T12419] XFS: attr2 mount option is deprecated. [ 296.845167][T12445] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2915: invalid indirect mapped block 234881024 (level 0) [ 296.876868][T12419] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.923640][T12445] EXT4-fs (loop3): Remounting filesystem read-only [ 297.110712][T12419] XFS (loop5): Ending clean mount [ 297.148666][T12419] XFS (loop5): Quotacheck needed: Please wait. [ 297.167270][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.197929][T12419] XFS (loop5): Quotacheck: Done. [ 297.394585][ T5836] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.403325][ T3421] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 297.590027][ T3421] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 297.638883][ T3421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 297.710538][ T3421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 297.760545][ T3421] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 297.789328][ T3421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.807561][ T3421] usb 5-1: Product: syz [ 297.827747][ T3421] usb 5-1: Manufacturer: syz [ 297.837855][ T3421] usb 5-1: SerialNumber: syz [ 297.866593][ T3421] usb 5-1: config 0 descriptor?? [ 298.249762][ T5898] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 298.451345][ T5898] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 298.491176][ T5898] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 298.519179][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.588878][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 298.606437][T12516] loop5: detected capacity change from 0 to 64 [ 298.632295][ T5898] usb 4-1: config 1 has no interface number 0 [ 298.638416][ T5898] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 298.721633][T12516] syz.5.2943: attempt to access beyond end of device [ 298.721633][T12516] loop5: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 298.736228][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.783845][ T5898] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 298.796675][T12516] Buffer I/O error on dev loop5, logical block 117440531, async page read [ 298.823038][T12519] xt_l2tp: invalid flags combination: c [ 298.843027][T12516] syz.5.2943: attempt to access beyond end of device [ 298.843027][T12516] loop5: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 298.938134][T12516] Buffer I/O error on dev loop5, logical block 4274257920, async page read [ 298.988961][ T5898] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 299.009813][ T5898] snd_usb_pod 4-1:1.1: invalid control EP [ 299.015551][ T5898] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 299.043415][T12516] syz.5.2943: attempt to access beyond end of device [ 299.043415][T12516] loop5: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 299.079701][ T5898] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 299.112587][ T5898] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 299.130968][T12516] Buffer I/O error on dev loop5, logical block 150994944, async page read [ 299.176972][T12516] syz.5.2943: attempt to access beyond end of device [ 299.176972][T12516] loop5: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 299.201650][ T5898] usb 4-1: USB disconnect, device number 11 [ 299.289288][T12516] Buffer I/O error on dev loop5, logical block 117440531, async page read [ 299.301237][ T30] audit: type=1800 audit(1744148875.177:70): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2943" name="file2" dev="loop5" ino=6 res=0 errno=0 [ 299.673117][T12541] loop2: detected capacity change from 0 to 512 [ 299.794222][T12541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.797144][T12548] netlink: 'syz.1.2960': attribute type 29 has an invalid length. [ 299.815146][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 299.863926][T12541] ext4 filesystem being mounted at /468/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.046353][T12543] loop5: detected capacity change from 0 to 4096 [ 300.122909][T12543] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 300.284946][T12543] ntfs3(loop5): ino=1a, mi_enum_attr [ 300.324082][T12543] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 300.339412][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.370895][T12543] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 300.643175][T12567] loop0: detected capacity change from 0 to 256 [ 300.667427][T12567] exfat: Deprecated parameter 'namecase' [ 300.732919][T12567] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 300.861296][T12567] overlay: filesystem on ./file0 not supported [ 301.074546][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 301.228457][T12586] loop4: detected capacity change from 0 to 64 [ 301.587772][T12598] loop2: detected capacity change from 0 to 1024 [ 301.834578][ T968] hfsplus: b-tree write err: -5, ino 4 [ 302.130448][T12619] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 302.138735][T12619] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 302.204198][T12619] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 302.243681][T12619] overlayfs: missing 'lowerdir' [ 302.573836][T12632] loop1: detected capacity change from 0 to 256 [ 302.642967][T12635] loop5: detected capacity change from 0 to 128 [ 302.661338][T12640] loop0: detected capacity change from 0 to 512 [ 302.679842][T12635] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.715983][T12640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 302.837177][T12632] FAT-fs (loop1): Directory bread(block 64) failed [ 302.859121][T12640] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3004: invalid indirect mapped block 4294967295 (level 0) [ 302.881151][T12632] FAT-fs (loop1): Directory bread(block 65) failed [ 302.888096][T12632] FAT-fs (loop1): Directory bread(block 66) failed [ 302.904297][T12632] FAT-fs (loop1): Directory bread(block 67) failed [ 302.910985][T12632] FAT-fs (loop1): Directory bread(block 68) failed [ 302.918232][T12632] FAT-fs (loop1): Directory bread(block 69) failed [ 302.924971][T12632] FAT-fs (loop1): Directory bread(block 70) failed [ 302.931674][T12632] FAT-fs (loop1): Directory bread(block 71) failed [ 302.938337][T12632] FAT-fs (loop1): Directory bread(block 72) failed [ 302.945433][T12632] FAT-fs (loop1): Directory bread(block 73) failed [ 302.975775][T12640] EXT4-fs (loop0): Remounting filesystem read-only [ 303.069363][T12640] EXT4-fs (loop0): 1 orphan inode deleted [ 303.075110][T12640] EXT4-fs (loop0): 1 truncate cleaned up [ 303.091635][ T30] audit: type=1326 audit(1744148878.957:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.4.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c38d169 code=0x7ffc0000 [ 303.170069][T12640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.228907][ T30] audit: type=1326 audit(1744148878.977:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.4.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c38d169 code=0x7ffc0000 [ 303.295629][T12657] new mount options do not match the existing superblock, will be ignored [ 303.339102][ T30] audit: type=1326 audit(1744148878.977:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.4.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f451c38d169 code=0x7ffc0000 [ 303.461297][ T30] audit: type=1326 audit(1744148878.977:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.4.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c38d169 code=0x7ffc0000 [ 303.534119][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.590110][ T30] audit: type=1326 audit(1744148878.977:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.4.