last executing test programs: 19.890556266s ago: executing program 4 (id=5261): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007000000540012800c0001006d6163766c616e004400028006000200010000000800010001"], 0x84}}, 0x20008040) 19.596383718s ago: executing program 4 (id=5268): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 19.415037808s ago: executing program 4 (id=5272): r0 = syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 17.447516904s ago: executing program 4 (id=5291): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 15.85914163s ago: executing program 4 (id=5318): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) 14.421044301s ago: executing program 4 (id=5347): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0xff58) 13.900711296s ago: executing program 32 (id=5347): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0xff58) 3.159092817s ago: executing program 2 (id=5455): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.487015808s ago: executing program 2 (id=5465): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002400)={0xc, {"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", 0x1000}}, 0x1006) 1.972532741s ago: executing program 2 (id=5473): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.794339059s ago: executing program 2 (id=5476): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x7}}) 1.609682354s ago: executing program 2 (id=5479): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000001200)=[{&(0x7f0000001180)='\a', 0x1}], 0x1, 0x2, 0xcf, 0x2) 1.40127577s ago: executing program 2 (id=5483): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.143649125s ago: executing program 1 (id=5488): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000003580)=@raw={'raw\x00', 0x41, 0x3, 0xa10, 0x8a0, 0x19, 0x0, 0x0, 0x0, 0x978, 0x1f0, 0x1f0, 0x978, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x880, 0x8a0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@addrtype={{0x30}, {0x8, 0x840, 0x0, 0x1}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x3ff}, {0x3, 0x3}, {0x3, 0x1}, {0x995, 0x2}, {0x40000005, 0x1}, {0x8896}, {0x6, 0x3}, {0x8, 0x1}, {0x101, 0x2}, {0x6}, {0x5, 0x1}], [{0xff, 0x6}, {0x2, 0x881d}, {0x0, 0xb}, {0x3, 0x7f}, {0x7ff, 0x8}, {0x6, 0x6}, {0xb, 0x7}, {0x9, 0x4}, {0x5, 0x2}, {0x1d1e, 0x9}, {0x0, 0x7}], 0x5, 0x1}, {[{0x1}, {0x7fffffff, 0x2}, {0x4, 0x3}, {}, {0x383, 0x1}, {0xebea, 0x2}, {0x3}, {0x800, 0x2}, {0x7, 0x2}, {0x3, 0x3}, {0x4}], [{0x5, 0x9}, {0x1, 0x9}, {0x7, 0x4}, {0x3, 0x5}, {0x3, 0x8}, {0x6, 0x1000}, {0x9, 0x6f528900}, {0x6, 0x3}, {0x10, 0x3}, {0xfffffff8, 0x3}, {0x400, 0x80}], 0x1, 0x5}, {[{0x7, 0x2}, {0x9}, {0x5}, {0xffffffff, 0x1}, {0xd, 0x3}, {0x313, 0x1}, {0xfed}, {0x5, 0x3}, {0x80, 0x2}, {0x7fff, 0x2}, {0x1, 0x3}], [{0x3, 0x6a}, {0x400, 0xfff}, {0x100, 0x5d68}, {0x8dc, 0x5}, {0x800, 0x1}, {0x6, 0x3ff}, {0xa2, 0x200}, {0x9, 0x2}, {0x3, 0x6}, {0x2, 0x4}, {0x60, 0x78395991}], 0x0, 0x2}, {[{0x7, 0x3}, {0xffff, 0x2}, {0x4, 0x2}, {0x2, 0x2}, {0xffffff81, 0x2}, {0xfff}, {0x1, 0x2}, {0xddc4, 0x3}, {0x7fffffff}, {0x6, 0x1}, {0x6, 0x3}], [{0xd6f, 0x9}, {0x2, 0x5}, {0x100, 0xd12}, {0x0, 0x2}, {0x800, 0x1}, {0xfffffffe, 0x3}, {0xffffff9d, 0x10001}, {0x3ff, 0x9}, {0x6, 0xf2}, {0x8, 0x8}, {0xfff}], 0xb, 0xb}, {[{0x7, 0x3}, {0x1, 0x3}, {0xc756, 0x3}, {0x2, 0x1294a4f2d4f6b7e4}, {0x0, 0x1}, {0xb}, {0x537, 0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x6}, {0x4, 0x2}], [{0xffffffff, 0x9}, {0x4, 0x2}, {0x8, 0x9}, {0x1, 0x10001}, {0x2, 0x6}, {0x9}, {0x3}, {0x9, 0x1}, {0x6, 0x8000000}, {0x5, 0x9}, {0x6, 0x1}], 0x5, 0x7}, {[{0x8, 0x7}, {0x400}, {0x5, 0x3}, {0x6}, {0x8, 0x3}, {0x7, 0x3}, {0x1ff}, {0x4, 0x1}, {0x9, 0x3}, {0x86c, 0x1}, {0x1, 0x1}], [{0xa, 0x17}, {0x9, 0x3}, {0xbc72, 0x5}, {0xe, 0x6}, {0x3ff, 0x401}, {0x10001, 0x10}, {0x0, 0x5}, {0x4, 0x6}, {0x7, 0x40}, {0x2}, {0x7, 0x8001}], 0xb, 0xa}, {[{0x8, 0x7}, {0x1, 0x1}, {0x81, 0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x3}, {0x651, 0x3}, {0x3}, {0xbac, 0x1}, {0xffffffff, 0x3}], [{0xfffffff9, 0xdb}, {0x9b, 0x5}, {0x600000, 0x2}, {0x267, 0x3}, {0x6, 0xffffff0c}, {0x9, 0x6}, {0x3, 0x9}, {0x8001, 0x8}, {0x8, 0x40}, {0x9, 0x6}, {0x4, 0x7}], 0x3, 0x1}, {[{0x2, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x7f, 0x3}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x3ff}, {0x763, 0x1}, {0xe1e5, 0x1}, {0xbb, 0x3}], [{0xc, 0x8}, {0x0, 0x6}, {0x7fffffff, 0x8}, {0x8001, 0x7}, {0x39bd, 0x3}, {0xfffffffe, 0x5}, {0x7d53, 0x5}, {0x6, 0x3}, {0x1, 0x695d}, {0x4, 0x3}, {0xd1}], 0xa, 0x9}, {[{}, {0xac2}, {0x8001, 0x3}, {0x7f, 0x2}, {0xe, 0x1}, {0x0, 0x3}, {0xfffffffc, 0x2}, {0x7b}, {0x9, 0x1}, {0x1, 0x1}, {0x245, 0x3}], [{0x9, 0x7f}, {0x0, 0x6}, {0x2, 0x68}, {0x30000000, 0x2}, {0x1c0, 0xe5}, {0x9, 0x1}, {0x3, 0xfffffff7}, {0x0, 0x400}, {0x86f, 0x3b}, {0x80, 0x5}, {0x7, 0x40}], 0x4, 0x1}, {[{0x7ff}, {0x2, 0x3}, {0x9, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0xe9, 0x3}, {0x0, 0x3}, {0x3}], [{0x40, 0x1}, {0x3, 0x9}, {0x5ee500, 0x9}, {0x100, 0x8001}, {0x3}, {0xffff, 0x3}, {0x5, 0x3}, {0x68b, 0x3ff}, {0x8, 0x7fff}, {0x6, 0x8001}, {0xffffff7f, 0x9}], 0x2, 0x5}, {[{0x80000001, 0x1}, {0x3, 0x1}, {0x10, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x1, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0xfffffffd, 0x2}, {0x4, 0x1}, {0xd8e, 0x3}], [{0x40000000, 0x7}, {0x5, 0x5e08670}, {0x7, 0x7f}, {0x6, 0x28}, {0xfffffff8, 0x3}, {0x0, 0x8}, {0x7e7a, 0xd09}, {0x7727, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x5}], 0x9, 0x3}], 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x21, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa70) 1.13927822s ago: executing program 0 (id=5490): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="300100002c0007012bbd7000ffdbdf25067c0000080001800400dd80140103805c00018055"], 0x130}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 986.832975ms ago: executing program 0 (id=5491): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="78000000111401002cbd7000fcdbdf250800030001000000080001000200000008004b0032000000080003000000000008000300020000000800010002000000080003000100000008004b0028"], 0x78}, 0x1, 0x0, 0x0, 0x20040001}, 0xa2c47ca323ac0c4e) 896.355014ms ago: executing program 1 (id=5492): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000002c80)=0xffc5) 882.733628ms ago: executing program 5 (id=5493): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006b09000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x9}, 0x94) 833.760804ms ago: executing program 3 (id=5494): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000140)=0xc6) 716.990815ms ago: executing program 3 (id=5495): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x28, 0x12, 0x205, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfffffff8}]}, 0x28}}, 0x0) 686.761207ms ago: executing program 1 (id=5496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4000040) 685.632954ms ago: executing program 5 (id=5497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x41}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) 603.429622ms ago: executing program 0 (id=5498): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0x80000000, @private1, 0x3}}]}, 0x38}}, 0x0) 550.890321ms ago: executing program 5 (id=5499): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x88800) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="880100000000", 0xfffffffffffffffd, 0xeb96, 0x10006, 0x8000002, 0x0}) 534.266782ms ago: executing program 1 (id=5500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) 523.345977ms ago: executing program 3 (id=5501): r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 457.679ms ago: executing program 0 (id=5502): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007032bbd7000fedbdf2503"], 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 430.358807ms ago: executing program 5 (id=5503): r0 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000340)) 320.041353ms ago: executing program 3 (id=5504): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000020000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000002e000000000000000000000000ffe000008"], 0x38}}, 0x2000000) 264.661096ms ago: executing program 5 (id=5505): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0x0, 0x300}) 264.528641ms ago: executing program 1 (id=5506): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4) 247.355775ms ago: executing program 0 (id=5507): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000300000007000000830b040a1c01027f00000100000000001c000000000000000000000008000000", @ANYRESOCT=r0], 0x40}, 0x0) 164.946514ms ago: executing program 3 (id=5508): r0 = syz_open_dev$vbi(&(0x7f0000003c80), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x20, 0x3ff, {0x77359400}, {0x5, 0x8, 0x15, 0x8, 0x4, 0x2, "c28667e3"}, 0x8001, 0x4, {}, 0xffffff2b}) 86.125092ms ago: executing program 0 (id=5509): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) 79.996318ms ago: executing program 1 (id=5510): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x8d, 0x0, "42a75f925d0cb3c6a1b7ace54de26c1e6fdbbb0d4c7a0552a40ac76501493b11d4e58eb7eb418bea74d11fac7b9f0ca03694870021f0fef375bedb092b98a7923886c1fc1fb5db89b780a270c038c113"}, 0xd8) 70.975302ms ago: executing program 5 (id=5511): r0 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x200}], 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=5512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="01000000020001000003be8c5ee17688", 0x10) kernel console output (not intermixed with test programs): g on async discard [ 529.283947][T15981] BTRFS info (device loop2): enabling free space tree [ 529.450345][ T5853] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 529.858909][T16025] loop0: detected capacity change from 0 to 2048 [ 529.989083][T16029] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.541829][T16031] loop0: detected capacity change from 0 to 4096 [ 530.646907][T16034] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.685428][T16026] loop2: detected capacity change from 0 to 32768 [ 530.721577][T16026] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4229 (16026) [ 530.817027][T16026] BTRFS info (device loop2): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 530.858159][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.866877][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.876465][T16026] BTRFS info (device loop2): using sha256 checksum algorithm [ 531.037311][T16026] BTRFS info (device loop2): enabling ssd optimizations [ 531.063743][T16026] BTRFS info (device loop2): turning on async discard [ 531.084948][T16026] BTRFS info (device loop2): enabling free space tree [ 531.088875][T16037] loop0: detected capacity change from 0 to 4096 [ 531.137589][T16037] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 531.179902][T16033] loop1: detected capacity change from 0 to 16384 [ 531.313623][T16054] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.331880][ T5853] BTRFS info (device loop2): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 531.953611][T16056] loop0: detected capacity change from 0 to 8192 [ 532.004249][T16056] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 532.763357][T16061] loop1: detected capacity change from 0 to 32768 [ 532.802776][T16061] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4236 (16061) [ 532.871740][T16061] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 532.893859][T16063] loop3: detected capacity change from 0 to 32768 [ 532.914366][T16061] BTRFS info (device loop1): using sha256 checksum algorithm [ 532.933711][T16063] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4237 (16063) [ 532.961970][T16065] loop2: detected capacity change from 0 to 32768 [ 532.990187][T16063] BTRFS info (device loop3): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 533.021265][T16065] (syz.2.4239,16065,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 533.051397][T16061] BTRFS info (device loop1): rebuilding free space tree [ 533.065818][T16063] BTRFS info (device loop3): using sha256 checksum algorithm [ 533.080433][T16065] (syz.2.4239,16065,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 533.312644][T16063] BTRFS info (device loop3): enabling ssd optimizations [ 533.353592][T16061] BTRFS info (device loop1): enabling ssd optimizations [ 533.379426][T16063] BTRFS info (device loop3): turning on async discard [ 533.409097][T16061] BTRFS info (device loop1): turning on async discard [ 533.434526][T16063] BTRFS info (device loop3): enabling free space tree [ 533.462858][T16061] BTRFS info (device loop1): enabling free space tree [ 533.490472][T16061] BTRFS info (device loop1): force clearing of disk cache [ 533.543114][T16061] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 533.633013][ T5854] BTRFS info (device loop3): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 534.827869][T16105] loop1: detected capacity change from 0 to 512 [ 534.858819][T16105] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 534.890072][T16105] UDF-fs: Scanning with blocksize 512 failed [ 534.912301][T16105] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 534.943566][T16105] UDF-fs: Scanning with blocksize 1024 failed [ 534.961500][T16105] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 534.975778][T16102] loop3: detected capacity change from 0 to 32768 [ 534.990023][T16105] UDF-fs: Scanning with blocksize 2048 failed [ 535.009775][T16105] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 535.034595][T16102] (syz.3.4242,16102,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 535.071021][T16105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.113116][T16102] (syz.3.4242,16102,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 535.511436][T16100] loop2: detected capacity change from 0 to 65536 [ 535.577654][T16100] (syz.2.4241,16100,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 535.608692][T16112] loop3: detected capacity change from 0 to 4096 [ 535.629576][T16100] (syz.2.4241,16100,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 536.240154][T16110] loop1: detected capacity change from 0 to 32768 [ 536.266270][T16110] (syz.1.4244,16110,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 536.298543][T16110] (syz.1.4244,16110,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 536.732087][T16124] loop1: detected capacity change from 0 to 1 [ 536.754791][T16124] syz.1.4250: attempt to access beyond end of device [ 536.754791][T16124] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 536.816704][T16124] SQUASHFS error: Failed to read block 0x0: -5 [ 536.837568][T16124] unable to read squashfs_super_block [ 537.074614][T16126] loop1: detected capacity change from 0 to 256 [ 537.098001][T16126] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 537.134028][T16126] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 537.167689][T16126] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 537.194771][T16126] UDF-fs: Scanning with blocksize 512 failed [ 537.220686][T16126] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 537.276166][T16126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.323145][T16119] loop3: detected capacity change from 0 to 32768 [ 537.369333][T16119] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 537.433242][T16119] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 537.485580][T16115] loop4: detected capacity change from 0 to 65536 [ 537.562705][T16115] (syz.4.4246,16115,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 537.620100][T16119] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 537.633902][T16115] (syz.4.4246,16115,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 537.675810][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 537.685746][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 537.941226][T16133] loop4: detected capacity change from 0 to 512 [ 537.978018][T16133] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 538.017965][T16133] UDF-fs: Scanning with blocksize 512 failed [ 538.039318][T16133] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 538.066629][T16133] UDF-fs: Scanning with blocksize 1024 failed [ 538.088169][T16133] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 538.109025][T16133] UDF-fs: Scanning with blocksize 2048 failed [ 538.139796][T16133] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 538.165699][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 442ms [ 538.182624][T16133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 538.202365][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 538.210950][T16119] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 538.344085][T16130] (syz.1.4252,16130,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 538.414804][T16130] (syz.1.4252,16130,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 540.061051][T16142] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 540.116718][T16142] dlm: no local IP address has been set [ 540.131007][T16142] dlm: cannot start dlm midcomms -107 [ 540.168224][T16142] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 540.368612][T16152] set_capacity_and_notify: 4 callbacks suppressed [ 540.368630][T16152] loop2: detected capacity change from 0 to 128 [ 540.606605][T16154] loop1: detected capacity change from 0 to 2048 [ 543.481729][T16160] loop0: detected capacity change from 0 to 65536 [ 543.543577][T16160] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 544.310791][T16171] loop3: detected capacity change from 0 to 2048 [ 545.138539][T16181] loop2: detected capacity change from 0 to 512 [ 545.179873][T16181] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 545.193415][T16179] loop3: detected capacity change from 0 to 4096 [ 545.215686][T16181] UDF-fs: Scanning with blocksize 512 failed [ 545.235124][T16181] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 545.250204][T16181] UDF-fs: Scanning with blocksize 1024 failed [ 545.290764][T16181] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 545.321013][T16181] UDF-fs: Scanning with blocksize 2048 failed [ 545.351115][T16181] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 545.386446][T16181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.147539][T16183] loop1: detected capacity change from 0 to 32768 [ 547.455276][T16191] loop3: detected capacity change from 0 to 65536 [ 547.471222][T16195] loop2: detected capacity change from 0 to 65536 [ 547.554901][T16195] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 547.685163][T16195] XFS (loop2): Ending clean mount [ 547.714000][T16226] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 547.939620][ T5853] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 547.982980][T16232] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 548.383727][T16239] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.4299'. [ 548.646021][T16247] vlan0: entered promiscuous mode [ 548.728863][T16254] loop3: detected capacity change from 0 to 764 [ 549.058897][T16264] loop4: detected capacity change from 0 to 64 [ 549.211205][ T6045] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 549.410589][ T6045] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 549.436953][ T6045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.460572][ T6045] usb 2-1: Product: syz [ 549.479229][ T6045] usb 2-1: Manufacturer: syz [ 549.484465][ T6045] usb 2-1: SerialNumber: syz [ 549.498675][ T6045] r8152-cfgselector 2-1: Unknown version 0x0000 [ 549.505200][ T6045] r8152-cfgselector 2-1: config 0 descriptor?? [ 549.610011][T16257] loop0: detected capacity change from 0 to 32768 [ 549.663249][T16257] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 549.804395][T16257] XFS (loop0): Ending clean mount [ 549.954248][ T5867] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 550.005531][ T6045] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 550.030581][T16296] loop4: detected capacity change from 0 to 2048 [ 550.094161][T16296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.194569][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4324'. [ 550.294102][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4324'. [ 550.324141][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4324'. [ 550.517955][T16266] loop2: detected capacity change from 0 to 65536 [ 550.525570][T16306] netlink: 'syz.0.4322': attribute type 7 has an invalid length. [ 550.550616][T16306] netlink: 'syz.0.4322': attribute type 8 has an invalid length. [ 550.573041][T16266] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 550.860137][T16324] loop1: detected capacity change from 0 to 512 [ 550.940382][T16329] loop4: detected capacity change from 0 to 16 [ 550.986787][T16324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.047055][T16329] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 551.065567][T16324] ext4 filesystem being mounted at /841/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.078365][T16328] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 551.120580][T16329] erofs (device loop4): mounted with root inode @ nid 36. [ 551.184951][T16329] erofs (device loop4): read error -117 @ 0 of nid 36 [ 551.262991][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.598578][T16356] netlink: 'syz.2.4345': attribute type 10 has an invalid length. [ 551.669696][T16356] veth0_vlan: entered allmulticast mode [ 551.681369][T16348] EXT4-fs (loop4): 1 orphan inode deleted [ 551.693821][ T152] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 551.736207][T16348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.756275][ T152] EXT4-fs error (device loop4): ext4_release_dquot:7064: comm kworker/u8:7: Failed to release dquot type 1 [ 551.774700][T16348] ext4 filesystem being mounted at /872/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.842174][T16356] veth0_vlan: left promiscuous mode [ 551.896747][T16356] veth0_vlan: entered promiscuous mode [ 551.962358][T16356] team0: Device veth0_vlan failed to register rx_handler [ 551.981922][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.351859][ T1348] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 552.524464][T16392] capability: warning: `syz.1.4363' uses deprecated v2 capabilities in a way that may be insecure [ 552.682771][T16396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 552.800020][T16401] set_capacity_and_notify: 1 callbacks suppressed [ 552.800041][T16401] loop0: detected capacity change from 0 to 1024 [ 552.833011][T16401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 552.887106][T16401] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 552.916472][ T30] audit: type=1326 audit(2000002798.891:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.2.4370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8799c819 code=0x0 [ 553.000573][T16410] xt_hashlimit: size too large, truncated to 1048576 [ 553.035021][T16410] xt_hashlimit: max too large, truncated to 1048576 [ 553.152876][T16417] loop3: detected capacity change from 0 to 64 [ 553.409061][T16430] loop4: detected capacity change from 0 to 256 [ 553.447239][T16430] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 553.539377][ T30] audit: type=1800 audit(2000002799.464:24): pid=16430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4381" name="file2" dev="loop4" ino=1048635 res=0 errno=0 [ 553.977431][T16454] delete_channel: no stack [ 553.983923][T16455] netlink: 'syz.4.4394': attribute type 11 has an invalid length. [ 554.003032][T16455] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4394'. [ 554.528894][T16478] loop3: detected capacity change from 0 to 16 [ 554.591440][T16478] erofs (device loop3): mounted with root inode @ nid 36. [ 555.311970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 555.433577][T16515] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4423'. [ 555.435131][T16516] loop1: detected capacity change from 0 to 16 [ 555.456749][T16483] loop0: detected capacity change from 0 to 32768 [ 555.470311][T16483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4407 (16483) [ 555.492916][T16516] erofs (device loop1): mounted with root inode @ nid 36. [ 555.516293][T16516] erofs (device loop1): invalid h_shared_count 255 @ nid 86 [ 555.547604][T16483] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 555.592474][T16483] BTRFS info (device loop0): using sha256 checksum algorithm [ 555.742727][T16483] BTRFS info (device loop0): enabling ssd optimizations [ 555.756368][T16483] BTRFS info (device loop0): turning on async discard [ 555.763229][T16483] BTRFS info (device loop0): enabling free space tree [ 555.838023][ T5867] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 556.019078][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 556.119179][T16550] loop4: detected capacity change from 0 to 1764 [ 556.226006][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 556.266710][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.290048][ T9] usb 3-1: Product: syz [ 556.312625][ T9] usb 3-1: Manufacturer: syz [ 556.331335][ T9] usb 3-1: SerialNumber: syz [ 556.443356][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 556.602451][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 556.682886][T16569] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4443'. [ 556.777361][T16573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.916451][T16577] loop3: detected capacity change from 0 to 256 [ 557.098631][T16577] FAT-fs (loop3): Directory bread(block 64) failed [ 557.110572][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 557.132446][T16577] FAT-fs (loop3): Directory bread(block 65) failed [ 557.163891][T16577] FAT-fs (loop3): Directory bread(block 66) failed [ 557.192850][T16577] FAT-fs (loop3): Directory bread(block 67) failed [ 557.238910][T16577] FAT-fs (loop3): Directory bread(block 68) failed [ 557.271420][T16577] FAT-fs (loop3): Directory bread(block 69) failed [ 557.300846][T16577] FAT-fs (loop3): Directory bread(block 70) failed [ 557.326297][T16577] FAT-fs (loop3): Directory bread(block 71) failed [ 557.351144][T16577] FAT-fs (loop3): Directory bread(block 72) failed [ 557.371676][ T6045] usb 3-1: USB disconnect, device number 4 [ 557.388514][T16577] FAT-fs (loop3): Directory bread(block 73) failed [ 557.489407][T16591] loop0: detected capacity change from 0 to 512 [ 557.523101][T16591] EXT4-fs: Ignoring removed i_version option [ 557.539614][T16591] EXT4-fs: Ignoring removed bh option [ 557.621918][T16591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.662185][T16591] ext4 filesystem being mounted at /911/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.805183][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 557.830660][ T9] ath9k_htc: Failed to initialize the device [ 557.852206][ T6045] usb 3-1: ath9k_htc: USB layer deinitialized [ 557.859791][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.984365][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4463'. [ 558.012344][T16583] loop1: detected capacity change from 0 to 32768 [ 558.030393][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4463'. [ 558.102363][T16583] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 558.231509][T16583] XFS (loop1): Ending clean mount [ 558.361181][ T5855] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 558.627861][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 558.833449][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 558.851749][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 558.891809][ T9] usb 1-1: config 0 has no interface number 0 [ 558.913040][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.939685][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 558.949527][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 558.970550][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.002017][ T9] usb 1-1: Product: syz [ 559.014109][ T9] usb 1-1: Manufacturer: syz [ 559.030794][ T9] usb 1-1: SerialNumber: syz [ 559.057715][ T9] usb 1-1: config 0 descriptor?? [ 559.137800][T16658] netlink: 'syz.1.4481': attribute type 11 has an invalid length. [ 559.155377][T16658] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4481'. [ 559.248739][T16662] netlink: 'syz.3.4482': attribute type 10 has an invalid length. [ 559.325254][T16662] veth0_vlan: entered allmulticast mode [ 559.396480][T16662] veth0_vlan: left promiscuous mode [ 559.425127][T16662] veth0_vlan: entered promiscuous mode [ 559.447561][T16662] team0: Device veth0_vlan failed to register rx_handler [ 559.542833][T16675] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4488'. [ 559.566530][ T9] appletouch 1-1:0.85: Failed to request geyser raw mode [ 559.586056][ T9] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 559.635322][ T9] usb 1-1: USB disconnect, device number 6 [ 560.317430][T16702] geneve2: entered promiscuous mode [ 560.365243][T16708] netlink: zone id is out of range [ 560.440984][T16683] set_capacity_and_notify: 1 callbacks suppressed [ 560.441016][T16683] loop3: detected capacity change from 0 to 32768 [ 560.488326][T16683] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4491 (16683) [ 560.546819][T16683] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 560.574019][T16683] BTRFS info (device loop3): using sha256 checksum algorithm [ 560.587532][T16717] netlink: 65173 bytes leftover after parsing attributes in process `syz.2.4505'. [ 560.768845][T16683] BTRFS info (device loop3): enabling ssd optimizations [ 560.791393][T16683] BTRFS info (device loop3): turning on async discard [ 560.844634][T16683] BTRFS info (device loop3): enabling free space tree [ 561.017887][ T5854] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 561.507346][T16764] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4520'. [ 561.673211][T16766] loop2: detected capacity change from 0 to 1024 [ 561.834696][T16771] Driver unsupported XDP return value 0 on prog (id 310) dev N/A, expect packet loss! [ 561.871413][T16772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4523'. [ 561.907963][T16742] loop0: detected capacity change from 0 to 32768 [ 561.915264][T16772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4523'. [ 561.927895][ T1348] hfsplus: b-tree write err: -5, ino 25 [ 561.941318][T16742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4509 (16742) [ 561.946602][ T1348] hfsplus: b-tree write err: -5, ino 4 [ 561.995621][T16742] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 562.010326][ T1348] hfsplus: b-tree write err: -5, ino 2 [ 562.042642][T16742] BTRFS info (device loop0): using sha256 checksum algorithm [ 562.254505][T16742] BTRFS info (device loop0): enabling ssd optimizations [ 562.254535][T16742] BTRFS info (device loop0): turning on async discard [ 562.254555][T16742] BTRFS info (device loop0): enabling free space tree [ 562.375630][ T5867] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 562.421015][T16801] netlink: 'syz.1.4531': attribute type 10 has an invalid length. [ 562.465850][T16801] veth0_vlan: entered allmulticast mode [ 562.482239][T16801] veth0_vlan: left promiscuous mode [ 562.493299][T16801] veth0_vlan: entered promiscuous mode [ 562.512705][T16801] team0: Device veth0_vlan failed to register rx_handler [ 562.558532][T16779] block device autoloading is deprecated and will be removed. [ 562.734178][T16807] loop0: detected capacity change from 0 to 2048 [ 562.777040][T16807] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 2016: 0xd8 != 0x1b [ 562.819352][T16811] loop4: detected capacity change from 0 to 64 [ 562.842669][T16807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.736793][T16848] loop0: detected capacity change from 0 to 64 [ 564.033172][T16862] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4560'. [ 564.073410][T16862] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4560'. [ 564.126829][T16862] netlink: 'syz.3.4560': attribute type 12 has an invalid length. [ 564.433619][T16878] loop1: detected