last executing test programs: 5m3.186078633s ago: executing program 3 (id=5373): r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000002280)={0xe7ff, 0x1, 0x40}) 5m2.942486732s ago: executing program 3 (id=5375): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x20, 0xfffffffe, 0x50424752, 0x8, 0x7, [{0x7d, 0x4}, {0x7, 0x2}, {0x35b2, 0x9}, {0x3a3, 0x9}, {0x6, 0x3}, {0x1800000, 0xffffffff}, {0x10001, 0x1}, {0x6, 0x7}], 0xfd, 0x1, 0x3, 0x0, 0x1}}) 5m2.539791278s ago: executing program 3 (id=5383): setrlimit(0x8, &(0x7f0000000080)) mlockall(0x3) 5m0.732397985s ago: executing program 3 (id=5405): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=cp850,dmask=00000000000000000000777,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30300000000000000040303030303030303030303031302c757466382c666d61736b3d30303030303030303030303030303030303030303030372c6572726f72733d72476d6f756e742d726f2c6e616d65636173653d312c706c6c6f775f7574696d653d30303030323030303030303030303015303134373037302c00904f5ef6c3660c06b4d7d3172ed33955a22d96c6b58d48d25609fc8fd957db7f4cfb97e98333158a7878aa16963be19155c4a0068007e41cc520b790c6292f5e20dbf5725a2a02670903b3d75dfbb2030d8cdef5210ed5485e27f1d33f67e2d90248d081d098053c"], 0x1, 0x1528, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 5m0.024460691s ago: executing program 3 (id=5413): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m59.007296015s ago: executing program 3 (id=5424): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@sys_tz}, {@allow_utime={'allow_utime', 0x3d, 0x1}}, {@discard}, {@errors_continue}, {@errors_remount}, {@utf8}, {}]}, 0x1, 0x1525, &(0x7f00000037c0)="$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") open(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x511382, 0x0) 4m58.41401056s ago: executing program 32 (id=5424): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@sys_tz}, {@allow_utime={'allow_utime', 0x3d, 0x1}}, {@discard}, {@errors_continue}, {@errors_remount}, {@utf8}, {}]}, 0x1, 0x1525, &(0x7f00000037c0)="$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") open(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x511382, 0x0) 2m34.138690883s ago: executing program 1 (id=7392): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0xffffffff}, 0x1c) 2m33.966122908s ago: executing program 1 (id=7395): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000027010000000000000000000018140000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e9800000020000026080000000000008500000007000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m33.911842547s ago: executing program 1 (id=7396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 2m33.680075956s ago: executing program 1 (id=7400): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts={{0x14, 0x29, 0x37, {0x3a}}}], 0x14}, 0x0) 2m33.384280421s ago: executing program 1 (id=7404): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0x1, 0x200, &(0x7f0000006140)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m32.303603381s ago: executing program 1 (id=7419): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2m17.16567346s ago: executing program 33 (id=7419): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.545535088s ago: executing program 5 (id=9492): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@discard}, {@autodefrag}, {@datacow}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) 3.255524369s ago: executing program 0 (id=9510): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) 2.841200757s ago: executing program 0 (id=9515): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) readv(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)=""/15, 0xf}], 0x2) 2.520585081s ago: executing program 0 (id=9519): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x81, 0x4ac, &(0x7f00000011c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2.290793892s ago: executing program 4 (id=9522): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 2.100525152s ago: executing program 0 (id=9524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x200, 0xffffffffffffffff}) 2.018480434s ago: executing program 6 (id=9525): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3}, @sadb_x_sec_ctx={0x1}]}, 0xc8}}, 0x0) 2.018357074s ago: executing program 7 (id=9526): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010, 0x4, 0x410, 0x2, 0x4, 0x1}) 1.978424894s ago: executing program 4 (id=9528): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc}) 1.811630605s ago: executing program 7 (id=9529): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg(r0, &(0x7f0000009900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007380)=[{0x10, 0x84, 0x2b7}], 0x10}}], 0x1, 0x40010) 1.796270247s ago: executing program 0 (id=9530): fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5", @ANYRES8], 0x0) 1.785535895s ago: executing program 2 (id=9531): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) 1.71555379s ago: executing program 5 (id=9532): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x198, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 1.700789889s ago: executing program 6 (id=9533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtaction={0x48, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.639201725s ago: executing program 4 (id=9534): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64], 0x20) 1.532705321s ago: executing program 2 (id=9535): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) modify_ldt$write(0x1, 0x0, 0x0) 1.53200206s ago: executing program 7 (id=9536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x3, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x7, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.368344079s ago: executing program 2 (id=9537): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x1}) 1.307597006s ago: executing program 6 (id=9538): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000600000000000000180000000000000000000000000000009500000000000000340300f10400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.293808818s ago: executing program 4 (id=9539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xc) 1.068667258s ago: executing program 5 (id=9540): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0x1}, {0x0}], 0x2) 1.018467094s ago: executing program 2 (id=9541): r0 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 987.238046ms ago: executing program 6 (id=9542): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002000)={&(0x7f0000001cc0)={0xa, 0x4e22, 0x800, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast2}}}], 0x20}, 0x8015) 937.065887ms ago: executing program 7 (id=9543): unshare(0x20400) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0xee00, 0x0) 791.531289ms ago: executing program 4 (id=9544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000021c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty, 0xff000000, 0xffffffff, 0x5, 0x10, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0xd105, 0x6, 0x8001, 0x0, 0x984d, 0x6, '\x00', 'lo\x00', {0xff}, {0xff}, 0x0, 0x60}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xc498}}}, {{@arp={@loopback, @remote, 0xff000000, 0xffffff00, 0x0, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, {[0x0, 0xff, 0xff]}}, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x10, 0x1, 0x0, 0xb64, 0x3, 'erspan0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x6c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 789.415678ms ago: executing program 5 (id=9545): r0 = fsopen(&(0x7f0000000240)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 654.413568ms ago: executing program 7 (id=9546): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 644.586364ms ago: executing program 6 (id=9547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x80, 0x20, 0x14, 0x0, 0x2, 0x2, 0x0, 0x5}}, 0x1c}}, 0x8000) 606.866417ms ago: executing program 2 (id=9548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000030427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000003c0012800b00010067656e65766500002c000280060005004e240000080001000300000004000600060005004e2200000500030005000000040006000a000100aa"], 0x78}}, 0x20048004) 486.307207ms ago: executing program 4 (id=9549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}}, 0x0) 476.393684ms ago: executing program 5 (id=9550): r0 = socket$inet(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ts_info}) 286.370582ms ago: executing program 7 (id=9551): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000001100)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@discard}, {@errors_remount}, {@abort, 0x0}, {@noload}, {@usrquota}, {@mb_optimize_scan}, {@resuid}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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") ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) 285.47463ms ago: executing program 6 (id=9552): ioperm(0x0, 0x5, 0x4000000000000020) munlock(&(0x7f0000002000/0x1000)=nil, 0xffffffffdfffdfff) 228.115998ms ago: executing program 2 (id=9553): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000340)=0x42, 0x4) 227.519541ms ago: executing program 5 (id=9554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000240)) 0s ago: executing program 0 (id=9555): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x40080) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) kernel console output (not intermixed with test programs): ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 815.689817][T23827] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8寥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 815.719902][T14600] Bluetooth: hci6: command tx timeout [ 816.034545][T23868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.360024][ T5948] usb 6-1: USB disconnect, device number 111 [ 816.379003][T13571] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 816.394189][T13571] ath9k_htc: Failed to initialize the device [ 816.570147][ T5948] usb 6-1: ath9k_htc: USB layer deinitialized [ 816.602400][T23641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.640801][T23879] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 816.649784][T23879] overlayfs: missing 'lowerdir' [ 817.109330][T23894] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7767'. [ 817.220400][T13571] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 817.389674][T23904] loop6: detected capacity change from 0 to 64 [ 817.430550][T13571] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 817.460587][T13571] usb 5-1: config 4 has no interface number 0 [ 817.488095][T13571] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 817.549839][T13571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.573109][T13571] usb 5-1: Product: syz [ 817.577316][T13571] usb 5-1: Manufacturer: syz [ 817.618249][T13571] usb 5-1: SerialNumber: syz [ 817.626442][T23862] loop5: detected capacity change from 0 to 32768 [ 817.688681][T13571] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 817.734447][T23862] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 817.801378][T23641] veth0_vlan: entered promiscuous mode [ 817.891509][T23862] XFS (loop5): Ending clean mount [ 817.907339][T23641] veth1_vlan: entered promiscuous mode [ 817.932297][T23862] XFS (loop5): Quotacheck needed: Please wait. [ 818.049126][T23641] veth0_macvtap: entered promiscuous mode [ 818.071827][T23862] XFS (loop5): Quotacheck: Done. [ 818.095826][T13571] vp7045: USB control message 'in' went wrong. [ 818.121959][T13571] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 818.122610][T23641] veth1_macvtap: entered promiscuous mode [ 818.152512][T13571] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 818.182731][T23927] cgroup: name respecified [ 818.184325][T13571] usb 5-1: USB disconnect, device number 98 [ 818.336291][T23641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.380281][T23641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.429218][T23641] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.446875][T23641] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.457621][T23641] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.498817][T23641] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.517234][ T5834] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 818.667663][T23933] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 818.723344][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.731543][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.821333][ T30] audit: type=1326 audit(818.892:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.2.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 818.843174][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.937137][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.946999][ T30] audit: type=1326 audit(818.942:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.2.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 818.969071][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.051817][ T30] audit: type=1326 audit(818.942:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.2.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 819.141864][ T30] audit: type=1326 audit(818.955:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.2.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 819.204569][ T30] audit: type=1326 audit(818.955:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23934 comm="syz.2.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 819.275165][T23920] loop6: detected capacity change from 0 to 32768 [ 819.396258][T23920] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 819.405249][T22990] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 819.552254][T23920] XFS (loop6): Ending clean mount [ 819.570473][T22990] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.591165][T22990] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 819.610389][T23957] gre1: entered promiscuous mode [ 819.622684][T23920] XFS (loop6): Quotacheck needed: Please wait. [ 819.632304][T22990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.655352][T22990] usb 3-1: Product: syz [ 819.659555][T22990] usb 3-1: Manufacturer: syz [ 819.683161][T22990] usb 3-1: SerialNumber: syz [ 819.718331][T22990] usb 3-1: config 0 descriptor?? [ 819.861196][T23920] XFS (loop6): Quotacheck: Done. [ 819.993010][T22990] usb-storage 3-1:0.0: USB Mass Storage device detected [ 820.116404][T23977] netlink: 'syz.7.7797': attribute type 1 has an invalid length. [ 820.137922][T23977] netlink: 184 bytes leftover after parsing attributes in process `syz.7.7797'. [ 820.173507][T18543] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 820.256404][T22990] usb 3-1: USB disconnect, device number 112 [ 820.791976][T23991] loop7: detected capacity change from 0 to 16 [ 820.911892][T23991] erofs (device loop7): mounted with root inode @ nid 36. [ 821.275281][T24003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7811'. [ 821.469057][T23969] loop5: detected capacity change from 0 to 40427 [ 821.565587][T24015] netlink: 'syz.6.7815': attribute type 3 has an invalid length. [ 821.917073][T23969] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 821.924676][T24028] loop6: detected capacity change from 0 to 2048 [ 822.098042][T24028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 822.750591][T24053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7833'. [ 822.807092][T24053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7833'. [ 822.850572][T24058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7836'. [ 823.119684][T24065] cifs: Unknown parameter 'ÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 823.119684][T24065] SÃȘØÈžZ§6ŸÂ' [ 823.477297][T24079] loop7: detected capacity change from 0 to 1024 [ 823.677775][ T5912] hfsplus: b-tree write err: -5, ino 4 [ 823.692742][ T5948] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 823.733631][T24086] loop4: detected capacity change from 0 to 1024 [ 823.783596][T24086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 823.803039][T24089] netlink: 'syz.6.7851': attribute type 3 has an invalid length. [ 823.829200][T24086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 823.864510][T24091] netlink: 412 bytes leftover after parsing attributes in process `syz.0.7852'. [ 823.891536][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 823.907380][ T5948] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 823.918450][T24086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.964503][ T5948] usb 3-1: config 0 has no interface number 0 [ 824.038051][ T5948] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 824.109158][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.149436][ T5948] usb 3-1: Product: syz [ 824.153648][ T5948] usb 3-1: Manufacturer: syz [ 824.201806][ T5948] usb 3-1: SerialNumber: syz [ 824.220334][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.221440][T24103] netlink: 'syz.7.7856': attribute type 1 has an invalid length. [ 824.257921][ T5948] usb 3-1: config 0 descriptor?? [ 824.269312][T24103] netlink: 'syz.7.7856': attribute type 11 has an invalid length. [ 824.273664][T24105] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 824.297990][ T5948] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 824.327767][T24103] netlink: 220 bytes leftover after parsing attributes in process `syz.7.7856'. [ 824.523488][ T5948] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 824.548777][ T5948] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 824.559749][ T30] audit: type=1326 audit(824.680:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24112 comm="syz.0.