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451c38d169 code=0x7ffc0000 [ 303.665015][T12663] loop3: detected capacity change from 0 to 512 [ 303.745313][T12661] loop4: detected capacity change from 0 to 4096 [ 303.771170][T12663] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3015: attempt to clear invalid blocks 2 len 1 [ 303.790308][T12663] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 303.809207][T12663] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3015: invalid indirect mapped block 1819239214 (level 0) [ 303.891701][T12663] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3015: invalid indirect mapped block 1819239214 (level 1) [ 303.955562][T12674] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3019'. [ 303.966587][T12672] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 303.980792][T12663] EXT4-fs (loop3): 1 truncate cleaned up [ 303.989804][T12672] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 304.129370][T12663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.310174][T12663] EXT4-fs warning (device loop3): dx_probe:803: inode #2: comm syz.3.3015: Unrecognised inode hash code 20 [ 304.331110][T12663] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.3015: Corrupt directory, running e2fsck is recommended [ 304.449218][T12663] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.3015: corrupted in-inode xattr: overlapping e_value [ 304.730885][T12688] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.875063][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.915455][T12694] netlink: 'syz.1.3029': attribute type 11 has an invalid length. [ 305.039019][T12694] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3029'. [ 305.112010][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3030'. [ 305.378005][T12708] netlink: 'syz.1.3037': attribute type 1 has an invalid length. [ 305.426654][T12708] netlink: 'syz.1.3037': attribute type 2 has an invalid length. [ 305.498190][T12712] loop0: detected capacity change from 0 to 256 [ 305.566020][T12712] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 305.638831][T12716] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3040'. [ 305.683961][ T5898] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 305.723738][ C1] sd 0:0:1:0: [sda] tag#6661 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 305.734207][ C1] sd 0:0:1:0: [sda] tag#6661 CDB: Read(6) 08 00 0c 6a 08 48 [ 305.798039][T12720] loop2: detected capacity change from 0 to 64 [ 305.886680][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.912437][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.948951][ T5898] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 305.983833][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.047245][ T5898] usb 4-1: config 0 descriptor?? [ 306.086187][ T5898] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 306.283532][ T5898] usb 4-1: USB disconnect, device number 12 [ 306.491077][T12739] lo: entered allmulticast mode [ 306.739404][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 306.899169][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 306.906663][ T24] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 306.932049][ T24] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 306.972437][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.026421][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 307.078879][ T24] usb 2-1: config 1 has no interface number 0 [ 307.101137][ T24] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 307.149094][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.220983][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 307.426523][ T24] snd_usb_pod 2-1:1.1: set_interface failed [ 307.440474][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 307.477756][ T24] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 307.537126][ T24] usb 2-1: USB disconnect, device number 12 [ 307.652557][T12770] loop5: detected capacity change from 0 to 2048 [ 307.747281][T12770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.800854][ T30] audit: type=1800 audit(1744148883.677:76): pid=12770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3067" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 308.169280][ T3421] iguanair 5-1:0.0: failed to get version [ 308.179278][ T3421] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 308.223503][ T3421] usb 5-1: USB disconnect, device number 10 [ 308.579007][ T3421] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 308.616054][T12760] loop2: detected capacity change from 0 to 32768 [ 308.756308][ T3421] usb 5-1: Using ep0 maxpacket: 8 [ 308.772742][ T3421] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.810036][ T3421] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.852740][ T3421] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 308.911646][ T3421] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.948986][ T3421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.983100][T12806] tmpfs: Bad value for 'mpol' [ 308.985700][ T3421] usb 5-1: Product: syz [ 309.022253][ T3421] usb 5-1: Manufacturer: syz [ 309.047173][ T3421] usb 5-1: SerialNumber: syz [ 309.187745][ T30] audit: type=1326 audit(1744148885.057:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12812 comm="syz.5.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 309.287556][ T30] audit: type=1326 audit(1744148885.067:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12812 comm="syz.5.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 309.409469][ T3421] usb 5-1: 0:2 : does not exist [ 309.414382][ T3421] usb 5-1: 0:8 : does not exist [ 309.416941][ T30] audit: type=1326 audit(1744148885.067:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12812 comm="syz.5.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 309.581217][ T3421] usb 5-1: USB disconnect, device number 11 [ 309.656784][T12825] loop2: detected capacity change from 0 to 1024 [ 309.671518][T12829] netlink: 'syz.0.3096': attribute type 10 has an invalid length. [ 309.727862][T12825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.830046][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.166022][T12842] loop0: detected capacity change from 0 to 512 [ 310.180936][T12849] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3106'. [ 310.206232][T12842] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.210085][T12848] loop3: detected capacity change from 0 to 1024 [ 310.243385][T12842] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 310.285707][T12842] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 310.297104][T12851] loop5: detected capacity change from 0 to 16 [ 310.325156][T12842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 310.373100][T12851] erofs (device loop5): mounted with root inode @ nid 36. [ 310.396417][T12848] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 310.409207][T12842] System zones: 0-2, 18-18, 34-34 [ 310.448223][T12842] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 310.456145][T12862] loop2: detected capacity change from 0 to 256 [ 310.484088][T12848] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 310.521159][T12848] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3104: Failed to acquire dquot type 0 [ 310.548975][T12842] EXT4-fs (loop0): 1 truncate cleaned up [ 310.574438][T12842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.608470][T12848] EXT4-fs (loop3): 1 truncate cleaned up [ 310.643476][T12848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.659889][T12842] EXT4-fs error (device loop0): ext4_generic_delete_entry:2670: inode #2: block 3: comm syz.0.3105: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 310.715097][T12842] EXT4-fs error (device loop0) in ext4_delete_entry:2741: Corrupt filesystem [ 310.964327][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.039003][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.198475][T12876] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 311.407232][T12886] loop3: detected capacity change from 0 to 256 [ 311.582450][T12892] netlink: 'syz.4.3126': attribute type 21 has an invalid length. [ 311.619715][T12892] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3126'. [ 311.649020][T12892] netlink: 'syz.4.3126': attribute type 4 has an invalid length. [ 311.675728][T12892] netlink: 'syz.4.3126': attribute type 3 has an invalid length. [ 311.710063][T12892] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3126'. [ 311.816678][T12858] loop1: detected capacity change from 0 to 32768 [ 311.847523][T12858] ialloc: diAlloc returned -5! [ 312.521763][T12924] sctp: [Deprecated]: syz.2.3141 (pid 12924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.521763][T12924] Use struct sctp_sack_info instead [ 312.906059][T12939] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 313.236376][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3156'. [ 313.459067][T12962] loop1: detected capacity change from 0 to 47 [ 313.472304][T12964] netlink: 'syz.5.3162': attribute type 2 has an invalid length. [ 313.543418][T12964] þ: entered promiscuous mode [ 314.233147][T12996] loop2: detected capacity change from 0 to 256 [ 314.324012][T12996] FAT-fs (loop2): Directory bread(block 64) failed [ 314.369091][T12996] FAT-fs (loop2): Directory bread(block 65) failed [ 314.375752][T12996] FAT-fs (loop2): Directory bread(block 66) failed [ 314.435559][T12996] FAT-fs (loop2): Directory bread(block 67) failed [ 314.478532][T12996] FAT-fs (loop2): Directory bread(block 68) failed [ 314.508947][T12996] FAT-fs (loop2): Directory bread(block 69) failed [ 314.529255][ T24] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 314.558715][T12996] FAT-fs (loop2): Directory bread(block 70) failed [ 314.618164][T12996] FAT-fs (loop2): Directory bread(block 71) failed [ 314.630416][T12996] FAT-fs (loop2): Directory bread(block 72) failed [ 314.676821][T12996] FAT-fs (loop2): Directory bread(block 73) failed [ 314.741065][T13016] loop1: detected capacity change from 0 to 128 [ 314.770642][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 314.792162][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 314.823694][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 314.870944][ T24] usb 4-1: string descriptor 0 read error: -22 [ 314.877246][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.908899][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.982000][T12998] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.216258][ T24] cdc_ncm 4-1:1.0: bind() failure [ 315.249184][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 315.266540][ T24] cdc_ncm 4-1:1.1: bind() failure [ 315.319923][ T24] usb 4-1: USB disconnect, device number 13 [ 315.327604][T13031] xt_hashlimit: max too large, truncated to 1048576 [ 315.353099][T13032] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3195'. [ 315.477342][T13034] C: renamed from team_slave_0 (while UP) [ 315.498596][T13034] netlink: 'syz.4.3197': attribute type 1 has an invalid length. [ 315.549016][T13034] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 315.610179][T13036] netlink: 'syz.2.3198': attribute type 3 has an invalid length. [ 315.703211][T13040] loop1: detected capacity change from 0 to 512 [ 315.729144][T13012] loop5: detected capacity change from 0 to 32768 [ 315.778702][T13040] EXT4-fs (loop1): orphan cleanup on readonly fs [ 315.798460][T13012] (syz.5.3186,13012,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 315.813523][T13012] (syz.5.3186,13012,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 315.832460][T13040] EXT4-fs error (device loop1): ext4_quota_enable:7122: comm syz.1.3200: Bad quota inum: 5, type: 1 [ 315.845377][T13040] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 315.867120][T13012] (syz.5.3186,13012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 315.898569][T13040] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 315.955068][T13012] JBD2: Ignoring recovery information on journal [ 316.030324][T13040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.096655][T13012] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 316.127796][T13057] loop2: detected capacity change from 0 to 512 [ 316.212607][T13057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.280092][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.344161][T13057] ext4 filesystem being mounted at /509/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.400250][T13057] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #4: comm syz.2.3206: corrupted inode contents [ 316.476144][T13057] EXT4-fs (loop2): Remounting filesystem read-only [ 316.515034][T13057] Quota error (device loop2): write_blk: dquota write failed [ 316.527232][ T5836] ocfs2: Unmounting device (7,5) on (node local) [ 316.587111][T13057] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 316.650775][T13057] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota [ 316.824237][T13072] netlink: 'syz.1.3214': attribute type 10 has an invalid length. [ 316.844545][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.858932][T13072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3214'. [ 316.959054][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 317.129607][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 317.148034][T13055] loop0: detected capacity change from 0 to 32768 [ 317.179129][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 317.187129][ T24] usb 5-1: config 0 has no interface number 0 [ 317.224752][T13050] loop3: detected capacity change from 0 to 32768 [ 317.239553][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 317.251192][T13055] (syz.0.3205,13055,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 317.288892][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 317.314638][T13055] (syz.0.3205,13055,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 317.342819][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 317.352953][ T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 317.365769][ T24] usb 5-1: Product: syz [ 317.371711][T13050] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 317.381063][ T24] usb 5-1: SerialNumber: syz [ 317.412192][ T24] usb 5-1: config 0 descriptor?? [ 317.421532][T13055] JBD2: Ignoring recovery information on journal [ 317.453076][ T24] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 317.471338][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input23 [ 317.538112][T13050] XFS (loop3): Ending clean mount [ 317.629317][T13055] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 317.730647][ T5838] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 317.899632][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 317.906959][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.914202][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.921365][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.928515][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.935755][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.942922][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.945237][ T5835] ocfs2: Unmounting device (7,0) on (node local) [ 317.950057][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.963526][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.970677][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.977826][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.999423][ T24] usb 5-1: USB disconnect, device number 12 [ 318.007268][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 318.045990][ T24] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 318.096831][T13074] loop2: detected capacity change from 0 to 32768 [ 318.252379][T13074] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 318.320237][T13076] loop5: detected capacity change from 0 to 32768 [ 318.334824][T13074] (syz.2.3215,13074,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 318.360676][T13076] XFS (loop5): Invalid device [./file1], error=-2 [ 318.393850][T13074] (syz.2.3215,13074,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 318.436351][T13074] (syz.2.3215,13074,0):ocfs2_mknod:298 ERROR: status = -2 [ 318.458896][T13074] (syz.2.3215,13074,1):ocfs2_mknod:502 ERROR: status = -2 [ 318.466035][T13074] (syz.2.3215,13074,1):ocfs2_create:675 ERROR: status = -2 [ 318.709448][ T5839] ocfs2: Unmounting device (7,2) on (node local) [ 318.829492][T13110] netlink: 'syz.4.3227': attribute type 2 has an invalid length. [ 318.877901][T13110] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3227'. [ 319.245801][T13122] loop4: detected capacity change from 0 to 512 [ 319.319417][T13122] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 319.343022][T13122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 319.399502][T13128] xfrm0: entered promiscuous mode [ 319.404553][T13128] xfrm0: entered allmulticast mode [ 319.419165][T13122] EXT4-fs (loop4): orphan cleanup on readonly fs [ 319.425865][T13122] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 319.509014][T13122] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 319.577227][T13122] EXT4-fs (loop4): 1 truncate cleaned up [ 319.605332][T13122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 319.694982][T13122] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.3233: dx entry: limit 65535 != root limit 120 [ 319.769119][T13122] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.3233: Corrupt directory, running e2fsck is recommended [ 319.921514][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.152397][T13151] loop0: detected capacity change from 0 to 2048 [ 320.188708][T13151] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 320.242039][T13151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.256270][T13159] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 320.598127][T13171] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 320.889713][T13131] loop2: detected capacity change from 0 to 32768 [ 320.910217][T13182] Mount JFS Failure: -22 [ 320.991542][T13131] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 321.206966][T13131] XFS (loop2): Ending clean mount [ 321.225269][T13202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3266'. [ 321.260129][T13131] XFS (loop2): Quotacheck needed: Please wait. [ 321.360783][T13131] XFS (loop2): Quotacheck: Done. [ 321.616174][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.622668][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.643983][ T5839] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 