last executing test programs: 4.775495234s ago: executing program 2 (id=3298): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x0, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 4.484685478s ago: executing program 2 (id=3302): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) fallocate(r0, 0x10, 0x4000, 0x8000) 2.668719962s ago: executing program 2 (id=3317): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 2.439938154s ago: executing program 1 (id=3319): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.293979091s ago: executing program 3 (id=3320): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x6, {{0x2, 0x4e21, @empty}}}, 0x88) 2.201849936s ago: executing program 1 (id=3321): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723dd1b1f0fa2c6e6c733d6d6163726f6d616e69616e2c756d61736b3d30303030303030303030303030303030303030303033372c6e6f626172726965722c00"], 0x3, 0x6be, &(0x7f0000001640)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 2.019573655s ago: executing program 3 (id=3323): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) mincore(&(0x7f00001ac000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/93) 1.954431728s ago: executing program 1 (id=3324): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) 1.683715002s ago: executing program 3 (id=3325): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="2c0000001600156f00000000000000", @ANYRES32=0x0, @ANYRES64], 0x2c}}, 0x0) 1.573502818s ago: executing program 2 (id=3327): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x4000000) 1.425864256s ago: executing program 3 (id=3328): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xa, 0x2, 0x3, 0x8000, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x81}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 1.398322598s ago: executing program 0 (id=3329): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8f, 0x7ffcffff}]}) r0 = syz_io_uring_setup(0x6e88, &(0x7f0000000080)={0x0, 0xc97a, 0x3000, 0x1, 0x35b}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) poll(&(0x7f00000001c0)=[{r0, 0x8002}], 0x1, 0x0) 1.349042s ago: executing program 2 (id=3330): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) 1.217401287s ago: executing program 3 (id=3331): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$eJzs3U9sHNX9APA367+JTbwGfmDgR0ihFYGCHZJITW9BoB4Rl95BIaERhqKGHoiAmB4QlRBFQpwqDlRcKJVSpCKBKlWop7anVr31hHqhUpVKQT20SImr2G/Wuy/72PXYnrV3Px/p67dv3ux8v2M7zszs7NsAjKzG2tfjxxeKEN759O1HX36q+Pjasrtaaxxa+1rEXjOEMNHWL5LtfR4XXLn80qlubRGOrn0t++GxS63nzoQQVsKh8Flohg+Xlr/84N1HDn/02vQtb55/5pUd2v2WdD8AAGAYXfzT8t/u+8cfH5j/6uLBk2Gqtbw8Pm/G/kw87j8SD5TL4+VG6OwXbdFuMllvLEYjWW8sWW88yTOeyTeRbGcis95kj3xjbcu67ScAAADsReV5bTMUjcWOfqOxuLh+3n/N53OTxeJzZ5fPnBtQoQAAAEBl/76wdtOtEEIIIYQQQgghhjhW5wZ9BQIAAAAYNel8YddZ2d6Zulpba/aX/9LDje7Ph21Q9+//1+efHnD+LkY8//uv+osDAEB1w3o0We5XeRxdzmOQziM4ljxvs8f/jWQ745usMzev4F6ZbzBXZ/p93a1y9W/25zgoufrT+TB3q1z96Tydu1Wu/qma66gqV3+XKz+7Uq7+fTXXUVWu/v0111FVrv6ZmuuoKlf/bM11VJWr/4aa66gqV/+BmuuoKlf/XrmtNld/s+Y6qsrVP19zHVXl6r+x5jqqytV/U811VJWr/+aa6xiUO2Nbfh8OZtab6XJOt1fO8QAAAGDU/df8f0IIIUR7rN8CMfg6hBBCCCG2NS4M+gIEAAAAMHDl+wLKd72vRuX4WI/x8fbx6Y0VyvGJHs+f7DE+1WMcAAAACOG3r5+57a1iY767rc6HV84btS98fDVUmMconY9ws/m3Ou/ZVvPvlXnLAAAAGC3F9z67ev+j770w/9XFgyfbzn6vxvPdch7Q8Xht4JPYL+8LmE36RXkOfbIzTyOzXnp94Ibc9h7f4o4CAADACCvP35uhaCy2nXc3Q6OxuLhxPr4QJoozZ5dPH4n98vNZ/jA3MXVt+UM11w0AAAD0b+N8v/v5f/k5vgthslh87uzymXPr/dnW8olG+3WBuY3lRft1gWay/Ghm+bHYLz+/8wdz+9aWL5764fJT273zAAAAMCLOvXj+mSeXl0//yAMPPPCg9WDQf5kAAIDt9sUXb0/8+Njs79bf/78x/93V+OBQ7Dfj3H5/jsvL+wTK9wFc9379JzrzzOXWe75zvWay3liMqaTu6bbthLX5BjufN5/L1+zczmQm30ySbzbJl85TMJ6sX3SZSzB0mZ+wXG8uWZ7Owzie5CiS/Hd3yQUAAAClpReefX7p3IvnHzz77JNPn3769HPHjp747okTRx76zkNLa/f1L7Xf3Q8AAADsRRs3/Q66EgAAAAAAAAAAAAAAAAAAABhddXyc2KD3EQAAAEbdvy6EEFaEyET5AYODrkPs5lidGnwNwx3Bv0MhhBBCbDGc94mVEFZX00+aBwAAANhZVy6/dKq9vc5Ksa35WltrrjdXY96ynX3wr/PXolzt0sOd10v2b2s1jLq6f//l3635p7qOv//q9uafDht/+0Jff/8anRs42dHb12/ee5d+udDKH0K4fbzP/On+P95vxk6Hk/z3hv7yr76X5H+io9foN/99Sf79fea/bv+f7zdjp/tj/oXYP3xPv/k7d7H8LS33o99fgG8n+/9U6Dd/sv/NPhMmHoj5AWAUtf43X70w2EK2WXmUUB5Pz8R+ub/xcDOkdz9s9vi/kWxnfMuVd263PA66NfanW3V05i1ttv7y+zIb2xsq1pnaK3eV5Orfrp/jTsvVP1FzHVXl6p+suY6qcvV3P3vffXL1T9dcR1W5+vu+EDFgufr3ynXlXP0zNddRVa7+2ZrrqCpX/2b/Hx+UXP0Haq6jqlz9czXXUVWu/oqX1WqXq3++5jqqytV/Y811VJWr/6aa66gqV//NNdcxKHfENnc+XJ5/zsWxst9M+lNdvpd9vxgCAAAA7Kh/7sp5INquHAy8FiGEEEIIIYY//rO6btB1CCF2LlZXB3n1gUHb2XczA7Bb+fs/2vz8R5uf/2jz8+frlK/EF0m/NNZjfLzH+ESP8clkPP19neoxflOy3dXyumZ0c4/x/4t7kBs/0OP5t/YYX+gxfluP8dt7jN/RYxwAAIDRcEtsnR8CAADA8Hr5V5+88Zt7n7g8/9XFgyfD5HXzzh+J/an42vrrsZ/Oe1+aiK/5/yT2fxHb38f278n67j8BAACAnVd+TozX/wEAAGB4lZ9T6vwfAAAAhtd8bJ3/AwAAwPC6MbbO/wEAAGCIFdPdF8e2vC5wd2z7ndcPANj9/j+2d8b2YGzviu03YlseB9wT22/WVB8AsH1+/v2fnnir2Jjv/1gyfiUuL9vrrKxfKSganTP574vt/th+q8960s8D6Dd/6UCfeXYq/9wW8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6Ox9vX48YUihHc+ffvRn02+8Zdry+5qrXFo7WsRe80QwkTreeXoRv/XccUrl1861d5ejW0RjoYiFK3l4bFLrUwzIYSVcCh8Fprhw6XlLz9495HDH702fcub5595ZQe/BR37BwAAAMPofwEAAP//fccg7g==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc020660b, &(0x7f0000000300)={@desc={0x1, 0x0, @desc1}}) 1.053224635s ago: executing program 0 (id=3332): r0 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000180)=0xffff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) 1.045992016s ago: executing program 2 (id=3333): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000000), 0x1, 0x97e8, &(0x7f0000012f40)="$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") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000082"], 0x0) 789.021729ms ago: executing program 0 (id=3334): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="dd9ad1f54989e3f743c06d713b56cf16d15f97e53df0f67072b8b7e88b376e132616af41637255c9af7c6b6955e052a297a215ce11acdfe5716aeedceda22ee055464788762de6a4d69fa49c447ecf612ad00b7dcec6a6543dbba0503aeb011ba6099a1f1454ce15f99ad7e39ec2c3f05349714aca4b24f51333dc31692b3d31cf43e882"], 