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f18e969 code=0x7ffc0000 [ 824.699026][ T30] audit: type=1326 audit(824.680:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24112 comm="syz.0.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f18e969 code=0x7ffc0000 [ 824.781616][ T5948] usb 3-1: USB disconnect, device number 113 [ 824.794882][T24118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7864'. [ 824.833880][ T30] audit: type=1326 audit(824.730:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24112 comm="syz.0.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f495f18e969 code=0x7ffc0000 [ 824.962856][ T30] audit: type=1326 audit(824.730:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24112 comm="syz.0.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f495f18e9a3 code=0x7ffc0000 [ 825.078550][ T30] audit: type=1326 audit(824.730:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24112 comm="syz.0.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f495f18e9a3 code=0x7ffc0000 [ 825.200430][ T30] audit: type=1326 audit(824.750:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24112 comm="syz.0.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f18e969 code=0x7ffc0000 [ 825.275290][ T30] audit: type=1326 audit(824.750:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24112 comm="syz.0.7861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f18e969 code=0x7ffc0000 [ 825.784956][ T10] kernel write not supported for file /2750/net/fib_triestat (pid: 10 comm: kworker/0:1) [ 825.887988][T22990] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 825.890898][ T30] audit: type=1326 audit(826.020:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 825.958412][ T30] audit: type=1326 audit(826.020:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 825.989186][ T30] audit: type=1326 audit(826.070:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24157 comm="syz.2.7884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 826.108095][T22990] usb 8-1: unable to get BOS descriptor or descriptor too short [ 826.130572][T22990] usb 8-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 826.171962][T22990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.205855][T24170] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7890'. [ 826.209750][T22990] usb 8-1: Product: syz [ 826.229784][T22990] usb 8-1: Manufacturer: syz [ 826.250294][T22990] usb 8-1: SerialNumber: syz [ 826.392647][T24175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 826.505221][T22990] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 826.604222][T22990] snd-usb-audio 8-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 826.671213][T22990] usb 8-1: USB disconnect, device number 2 [ 826.822138][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 827.421674][T24216] ieee802154 phy1 wpan1: encryption failed: -22 [ 828.606847][T24264] netlink: 'syz.7.7935': attribute type 3 has an invalid length. [ 828.615687][ T52] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 828.640761][T24264] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7935'. [ 828.776860][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 828.808045][ T52] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 828.833150][ T52] usb 6-1: config 2 has no interface number 0 [ 828.849454][ T52] usb 6-1: config 2 interface 31 has no altsetting 0 [ 828.881651][ T52] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 828.894015][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.921173][ T52] usb 6-1: Product: syz [ 828.939966][ T52] usb 6-1: Manufacturer: syz [ 828.970230][ T52] usb 6-1: SerialNumber: syz [ 829.250708][T24250] infiniband syz2: set down [ 829.273975][T24250] infiniband syz2: added ipvlan1 [ 829.305215][T24250] syz2: rxe_create_cq: returned err = -12 [ 829.351362][T24250] infiniband syz2: Couldn't create ib_mad CQ [ 829.357778][T24250] infiniband syz2: Couldn't open port 1 [ 829.449971][ T52] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 829.486623][ T52] usb 6-1: USB disconnect, device number 112 [ 829.542248][T24250] RDS/IB: syz2: added [ 829.575324][T24250] smc: adding ib device syz2 with port count 1 [ 829.598393][T24250] smc: ib device syz2 port 1 has pnetid [ 829.650387][T22990] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 829.830151][T22990] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 829.862235][T22990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.898166][T22990] usb 7-1: config 0 descriptor?? [ 829.941668][T24302] overlayfs: conflicting options: metacopy=off,verity=require [ 830.316058][T22990] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0f [ 830.326302][T22990] hackrf 7-1:0.0: Could not detect board [ 830.333024][T22990] hackrf 7-1:0.0: probe with driver hackrf failed with error -71 [ 830.401695][T22990] usb 7-1: USB disconnect, device number 8 [ 831.434266][T24309] loop5: detected capacity change from 0 to 32768 [ 831.492376][T24309] JBD2: Ignoring recovery information on journal [ 831.667221][T24350] loop7: detected capacity change from 0 to 64 [ 831.759170][T24309] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 831.975216][T24309] OCFS2: ERROR (device loop5): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total [ 832.106714][T24309] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 832.147104][T24309] OCFS2: File system is now read-only. [ 832.177089][T24309] (syz.5.7958,24309,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 832.206193][T24309] (syz.5.7958,24309,0):ocfs2_claim_metadata:2088 ERROR: status = -30 [ 832.247758][T24309] (syz.5.7958,24309,0):ocfs2_claim_metadata:2101 ERROR: status = -30 [ 832.286833][T24309] (syz.5.7958,24309,0):ocfs2_dx_dir_attach_index:2328 ERROR: status = -30 [ 832.312177][T24309] (syz.5.7958,24309,0):ocfs2_expand_inline_dir:3021 ERROR: status = -30 [ 832.362493][T24309] (syz.5.7958,24309,0):ocfs2_extend_dir:3203 ERROR: status = -30 [ 832.395012][T24309] (syz.5.7958,24309,0):ocfs2_prepare_dir_for_insert:4308 ERROR: status = -30 [ 832.419259][T24309] (syz.5.7958,24309,1):ocfs2_mknod:298 ERROR: status = -30 [ 832.428264][T24309] (syz.5.7958,24309,1):ocfs2_mknod:502 ERROR: status = -30 [ 832.479080][T24309] (syz.5.7958,24309,1):ocfs2_mkdir:658 ERROR: status = -30 [ 832.714038][ T5834] ocfs2: Unmounting device (7,5) on (node local) [ 832.935624][T24381] netlink: 'syz.4.7994': attribute type 32 has an invalid length. [ 832.995872][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7994'. [ 833.457921][T24360] loop7: detected capacity change from 0 to 32768 [ 833.507557][T24360] XFS: ikeep mount option is deprecated. [ 833.609011][T24360] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 833.711649][T24394] loop6: detected capacity change from 0 to 4096 [ 833.837689][T24360] XFS (loop7): Ending clean mount [ 833.873126][T24360] XFS (loop7): Quotacheck needed: Please wait. [ 834.004775][T24360] XFS (loop7): Quotacheck: Done. [ 834.258665][T24418] netlink: 'syz.6.8007': attribute type 8 has an invalid length. [ 834.310587][T23641] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 834.717826][T24433] netlink: 'syz.5.8015': attribute type 49 has an invalid length. [ 834.877894][ T5948] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 834.942089][T24437] loop6: detected capacity change from 0 to 512 [ 835.019728][T24437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 835.063064][ T5948] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 835.072645][ T5948] usb 5-1: config 0 has no interface number 0 [ 835.079363][ T5948] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 835.087365][T24437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.114962][ T5948] usb 5-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 835.128036][ T5948] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 835.138010][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.146274][ T5948] usb 5-1: Product: syz [ 835.150592][ T5948] usb 5-1: Manufacturer: syz [ 835.155667][ T5948] usb 5-1: SerialNumber: syz [ 835.163432][ T5948] usb 5-1: config 0 descriptor?? [ 835.169340][T24431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 835.317580][T18543] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.427408][ T5948] kaweth 5-1:0.58: Firmware present in device. [ 835.589238][ T5948] kaweth 5-1:0.58: Error reading configuration (-71), no net device created [ 835.620900][ T5948] kaweth 5-1:0.58: probe with driver kaweth failed with error -5 [ 835.651247][ T5948] usb 5-1: USB disconnect, device number 99 [ 835.854791][T24459] loop6: detected capacity change from 0 to 512 [ 835.903212][T24459] EXT4-fs: Ignoring removed nobh option [ 835.938709][T24459] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8026: invalid indirect mapped block 256 (level 2) [ 835.974188][T24459] EXT4-fs (loop6): 2 truncates cleaned up [ 835.992618][T24459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.104328][T18543] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.472902][T24477] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8034'. [ 836.543625][T24481] loop6: detected capacity change from 0 to 8 [ 836.589030][T24481] squashfs: Unknown parameter '?Z–9úÛº' [ 836.734316][T24487] loop7: detected capacity change from 0 to 8 [ 836.931925][T13314] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 837.018342][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 837.122742][T13314] usb 7-1: config index 0 descriptor too short (expected 65069, got 45) [ 837.137569][T13314] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 837.159731][T13314] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 106 [ 837.185803][T13314] usb 7-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 837.206517][T13314] usb 7-1: config 0 has no interfaces? [ 837.223568][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 837.237374][T13314] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 837.257316][T13314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.268802][ T10] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 837.278096][T13314] usb 7-1: config 0 descriptor?? [ 837.283917][ T10] usb 8-1: config 0 has no interface number 0 [ 837.300753][ T10] usb 8-1: too many endpoints for config 0 interface 200 altsetting 231: 253, using maximum allowed: 30 [ 837.334247][ T10] usb 8-1: config 0 interface 200 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 837.372422][ T10] usb 8-1: config 0 interface 200 has no altsetting 0 [ 837.395589][ T10] usb 8-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 837.416263][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.436476][ T10] usb 8-1: Product: syz [ 837.440663][ T10] usb 8-1: Manufacturer: syz [ 837.455524][ T10] usb 8-1: SerialNumber: syz [ 837.468675][ T10] usb 8-1: config 0 descriptor?? [ 837.494666][T13314] usb 7-1: USB disconnect, device number 9 [ 837.553302][T24494] loop4: detected capacity change from 0 to 32768 [ 837.567385][T24497] hsr0 speed is unknown, defaulting to 1000 [ 837.573929][T24497] hsr0 speed is unknown, defaulting to 1000 [ 837.574120][T24494] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 0/0 [] [ 837.574120][T24494] replicas (size 24): [ 837.574120][T24494] btree: 0/1 [2] sb: 4/0 [] sb: 0/0 [] [ 837.574120][T24494] [ 837.612250][T24497] hsr0 speed is unknown, defaulting to 1000 [ 837.624963][T24494] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 837.681391][T24497] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 837.700652][ T10] usb 8-1: USB disconnect, device number 3 [ 837.781438][T24497] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 837.870801][T24503] bridge0: port 3(netdevsim0) entered blocking state [ 837.878346][T24503] bridge0: port 3(netdevsim0) entered disabled state [ 837.931034][T24497] hsr0 speed is unknown, defaulting to 1000 [ 837.993384][T24497] hsr0 speed is unknown, defaulting to 1000 [ 838.001318][T24497] hsr0 speed is unknown, defaulting to 1000 [ 838.060224][T24497] hsr0 speed is unknown, defaulting to 1000 [ 838.072547][T24507] loop4: detected capacity change from 0 to 8 [ 838.097912][T24497] hsr0 speed is unknown, defaulting to 1000 [ 838.110229][T24507] SQUASHFS error: zlib decompression failed, data probably corrupt [ 838.143793][T24497] hsr0 speed is unknown, defaulting to 1000 [ 838.164537][T24507] SQUASHFS error: Failed to read block 0x4e8: -5 [ 838.176509][T24497] hsr0 speed is unknown, defaulting to 1000 [ 838.191172][T24507] SQUASHFS error: Failed to read block 0x4ee: -5 [ 838.242812][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 838.242831][ T30] audit: type=1800 audit(838.465:3762): pid=24507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8048" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 838.488177][T24515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8053'. [ 838.817119][T24534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8061'. [ 838.862433][T24532] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8059'. [ 838.876794][T22990] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 838.926556][T24532] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8059'. [ 838.935641][T24532] netlink: 38 bytes leftover after parsing attributes in process `syz.7.8059'. [ 839.070118][T22990] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 839.094813][T22990] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 839.120067][T24542] loop4: detected capacity change from 0 to 16 [ 839.136544][T22990] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 839.162111][T24542] erofs: DAX unsupported by block device. Turning off DAX. [ 839.175481][T22990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.184911][T24542] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 839.206727][T24523] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 839.247039][T22990] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 839.286415][T24546] sock: sock_timestamping_bind_phc: sock not bind to device [ 839.317891][T24542] erofs (device loop4): mounted with root inode @ nid 36. [ 839.338408][T24542] syz.4.8065: attempt to access beyond end of device [ 839.338408][T24542] loop4: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 839.400157][T24542] erofs (device loop4): read error -5 @ 0 of nid 36 [ 839.622184][T24555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8070'. [ 839.678688][T22990] usb 7-1: USB disconnect, device number 10 [ 840.206499][T24575] loop5: detected capacity change from 0 to 256 [ 840.280398][T24575] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 840.398075][T24578] loop7: detected capacity change from 0 to 2048 [ 840.466241][T24578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 841.225758][T24607] loop4: detected capacity change from 0 to 512 [ 841.308952][T24607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.615855][T13314] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 841.743451][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.821082][T13314] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 