capacity change from 0 to 128 [ 564.473566][T16878] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 564.506691][T16883] loop4: detected capacity change from 0 to 1024 [ 564.513209][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 564.526279][T16878] ext4 filesystem being mounted at /893/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 564.605203][T16883] hfsplus: request for non-existent node 106 in B*Tree [ 564.613650][T16883] hfsplus: request for non-existent node 106 in B*Tree [ 564.623174][T16883] hfsplus: request for non-existent node 106 in B*Tree [ 564.633476][T16883] hfsplus: request for non-existent node 106 in B*Tree [ 564.686514][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 564.707998][ T9] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 564.722007][ T5855] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 564.732412][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.761431][ T9] usb 1-1: config 0 has no interface number 0 [ 564.777779][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 564.792886][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.822897][ T9] usb 1-1: Product: syz [ 564.836221][ T9] usb 1-1: Manufacturer: syz [ 564.845404][ T9] usb 1-1: SerialNumber: syz [ 564.856136][ T134] hfsplus: b-tree write err: -5, ino 25 [ 564.863050][ T9] usb 1-1: config 0 descriptor?? [ 564.872314][ T134] hfsplus: b-tree write err: -5, ino 4 [ 564.887490][ T9] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 564.887905][ T134] hfsplus: b-tree write err: -5, ino 2 [ 564.906921][ T9] uvcvideo 1-1:0.31: No valid video chain found. [ 564.937368][ T134] hfsplus: request for non-existent node 106 in B*Tree [ 564.958204][ T134] hfsplus: request for non-existent node 106 in B*Tree [ 565.128364][ T29] usb 1-1: USB disconnect, device number 7 [ 565.500429][T16915] netlink: 'syz.2.4586': attribute type 21 has an invalid length. [ 565.534657][T16915] IPv6: NLM_F_CREATE should be specified when creating new route [ 565.588306][T16915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.597351][T16915] IPv6: NLM_F_CREATE should be set when creating new route [ 565.604676][T16915] IPv6: NLM_F_CREATE should be set when creating new route [ 565.611992][T16915] IPv6: NLM_F_CREATE should be set when creating new route [ 565.681170][T16921] openvswitch: netlink: Duplicate or invalid key (type 0). [ 565.710511][T16921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.192016][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 566.390077][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 566.392143][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.392193][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.392220][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.393728][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.393802][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.393829][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.395204][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.395252][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.395279][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.396360][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.396407][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.396433][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.399511][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.399566][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.399593][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.403850][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.403899][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.403927][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.404861][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.404901][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.404925][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.411551][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 566.411621][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 566.411648][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 566.414374][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 566.414402][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 566.414422][ T10] usb 2-1: Product: syz [ 566.414436][ T10] usb 2-1: Manufacturer: syz [ 566.414451][ T10] usb 2-1: SerialNumber: syz [ 566.422391][ T10] usb 2-1: config 0 descriptor?? [ 566.475753][ T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 566.596262][T16960] !: renamed from dummy0 (while UP) [ 566.608524][T16961] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4608'. [ 566.729969][ T809] usb 2-1: USB disconnect, device number 15 [ 566.766669][T16961] gre0: Master is either lo or non-ether device [ 566.801455][ T809] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 566.905915][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.023491][T16970] netlink: zone id is out of range [ 567.059164][T16965] bond1: entered promiscuous mode [ 567.104780][T16965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.416636][T16988] openvswitch: netlink: Key type 29 is not supported [ 567.922392][T17010] binder: 17009:17010 ioctl c018620c 200000000240 returned -22 [ 568.353705][T17000] loop1: detected capacity change from 0 to 32768 [ 568.383458][T17000] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4627 (17000) [ 568.440778][T17000] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 568.458775][T17004] loop2: detected capacity change from 0 to 32768 [ 568.465241][T17000] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 568.465291][T17000] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 568.587072][ T809] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 568.617616][T17004] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 568.733462][T17000] BTRFS info (device loop1): rebuilding free space tree [ 568.805903][ T809] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 568.817658][T17004] XFS (loop2): Ending clean mount [ 568.865202][ T809] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 568.916793][T17000] BTRFS info (device loop1): disabling free space tree [ 568.929438][ T809] usb 5-1: Product: syz [ 568.934197][T17000] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 568.944507][T17000] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 568.950092][ T809] usb 5-1: SerialNumber: syz [ 568.997284][ T5853] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 569.025531][ T809] usb 5-1: config 0 descriptor?? [ 569.142288][T17000] BTRFS info (device loop1): setting nodatasum [ 569.174222][T17000] BTRFS info (device loop1): allowing degraded mounts [ 569.215723][T17000] BTRFS info (device loop1): turning on async discard [ 569.243366][T17000] BTRFS info (device loop1): enabling disk space caching [ 569.274046][T17000] BTRFS info (device loop1): force clearing of disk cache [ 569.293787][T17000] BTRFS info (device loop1): force zlib compression, level 3 [ 569.317146][ T809] hso 5-1:0.0: Failed to find BULK eps [ 569.494446][ T5855] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 569.570472][ T809] usb 5-1: USB disconnect, device number 16 [ 570.159265][T17094] netlink: 'syz.3.4662': attribute type 1 has an invalid length. [ 570.231244][T17096] loop1: detected capacity change from 0 to 512 [ 570.258611][T17098] ip6t_srh: unknown srh match flags 4000 [ 570.264596][T17094] netlink: 'syz.3.4662': attribute type 2 has an invalid length. [ 570.267196][T17096] EXT4-fs: inline encryption not supported [ 570.361144][T17096] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4664: bad orphan inode 15 [ 570.384433][T17096] loop1: lost filesystem error report for type 5 error -117 [ 570.394856][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 570.408693][ C1] EXT4-fs (loop1): initial error at time 2000002815: ext4_orphan_get:1423 [ 570.417295][ C1] EXT4-fs (loop1): last error at time 2000002815: ext4_orphan_get:1423 [ 570.437286][T17096] ext4_test_bit(bit=14, block=5) = 0 [ 570.467294][T17096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.583439][T17096] EXT4-fs error (device loop1): __ext4_new_inode:1079: comm syz.1.4664: reserved inode found cleared - inode=1 [ 570.729693][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.752577][T17120] !: renamed from dummy0 (while UP) [ 571.118338][T17131] loop2: detected capacity change from 0 to 1024 [ 571.194398][T17135] tmpfs: Bad value for 'mpol' [ 571.506988][T17111] loop0: detected capacity change from 0 to 32768 [ 571.563401][T17111] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 571.569083][T17111] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 571.733480][T17111] XFS (loop0): Ending clean mount [ 571.872637][ T5867] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 572.180420][T17153] loop4: detected capacity change from 0 to 32768 [ 572.231810][T17153] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4688 (17153) [ 572.297398][T17153] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 572.329255][T17153] BTRFS info (device loop4): using sha256 checksum algorithm [ 572.580189][T17153] BTRFS info (device loop4): enabling ssd optimizations [ 572.616659][T17153] BTRFS info (device loop4): turning on async discard [ 572.647184][T17153] BTRFS info (device loop4): enabling free space tree [ 572.659405][T17200] loop1: detected capacity change from 0 to 256 [ 572.768560][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 572.785582][ T5852] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 572.804344][T17203] loop0: detected capacity change from 0 to 256 [ 572.830350][T17200] FAT-fs (loop1): Directory bread(block 64) failed [ 572.838657][T17200] FAT-fs (loop1): Directory bread(block 65) failed [ 572.855250][T17200] FAT-fs (loop1): Directory bread(block 66) failed [ 572.899786][T17200] FAT-fs (loop1): Directory bread(block 67) failed [ 572.923712][T17200] FAT-fs (loop1): Directory bread(block 68) failed [ 572.941897][T17200] FAT-fs (loop1): Directory bread(block 69) failed [ 572.972625][T17200] FAT-fs (loop1): Directory bread(block 70) failed [ 572.982453][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 573.021606][T17200] FAT-fs (loop1): Directory bread(block 71) failed [ 573.035347][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 573.066792][ T9] usb 4-1: config 0 has no interface number 0 [ 573.077368][T17200] FAT-fs (loop1): Directory bread(block 72) failed [ 573.099215][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 573.110290][T17200] FAT-fs (loop1): Directory bread(block 73) failed [ 573.123854][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.147144][ T9] usb 4-1: Product: syz [ 573.181412][ T9] usb 4-1: Manufacturer: syz [ 573.209573][ T9] usb 4-1: SerialNumber: syz [ 573.243222][ T9] usb 4-1: config 0 descriptor?? [ 573.280249][ T9] hub 4-1:0.132: bad descriptor, ignoring hub [ 573.318333][ T9] hub 4-1:0.132: probe with driver hub failed with error -5 [ 573.368973][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input44 [ 573.876702][T17228] warning: `syz.0.4716' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 573.962938][T17232] loop1: detected capacity change from 0 to 64 [ 574.639090][T17250] loop1: detected capacity change from 0 to 512 [ 574.678564][T17226] loop4: detected capacity change from 0 to 32768 [ 574.751752][T17226] ea_get: invalid extended attribute [ 574.797017][ T6140] usb 4-1: reset high-speed USB device number 127 using dummy_hcd [ 574.858227][ T6140] usb 4-1: device reset changed ep0 maxpacket size! [ 574.948616][ T9] usb 4-1: USB disconnect, device number 127 [ 574.969228][T17252] loop1: detected capacity change from 0 to 764 [ 575.184710][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 575.390431][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 575.421542][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 575.450126][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.481344][ T9] usb 4-1: config 0 descriptor?? [ 575.506949][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 575.510744][T17248] loop0: detected capacity change from 0 to 32768 [ 575.535704][T17238] loop2: detected capacity change from 0 to 32768 [ 575.653905][T17248] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 575.686331][T17238] gfs2: fsid=loop2: Trying to join cluster "lock_nolock", "loop2" [ 575.717668][T17238] gfs2: fsid=loop2: Now mounting FS (format 1801)... [ 575.792650][T17248] XFS (loop0): Ending clean mount [ 575.796568][T17238] gfs2: fsid=loop2.s: journal 0 mapped with 10 extents in 0ms [ 575.839640][T17248] XFS (loop0): Quotacheck needed: Please wait. [ 575.857290][T17238] gfs2: fsid=loop2.s: first mount done, others may mount [ 575.942909][ T9] gspca_vc032x: reg_w err -71 [ 575.957061][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.966753][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.972197][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.977765][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.983159][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 575.996879][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.008314][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.019247][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.030965][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.042021][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.053498][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.070673][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.087655][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.101116][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.117159][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.124158][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.141754][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.154096][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 576.156791][T17248] XFS (loop0): Quotacheck: Done. [ 576.164212][ T9] gspca_vc032x: Unknown sensor... [ 576.177154][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 576.208124][ T9] usb 4-1: USB disconnect, device number 2 [ 576.371451][ T5867] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 576.837537][T17291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4744'. [ 577.895869][T17339] IPv6: sit1: Disabled Multicast RS [ 577.998737][T17345] loop3: detected capacity change from 0 to 512 [ 578.005895][T17342] loop0: detected capacity change from 0 to 2048 [ 578.014133][T17345] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (47215!