0xfe, 0x2c7, &(0x7f0000000480)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000d000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xce0, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000086dd", 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 477.686235ms ago: executing program 3 (id=3335): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000300)=[{0x9, 0x0, 0x0, 0x0}], 0x1}) 436.738307ms ago: executing program 0 (id=3336): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000600000000000400050000000000100007000000000020"], 0x24, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x20) 371.97369ms ago: executing program 1 (id=3337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x18, r1, 0x601, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x4004804) 236.306188ms ago: executing program 0 (id=3338): unshare(0x22020400) r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0xa, 0x0, 0x0) 143.047102ms ago: executing program 1 (id=3339): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 118.485203ms ago: executing program 0 (id=3340): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x4dc881, 0x15) 0s ago: executing program 1 (id=3341): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/25, 0x19) kernel console output (not intermixed with test programs): 5.297803][ T8135] udevd[8135]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.314454][ T3488] hfsplus: b-tree write err: -5, ino 2 [ 215.322870][ T3488] hfsplus: b-tree write err: -5, ino 26 [ 215.448707][ T9454] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 215.464718][ T9454] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.476154][ T9456] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 216.364663][ T9489] capability: warning: `syz.3.1688' uses 32-bit capabilities (legacy support in use) [ 216.794895][ T9504] loop1: detected capacity change from 0 to 512 [ 216.804529][ T9504] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.837817][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 216.902609][ T9504] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 216.960237][ T9504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1695: bg 0: block 248: padding at end of block bitmap is not set [ 217.024819][ T9504] Quota error (device loop1): write_blk: dquota write failed [ 217.062965][ T9504] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 217.087322][ T9] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 217.097523][ T9504] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1695: Failed to acquire dquot type 1 [ 217.117608][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.129626][ T9504] EXT4-fs (loop1): 1 truncate cleaned up [ 217.146850][ T9504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 217.154749][ T9494] loop2: detected capacity change from 0 to 32768 [ 217.175477][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.202672][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.250009][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.251932][ T9494] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 217.271042][ T9] usb 4-1: Product: syz [ 217.275516][ T9] usb 4-1: Manufacturer: syz [ 217.280172][ T9] usb 4-1: SerialNumber: syz [ 217.295668][ T9] usb 4-1: config 0 descriptor?? [ 217.303006][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 217.311437][ T9] hub: probe of 4-1:0.0 failed with error -5 [ 217.318525][ T9494] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.339957][ T9] usb 4-1: selecting invalid altsetting 0 [ 217.403209][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 217.427613][ T4098] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 217.469478][ T4098] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 217.672387][ T9494] XFS (loop2): Ending clean mount [ 217.686426][ T787] usb 4-1: USB disconnect, device number 11 [ 217.718544][ T9494] XFS (loop2): Quotacheck needed: Please wait. [ 217.762199][ T9527] loop1: detected capacity change from 0 to 1024 [ 217.774022][ T9527] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 217.874822][ T9494] XFS (loop2): Quotacheck: Done. [ 218.034643][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.543220][ T9547] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1712'. [ 220.098137][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1738'. [ 220.127141][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 220.404833][ T9614] Cannot find set identified by id 0 to match [ 220.406680][ T9611] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 220.559287][ T9619] syz.0.1746 uses old SIOCAX25GETINFO [ 220.717254][ T9626] loop0: detected capacity change from 0 to 16 [ 220.802217][ T9626] erofs: (device loop0): mounted with root inode @ nid 36. [ 221.028766][ T9638] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 221.039443][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 221.055427][ T787] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 221.183631][ T9642] loop1: detected capacity change from 0 to 16 [ 221.226254][ T9642] erofs: (device loop1): mounted with root inode @ nid 36. [ 221.273163][ T787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.297018][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 221.332259][ T787] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 221.372763][ T787] usb 3-1: config 1 interface 0 has no altsetting 1 [ 221.392143][ T787] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 221.415412][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.444772][ T787] usb 3-1: Product: syz [ 221.451393][ T787] usb 3-1: Manufacturer: syz [ 221.495554][ T787] usb 3-1: SerialNumber: syz [ 221.528299][ T787] smsusb:smsusb_probe: board id=8, interface number 0 [ 221.621532][ T9652] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1763'. [ 