841.870542][T13314] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 841.928154][T13314] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 841.958963][T13314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.025614][T24617] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 842.037595][T24644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8108'. [ 842.092297][T24644] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8108'. [ 842.102619][T13314] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.295527][T24650] tmpfs: Bad value for 'mpol' [ 842.385732][T13314] usb 8-1: USB disconnect, device number 4 [ 842.458487][ T6160] udevd[6160]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.737680][T24666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8118'. [ 842.846076][T24669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8120'. [ 842.879336][T24671] netlink: 'syz.5.8119': attribute type 3 has an invalid length. [ 843.259376][T24687] netlink: 'syz.2.8128': attribute type 15 has an invalid length. [ 843.300429][T24687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8128'. [ 843.526691][T24696] loop5: detected capacity change from 0 to 64 [ 844.313971][T22990] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 844.382102][T24731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8147'. [ 844.425419][T24731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8147'. [ 844.505800][T22990] usb 5-1: Using ep0 maxpacket: 32 [ 844.516164][T24737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8149'. [ 844.544339][T22990] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 844.581454][T22990] usb 5-1: config 0 has no interface number 0 [ 844.604971][T22990] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 844.662516][T22990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.670709][T22990] usb 5-1: Product: syz [ 844.712982][T22990] usb 5-1: Manufacturer: syz [ 844.717663][T22990] usb 5-1: SerialNumber: syz [ 844.782411][T22990] usb 5-1: config 0 descriptor?? [ 845.205229][T22990] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 845.594313][T24720] loop6: detected capacity change from 0 to 32768 [ 846.071495][T22990] usb 5-1: USB disconnect, device number 100 [ 846.174516][T24783] No such timeout policy "syz1" [ 846.247205][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.307897][T24720] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 846.490477][T24720] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 846.490477][T24720] allowing incompatible features above 0.0: (unknown version) [ 846.559143][T24720] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 846.641234][T24720] bcachefs (loop6): Version upgrade required: [ 846.641234][T24720] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 846.641234][T24720] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 846.641234][T24720] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 846.711131][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.790340][T24720] bcachefs (loop6): dropping and reconstructing all alloc info [ 846.842016][T24798] xt_CT: No such helper "snmp_trap" [ 846.863050][T24720] bcachefs (loop6): accounting_read... [ 846.971639][T24807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.988865][T24720] done [ 846.991669][T24720] bcachefs (loop6): alloc_read... done [ 846.997187][T24720] bcachefs (loop6): snapshots_read... done [ 847.027113][T24720] bcachefs (loop6): done starting filesystem [ 847.149088][T24814] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 847.192228][T18543] bcachefs (loop6): shutting down [ 847.322000][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8180'. [ 847.381387][T18543] bcachefs (loop6): shutdown complete [ 847.989593][ T30] audit: type=1326 audit(848.262:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.7.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1078e969 code=0x7ffc0000 [ 848.049482][T24843] netlink: 'syz.5.8193': attribute type 13 has an invalid length. [ 848.095274][ T30] audit: type=1326 audit(848.293:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.7.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1078e969 code=0x7ffc0000 [ 848.203845][ T30] audit: type=1326 audit(848.303:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.7.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fab1078e969 code=0x7ffc0000 [ 848.235188][T24843] gretap0: refused to change device tx_queue_len [ 848.241559][T24843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 848.291484][ T30] audit: type=1326 audit(848.303:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.7.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1078e969 code=0x7ffc0000 [ 848.332925][ T30] audit: type=1326 audit(848.303:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24840 comm="syz.7.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1078e969 code=0x7ffc0000 [ 848.381242][T22990] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 848.562156][T22990] usb 1-1: Using ep0 maxpacket: 32 [ 848.603335][T22990] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 848.635189][T22990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.664228][T24863] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8202'. [ 848.711948][T24863] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8202'. [ 848.730528][T22990] usb 1-1: config 0 descriptor?? [ 848.742765][T22990] gspca_main: sunplus-2.14.0 probing 041e:400b [ 848.762629][T24863] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8202'. [ 849.151365][T22990] gspca_sunplus: reg_w_riv err -71 [ 849.169772][T22990] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 849.182660][ T52] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 849.203172][T24879] loop4: detected capacity change from 0 to 512 [ 849.212985][T22990] usb 1-1: USB disconnect, device number 121 [ 849.259227][ T5948] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 849.297558][T24879] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 849.331967][T24879] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 849.367009][ T52] usb 6-1: Using ep0 maxpacket: 32 [ 849.377792][ T52] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.382664][T24879] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.8209: Failed to acquire dquot type 1 [ 849.390992][ T52] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 849.411516][ T52] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 849.432686][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.434321][T24879] EXT4-fs (loop4): 1 truncate cleaned up [ 849.442630][ T5948] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.466015][ T52] usb 6-1: Product: syz [ 849.470220][ T52] usb 6-1: Manufacturer: syz [ 849.492835][ T52] usb 6-1: SerialNumber: syz [ 849.497675][ T5948] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 849.502590][T24879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.526994][ T52] usb 6-1: config 0 descriptor?? [ 849.534625][ T5948] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 849.565622][ T5948] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 849.590683][ T5948] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 849.614663][ T5948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.624580][T24886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8211'. [ 849.643041][T24874] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 849.661168][ T5948] hub 8-1:1.0: bad descriptor, ignoring hub [ 849.674020][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.691221][ T5948] hub 8-1:1.0: probe with driver hub failed with error -5 [ 849.711918][ T5948] cdc_wdm 8-1:1.0: skipping garbage [ 849.724480][ T5948] cdc_wdm 8-1:1.0: skipping garbage [ 849.758155][ T5948] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 849.958161][ T52] usb 6-1: USB disconnect, device number 113 [ 850.005263][ T5948] usb 8-1: USB disconnect, device number 5 [ 850.168833][T24897] ip6t_srh: unknown srh match flags 5294 [ 850.968467][T24926] netlink: 'syz.4.8228': attribute type 1 has an invalid length. [ 850.990416][T24926] netlink: 'syz.4.8228': attribute type 3 has an invalid length. [ 851.037255][T24926] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8228'. [ 851.082725][T24933] netlink: 'syz.2.8233': attribute type 12 has an invalid length. [ 851.141401][T24933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8233'. [ 851.452968][T24944] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8239'. [ 851.544374][T24953] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 851.835416][T24963] loop6: detected capacity change from 0 to 1024 [ 852.055386][ T36] hfsplus: b-tree write err: -5, ino 4 [ 852.289136][T24980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8255'. [ 853.080734][T25008] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8270'. [ 853.146211][T25008] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8270'. [ 853.226345][T25017] loop5: detected capacity change from 0 to 16 [ 853.244691][T25017] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 853.354742][ T5841] udevd[5841]: incorrect cramfs checksum on /dev/loop5 [ 853.469128][ T5841] udevd[5841]: incorrect cramfs checksum on /dev/loop5 [ 853.565461][T24968] loop4: detected capacity change from 0 to 32768 [ 853.685709][T24968] [ 853.685709][T24968] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.685709][T24968] [ 853.720926][T25031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8281'. [ 853.797713][T25035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8282'. [ 853.850346][ T5833] [ 853.850346][ T5833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.850346][ T5833] [ 853.873012][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8282'. [ 853.952173][ T5833] [ 853.952173][ T5833] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.952173][ T5833] [ 854.578987][T25058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8294'. [ 854.628866][T25063] netlink: 'syz.6.8295': attribute type 21 has an invalid length. [ 855.185206][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8306'. [ 855.235138][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8306'. [ 855.285549][T25086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8306'. [ 855.628897][T25102] netlink: 'syz.7.8312': attribute type 11 has an invalid length. [ 855.659086][T25105] netlink: 'syz.0.8314': attribute type 5 has an invalid length. [ 855.680795][T25102] netlink: 'syz.7.8312': attribute type 11 has an invalid length. [ 855.701063][T25107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8313'. [ 856.462266][T25137] netlink: 'syz.5.8328': attribute type 2 has an invalid length. [ 856.632111][T25141] loop4: detected capacity change from 0 to 1764 [ 856.688818][T22990] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 856.919568][T22990] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 856.957415][T22990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.027556][T22990] usb 3-1: config 0 has no interface number 0 [ 857.057291][T22990] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 857.089910][T22990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.142324][T22990] usb 3-1: Product: syz [ 857.178047][T22990] usb 3-1: Manufacturer: syz [ 857.182692][T22990] usb 3-1: SerialNumber: syz [ 857.190249][T25161] unsupported nla_type 52263 [ 857.247716][T22990] usb 3-1: config 0 descriptor?? [ 857.466682][T22990] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 857.510763][T22990] usb 3-1: No valid video chain found. [ 857.570424][T25175] QAT: Invalid ioctl 21531 [ 857.626064][T25177] kAFS: No cell specified [ 857.711889][ T5891] usb 3-1: USB disconnect, device number 114 [ 857.863966][T25178] loop6: detected capacity change from 0 to 4096 [ 857.938339][T25178] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 858.054251][T25178] ntfs3(loop6): ino=19, mi_enum_attr [ 858.080697][T25178] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 858.118528][T25178] ntfs3(loop6): failed to convert "c46c" to cp861 [ 858.156804][T25178] ntfs3(loop6): ino=20, mi_enum_attr [ 858.211973][T25199] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 858.410696][T25202] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 858.666071][T25214] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 858.874466][T25218] bridge1: entered promiscuous mode [ 858.926798][T25218] bridge1: entered allmulticast mode [ 859.540405][T25248] __nla_validate_parse: 2 callbacks suppressed [ 859.540426][T25248] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8375'. [ 859.611777][T25248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8375'. [ 859.636138][T25248] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8375'. [ 859.771055][T13314] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 859.973182][T13314] usb 6-1: Using ep0 maxpacket: 16 [ 859.980845][T13314] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 860.009355][T13314] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.067571][T13314] usb 6-1: config 0 has no interface number 0 [ 860.097098][T13314] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 860.137270][T13314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.192114][T13314] usb 6-1: Product: syz [ 860.212938][T13314] usb 6-1: Manufacturer: syz [ 860.242003][T13314] usb 6-1: SerialNumber: syz [ 860.280719][T13314] usb 6-1: config 0 descriptor?? [ 860.314887][T13314] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 860.356903][T13314] usb 6-1: No valid video chain found. [ 860.400639][T25228] loop4: detected capacity change from 0 to 32768 [ 860.528393][T25228] read_mapping_page failed! [ 860.544479][T22990] usb 6-1: USB disconnect, device number 114 [ 861.239579][T25299] veth0_vlan: mtu greater than device maximum [ 861.996153][T25325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8409'. [ 862.104910][T25330] netlink: 'syz.2.8408': attribute type 1 has an invalid length. [ 862.144974][T25280] loop6: detected capacity change from 0 to 32768 [ 862.183234][T13314] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 862.208878][T25280] ERROR: (device loop6): diNewExt: no free extents [ 862.208878][T25280] [ 862.233856][T25280] ialloc: diAlloc returned -5! [ 862.376463][T13314] usb 1-1: Using ep0 maxpacket: 16 [ 862.430158][T13314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 862.473915][T13314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 862.537133][T13314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 862.643477][T13314] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 862.661046][T13314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.713713][T13314] usb 1-1: Product: syz [ 862.717934][T13314] usb 1-1: Manufacturer: syz [ 862.759116][T13314] usb 1-1: SerialNumber: syz [ 862.824288][T13314] usb 1-1: config 0 descriptor?? [ 862.835312][T25323] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 862.888069][T13314] mceusb 1-1:0.0: mceusb_dev_probe: device setup failed! [ 862.925366][T13314] mceusb 1-1:0.0: probe with driver mceusb failed with error -12 [ 863.146443][T13314] usb 1-1: USB disconnect, device number 122 [ 863.625577][T25383] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 863.656602][T25383] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 864.779746][T25420] loop2: detected capacity change from 0 to 64 [ 864.915945][T25423] loop6: detected capacity change from 0 to 1024 [ 865.146282][T25430] loop5: detected capacity change from 0 to 128 [ 865.205331][ T5924] hfsplus: b-tree write err: -5, ino 4 [ 865.220566][T25430] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 865.278729][T25430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 865.323929][T25389] loop7: detected capacity change from 0 to 32768 [ 865.844602][T25448] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 865.959679][T25454] netlink: 'syz.7.8459': attribute type 5 has an invalid length. [ 866.135087][T25457] loop4: detected capacity change from 0 to 256 [ 866.277864][T25457] FAT-fs (loop4): Directory bread(block 64) failed [ 866.290194][T25457] FAT-fs (loop4): Directory bread(block 65) failed [ 866.308909][T25457] FAT-fs (loop4): Directory bread(block 66) failed [ 866.385025][T25457] FAT-fs (loop4): Directory bread(block 67) failed [ 866.391694][T25457] FAT-fs (loop4): Directory bread(block 68) failed [ 866.465153][T25457] FAT-fs (loop4): Directory bread(block 69) failed [ 866.494368][T25457] FAT-fs (loop4): Directory bread(block 70) failed [ 866.500974][T25457] FAT-fs (loop4): Directory bread(block 71) failed [ 866.529594][T25470] loop5: detected capacity change from 0 to 256 [ 866.582075][T25457] FAT-fs (loop4): Directory bread(block 72) failed [ 866.633613][T25457] FAT-fs (loop4): Directory bread(block 73) failed [ 866.787538][T25478] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8469'. [ 867.694557][T25508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8482'. [ 868.182931][T25524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.257591][T25524] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 868.308156][T25524] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 868.342383][ T30] audit: type=1326 audit(868.699:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 868.456254][ T30] audit: type=1326 audit(868.699:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 868.569590][T25535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8495'. [ 868.619097][ T30] audit: type=1326 audit(868.709:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.4.