=33349) [ 578.023806][T17342] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 578.076038][T17347] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 578.119772][T17345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 578.138054][T17345] EXT4-fs (loop3): orphan cleanup on readonly fs [ 578.144860][T17345] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.4768: bad orphan inode 3 [ 578.155227][T17345] loop3: lost filesystem error report for type 5 error -117 [ 578.164040][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 578.178068][ C1] EXT4-fs (loop3): initial error at time 2000002822: ext4_orphan_get:1423 [ 578.181477][T17345] EXT4-fs (loop3): Remounting filesystem read-only [ 578.186619][ C1] EXT4-fs (loop3): last error at time 2000002822: ext4_orphan_get:1423 [ 578.292560][T17345] EXT4-fs (loop3): mounted filesystem ff0f0000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 578.393725][T17345] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.4768: dx entry: limit 0 != root limit 125 [ 578.415372][T17359] sg_write: data in/out 214457/136 bytes for SCSI command 0xf1-- guessing data in; [ 578.415372][T17359] program syz.0.4774 not setting count and/or reply_len properly [ 578.439425][T17345] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4768: Corrupt directory, running e2fsck is recommended [ 578.566781][T17363] loop2: detected capacity change from 0 to 1764 [ 578.578048][ T5854] EXT4-fs (loop3): unmounting filesystem ff0f0000-0000-0000-0000-000000000007. [ 578.736608][T17363] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 578.890509][T17373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.919450][T17373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.936495][T17373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.947892][T17373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.087372][T17379] loop3: detected capacity change from 0 to 512 [ 579.108792][T17379] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 579.190049][T17379] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 579.429429][T17371] loop0: detected capacity change from 0 to 32768 [ 579.521386][T17371] ERROR: (device loop0): diNewExt: no free extents [ 579.521386][T17371] [ 579.625613][T17371] ERROR: (device loop0): remounting filesystem as read-only [ 579.682230][T17371] ialloc: diAlloc returned -5! [ 579.848762][T17398] loop3: detected capacity change from 0 to 4096 [ 579.886982][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 579.906311][T17398] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 579.915794][T17402] loop0: detected capacity change from 0 to 1024 [ 579.935028][T17398] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 580.100241][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 580.136778][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.181509][ T9] usb 3-1: Product: syz [ 580.190995][ T9] usb 3-1: Manufacturer: syz [ 580.206680][ T9] usb 3-1: SerialNumber: syz [ 580.257594][T17410] openvswitch: netlink: Message has 4 unknown bytes. [ 580.274327][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 580.279470][T17410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.372114][ T5975] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 580.691985][T17418] loop4: detected capacity change from 0 to 4096 [ 580.718298][T17418] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 580.836336][ T809] usb 3-1: USB disconnect, device number 5 [ 581.041590][T17430] bridge2: entered promiscuous mode [ 581.267803][T17432] loop1: detected capacity change from 0 to 8192 [ 581.315957][T17432] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 581.466878][T17432] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 581.525340][T17432] FAT-fs (loop1): Filesystem has been set read-only [ 581.555961][ T5975] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 581.574018][ T5975] ath9k_htc: Failed to initialize the device [ 581.595933][ T809] usb 3-1: ath9k_htc: USB layer deinitialized [ 581.722052][T17459] loop2: detected capacity change from 0 to 512 [ 581.750351][T17459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 581.843518][T17459] EXT4-fs (loop2): 1 truncate cleaned up [ 581.892755][T17459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.098847][T17451] loop0: detected capacity change from 0 to 32768 [ 582.105966][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.130544][T17451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4820 (17451) [ 582.204273][T17451] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 582.238296][T17451] BTRFS info (device loop0): using sha256 checksum algorithm [ 582.427249][T17451] BTRFS info (device loop0): enabling ssd optimizations [ 582.454021][T17451] BTRFS info (device loop0): turning on async discard [ 582.479700][T17497] xt_l2tp: v2 doesn't support IP mode [ 582.486665][T17451] BTRFS info (device loop0): enabling free space tree [ 582.614505][T17451] BTRFS info (device loop0): resizing devid 73709551615 [ 582.665755][T17505] vivid-004: ================= START STATUS ================= [ 582.706235][T17451] BTRFS info (device loop0): resizer unable to find device 73709551615 [ 582.717594][T17505] vivid-004: Radio HW Seek Mode: Bounded [ 582.747317][T17505] vivid-004: Radio Programmable HW Seek: false [ 582.782504][T17505] vivid-004: RDS Rx I/O Mode: Block I/O [ 582.804623][T17505] vivid-004: Generate RBDS Instead of RDS: false [ 582.823789][T17505] vivid-004: RDS Reception: true [ 582.853694][ T5867] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 582.854225][T17505] vivid-004: RDS Program Type: 0 inactive [ 582.906873][T17505] vivid-004: RDS PS Name: inactive [ 582.923078][T17515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.930734][T17505] vivid-004: RDS Radio Text: inactive [ 582.937162][T17515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.949117][T17505] vivid-004: RDS Traffic Announcement: false inactive [ 582.964316][T17505] vivid-004: RDS Traffic Program: false inactive [ 582.972550][T17515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.006668][T17505] vivid-004: RDS Music: false inactive [ 583.015049][T17515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.025950][T17505] vivid-004: ================== END STATUS ================== [ 583.264373][T17521] loop1: detected capacity change from 0 to 512 [ 583.365661][T17521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.446518][T17521] ext4 filesystem being mounted at /941/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.551262][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 583.742804][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.781739][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 583.808217][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.839788][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.875575][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 583.905046][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.961301][ T9] usb 1-1: config 0 descriptor?? [ 584.000907][ T30] audit: type=1326 audit(2000002827.584:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5e79c819 code=0x7ffc0000 [ 584.031766][ T9] hub 1-1:0.0: USB hub found [ 584.081950][ T30] audit: type=1326 audit(2000002827.584:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5e79c819 code=0x7ffc0000 [ 584.144689][ T30] audit: type=1326 audit(2000002827.584:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fed5e79c819 code=0x7ffc0000 [ 584.210612][ T9] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 584.219496][ T30] audit: type=1326 audit(2000002827.584:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5e79c819 code=0x7ffc0000 [ 584.287791][ T30] audit: type=1326 audit(2000002827.584:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17542 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5e79c819 code=0x7ffc0000 [ 584.381146][T17519] loop4: detected capacity change from 0 to 32768 [ 584.434375][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 584.442389][T17519] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 584.451956][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 584.485150][T17519] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 584.505282][ T9] usb 1-1: USB disconnect, device number 8 [ 584.556485][T17519] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 584.606394][ T6045] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 584.628028][ T6045] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 584.759121][ T6045] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 120ms [ 584.790900][ T6045] gfs2: fsid=syz:syz.0: jid=0: Done [ 584.806210][T17519] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 585.031344][T17519] gfs2: fsid=syz:syz.0: found 1 quota changes [ 585.032418][T17546] loop3: detected capacity change from 0 to 32768 [ 585.162900][T17565] loop2: detected capacity change from 0 to 16 [ 585.233163][T17565] erofs (device loop2): mounted with root inode @ nid 36. [ 585.369212][ T5852] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 585.395684][T17571] loop1: detected capacity change from 0 to 256 [ 585.414310][T17571] exfat: Deprecated parameter 'utf8' [ 585.421468][ T5852] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 585.440462][T17571] exfat: Deprecated parameter 'utf8' [ 585.460607][T17571] exfat: Deprecated parameter 'namecase' [ 585.473519][ T5852] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5852 [syz-executor] gfs2_quota_sync+0x370/0x470 [ 585.519636][T17571] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 585.531889][ T5852] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 585.557046][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 585.557070][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 585.557081][ T5852] Call Trace: [ 585.557089][ T5852] [ 585.557097][ T5852] dump_stack_lvl+0xe8/0x150 [ 585.557129][ T5852] gfs2_withdraw+0xc3/0x1b0 [ 585.557153][ T5852] inode_go_instantiate+0xdd8/0x1220 [ 585.557176][ T5852] ? __pfx_bit_wait+0x10/0x10 [ 585.557207][ T5852] ? __pfx_bit_wait+0x10/0x10 [ 585.557229][ T5852] ? __pfx_inode_go_instantiate+0x10/0x10 [ 585.557257][ T5852] ? __pfx_wake_bit_function+0x10/0x10 [ 585.557288][ T5852] gfs2_instantiate+0x168/0x220 [ 585.557315][ T5852] gfs2_glock_wait+0x1d4/0x2a0 [ 585.557341][ T5852] do_sync+0x49a/0xcb0 [ 585.557358][ T5852] ? _raw_spin_unlock+0x28/0x50 [ 585.557386][ T5852] ? gfs2_quota_sync+0x370/0x470 [ 585.557415][ T5852] ? __pfx_do_sync+0x10/0x10 [ 585.557443][ T5852] ? gfs2_quota_sync+0x370/0x470 [ 585.557463][ T5852] ? preempt_schedule_thunk+0x16/0x30 [ 585.557492][ T5852] gfs2_quota_sync+0x370/0x470 [ 585.557522][ T5852] gfs2_sync_fs+0x4c/0xb0 [ 585.557549][ T5852] sync_filesystem+0xee/0x230 [ 585.557578][ T5852] generic_shutdown_super+0x77/0x2d0 [ 585.557605][ T5852] kill_block_super+0x44/0x90 [ 585.557623][ T5852] deactivate_locked_super+0xbc/0x130 [ 585.557645][ T5852] cleanup_mnt+0x437/0x4d0 [ 585.557670][ T5852] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.557693][ T5852] task_work_run+0x1d9/0x270 [ 585.557715][ T5852] ? __pfx_task_work_run+0x10/0x10 [ 585.557743][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.557760][ T5852] exit_to_user_mode_loop+0xed/0x480 [ 585.557781][ T5852] ? rcu_is_watching+0x15/0xb0 [ 585.557797][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.557814][ T5852] do_syscall_64+0x33e/0xf80 [ 585.557833][ T5852] ? trace_irq_disable+0x3b/0x140 [ 585.557852][ T5852] ? clear_bhb_loop+0x40/0x90 [ 585.557871][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.557886][ T5852] RIP: 0033:0x7f62e659da57 [ 585.557902][ T5852] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 585.557916][ T5852] RSP: 002b:00007ffd5f2b18a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 585.557933][ T5852] RAX: 0000000000000000 RBX: 00007f62e6632048 RCX: 00007f62e659da57 [ 585.557944][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5f2b1960 [ 585.557953][ T5852] RBP: 00007ffd5f2b1960 R08: 00007ffd5f2b2960 R09: 00000000ffffffff [ 585.557964][ T5852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5f2b29f0 [ 585.557974][ T5852] R13: 00007f62e6632048 R14: 0000000000086aca R15: 00007ffd5f2b2a30 [ 585.558001][ T5852] [ 585.558523][ T5852] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 585.846195][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4874'. [ 586.164349][T17595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4879'. [ 586.372785][T17601] ip6erspan0: entered allmulticast mode [ 586.793105][T17620] autofs4:pid:17620:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 586.937585][T17626] [U] ^R [ 587.027725][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 587.067818][T17634] No control pipe specified [ 587.116252][T17637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4899'. [ 587.156969][T17640] mmap: syz.2.4900 (17640) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 587.336322][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4905'. [ 587.609301][T17662] loop2: detected capacity change from 0 to 256 [ 588.000298][T17681] loop0: detected capacity change from 0 to 512 [ 588.023019][T17685] loop1: detected capacity change from 0 to 64 [ 588.038569][T17681] EXT4-fs: Ignoring removed bh option [ 588.069503][T17681] EXT4-fs: Ignoring removed mblk_io_submit option [ 588.111395][T17681] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 588.147037][T17681] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 588.172800][T17681] EXT4-fs (loop0): orphan cleanup on readonly fs [ 588.183731][T17681] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 588.199161][T17681] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 588.210799][T17681] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.4921: Failed to acquire dquot type 1 [ 588.223496][T17681] loop0: lost filesystem error report for type 5 error -5 [ 588.224242][T17681] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4921: Invalid block bitmap block 0 in block_group 0 [ 588.231590][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 588.231613][ C0] EXT4-fs (loop0): last error at time 2000002831: ext4_acquire_dquot:7028 [ 588.262141][T17681] loop0: lost filesystem error report for type 5 error -117 [ 588.262869][T17681] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4921: Invalid block bitmap block 0 in block_group 0 [ 588.287211][T17681] loop0: lost filesystem error report for type 5 error -117 [ 588.288913][T17681] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4921: Invalid block bitmap block 0 in block_group 0 [ 588.310528][T17681] loop0: lost filesystem error report for type 5 error -117 [ 588.314993][T17681] Quota error (device loop0): write_blk: dquota write failed [ 588.339625][T17681] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 588.384370][T17681] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.4921: Failed to acquire dquot type 1 [ 588.415104][T17681] loop0: lost filesystem error report for type 5 error -28 [ 588.416088][T17681] Quota error (device loop0): write_blk: dquota write failed [ 588.470539][T17681] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.4921: Failed to acquire dquot type 1 [ 588.508041][T17681] loop0: lost filesystem error report for type 5 error -28 [ 588.508565][T17681] EXT4-fs (loop0): 1 orphan inode deleted [ 588.562934][T17681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 588.673327][T17706] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4932'. [ 588.733360][T17681] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.4921: deleted inode referenced: 12 [ 588.830706][T17672] loop4: detected capacity change from 0 to 32768 [ 588.850796][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.884946][T17672] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 589.070549][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4940'. [ 589.093548][T17672] XFS (loop4): Ending clean mount [ 589.233633][T17672] XFS (loop4): Quotacheck needed: Please wait. [ 589.475479][T17672] XFS (loop4): Quotacheck: Done. [ 589.530689][ T5852] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 589.806832][T17751] team0: entered allmulticast mode [ 589.841628][T17751] team_slave_0: entered allmulticast mode [ 589.867933][T17751] team_slave_1: entered allmulticast mode [ 589.888041][T17751] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 589.970363][T17733] loop2: detected capacity change from 0 to 32768 [ 590.023866][T17733] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 590.112903][T17733] XFS (loop2): Ending clean mount [ 590.172983][T17733] XFS (loop2): Quotacheck needed: Please wait. [ 590.385836][T17733] XFS (loop2): Quotacheck: Done. [ 590.448526][ T5853] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 590.474967][ T809] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 590.658092][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 590.669899][ T809] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 590.699141][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 590.737425][ T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 590.779872][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 590.814192][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 590.834894][ T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 590.859712][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.882593][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 