321.823003][T13221] loop3: detected capacity change from 0 to 256 [ 322.627242][T13237] loop1: detected capacity change from 0 to 4096 [ 322.686580][T13237] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 322.699403][T13250] loop3: detected capacity change from 0 to 256 [ 322.716886][T13250] exfat: Deprecated parameter 'utf8' [ 322.781610][T13250] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 322.819442][T13237] ntfs3(loop1): ino=1a, mi_enum_attr [ 322.836700][T13237] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 322.889143][T13237] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 323.251444][T13267] loop0: detected capacity change from 0 to 1024 [ 323.400847][T13267] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 324.355253][T13308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3320'. [ 324.525640][T13314] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3323'. [ 324.797371][T13281] loop1: detected capacity change from 0 to 32768 [ 325.174917][T13347] loop5: detected capacity change from 0 to 512 [ 325.208441][T13281] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 325.244231][T13347] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 325.290519][T13347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6842e02c, mo2=0102] [ 325.296483][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3338'. [ 325.327967][T13281] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 325.345467][T13347] System zones: 1-12 [ 325.346313][T13281] bcachefs (loop1): superblock requires following recovery passes to be run: [ 325.346313][T13281] check_extents,check_indirect_extents [ 325.394882][T13347] EXT4-fs (loop5): orphan cleanup on readonly fs [ 325.401656][T13281] bcachefs (loop1): Version upgrade required: [ 325.401656][T13281] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 325.401656][T13281] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 325.401656][T13281] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 325.520036][T13347] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3335: invalid indirect mapped block 12 (level 1) [ 325.557170][T13281] bcachefs (loop1): dropping and reconstructing all alloc info [ 325.563869][T13357] SET target dimension over the limit! [ 325.596832][T13347] EXT4-fs (loop5): Remounting filesystem read-only [ 325.614843][T13347] EXT4-fs (loop5): 1 truncate cleaned up [ 325.659667][T13281] bcachefs (loop1): accounting_read... [ 325.679840][T13347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 325.710496][T13281] done [ 325.713278][T13281] bcachefs (loop1): alloc_read... done [ 325.718803][T13281] bcachefs (loop1): snapshots_read... done [ 325.782124][T13281] bcachefs (loop1): done starting filesystem [ 325.897838][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 325.969511][ T30] audit: type=1800 audit(1744148901.827:80): pid=13281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3307" name="file1" dev="loop1" ino=536870912 res=0 errno=0 [ 326.010606][T13370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.162650][ T5834] bcachefs (loop1): shutting down [ 326.478548][ T5834] bcachefs (loop1): shutdown complete [ 326.491156][T13386] netlink: 'syz.0.3356': attribute type 7 has an invalid length. [ 326.525243][T13386] netlink: 'syz.0.3356': attribute type 5 has an invalid length. [ 326.556643][T13386] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3356'. [ 326.625408][T13384] loop5: detected capacity change from 0 to 4096 [ 326.641544][T13390] xt_cgroup: xt_cgroup: no path or classid specified [ 327.225314][T13406] @ÿ: renamed from bond_slave_0 [ 327.354655][T13375] loop2: detected capacity change from 0 to 32768 [ 327.404605][T13375] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3350 (13375) [ 327.447734][T13375] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 327.472450][T13413] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 327.492121][T13413] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3370'. [ 327.514649][T13375] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 327.564077][T13375] BTRFS info (device loop2): using free-space-tree [ 327.704355][T13429] loop0: detected capacity change from 0 to 64 [ 328.010625][ T5839] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 328.039404][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 328.232555][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3381'. [ 328.253036][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.274118][ T24] usb 4-1: config 3 has an invalid interface number: 14 but max is 0 [ 328.306962][ T24] usb 4-1: config 3 has no interface number 0 [ 328.336366][ T24] usb 4-1: config 3 interface 14 has no altsetting 0 [ 328.378627][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=b8.0f [ 328.414206][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.459175][ T24] usb 4-1: Product: syz [ 328.463361][ T24] usb 4-1: Manufacturer: syz [ 328.467974][ T24] usb 4-1: SerialNumber: syz [ 328.774943][ T24] gspca_main: kinect-2.14.0 probing 045e:02ae [ 328.867327][ T24] usb 4-1: USB disconnect, device number 14 [ 328.942463][T13468] loop4: detected capacity change from 0 to 512 [ 328.958773][T13468] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 329.021597][T13468] EXT4-fs (loop4): 1 truncate cleaned up [ 329.029503][T13468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.044130][T13473] loop0: detected capacity change from 0 to 8 [ 329.256980][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.437182][T13481] loop5: detected capacity change from 0 to 8 [ 330.028400][T13501] IPv6: Can't replace route, no match found [ 330.192202][T13511] tc_dump_action: action bad kind [ 330.435720][T13514] loop0: detected capacity change from 0 to 4096 [ 330.477416][T13514] ntfs3(loop0): It is recommened to use chkdsk. [ 330.505642][T13514] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 330.530953][T13514] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 330.571754][T13514] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 330.600324][T13527] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.611531][T13514] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 330.644192][T13514] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 330.676525][T13514] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 330.719152][T13514] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 330.727981][T13514] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 330.770517][T13514] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 330.914141][T13540] loop2: detected capacity change from 0 to 128 [ 330.995566][T13540] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.013713][T13540] ext4 filesystem being mounted at /536/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 331.129217][T13540] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 331.390510][ T5839] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.715370][T13568] loop4: detected capacity change from 0 to 256 [ 331.908780][T13568] FAT-fs (loop4): Directory bread(block 64) failed [ 331.959417][T13568] FAT-fs (loop4): Directory bread(block 65) failed [ 331.979610][T13568] FAT-fs (loop4): Directory bread(block 66) failed [ 332.019465][T13568] FAT-fs (loop4): Directory bread(block 67) failed [ 332.043369][T13568] FAT-fs (loop4): Directory bread(block 68) failed [ 332.086466][T13545] loop5: detected capacity change from 0 to 32768 [ 332.088390][T13568] FAT-fs (loop4): Directory bread(block 69) failed [ 332.156971][T13568] FAT-fs (loop4): Directory bread(block 70) failed [ 332.240174][T13568] FAT-fs (loop4): Directory bread(block 71) failed [ 332.247090][T13568] FAT-fs (loop4): Directory bread(block 72) failed [ 332.269088][T13568] FAT-fs (loop4): Directory bread(block 73) failed [ 332.406485][T13594] loop3: detected capacity change from 0 to 128 [ 332.499467][T13545] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 332.594023][T13545] bcachefs (loop5): initializing new filesystem [ 332.603266][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 332.630556][T13545] bcachefs (loop5): going read-write [ 332.655515][T13545] bcachefs (loop5): marking superblocks [ 332.691967][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 332.765126][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 332.767536][T13545] bcachefs (loop5): initializing freespace [ 332.815269][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 332.827886][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 332.843929][T13545] bcachefs (loop5): done initializing freespace [ 332.907564][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 332.911195][T13545] bcachefs (loop5): reading snapshots table [ 