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 868.623603][T25535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8495'. [ 868.929781][ T30] audit: type=1326 audit(869.301:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25547 comm="syz.6.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd38f8e969 code=0x7ffc0000 [ 869.037598][ T30] audit: type=1326 audit(869.321:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25547 comm="syz.6.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd38f8e969 code=0x7ffc0000 [ 869.165823][ T30] audit: type=1326 audit(869.352:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25547 comm="syz.6.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fbd38f8e969 code=0x7ffc0000 [ 869.196100][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.217100][T25559] netlink: 'syz.6.8504': attribute type 1 has an invalid length. [ 869.273425][T25559] netlink: 244 bytes leftover after parsing attributes in process `syz.6.8504'. [ 869.318993][ T30] audit: type=1326 audit(869.352:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25547 comm="syz.6.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd38f8e969 code=0x7ffc0000 [ 869.385375][T25561] netlink: 'syz.7.8505': attribute type 10 has an invalid length. [ 869.400180][T25566] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8506'. [ 869.441477][ T30] audit: type=1326 audit(869.352:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25547 comm="syz.6.8500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd38f8e969 code=0x7ffc0000 [ 869.462216][T25566] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8506'. [ 869.528238][T25566] netlink: 492 bytes leftover after parsing attributes in process `syz.5.8506'. [ 869.687560][T25577] loop2: detected capacity change from 0 to 256 [ 869.833246][T25577] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 869.973477][T25590] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8515'. [ 870.412261][T25607] loop7: detected capacity change from 0 to 256 [ 871.193482][T25632] loop2: detected capacity change from 0 to 4096 [ 871.244661][T25632] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 871.516360][T25650] ip6erspan0: entered promiscuous mode [ 871.887060][T25663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8548'. [ 871.998960][T25668] netlink: 'syz.4.8550': attribute type 1 has an invalid length. [ 872.022417][T25668] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8550'. [ 872.620112][T25682] loop7: detected capacity change from 0 to 4096 [ 872.869588][T25682] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 872.882961][T25694] netlink: 'syz.4.8560': attribute type 6 has an invalid length. [ 872.929177][T25694] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8560'. [ 873.177130][T25658] loop5: detected capacity change from 0 to 32768 [ 873.275912][T25658] ERROR: (device loop5): diAllocAG: ipimap->i_size is wrong [ 873.275912][T25658] [ 873.337277][T25658] ERROR: (device loop5): remounting filesystem as read-only [ 873.382411][T25658] ialloc: diAlloc returned -5! [ 873.662257][T25714] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8568'. [ 873.769064][T25714] netlink: zone id is out of range [ 873.805342][T25714] netlink: zone id is out of range [ 873.810512][T25714] netlink: zone id is out of range [ 873.874876][T25714] netlink: zone id is out of range [ 873.885594][T25714] netlink: zone id is out of range [ 873.911564][T25714] netlink: zone id is out of range [ 873.952039][T25714] netlink: zone id is out of range [ 873.953899][T25718] loop5: detected capacity change from 0 to 4096 [ 873.984540][T25714] netlink: zone id is out of range [ 874.012546][T25718] EXT4-fs: Ignoring removed nobh option [ 874.015706][T25714] netlink: zone id is out of range [ 874.041136][T25718] EXT4-fs: Ignoring removed i_version option [ 874.067535][T25714] netlink: zone id is out of range [ 874.121577][T25718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.281567][T25718] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 874.330221][T25718] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 874.385456][T25718] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.8570: Failed to acquire dquot type 1 [ 874.651057][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.139612][T25755] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8582'. [ 875.143890][T25707] loop4: detected capacity change from 0 to 32768 [ 875.213684][T25759] loop7: detected capacity change from 0 to 256 [ 875.420079][T25759] FAT-fs (loop7): Directory bread(block 64) failed [ 875.462580][T25759] FAT-fs (loop7): Directory bread(block 65) failed [ 875.492215][T25759] FAT-fs (loop7): Directory bread(block 66) failed [ 875.522400][T25759] FAT-fs (loop7): Directory bread(block 67) failed [ 875.568693][T25759] FAT-fs (loop7): Directory bread(block 68) failed [ 875.575283][T25759] FAT-fs (loop7): Directory bread(block 69) failed [ 875.598885][T25759] FAT-fs (loop7): Directory bread(block 70) failed [ 875.605444][T25759] FAT-fs (loop7): Directory bread(block 71) failed [ 875.685464][T25759] FAT-fs (loop7): Directory bread(block 72) failed [ 875.746611][T25759] FAT-fs (loop7): Directory bread(block 73) failed [ 876.027054][T25777] loop6: detected capacity change from 0 to 2048 [ 876.064613][T25782] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 876.090846][T25781] netlink: 'syz.2.8594': attribute type 2 has an invalid length. [ 876.167621][T25777] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12 [ 876.186533][T25781] netlink: 'syz.2.8594': attribute type 1 has an invalid length. [ 876.223466][T25777] Remounting filesystem read-only [ 876.272190][T25784] loop7: detected capacity change from 0 to 4096 [ 876.347916][T25784] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 876.408203][T25784] UDF-fs: Scanning with blocksize 512 failed [ 876.532087][T25784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 876.579799][T25761] loop5: detected capacity change from 0 to 32768 [ 876.634689][T25761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8585 (25761) [ 876.727097][T25761] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 876.779700][T25761] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 876.823927][T25761] BTRFS info (device loop5): using free-space-tree [ 877.299838][ T5834] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 877.388199][T25832] netlink: 'syz.0.8611': attribute type 1 has an invalid length. [ 877.515761][T25837] loop6: detected capacity change from 0 to 16 [ 877.544409][T25837] erofs (device loop6): mounted with root inode @ nid 36. [ 877.795976][T25846] netlink: 'syz.2.8617': attribute type 3 has an invalid length. [ 877.857788][T25846] netlink: 'syz.2.8617': attribute type 1 has an invalid length. [ 878.099340][ T52] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 878.250858][T25859] loop2: detected capacity change from 0 to 1024 [ 878.321399][ T52] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 878.350120][ T52] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 878.360226][T25859] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 878.387639][T25859] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 878.408018][ T52] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 878.449148][T25859] EXT4-fs (loop2): invalid journal inode [ 878.476499][ T52] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 878.488640][T25859] EXT4-fs (loop2): can't get journal size [ 878.529057][T25859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 878.586647][ T52] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 878.658223][ T52] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.684399][T25872] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 878.734364][T25872] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 878.743118][ T52] usb 8-1: Product: syz [ 878.743391][T25859] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #12: comm syz.2.8623: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 878.750895][ T52] usb 8-1: Manufacturer: syz [ 878.812058][T25872] overlayfs: missing 'lowerdir' [ 878.848466][T25877] xt_HMARK: proto mask must be zero with L3 mode [ 878.901942][ T52] usb 8-1: SerialNumber: syz [ 878.957212][ T52] usb 8-1: config 0 descriptor?? [ 878.987920][ T52] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 879.017749][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.390247][ T52] ums-isd200 8-1:0.0: probe with driver ums-isd200 failed with error -22 [ 879.469667][T25898] SET target dimension over the limit! [ 879.475867][ T52] usb 8-1: USB disconnect, device number 6 [ 880.037802][T25913] loop5: detected capacity change from 0 to 4096 [ 880.092635][ T30] audit: type=1326 audit(880.503:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25922 comm="syz.2.8651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 880.132381][T25913] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 880.232246][ T30] audit: type=1326 audit(880.534:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25922 comm="syz.2.8651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 880.346397][ T30] audit: type=1326 audit(880.534:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25922 comm="syz.2.8651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 880.395664][T25932] netlink: 'syz.6.8655': attribute type 16 has an invalid length. [ 880.411456][T25913] ntfs3(loop5): ino=19, mi_enum_attr [ 880.468923][ T30] audit: type=1326 audit(880.534:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25922 comm="syz.2.8651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 880.475100][T25932] netlink: 'syz.6.8655': attribute type 17 has an invalid length. [ 880.498816][T25913] ntfs3(loop5): failed to convert "c46c" to cp936 [ 880.522967][T25913] ntfs3(loop5): ino=20, mi_enum_attr [ 880.614959][ T30] audit: type=1326 audit(880.534:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25922 comm="syz.2.8651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 880.913110][ T30] audit: type=1800 audit(881.326:3781): pid=25948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8661" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 880.987066][T25932] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.998894][T25932] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.433130][T25932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.461685][T25932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.654010][T25932] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.663880][T25932] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.673419][T25932] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.684135][T25932] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.983992][T25982] net_ratelimit: 75 callbacks suppressed [ 881.984015][T25982] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 882.101510][T25979] loop5: detected capacity change from 0 to 4096 [ 882.165469][ T5891] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 882.188755][T25979] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 882.321249][T25979] ntfs3(loop5): Failed to load $Extend (-22). [ 882.335926][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.349160][T25979] ntfs3(loop5): Failed to initialize $Extend. [ 882.364567][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 882.421980][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 882.489416][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 882.534177][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.599096][ T5891] usb 5-1: config 0 descriptor?? [ 882.702553][ T30] audit: type=1326 audit(883.122:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 882.724894][T26002] kAFS: unable to lookup cell '(/' [ 882.772332][T26004] overlayfs: conflicting options: nfs_export=on,index=off [ 882.792962][ T30] audit: type=1326 audit(883.163:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 882.883689][ T30] audit: type=1326 audit(883.163:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 882.919278][ T10] usb 5-1: USB disconnect, device number 101 [ 883.023215][ T30] audit: type=1326 audit(883.163:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25997 comm="syz.2.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 883.173099][T26012] loop6: detected capacity change from 0 to 256 [ 883.246803][T26012] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 883.331245][T26012] exFAT-fs (loop6): error, data size is invalid(10) [ 883.673329][T26036] netlink: 'syz.7.8704': attribute type 21 has an invalid length. [ 883.719286][T26036] netlink: 128 bytes leftover after parsing attributes in process `syz.7.8704'. [ 883.759516][T26036] netlink: 3 bytes leftover after parsing attributes in process `syz.7.8704'. [ 883.869763][ T5948] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 884.028862][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 884.051166][ T5948] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.099089][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 884.142132][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 884.196080][ T5948] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 884.248436][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.304706][ T5948] usb 5-1: config 0 descriptor?? [ 884.348100][T26032] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 884.385634][ T5948] hub 5-1:0.0: USB hub found [ 884.596060][T26062] SET target dimension over the limit! [ 884.601921][ T5948] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 884.675633][T26066] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 884.729684][T26066] CPU: 0 UID: 0 PID: 26066 Comm: syz.6.8720 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 884.729720][T26066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 884.729735][T26066] Call Trace: [ 884.729746][T26066] [ 884.729757][T26066] dump_stack_lvl+0x189/0x250 [ 884.729798][T26066] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.729832][T26066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.729868][T26066] ? __pfx__printk+0x10/0x10 [ 884.729889][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.729926][T26066] ? kernfs_path_from_node+0x2b/0x260 [ 884.729964][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.729991][T26066] ? kernfs_path_from_node+0x216/0x260 [ 884.730031][T26066] sysfs_warn_dup+0x8e/0xa0 [ 884.730066][T26066] sysfs_do_create_link_sd+0xc0/0x110 [ 884.730104][T26066] device_add_class_symlinks+0x1cf/0x240 [ 884.730141][T26066] device_add+0x475/0xb50 [ 884.730177][T26066] wiphy_register+0x199a/0x26b0 [ 884.730237][T26066] ? __pfx_wiphy_register+0x10/0x10 [ 884.730272][T26066] ? minstrel_ht_alloc+0x893/0x990 [ 884.730306][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.730341][T26066] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 884.730373][T26066] ieee80211_register_hw+0x33e1/0x4120 [ 884.730422][T26066] ? ieee80211_register_hw+0x14b1/0x4120 [ 884.730462][T26066] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 