590.892998][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 590.916396][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 590.931360][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 590.947549][ T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 590.980950][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 590.994781][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 591.012426][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.028691][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 591.047740][ T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.058892][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.075101][ T24] usb 2-1: Product: syz [ 591.082429][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 591.093337][ T24] usb 2-1: Manufacturer: syz [ 591.099748][ T24] usb 2-1: SerialNumber: syz [ 591.107288][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.117151][T17798] IPv6: Can't replace route, no match found [ 591.119618][ T24] usb 2-1: config 0 descriptor?? [ 591.134529][ T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.161101][ T24] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 591.170132][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 591.188537][ T24] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 591.215358][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.233508][ T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.249097][ T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 591.275216][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 591.288532][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4971'. [ 591.298919][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.308151][ T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.343881][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 591.363936][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.374528][ T809] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.419309][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 591.443162][ T809] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 591.452094][ T5975] usb 2-1: USB disconnect, device number 16 [ 591.455757][ T809] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 591.475658][ T5975] garmin_gps 2-1:0.0: device disconnected [ 591.495180][ T809] usb 5-1: Product: syz [ 591.513091][ T809] usb 5-1: Manufacturer: syz [ 591.527928][ T809] usb 5-1: SerialNumber: syz [ 591.549233][ T809] usb 5-1: config 0 descriptor?? [ 591.599450][ T809] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 591.646901][T17816] loop2: detected capacity change from 0 to 512 [ 591.677405][T17819] netlink: 'syz.3.4978': attribute type 2 has an invalid length. [ 591.866106][ T809] usb 5-1: USB disconnect, device number 17 [ 591.899359][ T809] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 591.915171][ T6045] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 592.111997][ T6045] usb 1-1: Using ep0 maxpacket: 8 [ 592.128605][ T6045] usb 1-1: unable to get BOS descriptor or descriptor too short [ 592.143421][ T6045] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 592.169681][ T6045] usb 1-1: config 7 has no interface number 0 [ 592.178300][ T6045] usb 1-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid maxpacket 101, setting to 64 [ 592.190610][ T6045] usb 1-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.229298][ T6045] usb 1-1: config 7 interface 58 has no altsetting 0 [ 592.245526][ T6045] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 592.255742][ T6045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.282738][ T6045] usb 1-1: Product: syz [ 592.295377][ T6045] usb 1-1: Manufacturer: syz [ 592.317126][ T6045] usb 1-1: SerialNumber: syz [ 592.323152][T17841] loop1: detected capacity change from 0 to 8 [ 592.394145][T17841] SQUASHFS error: Failed to read block 0x2d7: -5 [ 592.423951][T17841] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 592.454875][T17844] ALSA: mixer_oss: invalid OSS volume '' [ 592.459603][T17841] SQUASHFS error: Failed to read block 0x8f: -5 [ 592.467435][T17844] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'Ä®Cú' [ 592.486139][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 592.486156][ T30] audit: type=1800 audit(2000002835.410:30): pid=17841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4989" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 592.496175][T17844] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 592.835905][T17844] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 592.867910][T17844] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 593.592397][T17892] TCP: TCP_TX_DELAY enabled [ 593.755038][T17898] openvswitch: netlink: Missing valid actions attribute. [ 593.781968][T17898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.983505][T17908] loop2: detected capacity change from 0 to 8 [ 594.022051][T17908] SQUASHFS error: Failed to read block 0x2d7: -5 [ 594.043570][T17908] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 594.060664][T17908] SQUASHFS error: Failed to read block 0x8f: -5 [ 594.102678][ T30] audit: type=1800 audit(2000002836.905:31): pid=17908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5022" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 594.137123][T17870] loop4: detected capacity change from 0 to 32768 [ 594.149252][T17906] loop0: detected capacity change from 0 to 4096 [ 594.174859][T17870] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 594.183931][T17906] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 594.321104][T17896] loop3: detected capacity change from 0 to 32768 [ 594.340502][T17870] XFS (loop4): Ending clean mount [ 594.392001][T17896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5017 (17896) [ 594.458387][T17906] ntfs3(loop0): ino=19, mi_enum_attr [ 594.479652][T17906] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 594.492291][T17870] XFS (loop4): Quotacheck needed: Please wait. [ 594.526573][T17896] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 594.559457][T17896] BTRFS info (device loop3): using sha256 checksum algorithm [ 594.666192][T17906] ntfs3(loop0): failed to convert "c46c" to cp866 [ 594.692984][T17906] ntfs3(loop0): ino=20, mi_enum_attr [ 594.791675][T17896] BTRFS info (device loop3): rebuilding free space tree [ 594.850482][T17870] XFS (loop4): Quotacheck: Done. [ 594.907152][T17946] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5029'. [ 594.951819][T17896] BTRFS info (device loop3): enabling ssd optimizations [ 594.968186][T17896] BTRFS info (device loop3): using spread ssd allocation scheme [ 594.993816][T17896] BTRFS info (device loop3): turning on async discard [ 595.019314][T17896] BTRFS info (device loop3): enabling free space tree [ 595.041292][T17896] BTRFS info (device loop3): force clearing of disk cache [ 595.058327][ T5852] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 595.445178][T17963] Cannot find del_set index 2 as target [ 595.475762][ T5854] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 596.212845][T17995] loop1: detected capacity change from 0 to 256 [ 596.378518][T18000] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5053'. [ 596.509086][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 596.682220][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 596.708634][ T9] usb 5-1: config 1 has an invalid descriptor of length 17, skipping remainder of the config [ 596.733665][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 5248, setting to 1024 [ 596.770392][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 596.787428][ T30] audit: type=1107 audit(2000002839.378:32): pid=18009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 596.792240][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 596.885881][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 596.904008][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.937578][T17990] loop2: detected capacity change from 0 to 32768 [ 596.946309][ T9] usb 5-1: Product: syz [ 596.950902][ T9] usb 5-1: Manufacturer: syz [ 596.979116][ T9] usb 5-1: SerialNumber: syz [ 596.983912][T17990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5047 (17990) [ 597.013749][T17997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 597.027209][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 597.055121][ T9] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 597.082713][ T9] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 597.097642][T17990] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 597.127163][T17990] BTRFS info (device loop2): using sha256 checksum algorithm [ 597.153184][T18022] loop1: detected capacity change from 0 to 1024 [ 597.274287][T18022] hfsplus: b-tree write err: -5, ino 2 [ 597.306599][T18022] fuse: Bad value for 'fd' [ 597.313005][T17990] BTRFS info (device loop2): rebuilding free space tree [ 597.348590][ T29] usb 5-1: USB disconnect, device number 18 [ 597.359198][T18014] loop3: detected capacity change from 0 to 32768 [ 597.367573][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 597.384299][T18014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5060 (18014) [ 597.417679][T13619] hfsplus: b-tree write err: -5, ino 25 [ 597.432664][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 597.439358][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.453178][T13619] hfsplus: b-tree write err: -5, ino 4 [ 597.459061][T13619] hfsplus: b-tree write err: -5, ino 2 [ 597.465889][T13619] hfsplus: b-tree write err: -5, ino 26 [ 597.471111][T18014] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 597.494214][T17990] BTRFS info (device loop2): enabling ssd optimizations [ 597.515618][T18014] BTRFS info (device loop3 state S): using crc32c checksum algorithm [ 597.524790][T17990] BTRFS info (device loop2): using spread ssd allocation scheme [ 597.547244][T17990] BTRFS info (device loop2): turning on async discard [ 597.559896][T17990] BTRFS info (device loop2): enabling free space tree [ 597.572609][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 597.595281][ T24] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 597.609538][T17990] BTRFS info (device loop2): force clearing of disk cache [ 597.623956][ T24] usb 1-1: config 0 has no interface number 0 [ 597.634853][ T134] BTRFS warning (device loop3 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x4e035593 level 0, ignored [ 597.679574][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 597.704109][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.739582][ T24] usb 1-1: Product: syz [ 597.751552][ T43] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored [ 597.772486][ T24] usb 1-1: Manufacturer: syz [ 597.783915][T13619] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x48746f3c level 0, ignored [ 597.805717][ T24] usb 1-1: SerialNumber: syz [ 597.825666][ T134] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x49206b5e level 0, ignored [ 597.846622][T18014] BTRFS info (device loop3 state ES): bdev /dev/loop3 errs: wr 0, rd 0, flush 0, corrupt 7, gen 0 [ 597.865860][ T24] usb 1-1: config 0 descriptor?? [ 597.871704][ T5853] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 597.871855][T18056] vivid-003: disconnect [ 597.891762][ T24] hub 1-1:0.132: bad descriptor, ignoring hub [ 597.905171][ T24] hub 1-1:0.132: probe with driver hub failed with error -5 [ 597.905315][T18055] vivid-003: reconnect [ 597.921186][T18014] BTRFS info (device loop3 state ES): enabling ssd optimizations [ 597.936168][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input46 [ 597.946493][T18014] BTRFS info (device loop3 state ES): disabling tree log [ 597.954319][T18014] BTRFS info (device loop3 state ES): turning on flush-on-commit [ 597.989664][T18014] BTRFS info (device loop3 state ES): enabling free space tree [ 598.013029][T18014] BTRFS info (device loop3 state ES): ignoring meta csums [ 598.021250][T18014] BTRFS info (device loop3 state ES): use zlib compression, level 3 [ 598.038672][T13619] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9b2456e4 level 0, ignored [ 598.125835][T18060] netlink: 'syz.1.5070': attribute type 10 has an invalid length. [ 598.169109][T18060] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5070'. [ 598.367685][ T5854] BTRFS info (device loop3 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 598.493614][T18066] netlink: zone id is out of range [ 598.522964][T18066] netlink: zone id is out of range [ 599.050032][T18062] loop4: detected capacity change from 0 to 32768 [ 599.058766][T18080] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5072'. [ 599.092090][T18062] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 599.119561][T18062] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 599.281245][T18062] XFS (loop4): Ending clean mount [ 599.355379][T18062] XFS (loop4): Quotacheck needed: Please wait. [ 599.407176][ T134] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 [ 599.418972][ T134] XFS (loop4): Unmount and run xfs_repair [ 599.427702][ T134] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 599.435353][ T134] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 599.460887][ T134] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 599.494518][ T134] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 599.542539][ T134] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 599.580365][ T134] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 599.600078][ T134] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 599.609680][ T134] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.623905][ T134] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.635080][ T134] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 8 error 74 [ 599.646662][ T134] loop4: lost filesystem error report for type 5 error -117 [ 599.685820][T18062] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 599.709544][T18062] loop4: lost filesystem error report for type 5 error -117 [ 599.809936][T18062] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 [ 599.829617][ T809] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 599.847795][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 599.856273][T18062] XFS (loop4): Unmount and run xfs_repair [ 599.872363][T18062] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 599.882250][T18062] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 599.904573][T18062] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 599.917782][T18121] netlink: 'syz.1.5094': attribute type 25 has an invalid length. [ 599.919081][T18062] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 599.936853][T18062] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 599.936875][T18062] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 599.936892][T18062] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 599.936908][T18062] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.936924][T18062] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 599.936944][T18062] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 8 error 74 [ 599.949596][T18062] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 599.949655][T18062] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 599.987946][ T5852] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 600.032514][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.038398][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 600.047068][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.065330][ T809] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 600.082606][ T809] usb 3-1: config 0 has no interface number 0 [ 600.082654][ T809] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.082678][ T809] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 600.082704][ T809] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 600.082726][ T809] usb 3-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 