221.635957][ T9652] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 221.649895][ T9652] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 221.719005][ T787] smsusb:smsusb_probe: Device initialized with return code -19 [ 221.906464][ T9664] loop3: detected capacity change from 0 to 1024 [ 221.924035][ T787] usb 3-1: USB disconnect, device number 16 [ 222.268336][ T9672] netlink: 'syz.3.1772': attribute type 7 has an invalid length. [ 222.290837][ T9672] netlink: 'syz.3.1772': attribute type 8 has an invalid length. [ 222.720511][ T9691] loop0: detected capacity change from 0 to 256 [ 223.250528][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1791'. [ 223.285500][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1791'. [ 223.388405][ T9716] loop3: detected capacity change from 0 to 64 [ 223.450800][ T9716] syz.3.1793: attempt to access beyond end of device [ 223.450800][ T9716] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 223.525702][ T9716] Buffer I/O error on dev loop3, logical block 512, async page read [ 223.542045][ T9716] syz.3.1793: attempt to access beyond end of device [ 223.542045][ T9716] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 223.590028][ T9716] Buffer I/O error on dev loop3, logical block 56576, async page read [ 223.726804][ T9726] loop1: detected capacity change from 0 to 512 [ 223.756928][ T9726] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 223.799689][ T9726] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 223.825135][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 223.834868][ T9726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.996562][ T9736] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1803'. [ 224.009591][ T9736] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 224.025464][ T9736] netlink: 'syz.0.1803': attribute type 2 has an invalid length. [ 224.031865][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.041325][ T9736] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1803'. [ 224.054613][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 224.087493][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 224.115363][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 224.158215][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 224.174784][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 224.190727][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.203968][ T9] usb 3-1: config 0 descriptor?? [ 224.440523][ T9] hdpvr 3-1:0.0: firmware version 0x7e dated ÍM‘å¬8 9 >êÑèëþSŒÐ|âhÈÄn©ëBØÊk矉?qCÃ$FÃÔ [ 224.479745][ T9] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 224.586319][ T9749] loop3: detected capacity change from 0 to 256 [ 224.653569][ T9749] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 224.667244][ T9] hdpvr 3-1:0.0: device init failed [ 224.681139][ T9] hdpvr: probe of 3-1:0.0 failed with error -12 [ 224.716676][ T9] usb 3-1: USB disconnect, device number 17 [ 224.899117][ T9756] loop3: detected capacity change from 0 to 512 [ 224.923223][ T9756] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.237801][ T5770] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 225.567470][ T9755] loop0: detected capacity change from 0 to 32768 [ 225.598245][ T9755] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1812 (9755) [ 225.672675][ T9755] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.715993][ T9755] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 225.735815][ T9755] BTRFS info (device loop0): using free space tree [ 225.953968][ T9755] BTRFS info (device loop0): enabling ssd optimizations [ 225.954030][ T9755] BTRFS info (device loop0): auto enabling async discard [ 226.121696][ T9798] SET target dimension over the limit! [ 226.187098][ T5773] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.355687][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1826'. [ 226.671224][ T9812] loop1: detected capacity change from 0 to 64 [ 226.772502][ T9812] MINIX-fs: mounting file system with errors, running fsck is recommended [ 227.625437][ T9844] netlink: 'syz.3.1846': attribute type 21 has an invalid length. [ 227.635563][ T9840] loop1: detected capacity change from 0 to 2048 [ 227.642176][ T9844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1846'. [ 227.686538][ T9844] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 227.726494][ T9847] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.796777][ T9840] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 227.814097][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.867584][ T9840] Remounting filesystem read-only [ 227.958599][ T9851] loop3: detected capacity change from 0 to 512 [ 228.030943][ T9851] FAT-fs (loop3): Invalid FSINFO signature: 0x41615208, 0x61417272 (sector = 1) [ 228.102746][ T9851] FAT-fs (loop3): Directory bread(block 159) failed [ 228.133695][ T9851] FAT-fs (loop3): Directory bread(block 160) failed [ 228.181263][ T9851] FAT-fs (loop3): Directory bread(block 161) failed [ 228.205213][ T9851] FAT-fs (loop3): Directory bread(block 162) failed [ 228.213024][ T9851] FAT-fs (loop3): Directory bread(block 163) failed [ 228.232902][ T9851] FAT-fs (loop3): Directory bread(block 164) failed [ 228.242802][ T9851] FAT-fs (loop3): Directory bread(block 165) failed [ 228.256591][ T9851] FAT-fs (loop3): Directory bread(block 166) failed [ 228.330745][ T9851] FAT-fs (loop3): Directory bread(block 159) failed [ 228.356573][ T9851] FAT-fs (loop3): Directory bread(block 160) failed [ 228.456509][ T9866] loop0: detected capacity change from 0 to 256 [ 228.502621][ T55] FAT-fs (loop3): Invalid FSINFO signature: 0x41615208, 0x61417272 (sector = 1) [ 228.515903][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.530572][ T9868] loop2: detected capacity change from 0 to 256 [ 228.553074][ T9868] exfat: Deprecated