884.730496][T26066] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 884.730530][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.730561][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.730588][T26066] ? __hrtimer_setup+0x187/0x210 [ 884.730625][T26066] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 884.730658][T26066] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 884.730744][T26066] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 884.730782][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.730809][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.730837][T26066] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 884.730872][T26066] ? kstrndup+0xbf/0x160 [ 884.730898][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.730929][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.730962][T26066] hwsim_new_radio_nl+0xea4/0x1b10 [ 884.730990][T26066] ? __pfx___nla_validate_parse+0x10/0x10 [ 884.731041][T26066] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 884.731085][T26066] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 884.731128][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.731160][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.731188][T26066] ? __nla_parse+0x40/0x60 [ 884.731222][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.731250][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.731288][T26066] genl_family_rcv_msg_doit+0x215/0x300 [ 884.731342][T26066] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 884.731396][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.731423][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.731451][T26066] ? security_capable+0x7e/0x2e0 [ 884.731488][T26066] genl_rcv_msg+0x60e/0x790 [ 884.731534][T26066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.731569][T26066] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 884.731628][T26066] netlink_rcv_skb+0x21c/0x490 [ 884.731659][T26066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 884.731699][T26066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 884.731748][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.731784][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.731811][T26066] ? down_read+0x1ad/0x2e0 [ 884.731850][T26066] genl_rcv+0x28/0x40 [ 884.731884][T26066] netlink_unicast+0x75b/0x8d0 [ 884.731925][T26066] netlink_sendmsg+0x805/0xb30 [ 884.731968][T26066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.732002][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.732030][T26066] ? aa_sock_msg_perm+0x94/0x160 [ 884.732061][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.732088][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.732117][T26066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.732149][T26066] __sock_sendmsg+0x21c/0x270 [ 884.732181][T26066] ____sys_sendmsg+0x505/0x830 [ 884.732223][T26066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.732269][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.732297][T26066] ? import_iovec+0x74/0xa0 [ 884.732344][T26066] ___sys_sendmsg+0x21f/0x2a0 [ 884.732382][T26066] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.732463][T26066] ? __fget_files+0x2a/0x420 [ 884.732495][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.732522][T26066] ? __fget_files+0x3a0/0x420 [ 884.732569][T26066] __x64_sys_sendmsg+0x19b/0x260 [ 884.732608][T26066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.732665][T26066] ? do_syscall_64+0xba/0x210 [ 884.732704][T26066] do_syscall_64+0xf6/0x210 [ 884.732738][T26066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.732766][T26066] ? exc_page_fault+0x91/0x110 [ 884.732799][T26066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.732824][T26066] RIP: 0033:0x7fbd38f8e969 [ 884.732845][T26066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.732866][T26066] RSP: 002b:00007fbd36df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.732892][T26066] RAX: ffffffffffffffda RBX: 00007fbd391b5fa0 RCX: 00007fbd38f8e969 [ 884.732911][T26066] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 884.732927][T26066] RBP: 00007fbd39010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 884.732942][T26066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.732957][T26066] R13: 0000000000000000 R14: 00007fbd391b5fa0 R15: 00007ffefd5b0448 [ 884.732995][T26066] [ 884.826256][ T5948] usbhid 5-1:0.0: can't add hid device: -71 [ 885.621204][ T5948] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 885.693856][T26088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8729'. [ 885.776509][ T5948] usb 5-1: USB disconnect, device number 102 [ 886.395330][T26114] bond0: (slave rose0): Enslaving as an active interface with an up link [ 886.485016][T26124] binder: 26123:26124 ioctl c018620c 0 returned -14 [ 886.520839][T26126] netlink: 'syz.0.8743': attribute type 1 has an invalid length. [ 886.549049][T26126] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8743'. [ 886.718831][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 886.718851][ T30] audit: type=1326 audit(887.156:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.4.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 886.882288][ T30] audit: type=1326 audit(887.156:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.4.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 886.904146][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.049097][ T30] audit: type=1326 audit(887.196:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.4.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 887.071036][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.148753][ T30] audit: type=1326 audit(887.196:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.4.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 887.170612][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.178268][ T30] audit: type=1326 audit(887.196:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.4.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 887.200102][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.292517][T26157] loop2: detected capacity change from 0 to 64 [ 887.671110][T26167] netlink: get zone limit has 4 unknown bytes [ 887.836108][T26175] loop6: detected capacity change from 0 to 1024 [ 888.010274][T26175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.219319][T18543] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.228620][T26194] netlink: 'syz.2.8772': attribute type 7 has an invalid length. [ 888.564369][T26206] tmpfs: Bad value for 'mpol' [ 888.802382][T26218] loop6: detected capacity change from 0 to 128 [ 889.262159][ T5891] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 889.457696][ T5891] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 889.481491][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.527580][ T5891] usb 3-1: Product: syz [ 889.555432][ T5891] usb 3-1: Manufacturer: syz [ 889.560062][ T5891] usb 3-1: SerialNumber: syz [ 889.616285][ T5891] usb 3-1: config 0 descriptor?? [ 889.728432][T26252] netlink: 'syz.6.8796': attribute type 1 has an invalid length. [ 889.758672][T26252] netlink: 'syz.6.8796': attribute type 2 has an invalid length. [ 889.790645][T26252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8796'. [ 890.053998][T26260] loop5: detected capacity change from 0 to 512 [ 890.101490][ T5891] usb 3-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 890.140084][ T5891] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 890.150155][T26209] loop4: detected capacity change from 0 to 32768 [ 890.161844][T26260] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 890.239219][T26260] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 890.239841][T26209] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 890.247523][T26260] System zones: 0-1, 15-15, 18-18, 34-34 [ 890.261989][ T5891] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 890.262099][T26260] EXT4-fs (loop5): orphan cleanup on readonly fs [ 890.276478][T26260] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 890.286931][T26260] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 890.321491][T26260] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 890.332710][T26260] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.8799: bad orphan inode 16 [ 890.346055][T26270] loop7: detected capacity change from 0 to 64 [ 890.425531][T26209] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 890.436021][ T5891] usb 3-1: USB disconnect, device number 115 [ 890.439608][T26260] ext4_test_bit(bit=15, block=18) = 1 [ 890.519156][T26260] is_bad_inode(inode)=0 [ 890.559283][T26260] NEXT_ORPHAN(inode)=0 [ 890.563408][T26260] max_ino=32 [ 890.566614][T26260] i_nlink=2 [ 890.628641][T26260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 890.649701][T26209] (syz.4.8778,26209,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 890.697747][T26209] (syz.4.8778,26209,1):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 890.943889][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 891.078622][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.127859][T26295] netlink: 'syz.7.8811': attribute type 10 has an invalid length. [ 891.201901][T26295] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8811'. [ 891.269131][T26295] dummy0: entered promiscuous mode [ 891.306899][T26295] dummy0: entered allmulticast mode [ 891.350975][T26295] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 891.691926][T26311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8815'. [ 891.780466][T26316] tmpfs: Bad value for 'mpol' [ 892.082799][T26327] netlink: 'syz.5.8823': attribute type 10 has an invalid length. [ 892.173632][T26327] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8823'. [ 892.413788][T26327] team0: Port device geneve0 added [ 892.833860][T26353] loop2: detected capacity change from 0 to 128 [ 893.767288][T26393] netlink: 'syz.0.8850': attribute type 1 has an invalid length. [ 893.807810][T26393] netlink: 'syz.0.8850': attribute type 2 has an invalid length. [ 894.007313][T26404] openvswitch: netlink: IP tunnel TTL not specified. [ 894.317185][T26415] netlink: 'syz.4.8859': attribute type 1 has an invalid length. [ 894.580314][T26420] loop2: detected capacity change from 0 to 512 [ 894.691111][T26426] loop4: detected capacity change from 0 to 512 [ 894.714438][T26420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 894.809236][T26420] System zones: 0-2, 18-18, 34-34 [ 894.844192][T26420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.902680][T26426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.048209][T26441] tmpfs: Bad value for 'mpol' [ 895.212334][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.296020][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.059806][T26410] loop7: detected capacity change from 0 to 32768 [ 896.117502][T26410] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.8857 (26410) [ 896.220013][T26410] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 896.281276][T26410] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 896.322584][T26410] BTRFS info (device loop7): using free-space-tree [ 896.508198][T26474] loop6: detected capacity change from 0 to 4096 [ 896.661993][T26474] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 896.745504][T23641] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 896.774935][T26474] ntfs3(loop6): ino=0, "file0" The size of extended attributes must not exceed 64KiB [ 897.328690][ T10] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 897.344413][T26455] loop4: detected capacity change from 0 to 32768 [ 897.428367][T26455] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 897.522986][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 897.537048][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 897.548378][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6 [ 897.560220][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 897.570598][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 897.605243][ T10] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 897.614804][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.646361][ T10] usb 6-1: Product: syz [ 897.654005][ T10] usb 6-1: Manufacturer: syz [ 897.694325][ T10] usb 6-1: SerialNumber: syz [ 897.727605][T26531] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8886'. [ 897.747350][T26531] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8886'. [ 897.767345][T26531] netlink: 'syz.7.8886': attribute type 6 has an invalid length. [ 897.816050][ T10] usb 6-1: config 0 descriptor?? [ 897.847504][T26510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 897.856882][ T10] usb 6-1: ucan: probing device on interface #0 [ 897.867263][ T10] usb 6-1: ucan: invalid out_ep MaxPacketSize [ 897.906939][ T10] usb 6-1: ucan: probe failed; try to update the device firmware [ 897.910522][T26455] XFS (loop4): Ending clean mount [ 898.140790][ T10] usb 6-1: USB disconnect, device number 115 [ 898.162878][ T5833] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 898.310955][T26546] openvswitch: netlink: Message has 4 unknown bytes. [ 898.373065][T26547] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.8902'. [ 898.636095][T26553] netlink: 57 bytes leftover after parsing attributes in process `syz.2.8905'. [ 898.862132][T26561] SET target dimension over the limit! [ 899.253385][ T10] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 899.368718][T26582] vti0: entered promiscuous mode [ 899.422797][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 899.463655][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 899.471710][ T10] usb 5-1: config 0 has no interface number 0 [ 899.499706][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 899.540618][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 899.554471][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8922'. [ 899.594383][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 899.606865][T26590] loop5: detected capacity change from 0 to 2048 [ 899.621784][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 899.653123][T26590] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 899.657468][ T10] usb 5-1: Product: syz [ 899.679834][ T10] usb 5-1: SerialNumber: syz [ 899.725932][ T10] usb 5-1: config 0 descriptor?? [ 899.727595][T26597] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 899.755409][ T10] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 899.788046][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input63 [ 899.952695][T26601] loop7: detected capacity change from 0 to 256 [ 900.002907][T26601] exfat: Deprecated parameter 'namecase' [ 900.060336][T26604] netlink: 'syz.0.8928': attribute type 6 has an invalid length. [ 900.116686][T26601] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xcd8273f8, utbl_chksum : 0xe619d30d) [ 900.260621][T26601] exFAT-fs (loop7): error, in sector 160, dentry 12 should be unused, but 0x85 [ 900.287688][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 900.288899][ T5972] usb 5-1: USB disconnect, device number 103 [ 900.294653][ C0] cm109 5-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 900.406118][ T5972] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 900.659626][ T5948] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 900.825480][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 900.869878][ T5948] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 900.889224][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.897259][ T5948] usb 1-1: Product: syz [ 900.938744][ T5948] usb 1-1: Manufacturer: syz [ 900.944232][ T5948] usb 1-1: SerialNumber: syz [ 900.975660][ T5948] usb 1-1: config 0 descriptor?? [ 900.980830][ T52] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 901.026391][ T5948] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 901.198072][ T52] usb 7-1: Using ep0 maxpacket: 32 [ 901.217540][ T52] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 901.240444][ T10] usb 1-1: USB disconnect, device number 123 [ 901.253190][ T52] usb 7-1: config 0 has no interface number 0 [ 901.272290][ T52] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 901.315848][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.349968][ T52] usb 7-1: Product: syz [ 901.366471][ T52] usb 7-1: Manufacturer: syz [ 