600.082750][ T809] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 600.096949][ T809] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 600.096982][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.097001][ T809] usb 3-1: Product: syz [ 600.097016][ T809] usb 3-1: Manufacturer: syz [ 600.097032][ T809] usb 3-1: SerialNumber: syz [ 600.099848][ T809] usb 3-1: config 0 descriptor?? [ 600.121782][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.121830][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.121850][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.141624][ T9] usb 4-1: config 0 descriptor?? [ 600.156572][ T9] hub 4-1:0.0: USB hub found [ 600.175683][ T809] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input47 [ 600.383410][ T9] hub 4-1:0.0: 9 ports detected [ 600.388809][ T5975] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 600.410002][ T9] hub 4-1:0.0: insufficient power available to use all downstream ports [ 600.617642][ T9] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 600.628767][ T5975] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 600.640895][ T9] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 600.654499][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.695292][ T5975] usb 2-1: config 0 descriptor?? [ 600.702806][ T9] usb 4-1: USB disconnect, device number 3 [ 600.942466][ T5975] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 600.992489][T18135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5101'. [ 601.169557][ T5975] [drm:udl_init] *ERROR* Selecting channel failed [ 601.266682][ T5975] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 601.273505][ T5975] [drm] Initialized udl on minor 2 [ 601.324697][ T5975] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 601.382655][ T5975] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 601.424679][ T5975] usb 2-1: USB disconnect, device number 17 [ 601.434978][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 601.445075][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 601.651869][T18154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5109'. [ 601.678240][T18154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5109'. [ 601.701105][T18154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5109'. [ 601.712091][T18154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5109'. [ 601.721888][T18154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5109'. [ 601.732896][T18154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5109'. [ 601.755356][T18154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5109'. [ 601.827285][T18154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.304582][ T29] usb 1-1: USB disconnect, device number 10 [ 602.330636][ T9] usb 3-1: USB disconnect, device number 6 [ 602.338594][T18173] loop1: detected capacity change from 0 to 2048 [ 602.387946][T18173] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 602.434093][T18173] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 602.444908][T18173] UDF-fs: Scanning with blocksize 512 failed [ 602.476550][T18173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.369164][T18213] IPv6: sit1: Disabled Multicast RS [ 603.382374][T18213] sit1: entered allmulticast mode [ 603.694303][T18223] loop1: detected capacity change from 0 to 4096 [ 603.703894][T18228] __nla_validate_parse: 32 callbacks suppressed [ 603.703915][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5144'. [ 603.724495][T18223] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 603.739702][T18228] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 604.114364][T18212] loop4: detected capacity change from 0 to 32768 [ 604.143061][T18243] netlink: 'syz.3.5152': attribute type 5 has an invalid length. [ 604.163844][T18212] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 604.184710][T18212] JBD2: Ignoring recovery information on journal [ 604.378017][T18212] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 604.573545][T18239] loop1: detected capacity change from 0 to 32768 [ 604.613610][ T5852] ocfs2: Unmounting device (7,4) on (node local) [ 604.687438][T18239] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 604.723154][T18239] JBD2: Ignoring recovery information on journal [ 604.880387][T18262] netlink: 'syz.2.5159': attribute type 1 has an invalid length. [ 604.927387][T18239] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 605.110662][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5163'. [ 605.332380][T18273] loop4: detected capacity change from 0 to 256 [ 605.347016][T18273] exfat: Deprecated parameter 'utf8' [ 605.374508][T18273] exfat: Deprecated parameter 'namecase' [ 605.398741][T18249] loop3: detected capacity change from 0 to 32768 [ 605.412076][ T5855] ocfs2: Unmounting device (7,1) on (node local) [ 605.424036][T18249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5154 (18249) [ 605.469305][T18273] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 605.529695][T18249] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 605.580817][T18249] BTRFS info (device loop3): using sha256 checksum algorithm [ 605.780436][T18249] BTRFS info (device loop3): enabling ssd optimizations [ 605.847217][T18249] BTRFS info (device loop3): turning on async discard [ 605.885094][T18249] BTRFS info (device loop3): enabling free space tree [ 606.065372][ T5854] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 606.292392][T18306] loop2: detected capacity change from 0 to 2048 [ 606.388755][T18306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 606.569649][T18310] loop4: detected capacity change from 0 to 2048 [ 606.627672][T18310] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 606.667001][T18315] loop2: detected capacity change from 0 to 16 [ 606.718778][T18315] erofs (device loop2): mounted with root inode @ nid 36. [ 606.734525][T18318] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 606.748763][ T5870] udevd[5870]: incorrect nilfs2 checksum on /dev/loop4 [ 606.913351][T18315] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 606.968909][T18315] erofs (device loop2): bogus lookback distance 1 @ lcn 0 of nid 89 [ 606.991109][T18315] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 607.020122][T18315] erofs (device loop2): bogus lookback distance 1 @ lcn 0 of nid 89 [ 607.041165][T18315] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 607.103120][T18315] erofs (device loop2): bogus lookback distance 1 @ lcn 0 of nid 89 [ 607.118587][T18315] erofs (device loop2): bogus lookback distance 1 @ lcn 0 of nid 89 [ 607.148170][T18315] erofs (device loop2): read error -117 @ 0 of nid 89 [ 607.169951][ T30] audit: type=1800 audit(2000002848.958:33): pid=18315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5179" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 607.447944][T18340] loop2: detected capacity change from 0 to 1024 [ 607.480134][T18340] EXT4-fs: Ignoring removed bh option [ 607.538972][T18348] x_tables: duplicate underflow at hook 1 [ 607.542543][T18340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.625796][T18340] EXT4-fs error (device loop2): ext4_lookup:1777: inode #2: comm syz.2.5189: bad inode number: 15 [ 607.694245][T18357] netlink: 4472 bytes leftover after parsing attributes in process `syz.1.5197'. [ 607.703951][T18357] netlink: 4472 bytes leftover after parsing attributes in process `syz.1.5197'. [ 607.775302][T18351] loop3: detected capacity change from 0 to 4096 [ 607.781990][T18340] EXT4-fs (loop2): Remounting filesystem read-only [ 607.807398][T18351] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 607.891050][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.924739][T18351] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 608.035919][T18365] geneve2: entered promiscuous mode [ 608.072580][ T134] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.111579][ T134] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.154200][ T134] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.192464][ T134] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 608.580466][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 608.623722][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5212'. [ 608.768826][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.800350][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 608.830448][ T9] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 608.852106][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.900280][ T9] usb 2-1: config 0 descriptor?? [ 609.008083][T18394] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 609.086000][T18394] ntfs3(loop3): ino=19, mi_enum_attr [ 609.168972][ T9] usb 2-1: string descriptor 0 read error: -71 [ 609.205511][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 609.222075][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 609.251952][ T9] usb 2-1: USB disconnect, device number 18 [ 609.252562][T18394] ntfs3(loop3): failed to convert "c46c" to maccyrillic [ 609.298671][T18398] set_capacity_and_notify: 1 callbacks suppressed [ 609.298690][T18398] loop4: detected capacity change from 0 to 8192 [ 609.315005][T18404] x_tables: unsorted entry at hook 2 [ 609.332434][T18394] ntfs3(loop3): ino=20, mi_enum_attr [ 609.373335][T18398] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 609.464885][T18398] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 609.489396][T18398] ntfs3(loop4): Failed to load $Extend (-2). [ 609.499364][T18406] netlink: 'syz.2.5221': attribute type 10 has an invalid length. [ 609.510401][T18398] ntfs3(loop4): Failed to initialize $Extend. [ 609.526058][T18408] Cannot find add_set index 65532 as target [ 609.690838][T18410] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 609.742482][T18410] CIFS mount error: No usable UNC path provided in device string! [ 609.742482][T18410] [ 609.787744][T18410] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 609.798423][T18416] netlink: zone id is out of range [ 609.828319][T18416] netlink: zone id is out of range [ 610.153750][T18434] loop3: detected capacity change from 0 to 64 [ 610.231544][ T30] audit: type=1326 audit(2000002851.791:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18437 comm="syz.0.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed919c819 code=0x7ffc0000 [ 610.314453][ T30] audit: type=1326 audit(2000002851.791:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18437 comm="syz.0.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed919c819 code=0x7ffc0000 [ 610.350637][T18440] loop4: detected capacity change from 0 to 256 [ 610.371026][T18440] vfat: Deprecated parameter 'posix' [ 610.380249][ T30] audit: type=1326 audit(2000002851.819:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18437 comm="syz.0.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f3ed919c819 code=0x7ffc0000 [ 610.394368][T18440] FAT-fs: "posix" option is obsolete, not supported now [ 610.465603][ T30] audit: type=1326 audit(2000002851.819:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18437 comm="syz.0.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed919c819 code=0x7ffc0000 [ 610.567182][ T30] audit: type=1326 audit(2000002851.819:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18437 comm="syz.0.5237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed919c819 code=0x7ffc0000 [ 610.645935][T18448] loop4: detected capacity change from 0 to 512 [ 610.702341][T18448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.731842][T18450] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5243'. [ 610.777827][T18448] ext4 filesystem being mounted at /1037/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.804943][T18450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.902004][T18448] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #12: block 32: comm syz.4.5242: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 610.960376][T18448] EXT4-fs (loop4): Remounting filesystem read-only [ 611.069965][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.096966][T18432] loop1: detected capacity change from 0 to 32768 [ 611.114142][T18432] xfs: Deprecated parameter 'noikeep' [ 611.156549][T18432] XFS: noikeep mount option is deprecated. [ 611.217757][T18432] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 611.374141][T18432] XFS (loop1): Ending clean mount [ 611.384051][T18432] XFS (loop1): Quotacheck needed: Please wait. [ 611.610801][T18432] XFS (loop1): Quotacheck: Done. [ 611.685268][ T5855] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 611.921358][T18482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5255'. [ 612.023420][T18488] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 612.214272][T18497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5261'. [ 612.240599][T18497] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5261'. [ 612.859093][T18522] loop2: detected capacity change from 0 to 4096 [ 612.881638][T18522] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 612.903133][ T809] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 613.000870][T18522] ntfs3(loop2): ino=19, mi_enum_attr [ 613.023957][T18522] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 613.087343][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 613.117147][ T809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.129823][T18504] loop1: detected capacity change from 0 to 32768 [ 613.158200][ T809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.189077][ T809] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.223727][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.260788][ T809] usb 5-1: Product: syz [ 613.281297][ T809] usb 5-1: Manufacturer: syz [ 613.298804][ T809] usb 5-1: SerialNumber: syz [ 613.328093][ T30] audit: type=1800 audit(2000002854.643:39): pid=18522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5274" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 613.409402][ T809] usb 5-1: 0:2 : does not exist [ 613.558290][T18532] pim6reg: entered allmulticast mode [ 613.858473][ T809] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 614.012570][ T809] usb 5-1: USB disconnect, device number 19 [ 614.025614][T18548] loop1: detected capacity change from 0 to 1024 [ 614.093145][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.122293][T18548] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 614.154317][T18544] loop3: detected capacity change from 0 to 4096 [ 614.169497][T18548] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 614.201155][T18544] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 614.233753][T18548] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.5287: Failed to acquire dquot type 0 [ 614.247162][T18548] loop1: lost filesystem error report for type 5 error -5 [ 614.248677][T18548] EXT4-fs (loop1): 1 truncate cleaned up [ 614.261610][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 614.261633][ C0] EXT4-fs (loop1): initial error at time 2000002855: ext4_acquire_dquot:7028 [ 614.261657][ C0] EXT4-fs (loop1): last error at time 2000002855: ext4_acquire_dquot:7028 [ 614.302616][T18548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.317336][T18537] loop2: detected capacity change from 0 to 32768 [ 614.330651][T18537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5281 (18537) [ 614.374018][T18537] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 614.391181][T18537] BTRFS info (device loop2): using sha256 checksum algorithm [ 614.413312][T18544] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 614.447867][T18544] ntfs3(loop3): ino=19, mi_enum_attr [ 614.456086][T18548] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 614.470011][T18548] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 614.480710][T18548] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.5287: Failed to acquire dquot type 0 [ 614.577045][T18544] ntfs3(loop3): failed to convert "c46c" to iso8859-5 [ 