parameter 'namecase' [ 228.573437][ T9868] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 228.645395][ T9868] exFAT-fs (loop2): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 228.739331][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.762031][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 228.795087][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.831522][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 228.868716][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.894550][ T23] usb 2-1: Product: syz [ 228.899241][ T23] usb 2-1: Manufacturer: syz [ 228.903897][ T23] usb 2-1: SerialNumber: syz [ 228.926257][ T23] usb 2-1: config 0 descriptor?? [ 229.011331][ T9876] loop3: detected capacity change from 0 to 8 [ 229.443138][ T23] usb 2-1: USB disconnect, device number 10 [ 229.719394][ T9895] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 229.852831][ T9900] loop0: detected capacity change from 0 to 16 [ 229.866981][ T9900] erofs: (device loop0): mounted with root inode @ nid 36. [ 229.926005][ T23] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 230.232580][ T9912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.414213][ T9917] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 230.427649][ T23] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 230.474490][ T9917] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6) [ 230.516349][ T4098] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 230.806729][ T9930] loop2: detected capacity change from 0 to 2048 [ 230.836380][ T9930] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.873540][ T9936] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.885736][ T5836] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 230.908602][ T9930] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=32, inode=11, rec_len=4096, name_len=0 [ 230.927324][ T9930] Remounting filesystem read-only [ 231.125727][ T5836] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 231.133992][ T5836] usb 1-1: config 0 has no interface number 0 [ 231.144083][ T9941] netlink: 'syz.2.1892': attribute type 5 has an invalid length. [ 231.155366][ T5836] usb 1-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 231.183155][ T9941] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1892'. [ 231.192582][ T5836] usb 1-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 231.192616][ T5836] usb 1-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 231.202976][ T5836] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 231.275140][ T5836] usb 1-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 231.290759][ T5836] usb 1-1: Product: syz [ 231.302202][ T5836] usb 1-1: Manufacturer: syz [ 231.324184][ T5836] usb 1-1: SerialNumber: syz [ 231.367327][ T5836] usb 1-1: config 0 descriptor?? [ 231.375941][ T9924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 231.391885][ T5836] ni6501 1-1:0.238: driver 'ni6501' failed to auto-configure device. [ 231.566775][ T3488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 231.591541][ T3488] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 231.649792][ T23] usb 1-1: USB disconnect, device number 17 [ 231.665624][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 231.859625][ T9963] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1904'. [ 231.878426][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1904'. [ 231.891039][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1904'. [ 232.219414][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1910'. [ 232.782589][ T9993] loop2: detected capacity change from 0 to 64 [ 232.820066][ T9972] loop3: detected capacity change from 0 to 32768 [ 232.838880][ T9972] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1909 (9972) [ 232.898492][ T9972] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 232.938091][ T9972] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.007471][ T9972] BTRFS info (device loop3): using free space tree [ 233.225247][ T9972] BTRFS info (device loop3): enabling ssd optimizations [ 233.233283][ T9972] BTRFS info (device loop3): auto enabling async discard [ 233.363219][T10015] loop0: detected capacity change from 0 to 512 [ 233.428056][T10015] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.449377][ T5770] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 233.507698][T10015] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 233.527379][ T9991] loop1: detected capacity change from 0 to 32768 [ 233.545520][ T9991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1918 (9991) [ 233.581360][ T9991] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.593811][T10015] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1922: bg 0: block 248: padding at end of block bitmap is not set [ 233.610837][ T9991] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 233.619885][T10015] Quota error (device loop0): write_blk: dquota write failed [ 233.628109][ T9991] BTRFS info (device loop1): using free space tree [ 233.635471][T10015] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 233.648339][T10015] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1922: Failed to acquire dquot type 1 [ 233.668344][T10015] EXT4-fs (loop0): 1 truncate cleaned up [ 233.717047][T10015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 233.849154][ T55] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 233.899862][ T55] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 233.921217][ T9991] BTRFS info (device loop1): enabling ssd optimizations [ 233.955461][ T9991] BTRFS info (device loop1): auto enabling async discard [ 234.006941][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 234.257055][ T5769] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.088462][T10067] loop2: detected capacity change from 0 to 256 [ 235.101440][T10067] exfat: Deprecated parameter 'namecase' [ 235.108488][T10067] exfat: Deprecated parameter 'namecase' [ 235.115126][T10067] exfat: Deprecated parameter 'utf8' [ 235.157062][T10067] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 235.565498][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 235.790739][T10090] loop0: detected capacity change from 0 to 128 [ 236.273962][T10105] loop1: detected capacity change from 0 to 4096 [ 236.291995][T10105] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 236.930471][T10123] loop3: detected capacity change from 0 to 2048 [ 236.976428][T10123] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 237.015008][T10127] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.026852][T10123] syz.3.1966: attempt to access beyond end of device [ 237.026852][T10123] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 237.128477][T10123] syz.3.1966: attempt to access beyond end of device [ 237.128477][T10123] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 237.179045][T10123] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 237.274721][T10128] loop0: detected capacity change from 0 to 4096 [ 237.752705][T10140] ALSA: mixer_oss: invalid OSS volume 'u' [ 238.499296][T10169] netlink: 'syz.1.1988': attribute type 3 has an invalid length. [ 238.997882][T10183] loop0: detected capacity change from 0 to 8192 [ 239.048808][T10183] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 239.078556][T10183] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 239.091150][T10183] REISERFS (device loop0): using ordered data mode [ 239.098164][T10183] reiserfs: using flush barriers [ 239.113544][T10183] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 239.139137][T10183] REISERFS (device loop0): checking transaction log (loop0) [ 239.167573][T10194] syz.2.2000: attempt to access beyond end of device [ 239.167573][T10194] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 239.186445][T10183] REISERFS (device loop0): Using rupasov hash to sort names [ 239.209186][T10183] REISERFS (device loop0): using 3.5.x disk format [ 239.221560][T10183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.236412][T10183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.252060][T10183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.264281][T10183] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 239.284329][T10183] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 239.441556][T10183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.465746][T10183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.516532][T10183] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.574211][T10204] [U] ^R [ 239.977041][T10215] netlink: 'syz.0.2006': attribute type 10 has an invalid length. [ 239.991609][T10215] macvlan0: entered promiscuous mode [ 239.999179][T10215] macvlan0: entered allmulticast mode [ 240.021567][T10215] veth1_vlan: entered allmulticast mode [ 240.049650][T10215] team0: Port device macvlan0 added [ 240.287659][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 240.431860][T10230] loop3: detected capacity change from 0 to 256 [ 240.482469][T10226] loop2: detected capacity change from 0 to 8192 [ 240.494296][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 240.518925][ T23] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 240.536785][ T23] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 240.547980][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.556917][T10226] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.571522][T10226] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 240.581998][T10226] REISERFS (device loop2): using ordered data mode [ 240.589630][ T23] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 240.599658][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.608005][ T23] usb 2-1: Product: syz [ 240.611171][T10226] reiserfs: using flush barriers [ 240.612201][ T23] usb 2-1: Manufacturer: syz [ 240.622078][ T23] usb 2-1: SerialNumber: syz [ 240.627126][T10230] FAT-fs (loop3): Directory bread(block 64) failed [ 240.634341][ T23] usb 2-1: config 0 descriptor?? [ 240.662686][T10230] FAT-fs (loop3): Directory bread(block 65) failed [ 240.670236][T10226] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.691966][T10230] FAT-fs (loop3): Directory bread(block 66) failed [ 240.721785][T10230] FAT-fs (loop3): Directory bread(block 67) failed [ 240.751026][T10226] REISERFS (device loop2): checking transaction log (loop2) [ 240.767873][T10230] FAT-fs (loop3): Directory bread(block 68) failed [ 240.794556][T10230] FAT-fs (loop3): Directory bread(block 69) failed [ 240.805099][T10226] REISERFS (device loop2): Using rupasov hash to sort names [ 240.824315][T10230] FAT-fs (loop3): Directory bread(block 70) failed [ 240.832369][T10226] REISERFS (device loop2): using 3.5.x disk format [ 240.845622][T10230] FAT-fs (loop3): Directory bread(block 71) failed [ 240.850552][T10226] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 240.873140][T10230] FAT-fs (loop3): Directory bread(block 72) failed [ 240.894213][T10230] FAT-fs (loop3): Directory bread(block 73) failed [ 240.911240][T10226] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 240.938989][T10226] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 240.950286][T10226] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 240.995002][T10226] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 241.077041][T10226] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 241.112189][ T28] usb 2-1: USB disconnect, device number 11 [ 241.127164][T10226] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 241.163787][T10226] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 241.631425][T10247] loop3: detected capacity change from 0 to 4096 [ 241.663980][T10249] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 