901.385042][ T52] usb 7-1: SerialNumber: syz [ 901.408483][ T52] usb 7-1: config 0 descriptor?? [ 901.449637][ T52] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 901.477520][ T52] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 901.486675][T26609] loop5: detected capacity change from 0 to 32768 [ 901.568955][T26640] loop7: detected capacity change from 0 to 64 [ 901.625008][ T52] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 901.681839][T26621] loop2: detected capacity change from 0 to 32768 [ 901.853918][ T52] radio-raremono 7-1:0.35: raremono_cmd_main failed (-71) [ 901.863862][ T52] radio-raremono 7-1:0.35: V4L2 device registered as radio48 [ 901.880640][ T52] usb 7-1: USB disconnect, device number 11 [ 901.887603][ T52] radio-raremono 7-1:0.35: Thanko's Raremono disconnected [ 902.022557][T26621] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 902.232713][T26621] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 902.232713][T26621] allowing incompatible features above 0.0: (unknown version) [ 902.314172][T26621] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 902.344471][T26621] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 902.344471][T26621] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 902.415388][T26621] bcachefs (loop2): dropping and reconstructing all alloc info [ 902.453712][T26664] loop7: detected capacity change from 0 to 4096 [ 902.476973][T26621] bcachefs (loop2): accounting_read... done [ 902.517021][T26621] bcachefs (loop2): alloc_read... done [ 902.528161][T26664] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 902.549737][T26621] bcachefs (loop2): snapshots_read... done [ 902.598045][T26621] bcachefs (loop2): done starting filesystem [ 903.019648][ T5822] bcachefs (loop2): shutting down [ 903.264281][ T5822] bcachefs (loop2): shutdown complete [ 903.320282][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8963'. [ 903.361409][ T30] audit: type=1326 audit(903.833:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26690 comm="syz.0.8965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f18e969 code=0x7ffc0000 [ 903.456097][ T30] audit: type=1326 audit(903.833:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26690 comm="syz.0.8965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f18e969 code=0x7ffc0000 [ 903.581900][ T30] audit: type=1326 audit(903.873:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26690 comm="syz.0.8965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f495f18e969 code=0x7ffc0000 [ 903.661883][ T30] audit: type=1326 audit(903.873:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26690 comm="syz.0.8965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495f18e969 code=0x7ffc0000 [ 903.683728][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.938370][T26708] loop5: detected capacity change from 0 to 64 [ 904.020526][T26711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8974'. [ 904.031120][ T10] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 904.250239][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 904.273450][ T10] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 904.294294][ T10] usb 5-1: config 0 has no interface number 0 [ 904.330373][ T10] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 904.343662][T26677] loop6: detected capacity change from 0 to 32768 [ 904.360787][ T10] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 904.380002][ T52] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 904.391264][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 904.411569][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.456162][T26677] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 904.468921][ T10] usb 5-1: Product: syz [ 904.496836][ T10] usb 5-1: Manufacturer: syz [ 904.529041][ T10] usb 5-1: SerialNumber: syz [ 904.539703][ T52] usb 8-1: Using ep0 maxpacket: 32 [ 904.550939][ T52] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 904.568768][T26677] ocfs2: Unmounting device (7,6) on (node local) [ 904.569546][ T52] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.584440][ T10] usb 5-1: config 0 descriptor?? [ 904.610138][ T52] usb 8-1: config 0 descriptor?? [ 904.630442][T26706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 904.638323][T26706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 904.663462][ T52] as10x_usb: device has been detected [ 904.691712][ T52] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 904.789128][ T52] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 904.834618][ T52] as10x_usb: error during firmware upload part1 [ 904.880505][ T52] Registered device nBox DVB-T Dongle [ 904.894396][ T52] usb 8-1: USB disconnect, device number 7 [ 904.923083][T26706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 904.948659][T26706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 904.986388][ T52] Unregistered device nBox DVB-T Dongle [ 905.007168][ T52] as10x_usb: device has been disconnected [ 905.241943][ T10] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 905.276170][ T10] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 905.319992][ T10] asix 5-1:0.251: probe with driver asix failed with error -5 [ 905.356213][ T10] usb 5-1: USB disconnect, device number 104 [ 905.704658][T26751] misc userio: No port type given on /dev/userio [ 905.885536][T26757] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8995'. [ 906.258601][T26769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9003'. [ 906.300960][T26769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9003'. [ 906.793968][T26787] tmpfs: Bad value for 'mpol' [ 907.153005][ T5948] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 907.342673][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 907.358997][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 907.400112][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 907.439803][ T5948] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 907.460158][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 907.497751][ T5948] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 907.541267][ T5948] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 907.580818][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.603148][ T5948] usb 5-1: config 0 descriptor?? [ 907.610011][T26796] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 908.081479][ T10] usb 5-1: USB disconnect, device number 105 [ 908.093997][ T5838] Bluetooth: hci7: Opcode 0x0c03 failed: -19 [ 908.660716][T13314] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 908.864388][T13314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 908.872326][T26816] loop2: detected capacity change from 0 to 32768 [ 908.888751][T13314] usb 1-1: not running at top speed; connect to a high speed hub [ 908.943070][T13314] usb 1-1: config 8 has an invalid interface number: 225 but max is 0 [ 908.953356][T26816] (syz.2.9023,26816,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 908.977616][T13314] usb 1-1: config 8 has no interface number 0 [ 908.996117][T13314] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=6f.84 [ 909.017310][T26816] (syz.2.9023,26816,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 909.042102][T13314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.063605][ T5972] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 909.076323][T13314] usb 1-1: Product: syz [ 909.086925][T13314] usb 1-1: Manufacturer: syz [ 909.095357][T13314] usb 1-1: SerialNumber: syz [ 909.143801][T26816] JBD2: Ignoring recovery information on journal [ 909.302115][ T5972] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 909.318952][T26816] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 909.339271][T13314] usbhid 1-1:8.225: couldn't find an input interrupt endpoint [ 909.377728][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.389394][T13314] usb 1-1: USB disconnect, device number 124 [ 909.405138][ T5972] usb 6-1: Product: syz [ 909.456168][ T5972] usb 6-1: Manufacturer: syz [ 909.484504][ T5972] usb 6-1: SerialNumber: syz [ 909.511820][ T5972] usb 6-1: config 0 descriptor?? [ 909.569680][ T5972] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 909.682078][T26876] loop6: detected capacity change from 0 to 4096 [ 909.704018][ T5822] ocfs2: Unmounting device (7,2) on (node local) [ 909.958518][ T5972] gspca_sunplus: reg_r err -71 [ 909.963431][ T5972] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 910.018733][ T5972] usb 6-1: USB disconnect, device number 116 [ 911.098565][T26879] loop7: detected capacity change from 0 to 40427 [ 911.130858][T26879] F2FS-fs (loop7): Invalid segment count (1) [ 911.161529][T26879] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 911.216681][T26879] F2FS-fs (loop7): heap/no_heap options were deprecated [ 911.260325][T26879] F2FS-fs (loop7): invalid crc value [ 911.406881][T26927] xt_ipcomp: unknown flags 12 [ 911.662546][T26879] F2FS-fs (loop7): Try to recover 1th superblock, ret: -30 [ 911.688971][T26879] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 911.771441][T26938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9082'. [ 911.917451][T26879] F2FS-fs (loop7): Try to recover all the superblocks, ret: 0 [ 911.921321][T26944] netlink: 268 bytes leftover after parsing attributes in process `syz.0.9086'. [ 912.476747][T26919] loop5: detected capacity change from 0 to 32768 [ 912.531981][T26964] loop2: detected capacity change from 0 to 22 [ 912.587482][T26919] read_mapping_page failed! [ 912.601496][T26964] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 912.628854][T26919] ERROR: (device loop5): txCommit: [ 912.628854][T26919] [ 912.669802][T26964] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 912.727345][T26919] ERROR: (device loop5): remounting filesystem as read-only [ 913.090658][T26977] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9100'. [ 913.428793][ T30] audit: type=1326 audit(913.928:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26989 comm="syz.2.9108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x0 [ 913.597330][T26995] loop4: detected capacity change from 0 to 8 [ 913.692136][T26995] SQUASHFS error: Failed to read block 0x1ec: -5 [ 913.747989][T26995] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 913.757364][ T52] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 913.840109][T27006] @ÿ: renamed from bond_slave_0 [ 913.937216][ T52] usb 8-1: Using ep0 maxpacket: 32 [ 913.957047][ T52] usb 8-1: unable to get BOS descriptor or descriptor too short [ 914.008901][ T52] usb 8-1: config 7 has an invalid interface number: 187 but max is 0 [ 914.035363][ T52] usb 8-1: config 7 has no interface number 0 [ 914.059419][ T52] usb 8-1: config 7 interface 187 has no altsetting 0 [ 914.091877][ T52] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 914.110347][ T52] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.139257][ T52] usb 8-1: Product: syz [ 914.143464][ T52] usb 8-1: Manufacturer: syz [ 914.176452][ T52] usb 8-1: SerialNumber: syz [ 914.377956][ T5838] Bluetooth: hci3: unexpected event for opcode 0x2036 [ 914.457018][ T52] usb 8-1: Limiting number of CPorts to U8_MAX [ 914.562972][ T52] usb 8-1: Unknown endpoint type found, address 0x07 [ 914.658255][ T52] usb 8-1: Not enough endpoints found in device, aborting! [ 914.757772][ T52] usb 8-1: USB disconnect, device number 8 [ 915.050729][T27051] netlink: 'syz.4.9137': attribute type 1 has an invalid length. [ 915.300799][T27062] syz.4.9143 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 915.586631][T27072] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9147'. [ 915.795624][T27073] loop4: detected capacity change from 0 to 4096 [ 915.834571][T27073] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 916.011606][T27073] ntfs3(loop4): ino=1a, mi_enum_attr [ 916.034249][T27073] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 916.130727][T27087] loop6: detected capacity change from 0 to 2048 [ 916.161077][T27073] ntfs3(loop4): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 916.210948][T27087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.424608][T27057] loop5: detected capacity change from 0 to 32768 [ 916.480184][T27057] bcachefs (/dev/loop5): error reading default superblock: checksum error, type none: got should be [ 916.531051][T27096] loop2: detected capacity change from 0 to 256 [ 916.540556][T27057] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section replicas_v0: invalid device 254 in entry user: 1/1 [254] [ 916.540556][T27057] replicas_v0 (size 24): [ 916.540556][T27057] btree: 1 [0] journal: 1 [0] user: 1 [254] (unknown data_type 255): 255 [255 255 255 255 255 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 249 0 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 179 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0 0 0 0 0 0 0 4 1 1 0 0 0 0 0 33 0 0 0 8 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 83 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 25 0] [ 916.540556][T27057] [ 916.771052][T27057] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 916.821106][T27096] FAT-fs (loop2): Directory bread(block 64) failed [ 916.827688][T27096] FAT-fs (loop2): Directory bread(block 65) failed [ 916.840917][T27096] FAT-fs (loop2): Directory bread(block 66) failed [ 916.856768][T27096] FAT-fs (loop2): Directory bread(block 67) failed [ 916.902954][T27096] FAT-fs (loop2): Directory bread(block 68) failed [ 916.940236][T27096] FAT-fs (loop2): Directory bread(block 69) failed [ 916.975054][T27096] FAT-fs (loop2): Directory bread(block 70) failed [ 917.025112][T27096] FAT-fs (loop2): Directory bread(block 71) failed [ 917.046180][T27096] FAT-fs (loop2): Directory bread(block 72) failed [ 917.070730][T27096] FAT-fs (loop2): Directory bread(block 73) failed [ 917.125329][T27113] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9167'. [ 917.348416][T27118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9170'. [ 917.376365][T27118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9170'. [ 917.406759][T27119] loop6: detected capacity change from 0 to 64 [ 917.686504][T27128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 917.692409][T27123] loop5: detected capacity change from 0 to 4096 [ 917.927445][T27123] ntfs3(loop5): ino=1a, mi_enum_attr [ 917.968552][T27123] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 918.028327][ T52] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 918.240299][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.269744][T27141] loop2: detected capacity change from 0 to 512 [ 918.296551][ T52] usb 1-1: config 0 interface 0 has no altsetting 0 [ 918.343135][T27141] EXT4-fs (loop2): orphan cleanup on readonly fs [ 918.363345][ T52] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 918.377980][T27141] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 918.427137][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.435201][ T52] usb 1-1: Product: syz [ 918.487381][T27141] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9181: invalid indirect mapped block 4278190080 (level 0) [ 918.509458][ T52] usb 1-1: Manufacturer: syz [ 918.514777][ T52] usb 1-1: SerialNumber: syz [ 918.571587][ T52] usb 1-1: config 0 descriptor?? [ 918.593464][T27141] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9181: invalid indirect mapped block 1 (level 1) [ 918.615519][ T52] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 918.670725][ T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 918.708187][T27141] EXT4-fs (loop2): 1 truncate cleaned up [ 918.756967][ T52] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 918.768341][T27141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 918.810209][ T52] usb 1-1: media controller created [ 918.854549][T27141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.050837][T27161] siw: device registration error -23 [ 919.056645][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 919.096576][T27162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9190'. [ 919.405152][ T52] DVB: Unable to find symbol tda10046_attach() [ 919.414949][ T52] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 919.456595][ T52] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 919.551284][T27175] loop4: detected capacity change from 