614.591611][T18544] ntfs3(loop3): ino=20, mi_enum_attr [ 614.601376][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.621189][T18537] BTRFS info (device loop2): enabling ssd optimizations [ 614.636842][T18537] BTRFS info (device loop2): turning on async discard [ 614.652811][T18537] BTRFS info (device loop2): enabling free space tree [ 614.836968][ T5853] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 615.122815][T18587] misc userio: Invalid payload size [ 615.825764][T18575] loop4: detected capacity change from 0 to 32768 [ 616.253529][T18629] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 616.268654][ T5852] read_mapping_page failed! [ 616.295734][ T5852] ERROR: (device loop4): txCommit: [ 616.295734][ T5852] [ 616.342891][ T5852] read_mapping_page failed! [ 616.373162][ T5852] ERROR: (device loop4): txCommit: [ 616.373162][ T5852] [ 616.851952][ T5852] ERROR: (device loop4): diFree: numfree > numinos [ 616.851952][ T5852] [ 616.903296][ T117] ERROR: (device loop4): diFree: numfree > numinos [ 616.903296][ T117] [ 616.961398][T18659] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5333'. [ 616.980624][T18662] loop2: detected capacity change from 0 to 128 [ 617.135590][ T30] audit: type=1326 audit(2000002858.159:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18666 comm="syz.0.5338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ed919c819 code=0x0 [ 617.251305][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.265826][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 617.409557][T18675] loop2: detected capacity change from 0 to 2048 [ 617.500546][T18682] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 617.579059][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.611594][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 617.630491][T18677] loop1: detected capacity change from 0 to 8192 [ 617.656270][T18677] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 617.767151][T18677] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 617.797137][T18677] ntfs3(loop1): Failed to load $Extend (-2). [ 617.828067][T18677] ntfs3(loop1): Failed to initialize $Extend. [ 617.940880][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.975468][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.206068][T18695] loop3: detected capacity change from 0 to 512 [ 618.237380][T18695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 618.303576][T17105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.323642][T17105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.336786][T17105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.346373][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.351497][T17105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.366555][T17105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.369246][T18695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.409743][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 618.414896][T18702] comedi comedi0: Minor 8 could not be opened [ 618.428457][T18695] ext4 filesystem being mounted at /1142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.465467][T18704] Zero length message leads to an empty skb [ 618.636199][T18695] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.5353: corrupted xattr block 32: bad e_name length [ 618.703376][T18695] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.5353: corrupted xattr block 32: bad e_name length [ 618.744627][ T5975] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 618.904739][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.919167][ T5975] usb 2-1: Using ep0 maxpacket: 16 [ 618.944277][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 618.983441][ T5975] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 619.019454][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.074944][ T5975] usb 2-1: Product: syz [ 619.098559][ T5975] usb 2-1: Manufacturer: syz [ 619.120901][ T5975] usb 2-1: SerialNumber: syz [ 619.165526][ T5975] usb 2-1: config 0 descriptor?? [ 619.268718][T18727] bond1: option updelay: invalid value (18446744073709551615) [ 619.276572][T18727] bond1: option updelay: allowed values 0 - 2147483647 [ 619.297642][T18727] bond1 (unregistering): Released all slaves [ 619.398500][ T43] bridge_slave_1: left allmulticast mode [ 619.411462][ T43] bridge_slave_1: left promiscuous mode [ 619.422939][ T5975] usb 2-1: USB disconnect, device number 19 [ 619.429445][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.469547][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 619.490380][ T43] bridge_slave_0: left allmulticast mode [ 619.504392][ T43] bridge_slave_0: left promiscuous mode [ 619.516077][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.602188][T18745] loop3: detected capacity change from 0 to 1024 [ 619.642213][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 619.672410][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.699771][ T10] usb 3-1: Product: syz [ 619.707960][ T10] usb 3-1: Manufacturer: syz [ 619.718431][ T10] usb 3-1: SerialNumber: syz [ 619.736051][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 619.753610][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 619.766565][T13619] hfsplus: b-tree write err: -5, ino 25 [ 619.778736][T13619] hfsplus: b-tree write err: -5, ino 4 [ 619.785493][T13619] hfsplus: b-tree write err: -5, ino 2 [ 620.155981][T18759] loop3: detected capacity change from 0 to 4096 [ 620.165826][ T5975] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 620.253562][ T10] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 620.351442][ T5975] usb 1-1: Using ep0 maxpacket: 16 [ 620.359130][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.371503][ T5975] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 620.397140][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.423949][ T5975] usb 1-1: config 0 descriptor?? [ 620.431494][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.439063][ T5975] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 620.472237][ T43] bond0 (unregistering): Released all slaves [ 620.496135][T18766] loop3: detected capacity change from 0 to 256 [ 620.504150][ T43] bond1 (unregistering): Released all slaves [ 620.559197][T18766] FAT-fs (loop3): Directory bread(block 64) failed [ 620.572052][T18696] chnl_net:caif_netlink_parms(): no params data found [ 620.582143][T18766] FAT-fs (loop3): Directory bread(block 65) failed [ 620.600006][T18766] FAT-fs (loop3): Directory bread(block 66) failed [ 620.618699][T18766] FAT-fs (loop3): Directory bread(block 67) failed [ 620.658401][T17105] Bluetooth: hci0: command tx timeout [ 620.660375][T18766] FAT-fs (loop3): Directory bread(block 68) failed [ 620.676630][ T5975] usb 1-1: Detected FT232A [ 620.692555][ T5975] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 620.705886][T18766] FAT-fs (loop3): Directory bread(block 69) failed [ 620.736264][T18766] FAT-fs (loop3): Directory bread(block 70) failed [ 620.745154][T18766] FAT-fs (loop3): Directory bread(block 71) failed [ 620.753030][T18766] FAT-fs (loop3): Directory bread(block 72) failed [ 620.770196][T18766] FAT-fs (loop3): Directory bread(block 73) failed [ 620.895093][ T5975] usb 1-1: USB disconnect, device number 11 [ 620.908534][ T5975] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 620.943044][T18763] loop1: detected capacity change from 0 to 32768 [ 620.949217][ T5975] ftdi_sio 1-1:0.0: device disconnected [ 620.983454][T18763] (syz.1.5382,18763,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 621.028663][T18763] (syz.1.5382,18763,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 621.128532][T18763] JBD2: Ignoring recovery information on journal [ 621.222283][T18763] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 621.252759][T18696] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.277213][T18696] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.311132][T18696] bridge_slave_0: entered allmulticast mode [ 621.354954][T18696] bridge_slave_0: entered promiscuous mode [ 621.471969][T18696] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.536806][T18696] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.586964][T18696] bridge_slave_1: entered allmulticast mode [ 621.614463][T18696] bridge_slave_1: entered promiscuous mode [ 621.750574][T18794] loop3: detected capacity change from 0 to 512 [ 621.771105][T18794] EXT4-fs: Ignoring removed i_version option [ 621.836855][T18794] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 621.856713][ T5855] ocfs2: Unmounting device (7,1) on (node local) [ 621.881609][T18794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 621.909722][T18794] System zones: 1-12 [ 621.913939][T18794] EXT4-fs (loop3): orphan cleanup on readonly fs [ 621.949110][T18794] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5389: invalid indirect mapped block 12 (level 1) [ 621.965155][T18794] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 621.972504][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 621.976280][T18794] EXT4-fs (loop3): Remounting filesystem read-only [ 621.981662][ C1] EXT4-fs (loop3): initial error at time 2000002862: ext4_free_branches:1023: inode 11 [ 621.981698][ C1] EXT4-fs (loop3): last error at time 2000002862: ext4_free_branches:1023: inode 11 [ 622.123469][T18794] EXT4-fs (loop3): 1 truncate cleaned up [ 622.141120][T18696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.163825][T18794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 622.211325][T18779] loop2: detected capacity change from 0 to 32768 [ 622.287696][T18696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.334086][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 622.572029][ T43] hsr_slave_0: left promiscuous mode [ 622.585616][ T43] hsr_slave_1: left promiscuous mode [ 622.680664][ T43] veth1_macvtap: left promiscuous mode [ 622.695341][ T43] veth0_macvtap: left promiscuous mode [ 622.709894][ T43] veth1_vlan: left promiscuous mode [ 622.721254][ T43] veth0_vlan: left promiscuous mode [ 622.907601][T17105] Bluetooth: hci0: command tx timeout [ 623.018698][T18812] loop3: detected capacity change from 0 to 32768 [ 623.041274][T18812] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 623.137449][T18824] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5394'. [ 623.146804][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5394'. [ 623.152175][T18812] XFS (loop3): Ending clean mount [ 623.156378][T18824] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5394'. [ 623.156425][T18824] netlink: 'syz.2.5394': attribute type 2 has an invalid length. [ 623.179064][T18824] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5394'. [ 623.206006][T18812] XFS (loop3): Quotacheck needed: Please wait. [ 623.393936][T18830] loop2: detected capacity change from 0 to 8192 [ 623.453333][T18830] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 623.474633][T18812] XFS (loop3): Quotacheck: Done. [ 623.507897][ T43] team0 (unregistering): Port device team_slave_1 removed [ 623.545898][ T5854] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 623.620381][ T43] team0 (unregistering): Port device team_slave_0 removed [ 623.795366][T18832] loop2: detected capacity change from 0 to 4096 [ 623.823806][T18832] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 623.873832][T18832] ntfs3(loop2): ino=5, mi_enum_attr [ 623.887202][T18832] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 623.927960][T18832] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 623.964450][T18832] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 624.240594][T18696] team0: Port device team_slave_0 added [ 624.286071][T18696] team0: Port device team_slave_1 added [ 624.289178][T18840] ipt_REJECT: ECHOREPLY no longer supported. [ 624.406965][T18696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.426273][T18696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.523326][T18696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.570219][T18696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.593485][T18696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.655060][T18696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.688817][T18859] xt_TCPMSS: Only works on TCP SYN packets [ 624.935038][T18696] hsr_slave_0: entered promiscuous mode [ 624.978405][T18696] hsr_slave_1: entered promiscuous mode [ 625.161566][T17105] Bluetooth: hci0: command tx timeout [ 625.667547][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 625.798049][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 625.808370][T18901] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 625.840116][T18901] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 625.868216][ T29] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 625.887687][T18901] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 625.908380][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 625.952112][ T29] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 625.978453][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.002731][ T29] usb 4-1: Product: syz [ 626.019878][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 626.019981][ T29] usb 4-1: Manufacturer: syz [ 626.035072][T18901] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 626.055518][ T10] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 626.058415][ T29] usb 4-1: SerialNumber: syz [ 626.070585][ T10] usb 2-1: config 254 has no interface number 0 [ 626.093021][ T10] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 626.093054][ T10] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.093080][ T10] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.093105][ T10] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 626.093128][ T10] usb 2-1: config 254 interface 235 has no altsetting 0 [ 626.096337][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 626.096384][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.096410][ T10] usb 2-1: Product: syz [ 626.096424][ T10] usb 2-1: Manufacturer: syz [ 626.096442][ T10] usb 2-1: SerialNumber: syz [ 626.103802][T18894] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 626.109773][ T29] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 626.125062][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 626.190347][T18901] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 626.295760][T18696] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 626.336728][T18894] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 626.345303][ T10] usbtest 2-1:254.235: Linux gadget zero [ 626.345327][ T10] usbtest 2-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 626.378009][T18696] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 626.464049][T18696] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 626.480492][T18696] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 626.586670][ T10] usb 2-1: USB disconnect, device number 20 [ 626.720953][ T29] usb 4-1: USB disconnect, device number 4 [ 626.817122][T18925] netlink: 'syz.2.5433': attribute type 1 has an invalid length. [ 626.837175][T18696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.891038][T18696] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.943280][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.950495][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.970357][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.977587][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.238856][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 627.240900][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 627.291718][ T24] ath9k_htc: Failed to initialize the device [ 627.316758][ T29] usb 4-1: ath9k_htc: USB layer deinitialized [ 627.384022][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 627.412184][T17105] Bluetooth: hci0: command tx timeout [ 627.510589][T18951] loop1: detected capacity change from 0 to 2048 [ 627.535818][T18951] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 