332.944432][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 332.956524][T13545] bcachefs (loop5): reading snapshots done [ 333.029138][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 333.077466][T13570] loop0: detected capacity change from 0 to 32768 [ 333.085174][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 333.094312][T13570] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3437 (13570) [ 333.122941][T13545] bcachefs (loop5): done starting filesystem [ 333.135483][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 333.180432][T13570] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 333.246463][T13600] ip6tnl1: entered promiscuous mode [ 333.252086][T13570] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 333.281597][T13570] BTRFS info (device loop0): using free-space-tree [ 333.309817][T13545] syz.5.3425 (13545) used greatest stack depth: 13936 bytes left [ 333.607090][T13633] netlink: 'syz.4.3455': attribute type 10 has an invalid length. [ 333.622512][ T5836] bcachefs (loop5): shutting down [ 333.649694][T13633] ipvlan1: entered promiscuous mode [ 333.655045][ T5836] bcachefs (loop5): going read-only [ 333.685342][T13633] ipvlan1: entered allmulticast mode [ 333.692954][ T5836] bcachefs (loop5): finished waiting for writes to stop [ 333.706504][T13633] veth0_vlan: entered allmulticast mode [ 333.717294][ T5836] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 333.739699][T13633] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 333.752994][ T5835] BTRFS info (device loop0 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 333.905257][ T5836] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 334.010077][ T5836] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 334.111785][ T5836] bcachefs (loop5): marking filesystem clean [ 334.383450][ T5836] bcachefs (loop5): shutdown complete [ 334.762585][T13671] 9p: Unknown Cache mode or invalid value f [ 334.965892][T13679] loop4: detected capacity change from 0 to 764 [ 335.020904][T13679] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 335.279636][T13684] loop2: detected capacity change from 0 to 4096 [ 336.158350][T13723] netlink: 'syz.0.3501': attribute type 11 has an invalid length. [ 336.163557][T13718] loop2: detected capacity change from 0 to 2048 [ 336.265653][T13718] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 336.339025][T13718] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 336.346961][T13718] UDF-fs: Scanning with blocksize 512 failed [ 336.422860][T13718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.639061][ T970] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 336.803764][ T970] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 336.836187][T13743] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 336.848952][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.890386][ T970] usb 1-1: config 0 descriptor?? [ 336.909040][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 336.935855][ T970] cp210x 1-1:0.0: cp210x converter detected [ 337.001443][T13747] QAT: Stopping all acceleration devices. [ 337.103600][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 337.120304][ T24] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 337.135624][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 337.159384][ T24] usb 2-1: Product: syz [ 337.163714][ T24] usb 2-1: Manufacturer: syz [ 337.168407][ T24] usb 2-1: SerialNumber: syz [ 337.230780][ T24] usb 2-1: config 0 descriptor?? [ 337.239865][T13753] netlink: 'syz.3.3516': attribute type 21 has an invalid length. [ 337.250033][ T24] usbtest 2-1:0.0: FX2 device [ 337.254756][ T24] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 337.318104][ T970] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 337.326202][ T970] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 337.384271][ T970] usb 1-1: cp210x converter now attached to ttyUSB0 [ 337.397360][T13758] loop4: detected capacity change from 0 to 22 [ 337.427488][T13758] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 337.437047][ T970] usb 1-1: USB disconnect, device number 10 [ 337.479279][ T24] usb 2-1: USB disconnect, device number 13 [ 337.490164][T13758] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 337.492444][ T970] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 337.588167][ T970] cp210x 1-1:0.0: device disconnected [ 337.846990][T13760] loop3: detected capacity change from 0 to 4096 [ 337.904263][T13767] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.189459][T13776] __nla_validate_parse: 55 callbacks suppressed [ 338.189484][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3526'. [ 338.415181][T13785] gtp0: entered promiscuous mode [ 338.420390][T13785] gtp0: entered allmulticast mode [ 338.500571][T13787] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3530'. [ 338.625766][T13791] loop1: detected capacity change from 0 to 1024 [ 338.729900][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3534'. [ 338.789299][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 338.807390][ T13] hfsplus: b-tree write err: -5, ino 4 [ 338.991254][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 339.022411][T13805] netlink: 'syz.3.3539': attribute type 10 has an invalid length. [ 339.040341][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.053350][T13805] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.061124][T13805] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.069435][ T9] usb 1-1: Product: syz [ 339.073615][ T9] usb 1-1: Manufacturer: syz [ 339.078213][ T9] usb 1-1: SerialNumber: syz [ 339.135343][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 339.163360][T13805] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.170621][T13805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.178127][T13805] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.185328][T13805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.238322][T13805] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 339.247794][ T3421] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 339.579784][ T5901] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 339.701359][T13825] loop1: detected capacity change from 0 to 256 [ 339.711740][ T970] usb 1-1: USB disconnect, device number 11 [ 339.734199][T13823] loop3: detected capacity change from 0 to 1764 [ 339.750829][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 339.764972][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.779450][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 339.786277][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.817634][ T5901] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.845285][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.870667][ T5901] usb 5-1: config 0 descriptor?? [ 339.897084][ T5901] hub 5-1:0.0: USB hub found [ 339.949349][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 339.966355][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 340.002429][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 340.032604][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.059134][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.069041][T13831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3552'. [ 340.094102][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 340.099454][ T5901] hub 5-1:0.0: 2 ports detected [ 340.104003][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.126450][ T9] usb 6-1: Product: syz [ 340.139081][ T9] usb 6-1: Manufacturer: syz [ 340.146729][ T9] usb 6-1: SerialNumber: syz [ 340.188551][ T9] usb 6-1: config 0 descriptor?? [ 340.252165][ T9] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input24 [ 340.307119][ T5901] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 340.317972][ T5901] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 340.329149][ T3421] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 340.355541][ T3421] ath9k_htc: Failed to initialize the device [ 340.382754][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 340.388751][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 340.400674][ T970] usb 1-1: ath9k_htc: USB layer deinitialized [ 340.454729][T13821] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 340.461355][T13821] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 340.483168][ T5901] usb 5-1: USB disconnect, device number 13 [ 340.514299][T13821] vhci_hcd vhci_hcd.0: Device attached [ 340.580063][T13838] vhci_hcd: connection closed [ 340.585469][ T9] imon:send_packet: packet tx failed (-71) [ 340.600257][ T53] vhci_hcd: stop threads [ 340.601034][T13841] loop3: detected capacity change from 0 to 64 [ 340.614518][ T53] vhci_hcd: release socket [ 340.629215][ T53] vhci_hcd: disconnect device [ 340.639226][ T9] imon 6-1:0.0: panel buttons/knobs setup failed [ 340.829147][ T9] rc_core: IR keymap rc-imon-pad not found [ 340.869047][ T9] Registered IR keymap rc-empty [ 340.874077][ T9] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 340.937950][ T9] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 340.948284][T13850] unsupported nla_type 33050 [ 340.963626][ T9] imon:send_packet: packet tx failed (-71) [ 340.980632][T13848] loop1: detected capacity change from 0 to 2048 [ 341.019090][ T9] imon 6-1:0.0: remote input dev register failed [ 341.058077][ T9] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 341.072061][T13848] overlayfs: missing 'lowerdir' [ 341.266875][ T9] imon 6-1:0.0: unable to initialize intf0, err 0 [ 341.299242][ T9] imon:imon_probe: failed to initialize context! [ 341.319081][ T9] imon 6-1:0.0: unable to register, err -19 [ 341.389271][ T9] usb 6-1: USB disconnect, device number 19 [ 341.427047][T13854] loop3: detected capacity change from 0 to 4096 [ 341.469678][T13854] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 341.516904][T13866] loop2: detected capacity change from 0 to 64 [ 341.617312][T13854] ntfs3(loop3): ino=1a, mi_enum_attr [ 341.638970][T13854] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 341.674353][T13854] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 342.291300][T13882] loop3: detected capacity change from 0 to 1024 [ 342.297974][T13884] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 342.354522][T13882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.438198][T13882] EXT4-fs warning (device loop3): ext4_rmdir:3185: inode #11: comm syz.3.3573: empty directory 'file1' has too many links (111) [ 342.674818][T13858] loop0: detected capacity change from 0 to 32768 [ 342.701061][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.719123][T13858] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3564 (13858) [ 342.804678][T13858] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.870343][T13858] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 342.916244][T13858] BTRFS info (device loop0): using free-space-tree [ 343.016446][T13862] loop1: detected capacity change from 0 to 32768 [ 343.131119][T13862] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 343.372133][ T5835] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 343.401901][T13922] loop4: detected capacity change from 0 to 4096 [ 343.450645][T13862] XFS (loop1): Ending clean mount [ 343.508411][T13862] XFS (loop1): Quotacheck needed: Please wait. [ 343.655845][T13862] XFS (loop1): Quotacheck: Done. [ 343.917391][ T5834] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 344.068813][T13953] netlink: 'syz.4.3595': attribute type 4 has an invalid length. [ 344.116435][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3595'. [ 345.637690][T14004] autofs4:pid:14004:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 345.716485][T14009] netlink: 'syz.1.3621': attribute type 2 has an invalid length. [ 345.793978][T14009] : entered promiscuous mode [ 346.218155][T14026] tmpfs: Bad value for 'mpol' [ 346.276160][T13966] loop2: detected capacity change from 0 to 40427 [ 346.375619][T13966] F2FS-fs (loop2): invalid crc value [ 346.467773][T14028] loop4: detected capacity change from 0 to 4096 [ 346.507738][T14028] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 346.629120][T14028] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 346.665422][T14028] ntfs3(loop4): Failed to load $Extend (-22). [ 346.693625][T14028] ntfs3(loop4): Failed to initialize $Extend. [ 346.813134][T13966] F2FS-fs (loop2): Start checkpoint disabled! [ 346.893519][T13966] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 347.938952][ T5901] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 348.119058][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 348.134788][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 348.171552][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 348.179106][T14090] netlink: 'syz.4.3657': attribute type 1 has an invalid length. [ 348.196462][T14056] loop0: detected capacity change from 0 to 32768 [ 348.212157][ T5901] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 348.237933][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.269689][ T5901] usb 6-1: Product: syz [ 348.273862][ T5901] usb 6-1: Manufacturer: syz [ 348.278581][ T5901] usb 6-1: SerialNumber: syz [ 348.286673][ T5901] usb 6-1: config 0 descriptor?? [ 348.311790][ T5901] usb 6-1: no audio or video endpoints found [ 348.329153][T14056] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 348.528801][ T5901] usb 6-1: USB disconnect, device number 20 [ 348.529364][T14056] XFS (loop0): Ending clean mount [ 348.572064][T14056] XFS (loop0): Quotacheck needed: Please wait. [ 348.673734][T14056] XFS (loop0): Quotacheck: Done. [ 348.841544][T14112] loop2: detected capacity change from 0 to 4096 [ 348.879824][T14112] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 348.932376][T14112] NILFS (loop2): invalid segment: Checksum error in segment payload [ 348.977871][T14112] NILFS (loop2): unable to fall back to spare super block [ 348.995271][T14112] NILFS (loop2): error -22 while searching super root [ 349.221150][ T5835] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 349.821516][T14146] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3681'. [ 349.830973][ T30] audit: type=1326 audit(1744148925.697:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.5.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 349.889209][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'. [ 349.898243][T14150] loop0: detected capacity change from 0 to 256 [ 349.943413][ T30] audit: type=1326 audit(1744148925.697:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.5.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 349.965690][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.972669][ T30] audit: type=1326 audit(1744148925.737:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.5.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 349.995090][ T30] audit: type=1326 audit(1744148925.737:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.5.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 350.017317][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.097263][ T30] audit: type=1326 audit(1744148925.737:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14147 comm="syz.5.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63898d169 code=0x7ffc0000 [ 350.605382][T14172] netlink: 372 bytes leftover after parsing attributes in process `syz.4.3694'. [ 350.783062][ T5860] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 350.835948][T14176] loop4: detected capacity change from 0 to 256 [ 350.889375][T14176] exfat: Deprecated parameter 'namecase' [ 350.915358][T14176] exfat: Deprecated parameter 'utf8' [ 350.975001][ T5860] usb 1-1: config 7 has an invalid interface number: 170 but max is 0 [ 350.991173][T14176] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 351.013599][ T5860] usb 1-1: config 7 has no interface number 0 [ 351.030002][T14156] loop5: detected capacity change from 0 to 32768 [ 351.051443][ T5860] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=24.83 [ 351.086688][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.101600][T14156] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 351.114368][ T5860] usb 1-1: Product: syz [ 351.118550][ T5860] usb 1-1: Manufacturer: syz [ 351.131664][ T5860] usb 1-1: SerialNumber: syz [ 351.237083][T14156] XFS (loop5): Ending clean mount [ 351.253442][T14192] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3699'. [ 351.277454][T14156] XFS (loop5): Quotacheck needed: Please wait. [ 351.358463][T14156] XFS (loop5): Quotacheck: Done. [ 351.367530][T14187] loop1: detected capacity change from 0 to 4096 [ 351.426071][ T5860] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 351.463765][ T5860] command write [95] error -22 [ 351.481247][T14187] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 351.507730][ T5836] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 351.535919][T14187] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 351.555111][ T5860] usb 1-1: USB disconnect, device number 12 [ 352.047132][T14205] loop2: detected capacity change from 0 to 256 [ 352.513558][T14222] loop4: detected capacity change from 0 to 1024 [ 352.661493][T14222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.778393][T14222] EXT4-fs error (device loop4): ext4_xattr_set_entry:1660: inode #13: comm syz.4.3712: corrupted xattr entries [ 352.859562][T14239] netlink: 'syz.3.3720': attribute type 1 has an invalid length. [ 