0 to 1024 [ 919.614299][T27179] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 919.639556][T27175] hfsplus: trying to free free bnode 0(1) [ 919.689707][ T52] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 919.731244][ T52] usb 1-1: USB disconnect, device number 125 [ 919.828583][T15941] hfsplus: b-tree write err: -5, ino 4 [ 919.964308][ T5948] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 920.273197][ T5948] usb 7-1: config 0 has an invalid interface number: 138 but max is 0 [ 920.281424][ T5948] usb 7-1: config 0 has no interface number 0 [ 920.297825][ T5948] usb 7-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 920.343081][ T5948] usb 7-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 920.422839][ T5948] usb 7-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 4 [ 920.469514][ T5948] usb 7-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid maxpacket 1152, setting to 1023 [ 920.518214][ T5948] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 920.571241][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.621177][ T5948] usb 7-1: config 0 descriptor?? [ 920.886815][ T5948] usb 7-1: string descriptor 0 read error: -71 [ 920.918354][T27215] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9217'. [ 920.918623][ T5948] usbtest 7-1:0.138: Linux gadget zero [ 920.977169][ T5948] usbtest 7-1:0.138: full-speed {control in/out bulk-out iso-in} tests (+alt) [ 921.061893][ T5948] usb 7-1: USB disconnect, device number 12 [ 921.129406][T27223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9219'. [ 921.159057][T27223] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9219'. [ 921.245060][T27227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9223'. [ 921.739665][T27244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9230'. [ 921.938858][T27252] overlay: Unknown parameter '/' [ 922.167512][T27260] loop6: detected capacity change from 0 to 256 [ 922.218997][T27262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9240'. [ 922.291152][T27260] exfat: Deprecated parameter 'namecase' [ 922.345454][T27260] exfat: Deprecated parameter 'utf8' [ 922.563826][T27260] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 922.671829][T27278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9248'. [ 922.688512][ T5948] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 922.892237][ T5948] usb 8-1: config 0 has an invalid interface number: 138 but max is 0 [ 922.920490][ T5948] usb 8-1: config 0 has no interface number 0 [ 922.958066][ T5948] usb 8-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 923.010378][ T5948] usb 8-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 923.038616][T27291] loop2: detected capacity change from 0 to 64 [ 923.044894][ T5948] usb 8-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 923.119305][ T5948] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 923.158337][ T5948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.197860][ T5948] usb 8-1: config 0 descriptor?? [ 923.202569][T27294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9257'. [ 923.224919][T27296] loop4: detected capacity change from 0 to 512 [ 923.263715][T27296] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 923.421366][T27296] EXT4-fs (loop4): 1 truncate cleaned up [ 923.439561][T27299] loop6: detected capacity change from 0 to 2048 [ 923.446996][T27299] EXT4-fs: Ignoring removed mblk_io_submit option [ 923.452110][ T5948] usb 8-1: string descriptor 0 read error: -71 [ 923.477011][T27299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.491904][T27296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.537727][ T5948] usbtest 8-1:0.138: couldn't get endpoints, -22 [ 923.544166][ T5948] usbtest 8-1:0.138: probe with driver usbtest failed with error -22 [ 923.569406][T27299] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9256: bg 0: block 234: padding at end of block bitmap is not set [ 923.607105][T27296] EXT4-fs error (device loop4): ext4_find_extent:902: inode #15: comm syz.4.9258: inode has invalid extent depth: 25964 [ 923.632630][ T5948] usb 8-1: USB disconnect, device number 9 [ 923.672399][T27299] EXT4-fs (loop6): Remounting filesystem read-only [ 923.723359][T27310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9262'. [ 923.735166][T27296] EXT4-fs (loop4): Remounting filesystem read-only [ 923.767098][T27296] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 923.854529][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.873707][T18543] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.814861][T27346] loop2: detected capacity change from 0 to 128 [ 924.843487][T27346] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 924.948136][T27346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 925.360955][T27367] ..@ÿ: renamed from bond_slave_0 (while UP) [ 926.176287][T27397] netlink: 10 bytes leftover after parsing attributes in process `syz.5.9304'. [ 926.411326][T27407] syz.5.9310 (27407): /proc/27406/oom_adj is deprecated, please use /proc/27406/oom_score_adj instead. [ 926.518592][T27413] loop2: detected capacity change from 0 to 22 [ 926.603045][T27413] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 926.610571][T13314] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 926.650586][T27413] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 926.658927][T27415] netlink: 80 bytes leftover after parsing attributes in process `syz.6.9311'. [ 926.782405][T13314] usb 1-1: config 0 has an invalid interface number: 142 but max is 0 [ 926.811713][T13314] usb 1-1: config 0 has no interface number 0 [ 926.817830][T13314] usb 1-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30 [ 926.884486][T13314] usb 1-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 926.955087][T13314] usb 1-1: config 0 interface 142 has no altsetting 0 [ 927.005809][T13314] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 927.066241][T13314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.110505][T13314] usb 1-1: config 0 descriptor?? [ 927.148135][T13314] ums-realtek 1-1:0.142: USB Mass Storage device detected [ 927.349246][T13314] usb 1-1: USB disconnect, device number 126 [ 927.402823][T27441] loop2: detected capacity change from 0 to 256 [ 927.587233][T27447] kAFS: unable to lookup cell ' [ 927.587233][T27447] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 927.587233][T27447] ' [ 927.648131][T27449] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9330'. [ 927.675365][T27449] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9330'. [ 928.066034][T27459] loop5: detected capacity change from 0 to 256 [ 928.472283][T27473] netlink: 'syz.7.9342': attribute type 16 has an invalid length. [ 928.502575][T27473] netlink: 'syz.7.9342': attribute type 17 has an invalid length. [ 928.593827][T27473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.686747][T27473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 928.883348][T27446] loop4: detected capacity change from 0 to 32768 [ 928.937263][T27487] ERROR: device name not specified. [ 928.992776][T27489] loop5: detected capacity change from 0 to 16 [ 929.039013][T27489] erofs (device loop5): mounted with root inode @ nid 36. [ 929.094150][T27446] JBD2: Ignoring recovery information on journal [ 929.187297][T27493] ALSA: mixer_oss: invalid OSS volume '' [ 929.203899][T27498] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 929.288675][T27493] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 929.322235][T27446] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 929.375378][T27493] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 929.383797][T27493] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 929.410733][T27446] (syz.4.9329,27446,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 929.419973][T27493] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 929.476185][T27493] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 929.508293][T27493] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 929.520067][T27446] (syz.4.9329,27446,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 929.526229][T27506] netlink: 'syz.0.9358': attribute type 24 has an invalid length. [ 929.537716][T27493] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 929.561370][T27493] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 929.569861][T27446] (syz.4.9329,27446,1):ocfs2_mknod:298 ERROR: status = -2 [ 929.569895][T27446] (syz.4.9329,27446,1):ocfs2_mknod:502 ERROR: status = -2 [ 929.569922][T27446] (syz.4.9329,27446,1):ocfs2_create:675 ERROR: status = -2 [ 929.642924][T27493] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 929.662765][T27493] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 929.672724][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 929.725933][T27493] ALSA: mixer_oss: invalid OSS volume 'ƒ¿Àð@H²ÅÅV¬É-=f#o´»)ÉU.Nƒ' [ 929.784734][T27493] ALSA: mixer_oss: invalid OSS volume '¼ùï^á&‡ƒ8ëîÏàHåLV^\LPÅË&Ò‰\‡¿' [ 929.793123][T27493] ALSA: mixer_oss: invalid OSS volume '8»2œ°p¨<ö2IqܹUÿAÀÔº–ÎÇ%„A' [ 929.865731][T27493] ALSA: mixer_oss: invalid OSS volume '»Š˜’Q' [ 930.400293][T27535] loop7: detected capacity change from 0 to 64 [ 930.462516][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.760113][T27547] netlink: 256 bytes leftover after parsing attributes in process `syz.6.9379'. [ 931.114868][T27560] loop6: detected capacity change from 0 to 512 [ 931.162305][T27560] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.9385: Invalid inode bitmap blk 4 in block_group 0 [ 931.334287][T27560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 931.461211][T27560] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 931.521930][T27560] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.9385: Invalid inode bitmap blk 4 in block_group 0 [ 931.604829][T27560] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 931.738130][T18543] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.474208][T27601] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 932.525275][T27561] loop5: detected capacity change from 0 to 40427 [ 932.539976][T26821] Bluetooth: hci6: command 0x0406 tx timeout [ 932.569264][T27561] F2FS-fs (loop5): invalid crc value [ 932.597363][T27563] loop7: detected capacity change from 0 to 40427 [ 932.635637][T27563] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 932.652402][T27563] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 932.957743][T27612] ip6gretap1: entered promiscuous mode [ 933.064251][T27614] loop4: detected capacity change from 0 to 764 [ 933.079241][T27561] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 933.103267][T27561] F2FS-fs (loop5): Corrupted max_depth of 3: 1025 [ 933.112904][T27563] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 933.143983][T27614] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 933.148311][T27563] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 933.164513][T27561] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 933.223377][T27614] 9pnet_fd: p9_fd_create_unix (27614): problem connecting socket: ./file1: -30 [ 933.379505][T27563] syz.7.9386: attempt to access beyond end of device [ 933.379505][T27563] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 933.437827][T27620] netlink: 'syz.6.9411': attribute type 6 has an invalid length. [ 933.714270][T27621] loop2: detected capacity change from 0 to 4096 [ 933.773085][T27621] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 933.895574][T27621] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 933.956033][T27621] ntfs3(loop2): ino=19, mi_enum_attr [ 933.989898][T27636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9419'. [ 934.024443][T27636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9419'. [ 934.050477][T27621] ntfs3(loop2): failed to convert "c46c" to koi8-r [ 934.113386][T27621] ntfs3(loop2): ino=20, mi_enum_attr [ 934.330877][T27644] loop6: detected capacity change from 0 to 256 [ 934.486987][T27654] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 935.136028][T27685] loop5: detected capacity change from 0 to 128 [ 935.185314][T27685] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 935.245610][T27694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9436'. [ 935.395587][ T30] audit: type=1326 audit(935.951:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27697 comm="syz.4.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 935.527050][ T30] audit: type=1326 audit(935.981:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27697 comm="syz.4.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 935.641830][ T30] audit: type=1326 audit(935.981:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27697 comm="syz.4.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 935.678450][T27715] loop5: detected capacity change from 0 to 64 [ 935.723405][T27718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9443'. [ 935.743673][ T30] audit: type=1326 audit(935.981:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27697 comm="syz.4.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f298e969 code=0x7ffc0000 [ 936.220357][T27745] loop5: detected capacity change from 0 to 512 [ 936.322883][T27749] netlink: 'syz.7.9454': attribute type 1 has an invalid length. [ 936.385157][T27745] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 936.441617][T27745] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 936.451836][T27745] System zones: 0-1, 15-15, 18-18, 34-34 [ 936.458302][T27745] EXT4-fs (loop5): orphan cleanup on readonly fs [ 936.465959][T27745] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 936.476244][T27745] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 936.490872][T27745] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 936.528251][T27745] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.9452: bad orphan inode 16 [ 936.565879][T27745] ext4_test_bit(bit=15, block=18) = 1 [ 936.590108][T27745] is_bad_inode(inode)=0 [ 936.609509][T27745] NEXT_ORPHAN(inode)=0 [ 936.623999][T27745] max_ino=32 [ 936.638056][T27745] i_nlink=2 [ 936.663427][T27745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 936.677824][T27769] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9458'. [ 936.755654][T27745] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 936.916913][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.070852][T27779] loop2: detected capacity change from 0 to 2048 [ 937.124964][T27779] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 937.175749][T27793] xt_cgroup: path and classid specified [ 937.878173][T27825] loop6: detected capacity change from 0 to 1024 [ 937.946377][T27825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=56c018, mo2=0002] [ 937.985154][T27825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.196342][T18543] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.365816][T27851] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 938.372383][T27851] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 938.446747][T27865] loop4: detected capacity change from 0 to 256 [ 938.458974][T27851] vhci_hcd vhci_hcd.0: Device attached [ 938.568255][T27865] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 938.588943][ T5972] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 938.658879][T13314] vhci_hcd: vhci_device speed not set [ 938.738827][T13314] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 938.758928][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 938.818917][ T5972] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 938.863818][ T5972] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 938.906037][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 938.947664][ T5972] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 939.005081][ T5972] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 939.046880][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.107311][ T5972] usb 3-1: Product: syz [ 939.128083][ T5972] usb 3-1: Manufacturer: syz [ 939.150261][ T5972] usb 3-1: SerialNumber: syz [ 939.191356][ T5972] usb 3-1: config 0 descriptor?? [ 939.252541][ T5972] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input64 [ 939.437822][T27861] vhci_hcd: connection reset by peer [ 939.453682][ T5972] imon:send_packet: packet tx failed (-71) [ 939.485021][T15941] vhci_hcd: stop threads [ 939.509424][ T5972] imon 3-1:0.0: panel buttons/knobs setup failed [ 939.533326][T15941] vhci_hcd: release socket [ 939.553063][T15941] vhci_hcd: disconnect device [ 939.776954][ T5972] rc_core: IR keymap rc-imon-pad not found [ 939.782925][ T5972] Registered IR keymap rc-empty [ 939.821238][ T5972] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 939.881200][ T5972] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 939.914782][ T5972] imon:send_packet: packet tx failed (-71) [ 939.940887][T27931] loop6: detected capacity change from 0 to 2048 [ 939.967013][ T5972] imon 3-1:0.0: remote input dev register failed [ 939.974871][ T5972] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 940.020378][T27937] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 940.061789][T27931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.151844][ T5972] imon 3-1:0.0: unable to initialize intf0, err 0 [ 940.164495][ T5972] imon:imon_probe: failed to initialize context! [ 940.181401][ T5972] imon 3-1:0.0: unable to register, err -19 [ 940.224277][ T5972] usb 3-1: USB disconnect, device number 116 [ 940.234906][T18543] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.256517][T27880] loop5: detected capacity change from 0 to 32768 [ 940.308495][T27880] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9492 (27880) [ 940.457304][T27880] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 940.533453][T27880] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 940.950431][T27880] BTRFS info (device loop5): rebuilding free space tree [ 941.050362][T27880] BTRFS info (device loop5): disabling free space tree [ 941.081771][T27880] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 941.112789][T27880] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 941.490360][ T5834] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 941.613805][T28038] netlink: 'syz.6.9533': attribute type 3 has an invalid length. [ 941.763540][ T52] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 941.771378][ T30] audit: type=1326 audit(942.322:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28042 comm="syz.2.