241.741437][T10247] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 241.952605][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'. [ 241.986163][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'. [ 242.013238][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'. [ 242.271480][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2034'. [ 242.281166][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 242.296369][T10266] tc_dump_action: action bad kind [ 242.763036][T10279] loop0: detected capacity change from 0 to 4096 [ 242.804392][T10279] ntfs: volume version 3.1. [ 242.844073][T10279] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 242.866415][T10279] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 242.888533][T10279] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 242.920906][T10279] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 242.983115][T10279] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 243.014266][T10279] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 243.119171][T10291] netlink: 'syz.1.2047': attribute type 3 has an invalid length. [ 243.165463][T10291] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2047'. [ 243.325529][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 243.335062][T10293] overlayfs: conflicting options: userxattr,redirect_dir=on [ 243.468438][T10296] netlink: 'syz.1.2049': attribute type 3 has an invalid length. [ 243.596113][T10287] loop2: detected capacity change from 0 to 32768 [ 243.642246][T10287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2046 (10287) [ 243.697116][T10287] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.713985][T10287] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 243.732058][T10287] BTRFS info (device loop2): using free space tree [ 243.971795][T10287] BTRFS info (device loop2): enabling ssd optimizations [ 243.982283][T10322] loop1: detected capacity change from 0 to 256 [ 244.015466][T10287] BTRFS info (device loop2): auto enabling async discard [ 244.240765][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.515670][ T5775] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 244.758731][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 244.783785][ T5775] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 244.819069][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 244.840161][ T5775] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 244.895846][ T5775] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 244.905059][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.945525][ T5775] usb 2-1: Product: syz [ 244.977076][ T5775] usb 2-1: Manufacturer: syz [ 244.981841][ T5775] usb 2-1: SerialNumber: syz [ 245.006986][ T5775] usb 2-1: config 0 descriptor?? [ 245.014808][ T5775] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 245.255710][ T5775] scsi host1: usb-storage 2-1:0.0 [ 245.298355][ T5775] usb 2-1: USB disconnect, device number 12 [ 245.719999][T10376] loop2: detected capacity change from 0 to 1024 [ 245.805702][T10376] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 245.825460][T10376] hfsplus: xattr searching failed [ 245.844107][T10376] syz.2.2079: attempt to access beyond end of device [ 245.844107][T10376] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 245.905379][T10376] Buffer I/O error on dev loop2, logical block 458752, async page read [ 245.917174][T10376] hfsplus: unable to mark blocks free: error -5 [ 245.932384][T10376] hfsplus: can't free extent [ 246.781325][T10411] loop3: detected capacity change from 0 to 1024 [ 246.795657][T10411] EXT4-fs: inline encryption not supported [ 246.802473][T10411] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 246.867661][T10411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.039023][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.600381][T10442] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 247.759730][T10445] loop0: detected capacity change from 0 to 4096 [ 247.786698][T10445] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 247.909633][T10452] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 247.960894][T10445] ntfs: (device loop0): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 247.989370][T10445] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 248.100093][T10445] ntfs: volume version 3.1. [ 248.948298][T10484] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2130'. [ 249.251036][T10496] netlink: 'syz.3.2137': attribute type 10 has an invalid length. [ 249.262423][T10496] bridge0: port 3(team0) entered disabled state [ 249.269348][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.277186][T10496] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.303361][T10496] bridge0: port 3(team0) entered blocking state [ 249.309891][T10496] bridge0: port 3(team0) entered forwarding state [ 249.316753][T10496] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.323973][T10496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.331578][T10496] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.338842][T10496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.368504][T10496] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 249.415425][ T787] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 249.617591][ T787] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 249.624061][T10481] loop2: detected capacity change from 0 to 40427 [ 249.629062][ T787] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 249.661054][ T787] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 249.683640][T10481] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 249.700157][ T787] usb 1-1: config 0 has no interface number 0 [ 249.708842][ T787] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 249.717003][T10481] F2FS-fs (loop2): invalid crc value [ 249.729335][ T787] usb 1-1: config 0 