353.003042][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.145306][T14245] loop1: detected capacity change from 0 to 512 [ 353.276644][T14245] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.3723: corrupted in-inode xattr: invalid ea_ino [ 353.418445][T14245] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3723: couldn't read orphan inode 15 (err -117) [ 353.452112][T14245] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.547395][T14232] loop2: detected capacity change from 0 to 32768 [ 353.603921][T14232] XFS: ikeep mount option is deprecated. [ 353.657548][T14232] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 353.733903][ T5834] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 353.955095][T14232] XFS (loop2): Ending clean mount [ 353.993677][T14232] XFS (loop2): Quotacheck needed: Please wait. [ 354.125420][T14232] XFS (loop2): Quotacheck: Done. [ 354.178268][T14232] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x352/0x1570, inode 0x42b dinode [ 354.208941][T14232] XFS (loop2): Unmount and run xfs_repair [ 354.208992][T14232] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 354.209016][T14232] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 354.209039][T14232] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 354.209060][T14232] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 354.209081][T14232] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 354.209102][T14232] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 354.209122][T14232] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 354.209142][T14232] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [ 354.209164][T14232] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [ 354.209316][T14232] XFS (loop2): Internal error xfs_trans_cancel at line 1002 of file fs/xfs/xfs_trans.c. Caller xfs_create+0x983/0x1060 [ 354.209391][T14232] CPU: 0 UID: 0 PID: 14232 Comm: syz.2.3716 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 354.209424][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 354.209441][T14232] Call Trace: [ 354.209452][T14232] [ 354.209462][T14232] dump_stack_lvl+0x241/0x360 [ 354.209510][T14232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.209557][T14232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 354.209596][T14232] ? xfs_error_report+0x96/0xd0 [ 354.209626][T14232] ? xfs_create+0x983/0x1060 [ 354.209661][T14232] ? xfs_create+0x983/0x1060 [ 354.209705][T14232] xfs_trans_cancel+0x1ed/0x420 [ 354.209739][T14232] ? xfs_create+0x983/0x1060 [ 354.209784][T14232] xfs_create+0x983/0x1060 [ 354.209842][T14232] ? __pfx_xfs_create+0x10/0x10 [ 354.209879][T14232] ? __get_acl+0xa9/0x4e0 [ 354.209920][T14232] ? __pfx___get_acl+0x10/0x10 [ 354.209957][T14232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 354.209989][T14232] ? _raw_spin_unlock+0x28/0x50 [ 354.210018][T14232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 354.210052][T14232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 354.210084][T14232] ? posix_acl_create+0x162/0x430 [ 354.210129][T14232] xfs_generic_create+0x5d9/0xf50 [ 354.210181][T14232] ? __pfx_xfs_generic_create+0x10/0x10 [ 354.210221][T14232] ? end_current_label_crit_section+0x151/0x180 [ 354.210266][T14232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 354.210300][T14232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 354.210331][T14232] ? from_kgid+0x215/0x740 [ 354.210358][T14232] ? make_vfsuid+0x52/0xa0 [ 354.210398][T14232] ? generic_permission+0x2db/0x680 [ 354.210463][T14232] xfs_vn_mkdir+0x37/0x50 [ 354.210502][T14232] vfs_mkdir+0x2fb/0x500 [ 354.210546][T14232] do_mkdirat+0x273/0x3f0 [ 354.210589][T14232] ? __pfx_do_mkdirat+0x10/0x10 [ 354.210627][T14232] ? srso_alias_return_thunk+0x5/0xfbef5 [ 354.210658][T14232] ? getname_flags+0x1e2/0x530 [ 354.210707][T14232] __x64_sys_mkdirat+0x87/0xa0 [ 354.210744][T14232] do_syscall_64+0xf3/0x230 [ 354.210788][T14232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.210814][T14232] RIP: 0033:0x7f18def8b9d7 [ 354.210836][T14232] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.210860][T14232] RSP: 002b:00007f18dfd49e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 354.210888][T14232] RAX: ffffffffffffffda RBX: 00007f18dfd49ef0 RCX: 00007f18def8b9d7 [ 354.210908][T14232] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 354.210927][T14232] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000 [ 354.210945][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100 [ 354.210963][T14232] R13: 00007f18dfd49eb0 R14: 0000000000000000 R15: 0000000000000000 [ 354.211006][T14232] [ 354.270067][T14232] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x206/0x420 (fs/xfs/xfs_trans.c:1003). Shutting down filesystem. [ 354.270130][T14232] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 354.387671][T14295] loop5: detected capacity change from 0 to 256 [ 354.428621][ T5839] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 354.508491][T14295] FAT-fs (loop5): Directory bread(block 64) failed [ 354.508544][T14295] FAT-fs (loop5): Directory bread(block 65) failed [ 354.508641][T14295] FAT-fs (loop5): Directory bread(block 66) failed [ 354.508675][T14295] FAT-fs (loop5): Directory bread(block 67) failed [ 354.508797][T14295] FAT-fs (loop5): Directory bread(block 68) failed [ 354.509112][T14295] FAT-fs (loop5): Directory bread(block 69) failed [ 354.509212][T14295] FAT-fs (loop5): Directory bread(block 70) failed [ 354.509247][T14295] FAT-fs (loop5): Directory bread(block 71) failed [ 354.509347][T14295] FAT-fs (loop5): Directory bread(block 72) failed [ 354.509381][T14295] FAT-fs (loop5): Directory bread(block 73) failed [ 354.831321][ T24] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 355.224754][T14290] ================================================================== [ 355.224775][T14290] BUG: KASAN: global-out-of-bounds in bit_putcs+0x1494/0x1dd0 [ 355.224818][T14290] Read of size 1 at addr ffffffff8ca44530 by task syz.4.3740/14290 [ 355.224840][T14290] [ 355.224852][T14290] CPU: 0 UID: 0 PID: 14290 Comm: syz.4.3740 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 355.224882][T14290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.224898][T14290] Call Trace: [ 355.224907][T14290] [ 355.224917][T14290] dump_stack_lvl+0x241/0x360 [ 355.224959][T14290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.224995][T14290] ? __virt_addr_valid+0x183/0x530 [ 355.225029][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.225059][T14290] ? rcu_is_watching+0x15/0xb0 [ 355.225091][T14290] ? __virt_addr_valid+0x183/0x530 [ 355.225124][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.225153][T14290] ? lock_release+0x4e/0x3e0 [ 355.225181][T14290] ? __virt_addr_valid+0x183/0x530 [ 355.225215][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.225247][T14290] print_report+0x16e/0x5b0 [ 355.225280][T14290] ? __virt_addr_valid+0x183/0x530 [ 355.225315][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.225343][T14290] ? __virt_addr_valid+0x45f/0x530 [ 355.225376][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.225405][T14290] ? __phys_addr+0x113/0x170 [ 355.225440][T14290] ? bit_putcs+0x1494/0x1dd0 [ 355.225473][T14290] kasan_report+0x143/0x180 [ 355.225507][T14290] ? bit_putcs+0x1494/0x1dd0 [ 355.225545][T14290] bit_putcs+0x1494/0x1dd0 [ 355.225609][T14290] ? __pfx_bit_putcs+0x10/0x10 [ 355.225645][T14290] ? __pfx_bit_cursor+0x10/0x10 [ 355.225679][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.225711][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.225744][T14290] fbcon_putcs+0x2e2/0x450 [ 355.225776][T14290] ? __pfx_bit_putcs+0x10/0x10 [ 355.225811][T14290] hide_cursor+0x381/0x4c0 [ 355.225838][T14290] ? __pfx_hide_cursor+0x10/0x10 [ 355.225863][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.225894][T14290] do_con_write+0x1f1/0x4c40 [ 355.225930][T14290] ? __pfx_prb_first_seq+0x10/0x10 [ 355.225959][T14290] ? __lock_acquire+0xad5/0xd80 [ 355.225987][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226020][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226049][T14290] ? this_cpu_in_panic+0x4f/0x80 [ 355.226078][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226106][T14290] ? _prb_read_valid+0xb13/0xbb0 [ 355.226148][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226177][T14290] ? __lock_acquire+0xad5/0xd80 [ 355.226205][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226235][T14290] ? __mutex_trylock_common+0x184/0x2e0 [ 355.226273][T14290] ? __pfx_do_con_write+0x10/0x10 [ 355.226310][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226339][T14290] ? rcu_is_watching+0x15/0xb0 [ 355.226372][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226401][T14290] ? trace_contention_end+0x3c/0x120 [ 355.226436][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226465][T14290] ? __mutex_lock+0x380/0x10c0 [ 355.226501][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226531][T14290] ? __mutex_unlock_slowpath+0x229/0x800 [ 355.226565][T14290] ? n_tty_write+0xe26/0x1270 [ 355.226608][T14290] ? __pfx___mutex_lock+0x10/0x10 [ 355.226640][T14290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 355.226671][T14290] ? __pfx_bit_cursor+0x10/0x10 [ 355.226708][T14290] con_write+0x26/0x40 [ 355.226740][T14290] do_output_char+0x64e/0x970 [ 355.226766][T14290] n_tty_write+0xe3c/0x1270 [ 355.226817][T14290] ? __pfx_n_tty_write+0x10/0x10 [ 355.226856][T14290] ? __pfx_woken_wake_function+0x10/0x10 [ 355.226883][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.226911][T14290] ? rcu_is_watching+0x15/0xb0 [ 355.226944][T14290] ? kfree+0x54/0x430 [ 355.226976][T14290] ? file_tty_write+0x305/0x9d0 [ 355.227007][T14290] ? __pfx_n_tty_write+0x10/0x10 [ 355.227045][T14290] file_tty_write+0x545/0x9d0 [ 355.227080][T14290] vfs_write+0x711/0xd10 [ 355.227114][T14290] ? __pfx_tty_write+0x10/0x10 [ 355.227144][T14290] ? __pfx_vfs_write+0x10/0x10 [ 355.227170][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.227203][T14290] ? __fget_files+0x2a/0x420 [ 355.227229][T14290] ? __fget_files+0x2a/0x420 [ 355.227253][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.227286][T14290] ksys_write+0x19d/0x2d0 [ 355.227336][T14290] ? __pfx_ksys_write+0x10/0x10 [ 355.227370][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.227403][T14290] do_syscall_64+0xf3/0x230 [ 355.227439][T14290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.227463][T14290] RIP: 0033:0x7f451c38d169 [ 355.227485][T14290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.227507][T14290] RSP: 002b:00007f451d1e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.227535][T14290] RAX: ffffffffffffffda RBX: 00007f451c5a5fa0 RCX: 00007f451c38d169 [ 355.227555][T14290] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000003 [ 355.227572][T14290] RBP: 00007f451c40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 355.227589][T14290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.227610][T14290] R13: 0000000000000000 R14: 00007f451c5a5fa0 R15: 00007ffc59093658 [ 355.227639][T14290] [ 355.227649][T14290] [ 355.227656][T14290] The buggy address belongs to the variable: [ 355.227666][T14290] fontdata_8x16+0x1210/0x1480 [ 355.227698][T14290] [ 355.227705][T14290] The buggy address belongs to the physical page: [ 355.227716][T14290] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xca44 [ 355.227739][T14290] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 355.227778][T14290] raw: 00fff00000002000 ffffea0000329108 ffffea0000329108 0000000000000000 [ 355.227801][T14290] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 355.227816][T14290] page dumped because: kasan: bad access detected [ 355.227832][T14290] page_owner info is not present (never set?) [ 355.227842][T14290] [ 355.227849][T14290] Memory state around the buggy address: [ 355.227863][T14290] ffffffff8ca44400: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 355.227881][T14290] ffffffff8ca44480: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 355.227899][T14290] >ffffffff8ca44500: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 355.227914][T14290] ^ [ 355.227929][T14290] ffffffff8ca44580: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 355.227947][T14290] ffffffff8ca44600: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 355.227962][T14290] ================================================================== [ 355.227977][T14290] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 355.227995][T14290] CPU: 0 UID: 0 PID: 14290 Comm: syz.4.3740 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 355.228027][T14290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.228043][T14290] Call Trace: [ 355.228053][T14290] [ 355.228064][T14290] dump_stack_lvl+0x241/0x360 [ 355.228104][T14290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.228143][T14290] ? __pfx__printk+0x10/0x10 [ 355.228183][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.228213][T14290] ? vscnprintf+0x5d/0x90 [ 355.228255][T14290] panic+0x349/0x880 [ 355.228291][T14290] ? check_panic_on_warn+0x21/0xb0 [ 355.228328][T14290] ? __pfx_panic+0x10/0x10 [ 355.228366][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.228396][T14290] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 355.228424][T14290] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 355.228452][T14290] ? print_report+0x519/0x5b0 [ 355.228491][T14290] check_panic_on_warn+0x86/0xb0 [ 355.228527][T14290] ? bit_putcs+0x1494/0x1dd0 [ 355.228561][T14290] end_report+0x77/0x160 [ 355.228597][T14290] kasan_report+0x154/0x180 [ 355.228632][T14290] ? bit_putcs+0x1494/0x1dd0 [ 355.228672][T14290] bit_putcs+0x1494/0x1dd0 [ 355.228734][T14290] ? __pfx_bit_putcs+0x10/0x10 [ 355.228773][T14290] ? __pfx_bit_cursor+0x10/0x10 [ 355.228809][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.228847][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.228880][T14290] fbcon_putcs+0x2e2/0x450 [ 355.228913][T14290] ? __pfx_bit_putcs+0x10/0x10 [ 355.228950][T14290] hide_cursor+0x381/0x4c0 [ 355.228977][T14290] ? __pfx_hide_cursor+0x10/0x10 [ 355.229006][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229039][T14290] do_con_write+0x1f1/0x4c40 [ 355.229077][T14290] ? __pfx_prb_first_seq+0x10/0x10 [ 355.229107][T14290] ? __lock_acquire+0xad5/0xd80 [ 355.229139][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229176][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229207][T14290] ? this_cpu_in_panic+0x4f/0x80 [ 355.229238][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229269][T14290] ? _prb_read_valid+0xb13/0xbb0 [ 355.229313][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229344][T14290] ? __lock_acquire+0xad5/0xd80 [ 355.229373][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229404][T14290] ? __mutex_trylock_common+0x184/0x2e0 [ 355.229445][T14290] ? __pfx_do_con_write+0x10/0x10 [ 355.229483][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229514][T14290] ? rcu_is_watching+0x15/0xb0 [ 355.229548][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229579][T14290] ? trace_contention_end+0x3c/0x120 [ 355.229618][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229649][T14290] ? __mutex_lock+0x380/0x10c0 [ 355.229686][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.229716][T14290] ? __mutex_unlock_slowpath+0x229/0x800 [ 355.229753][T14290] ? n_tty_write+0xe26/0x1270 [ 355.229793][T14290] ? __pfx___mutex_lock+0x10/0x10 [ 355.229827][T14290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 355.229860][T14290] ? __pfx_bit_cursor+0x10/0x10 [ 355.229900][T14290] con_write+0x26/0x40 [ 355.229934][T14290] do_output_char+0x64e/0x970 [ 355.229963][T14290] n_tty_write+0xe3c/0x1270 [ 355.230016][T14290] ? __pfx_n_tty_write+0x10/0x10 [ 355.230058][T14290] ? __pfx_woken_wake_function+0x10/0x10 [ 355.230087][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.230118][T14290] ? rcu_is_watching+0x15/0xb0 [ 355.230152][T14290] ? kfree+0x54/0x430 [ 355.230186][T14290] ? file_tty_write+0x305/0x9d0 [ 355.230220][T14290] ? __pfx_n_tty_write+0x10/0x10 [ 355.230259][T14290] file_tty_write+0x545/0x9d0 [ 355.230297][T14290] vfs_write+0x711/0xd10 [ 355.230332][T14290] ? __pfx_tty_write+0x10/0x10 [ 355.230365][T14290] ? __pfx_vfs_write+0x10/0x10 [ 355.230393][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.230429][T14290] ? __fget_files+0x2a/0x420 [ 355.230455][T14290] ? __fget_files+0x2a/0x420 [ 355.230481][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.230515][T14290] ksys_write+0x19d/0x2d0 [ 355.230547][T14290] ? __pfx_ksys_write+0x10/0x10 [ 355.230582][T14290] ? srso_alias_return_thunk+0x5/0xfbef5 [ 355.230621][T14290] do_syscall_64+0xf3/0x230 [ 355.230658][T14290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.230684][T14290] RIP: 0033:0x7f451c38d169 [ 355.230705][T14290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.230728][T14290] RSP: 002b:00007f451d1e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.230757][T14290] RAX: ffffffffffffffda RBX: 00007f451c5a5fa0 RCX: 00007f451c38d169 [ 355.230778][T14290] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000003 [ 355.230797][T14290] RBP: 00007f451c40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 355.230815][T14290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.230833][T14290] R13: 0000000000000000 R14: 00007f451c5a5fa0 R15: 00007ffc59093658 [ 355.230863][T14290] [ 355.231229][T14290] Kernel Offset: disabled