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 941.909358][ T30] audit: type=1326 audit(942.332:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28042 comm="syz.2.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 941.993738][ T30] audit: type=1326 audit(942.332:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28042 comm="syz.2.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 942.023868][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 942.034327][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 942.078824][ T30] audit: type=1326 audit(942.332:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28042 comm="syz.2.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f8e969 code=0x7ffc0000 [ 942.134719][ T52] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 942.150877][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.179746][ T52] usb 1-1: Product: syz [ 942.199972][ T52] usb 1-1: Manufacturer: syz [ 942.220214][ T52] usb 1-1: SerialNumber: syz [ 942.272976][ T52] usb 1-1: config 0 descriptor?? [ 942.738950][T28090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9548'. [ 942.775956][ T52] usb 1-1: USB disconnect, device number 127 [ 943.087568][T28123] loop7: detected capacity change from 0 to 512 [ 943.097356][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.201959][T28123] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 943.231366][ T31] INFO: task syz-executor:5825 blocked for more than 143 seconds. [ 943.250700][T28123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6842e02c, mo2=0102] [ 943.264685][ T31] Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 [ 943.280471][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 943.289350][ T31] task:syz-executor state:D stack:16552 pid:5825 tgid:5825 ppid:1 task_flags:0x400140 flags:0x00004004 [ 943.303889][ T31] Call Trace: [ 943.307178][ T31] [ 943.310139][ T31] __schedule+0x16e2/0x4cd0 [ 943.314898][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.320583][ T31] ? schedule+0x165/0x360 [ 943.325116][ T31] ? __lock_acquire+0xaac/0xd20 [ 943.329999][ T31] ? __pfx___schedule+0x10/0x10 [ 943.335122][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.340851][ T31] ? schedule+0x91/0x360 [ 943.345228][ T31] schedule+0x165/0x360 [ 943.355435][ T31] io_schedule+0x81/0xe0 [ 943.359713][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 943.369413][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 943.375790][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 943.381533][ T31] ? folios_put_refs+0x559/0x640 [ 943.386536][ T31] ? __pfx_find_lock_entries+0x10/0x10 [ 943.392341][ T31] __filemap_get_folio+0x139/0xaf0 [ 943.397482][ T31] truncate_inode_pages_range+0x3ed/0xda0 [ 943.399122][T28123] System zones: [ 943.403308][ T31] ? evict+0x847/0x9c0 [ 943.411061][ T31] ? evict_inodes+0x636/0x6c0 [ 943.415767][ T31] ? generic_shutdown_super+0x9a/0x2c0 [ 943.439280][T28123] 1-12 [ 943.444767][ T31] ? kill_block_super+0x44/0x90 [ 943.458961][T28123] EXT4-fs (loop7): orphan cleanup on readonly fs [ 943.462889][ T31] ? deactivate_locked_super+0xbc/0x130 [ 943.490843][T28123] EXT4-fs (loop7): ext4_process_orphan: truncating inode 11 to 17031 bytes [ 943.491429][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 943.515610][T28123] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.9551: invalid indirect mapped block 12 (level 1) [ 943.555660][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.563513][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.569206][ T31] ? __lock_acquire+0xaac/0xd20 [ 943.578964][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 943.588588][T28123] EXT4-fs (loop7): Remounting filesystem read-only [ 943.592644][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.600381][ T31] evict+0x517/0x9c0 [ 943.601599][T28123] EXT4-fs (loop7): 1 truncate cleaned up [ 943.609969][ T31] ? __pfx_evict+0x10/0x10 [ 943.610601][ T52] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 943.614696][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.624048][T28123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 943.635490][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.650948][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 943.656249][ T31] evict_inodes+0x636/0x6c0 [ 943.662872][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.668613][ T31] ? __pfx_evict_inodes+0x10/0x10 [ 943.673940][ T31] generic_shutdown_super+0x9a/0x2c0 [ 943.679313][ T31] kill_block_super+0x44/0x90 [ 943.684129][ T31] deactivate_locked_super+0xbc/0x130 [ 943.689591][ T31] cleanup_mnt+0x425/0x4c0 [ 943.694133][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.699870][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.705161][ T31] task_work_run+0x1d4/0x260 [ 943.709780][ T31] ? __pfx_task_work_run+0x10/0x10 [ 943.715025][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.720972][ T31] resume_user_mode_work+0x5e/0x80 [ 943.726119][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 943.739124][ T31] do_syscall_64+0x103/0x210 [ 943.744789][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.753334][ T31] ? exc_page_fault+0x91/0x110 [ 943.758121][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.767152][ T31] RIP: 0033:0x7fdfbd38fc97 [ 943.773293][ T31] RSP: 002b:00007ffc597905e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 943.781924][ T31] RAX: 0000000000000000 RBX: 00007fdfbd41089d RCX: 00007fdfbd38fc97 [ 943.789910][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc597906a0 [ 943.798085][ T31] RBP: 00007ffc597906a0 R08: 0000000000000000 R09: 0000000000000000 [ 943.800400][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 943.806171][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc59791730 [ 943.819295][ T31] R13: 00007fdfbd41089d R14: 00000000000c1142 R15: 00007ffc59791770 [ 943.821025][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.827325][ T31] [ 943.841152][ T31] [ 943.841152][ T31] Showing all locks held in the system: [ 943.846431][ T52] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 943.848979][ T31] 1 lock held by khungtaskd/31: [ 943.868299][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 943.868486][T23641] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 943.879147][ T31] 3 locks held by kworker/1:1/52: [ 943.892893][ T31] 2 locks held by getty/5584: [ 943.897673][ T31] #0: ffff88814dc580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 943.907606][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.908426][ T31] #1: [ 943.931165][ T52] usb 1-1: Product: syz [ 943.935484][ T31] ffffc900030062f0 [ 943.938105][ T52] usb 1-1: Manufacturer: syz [ 943.938127][ T52] usb 1-1: SerialNumber: syz [ 943.942035][T13314] vhci_hcd: vhci_device speed not set [ 943.950505][ T52] usb 1-1: config 0 descriptor?? [ 943.967111][ T52] usb 1-1: bad CDC descriptors [ 943.974363][ T52] usb 1-1: unsupported MDLM descriptors [ 943.976855][ T31] (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 943.995096][ T31] 1 lock held by syz-executor/5825: [ 944.000617][ T31] #0: ffff888056f240e0 (&type->s_umount_key#118){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 944.011641][ T31] 4 locks held by udevd/5841: [ 944.016417][ T31] #0: ffff888045819668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 944.026171][ T31] #1: ffff888077bcec88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 944.049686][ T31] #2: ffff88807df79558 (&ep->lock){....}-{3:3}, at: d_alloc_parallel+0x3c3/0x14e0 [ 944.059460][ T31] #3: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: prepend_path+0x261/0x970 [ 944.073655][ T31] 6 locks held by kworker/0:2/13314: [ 944.078953][ T31] #0: ffff8880212d6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 944.090652][ T31] #1: ffffc90002f6fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 944.102596][ T31] #2: ffff888028720198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 944.111936][ T31] #3: ffff888146345510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 944.122239][ T31] #4: ffff888141fadf68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 944.132413][ T31] #5: ffffffff8ebcb430 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 944.143123][ T31] 2 locks held by dhcpcd/28174: [ 944.147983][ T31] #0: ffff88807b7d7a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 944.158312][ T31] #1: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 944.189621][ T31] 2 locks held by dhcpcd/28175: [ 944.194507][ T31] #0: ffff8880565dbe08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 944.214489][ T52] usb 1-1: USB disconnect, device number 2 [ 944.223560][ T31] #1: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 944.258681][ T31] [ 944.284784][ T31] ============================================= [ 944.284784][ T31] [ 944.295453][ T31] NMI backtrace for cpu 0 [ 944.295470][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 944.295500][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.295515][ T31] Call Trace: [ 944.295525][ T31] [ 944.295536][ T31] dump_stack_lvl+0x189/0x250 [ 944.295583][ T31] ? __wake_up_klogd+0xd9/0x110 [ 944.295612][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.295644][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.295679][ T31] ? __pfx__printk+0x10/0x10 [ 944.295718][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 944.295749][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 944.295773][ T31] ? _printk+0xcf/0x120 [ 944.295802][ T31] ? __pfx__printk+0x10/0x10 [ 944.295829][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 944.295859][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 944.295889][ T31] watchdog+0xfee/0x1030 [ 944.295923][ T31] ? watchdog+0x1de/0x1030 [ 944.295964][ T31] kthread+0x711/0x8a0 [ 944.295998][ T31] ? __pfx_watchdog+0x10/0x10 [ 944.296028][ T31] ? __pfx_kthread+0x10/0x10 [ 944.296057][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.296086][ T31] ? __pfx_kthread+0x10/0x10 [ 944.296115][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.296143][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.296170][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.296202][ T31] ? __pfx_kthread+0x10/0x10 [ 944.296231][ T31] ret_from_fork+0x4e/0x80 [ 944.296257][ T31] ? __pfx_kthread+0x10/0x10 [ 944.296286][ T31] ret_from_fork_asm+0x1a/0x30 [ 944.296331][ T31] [ 944.296363][ T31] Sending NMI from CPU 0 to CPUs 1: [ 944.462821][ C1] NMI backtrace for cpu 1 [ 944.462839][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 944.462864][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.462878][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 944.462910][ C1] Code: ee bd b9 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 8f 11 00 f3 0f 1e fa fb f4 c3 bd b9 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 944.462929][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 00000286 [ 944.462949][ C1] RAX: 9ea6062ef8b2f600 RBX: ffffffff81977108 RCX: 9ea6062ef8b2f600 [ 944.462966][ C1] RDX: 0000000000000001 RSI: ffffffff8d74e0ce RDI: ffffffff8bc1f3c0 [ 944.462982][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 944.462999][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7f3370 [ 944.463016][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d9b40 [ 944.463033][ C1] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 944.463052][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.463067][ C1] CR2: 0000001b2f90fff8 CR3: 0000000027690000 CR4: 0000000000350ef0 [ 944.463085][ C1] Call Trace: [ 944.463093][ C1] [ 944.463101][ C1] default_idle+0x13/0x20 [ 944.463135][ C1] default_idle_call+0x74/0xb0 [ 944.463167][ C1] do_idle+0x1e8/0x510 [ 944.463191][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.463219][ C1] ? __pfx_do_idle+0x10/0x10 [ 944.463238][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 944.463264][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.463289][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.463317][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 944.463351][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 944.463378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.463407][ C1] cpu_startup_entry+0x44/0x60 [ 944.463429][ C1] start_secondary+0x101/0x110 [ 944.463450][ C1] common_startup_64+0x13e/0x147 [ 944.463493][ C1] [ 944.464934][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 944.673330][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 944.685135][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.695190][ T31] Call Trace: [ 944.698495][ T31] [ 944.701432][ T31] dump_stack_lvl+0x99/0x250 [ 944.706044][ T31] ? __asan_memcpy+0x40/0x70 [ 944.710644][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.715862][ T31] ? __pfx__printk+0x10/0x10 [ 944.720461][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.726099][ T31] panic+0x2db/0x790 [ 944.730001][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.735645][ T31] ? __pfx_panic+0x10/0x10 [ 944.740071][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.745706][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 944.751518][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.757151][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 944.762526][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 944.768692][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.774347][ T31] watchdog+0x102d/0x1030 [ 944.778691][ T31] ? watchdog+0x1de/0x1030 [ 944.783127][ T31] kthread+0x711/0x8a0 [ 944.787231][ T31] ? __pfx_watchdog+0x10/0x10 [ 944.791920][ T31] ? __pfx_kthread+0x10/0x10 [ 944.796515][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.802154][ T31] ? __pfx_kthread+0x10/0x10 [ 944.806925][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.812122][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 944.817755][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.822958][ T31] ? __pfx_kthread+0x10/0x10 [ 944.827552][ T31] ret_from_fork+0x4e/0x80 [ 944.831968][ T31] ? __pfx_kthread+0x10/0x10 [ 944.836558][ T31] ret_from_fork_asm+0x1a/0x30 [ 944.841341][ T31] [ 944.844542][ T31] Kernel Offset: disabled [ 944.848865][ T31] Rebooting in 86400 seconds..