627.602406][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 627.627289][T18957] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 627.648143][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.692720][ T10] usb 3-1: config 0 descriptor?? [ 627.868428][T18951] NILFS (loop1): error -2 truncating bmap (ino=16) [ 627.907838][T18696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.951518][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 628.018161][T18970] loop3: detected capacity change from 0 to 1024 [ 628.081370][T18970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.138262][T18970] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.5448: missing EA_INODE flag [ 628.165289][T18970] EXT4-fs (loop3): Remounting filesystem read-only [ 628.179406][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 628.287919][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 628.321470][ T10] [drm] Initialized udl on minor 2 [ 628.350436][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 628.407460][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 628.440453][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 628.499885][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 628.518635][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.521675][ T10] usb 3-1: USB disconnect, device number 8 [ 628.748631][T18696] veth0_vlan: entered promiscuous mode [ 628.770216][T18997] i2c i2c-0: Invalid block write size 252 [ 628.817081][T18696] veth1_vlan: entered promiscuous mode [ 628.949736][T18696] veth0_macvtap: entered promiscuous mode [ 628.998580][T18696] veth1_macvtap: entered promiscuous mode [ 629.076045][T18696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.140809][T18696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.198385][T18764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.243024][T18764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.267338][T18764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.270200][T19016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.331518][T18764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.635462][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.635484][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.796765][T18764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.842470][T18764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.326875][T19052] sg_write: data in/out 196608/17 bytes for SCSI command 0x6d-- guessing data in; [ 630.326875][T19052] program syz.5.5349 not setting count and/or reply_len properly [ 630.700488][ T30] audit: type=1326 audit(2000002870.682:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.5.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac79c819 code=0x7ffc0000 [ 630.805492][ T30] audit: type=1326 audit(2000002870.738:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.5.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac79c819 code=0x7ffc0000 [ 630.875882][ T30] audit: type=1326 audit(2000002870.738:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.5.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f23ac79c819 code=0x7ffc0000 [ 630.902634][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 630.944935][T19077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 630.948922][T19080] netlink: 'syz.0.5490': attribute type 1 has an invalid length. [ 630.960162][ T30] audit: type=1326 audit(2000002870.738:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.5.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac79c819 code=0x7ffc0000 [ 631.037731][ T30] audit: type=1326 audit(2000002870.738:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.5.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac79c819 code=0x7ffc0000 [ 631.089541][T19082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5491'. [ 631.111714][ T30] audit: type=1326 audit(2000002870.738:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19068 comm="syz.5.5485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac79c819 code=0x7ffc0000 [ 631.112033][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 631.199113][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 631.199257][T19082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5491'. [ 631.223679][ T10] usb 3-1: config 0 has no interface number 0 [ 631.259501][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 631.294934][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 631.319142][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 631.348244][ T10] usb 3-1: Product: syz [ 631.360030][ T10] usb 3-1: SerialNumber: syz [ 631.386580][ T10] usb 3-1: config 0 descriptor?? [ 631.405923][ T10] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 631.439730][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input50 [ 631.617662][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5502'. [ 632.012877][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 632.013780][ T29] usb 3-1: USB disconnect, device number 9 [ 632.019888][ C0] ------------[ cut here ]------------ [ 632.019903][ C0] URB ffff88803552b400 submitted while active [ 632.019922][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: udevd/5213 [ 632.019963][ C0] Modules linked in: [ 632.052698][ C0] CPU: 0 UID: 0 PID: 5213 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 632.061623][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 632.071734][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 632.077262][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 f7 9b f5 fa 49 83 3e 00 74 40 e8 1c 33 8c fa 48 8d 3d c5 24 05 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 01 33 8c fa eb 05 e8 fa 32 [ 632.096938][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010083 [ 632.103062][ C0] RAX: ffffffff8739ee74 RBX: ffff88803552b400 RCX: 0000000000040000 [ 632.111082][ C0] RDX: ffffc90002091000 RSI: ffff88803552b400 RDI: ffffffff903f1340 [ 632.119089][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 632.127069][ C0] R10: dffffc0000000000 R11: fffff52000000f40 R12: 0000000000000820 [ 632.135048][ C0] R13: ffff888057029830 R14: ffff88803552b408 R15: dffffc0000000000 [ 632.143018][ C0] FS: 00007f257c54b880(0000) GS:ffff88812525c000(0000) knlGS:0000000000000000 [ 632.151947][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.158524][ C0] CR2: 00007fed5e9e8c38 CR3: 000000007de34000 CR4: 00000000003526f0 [ 632.166489][ C0] Call Trace: [ 632.169763][ C0] [ 632.172688][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 632.178494][ C0] ? ___ratelimit+0x58c/0x8d0 [ 632.183184][ C0] cm109_urb_irq_callback+0x6e2/0xc90 [ 632.188635][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 632.194052][ C0] dummy_timer+0xbc0/0x4650 [ 632.198600][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 632.203552][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 632.208948][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 632.213899][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 632.219764][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 632.224722][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 632.229941][ C0] hrtimer_run_softirq+0x17a/0x240 [ 632.235140][ C0] handle_softirqs+0x22a/0x840 [ 632.239907][ C0] ? __irq_exit_rcu+0xca/0x220 [ 632.244682][ C0] __irq_exit_rcu+0xca/0x220 [ 632.249282][ C0] irq_exit_rcu+0x9/0x30 [ 632.253522][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 632.259175][ C0] [ 632.262116][ C0] [ 632.265052][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 632.271041][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 632.277475][ C0] Code: f7 e8 bd dd f0 f5 f7 c3 00 02 00 00 74 05 e8 60 49 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 76 e2 f5 65 8b 05 dd 57 8a 07 85 c0 74 18 5b 41 5e e9 41 48 [ 632.297083][ C0] RSP: 0018:ffffc90002717888 EFLAGS: 00000206 [ 632.303156][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001 [ 632.311119][ C0] RDX: 0000000000000007 RSI: ffffffff8dfc0ce0 RDI: 0000000000000001 [ 632.319093][ C0] RBP: ffffc90002717930 R08: ffffffff9031b4f7 R09: 1ffffffff206369e [ 632.327113][ C0] R10: dffffc0000000000 R11: fffffbfff206369f R12: ffff88813fe40c00 [ 632.335099][ C0] R13: 0000000000000000 R14: ffff88813fe40c00 R15: 0000000000000000 [ 632.343101][ C0] __slab_free+0x222/0x2c0 [ 632.347525][ C0] ? qlist_free_all+0x8e/0x100 [ 632.352299][ C0] qlist_free_all+0x99/0x100 [ 632.356900][ C0] kasan_quarantine_reduce+0x148/0x160 [ 632.362371][ C0] __kasan_slab_alloc+0x22/0x80 [ 632.367218][ C0] __kmalloc_noprof+0x316/0x760 [ 632.372078][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 632.377793][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 632.382827][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 632.388396][ C0] ? tomoyo_domain+0xd7/0x130 [ 632.393168][ C0] tomoyo_path_perm+0x283/0x560 [ 632.398109][ C0] ? tomoyo_path_perm+0x251/0x560 [ 632.403146][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 632.408520][ C0] ? __x64_sys_openat+0x138/0x170 [ 632.413578][ C0] security_inode_getattr+0x12b/0x310 [ 632.419041][ C0] __x64_sys_newfstat+0x13b/0x270 [ 632.424073][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 632.429637][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.435710][ C0] do_syscall_64+0x15f/0xf80 [ 632.440307][ C0] ? clear_bhb_loop+0x40/0x90 [ 632.444990][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.450878][ C0] RIP: 0033:0x7f257bf11ad7 [ 632.455301][ C0] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 632.474924][ C0] RSP: 002b:00007ffe993b7ba8 EFLAGS: 00000202 ORIG_RAX: 0000000000000005 [ 632.483355][ C0] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f257bf11ad7 [ 632.491410][ C0] RDX: 0000000000090800 RSI: 00007ffe993b7bb0 RDI: 000000000000000d [ 632.499375][ C0] RBP: 00007ffe993b7bb0 R08: 0000000000000000 R09: 0000000000000040 [ 632.507338][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005574c9c767b0 [ 632.515302][ C0] R13: 00000000000000ff R14: 00005574ac5adbe0 R15: 00007ffe993b7ee0 [ 632.523288][ C0] [ 632.526311][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 632.533586][ C0] CPU: 0 UID: 0 PID: 5213 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 632.542434][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 632.552489][ C0] Call Trace: [ 632.555770][ C0] [ 632.558695][ C0] vpanic+0x56c/0xa60 [ 632.562685][ C0] ? __pfx__printk+0x10/0x10 [ 632.567269][ C0] ? __pfx_vpanic+0x10/0x10 [ 632.571787][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 632.577106][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 632.582400][ C0] panic+0xc5/0xd0 [ 632.586128][ C0] ? __pfx_panic+0x10/0x10 [ 632.590560][ C0] __warn+0x315/0x4c0 [ 632.594552][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 632.599399][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 632.604253][ C0] __report_bug+0x29a/0x540 [ 632.608771][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 632.614151][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 632.619091][ C0] ? __pfx___report_bug+0x10/0x10 [ 632.624132][ C0] ? mark_lock+0x180/0x190 [ 632.628590][ C0] ? dev_printk_emit+0xee/0x140 [ 632.633446][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 632.638392][ C0] report_bug_entry+0x19a/0x290 [ 632.643261][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 632.648103][ C0] ? usb_submit_urb+0x83/0x18b0 [ 632.652950][ C0] handle_bug+0xce/0x200 [ 632.657634][ C0] exc_invalid_op+0x1a/0x50 [ 632.662145][ C0] asm_exc_invalid_op+0x1a/0x20 [ 632.666988][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 632.672461][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 f7 9b f5 fa 49 83 3e 00 74 40 e8 1c 33 8c fa 48 8d 3d c5 24 05 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 01 33 8c fa eb 05 e8 fa 32 [ 632.692062][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010083 [ 632.698132][ C0] RAX: ffffffff8739ee74 RBX: ffff88803552b400 RCX: 0000000000040000 [ 632.706114][ C0] RDX: ffffc90002091000 RSI: ffff88803552b400 RDI: ffffffff903f1340 [ 632.714088][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 632.722061][ C0] R10: dffffc0000000000 R11: fffff52000000f40 R12: 0000000000000820 [ 632.730032][ C0] R13: ffff888057029830 R14: ffff88803552b408 R15: dffffc0000000000 [ 632.738019][ C0] ? usb_submit_urb+0x74/0x18b0 [ 632.742891][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 632.748698][ C0] ? ___ratelimit+0x58c/0x8d0 [ 632.753378][ C0] cm109_urb_irq_callback+0x6e2/0xc90 [ 632.758761][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 632.764174][ C0] dummy_timer+0xbc0/0x4650 [ 632.768701][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 632.773658][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 632.779045][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 632.784017][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 632.789849][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 632.794797][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 632.800023][ C0] hrtimer_run_softirq+0x17a/0x240 [ 632.805165][ C0] handle_softirqs+0x22a/0x840 [ 632.809937][ C0] ? __irq_exit_rcu+0xca/0x220 [ 632.814743][ C0] __irq_exit_rcu+0xca/0x220 [ 632.819337][ C0] irq_exit_rcu+0x9/0x30 [ 632.823584][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 632.829308][ C0] [ 632.832233][ C0] [ 632.835155][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 632.841133][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 632.847547][ C0] Code: f7 e8 bd dd f0 f5 f7 c3 00 02 00 00 74 05 e8 60 49 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 76 e2 f5 65 8b 05 dd 57 8a 07 85 c0 74 18 5b 41 5e e9 41 48 [ 632.867235][ C0] RSP: 0018:ffffc90002717888 EFLAGS: 00000206 [ 632.873301][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001 [ 632.881264][ C0] RDX: 0000000000000007 RSI: ffffffff8dfc0ce0 RDI: 0000000000000001 [ 632.889236][ C0] RBP: ffffc90002717930 R08: ffffffff9031b4f7 R09: 1ffffffff206369e [ 632.897210][ C0] R10: dffffc0000000000 R11: fffffbfff206369f R12: ffff88813fe40c00 [ 632.905182][ C0] R13: 0000000000000000 R14: ffff88813fe40c00 R15: 0000000000000000 [ 632.913165][ C0] __slab_free+0x222/0x2c0 [ 632.917605][ C0] ? qlist_free_all+0x8e/0x100 [ 632.922387][ C0] qlist_free_all+0x99/0x100 [ 632.926984][ C0] kasan_quarantine_reduce+0x148/0x160 [ 632.932461][ C0] __kasan_slab_alloc+0x22/0x80 [ 632.937308][ C0] __kmalloc_noprof+0x316/0x760 [ 632.942162][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 632.947883][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 632.952913][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 632.958461][ C0] ? tomoyo_domain+0xd7/0x130 [ 632.963184][ C0] tomoyo_path_perm+0x283/0x560 [ 632.968045][ C0] ? tomoyo_path_perm+0x251/0x560 [ 632.973080][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 632.978458][ C0] ? __x64_sys_openat+0x138/0x170 [ 632.983517][ C0] security_inode_getattr+0x12b/0x310 [ 632.988899][ C0] __x64_sys_newfstat+0x13b/0x270 [ 632.993929][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 632.999503][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.005567][ C0] do_syscall_64+0x15f/0xf80 [ 633.010163][ C0] ? clear_bhb_loop+0x40/0x90 [ 633.014840][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.020729][ C0] RIP: 0033:0x7f257bf11ad7 [ 633.025239][ C0] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 633.044852][ C0] RSP: 002b:00007ffe993b7ba8 EFLAGS: 00000202 ORIG_RAX: 0000000000000005 [ 633.053279][ C0] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f257bf11ad7 [ 633.061263][ C0] RDX: 0000000000090800 RSI: 00007ffe993b7bb0 RDI: 000000000000000d [ 633.069238][ C0] RBP: 00007ffe993b7bb0 R08: 0000000000000000 R09: 0000000000000040 [ 633.077290][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005574c9c767b0 [ 633.085253][ C0] R13: 00000000000000ff R14: 00005574ac5adbe0 R15: 00007ffe993b7ee0 [ 633.093237][ C0] [ 633.096624][ C0] Kernel Offset: disabled [ 633.100934][ C0] Rebooting in 86400 seconds..