interface 104 has no altsetting 1 [ 249.742441][ T787] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 249.759128][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.770296][T10481] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.786680][ T787] usb 1-1: Product: syz [ 249.800033][ T787] usb 1-1: Manufacturer: syz [ 249.835727][ T787] usb 1-1: SerialNumber: syz [ 249.836355][ T5775] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 249.856972][ T787] usb 1-1: config 0 descriptor?? [ 249.872591][ T787] asix: probe of 1-1:0.104 failed with error -22 [ 249.900129][T10508] loop3: detected capacity change from 0 to 256 [ 249.958362][T10481] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 250.113491][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 250.130431][ T28] usb 1-1: USB disconnect, device number 18 [ 250.145580][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 250.202923][ T5775] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 250.221344][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.241216][ T5775] usb 2-1: Product: syz [ 250.251648][ T5775] usb 2-1: Manufacturer: syz [ 250.279155][ T5775] usb 2-1: SerialNumber: syz [ 250.300525][ T5775] usb 2-1: config 0 descriptor?? [ 250.321550][ T5775] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 250.557266][ T28] usb 2-1: USB disconnect, device number 13 [ 251.083311][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 251.269889][T10540] netlink: 'syz.3.2156': attribute type 30 has an invalid length. [ 251.445449][ T5775] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 251.645526][ T5775] usb 1-1: Using ep0 maxpacket: 32 [ 251.663141][ T5775] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 162 [ 251.681344][ T5775] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 251.695336][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.713621][ T5775] usb 1-1: Product: syz [ 251.718153][ T5775] usb 1-1: Manufacturer: syz [ 251.722878][ T5775] usb 1-1: SerialNumber: syz [ 251.746231][ T5775] usb 1-1: config 0 descriptor?? [ 251.772022][T10538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.786796][ T5775] hub 1-1:0.0: bad descriptor, ignoring hub [ 251.792782][ T5775] hub: probe of 1-1:0.0 failed with error -5 [ 251.838669][ T5775] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 251.873624][T10535] loop2: detected capacity change from 0 to 32768 [ 251.919513][T10555] netlink: 'syz.3.2163': attribute type 2 has an invalid length. [ 251.931926][T10535] [ 251.931926][T10535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.931926][T10535] [ 251.958512][T10554] loop1: detected capacity change from 0 to 1024 [ 252.007423][T10535] [ 252.007423][T10535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.007423][T10535] [ 252.077050][T10535] [ 252.077050][T10535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.077050][T10535] [ 252.125797][T10535] [ 252.125797][T10535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.125797][T10535] [ 252.190854][T10535] [ 252.190854][T10535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.190854][T10535] [ 252.242274][T10535] [ 252.242274][T10535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.242274][T10535] [ 252.305467][T10535] [ 252.305467][T10535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.305467][T10535] [ 252.373075][ T112] [ 252.373075][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.373075][ T112] [ 252.391215][ T23] usb 1-1: USB disconnect, device number 19 [ 252.391476][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 252.599802][ T5772] [ 252.599802][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.599802][ T5772] [ 252.619932][ T5772] [ 252.619932][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.619932][ T5772] [ 252.699592][T10565] loop1: detected capacity change from 0 to 256 [ 252.986460][T10569] loop2: detected capacity change from 0 to 128 [ 253.076317][T10569] syz.2.2167: attempt to access beyond end of device [ 253.076317][T10569] loop2: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 253.136355][T10569] Buffer I/O error on dev loop2, logical block 12837, async page read [ 253.270550][T10581] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.443472][T10586] binder: 10585:10586 unknown command 1074553619 [ 253.465575][T10586] binder: 10585:10586 ioctl c0306201 200000000640 returned -22 [ 254.048815][T10607] loop2: detected capacity change from 0 to 128 [ 254.095423][T10607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=e803c018, mo2=0082] [ 254.110135][T10607] System zones: 1-3, 19-19, 35-36 [ 254.142788][T10589] loop3: detected capacity change from 0 to 32768 [ 254.170790][T10607] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.232897][T10589] JBD2: Ignoring recovery information on journal [ 254.283416][T10607] ext4 filesystem being mounted at /498/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.385075][T10607] EXT4-fs warning (device loop2): ext4_group_extend:1897: can't read last block, resize aborted [ 254.388179][T10589] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 254.542727][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.690715][T10602] loop1: detected capacity change from 0 to 32768 [ 254.775194][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 255.716049][T10647] qrtr: Invalid version 15 [ 255.738482][T10643] loop2: detected capacity change from 0 to 4096 [ 255.745431][T10649] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 255.781786][T10643] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 255.833147][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 255.997759][T10643] ntfs3: loop2: failed to convert "c46c" to macroman [ 256.139899][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.147599][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.469946][T10670] loop2: detected capacity change from 0 to 1024 [ 256.509660][T10670] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 256.538036][T10670] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 256.605229][T10670] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 256.614772][T10670] EXT4-fs (loop2): orphan cleanup on readonly fs [ 256.669488][T10677] loop3: detected capacity change from 0 to 256 [ 256.685077][T10670] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.2216: Inode bitmap for bg 0 marked uninitialized [ 256.707285][T10677] exfat: Deprecated parameter 'utf8' [ 256.757715][T10681] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 256.767590][T10670] EXT4-fs (loop2): Remounting filesystem read-only [ 256.771796][T10670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.859843][T10677] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 257.066413][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.259920][T10686] loop1: detected capacity change from 0 to 4096 [ 257.390840][T10686] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 257.482048][T10686] ntfs3: loop1: Failed to load $Extend (-22). [ 257.510648][T10686] ntfs3: loop1: Failed to initialize $Extend. [ 257.773832][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2234'. [ 258.103371][T10717] netlink: 'syz.2.2240': attribute type 29 has an invalid length. [ 258.677221][ T27] audit: type=1800 audit(1776790733.794:52): pid=10727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.2243" name="/newroot/511/file0" dev="tmpfs" ino=2618 res=0 errno=0 [ 258.699870][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 258.822668][T10745] loop1: detected capacity change from 0 to 512 [ 258.830502][T10745] EXT4-fs: Ignoring removed orlov option [ 258.837974][T10745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 258.928622][T10745] EXT4-fs (loop1): 1 orphan inode deleted [ 258.934445][T10745] EXT4-fs (loop1): 1 truncate cleaned up [ 259.016780][T10745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.033315][T10753] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 259.186910][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.756032][T10777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2267'. [ 259.790179][T10773] loop1: detected capacity change from 0 to 4096 [ 259.815522][T10773] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 260.046438][T10773] ntfs3: loop1: failed to convert "c46c" to iso8859-5 [ 260.349381][T10795] loop0: detected capacity change from 0 to 764 [ 260.446199][T10795] Symlink component flag not implemented [ 260.462463][T10795] Symlink component flag not implemented [ 261.454416][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 261.916119][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 262.128041][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.160737][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 262.200108][ T23] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 262.216530][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.236077][ T23] usb 3-1: config 0 descriptor?? [ 262.459893][ T28] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 262.515524][ T8] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 262.530362][T10873] loop3: detected capacity change from 0 to 16 [ 262.558988][T10873] erofs: (device loop3): mounted with root inode @ nid 36. [ 262.653324][ T23] Bluetooth: Can't get state to change to load configuration err [ 262.670919][ T23] Bluetooth: Loading sysconfig file failed [ 262.678292][ T28] usb 2-1: config 2 has an invalid interface number: 112 but max is 0 [ 262.687857][ T28] usb 2-1: config 2 has no interface number 0 [ 262.694096][ T28] usb 2-1: config 2 interface 112 has no altsetting 0 [ 262.701284][ T23] ath3k: probe of 3-1:0.0 failed with error -16 [ 262.710768][ T23] usb 3-1: USB disconnect, device number 18 [ 262.717310][T10875] CIFS mount error: No usable UNC path provided in device string! [ 262.717310][T10875] [ 262.727732][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.740135][ T28] usb 2-1: New USB device found, idVendor=9171, idProduct=32e3, bcdDevice=91.99 [ 262.750032][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.760203][T10875] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 262.769110][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.769137][ T28] usb 2-1: Product: syz [ 262.769152][ T28] usb 2-1: Manufacturer: syz [ 262.769169][ T28] usb 2-1: SerialNumber: syz [ 262.804961][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 262.818771][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.834505][ T8] hub 1-1:4.0: USB hub found [ 263.036238][ T28] usb 2-1: bad CDC descriptors [ 263.045764][ T8] hub 1-1:4.0: 9 ports detected [ 263.052725][ T28] usb 2-1: USB disconnect, device number 14 [ 263.060206][ T8] usb 1-1: selecting invalid altsetting 1 [ 263.066442][ T8] hub 1-1:4.0: Using single TT (err -22) [ 263.073439][ T8] hub 1-1:4.0: insufficient power available to use all downstream ports [ 263.195628][ T787] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 263.247467][ T8] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 263.259212][ T8] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 263.317024][ T8] usb 1-1: USB disconnect, device number 20 [ 263.397666][ T787] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.408380][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.425321][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.434587][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.456953][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.470560][ T787] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.485313][ T787] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.493402][ T787] usb 4-1: Product: syz [ 263.523024][ T787] usb 4-1: Manufacturer: syz [ 263.533021][ T787] cdc_wdm 4-1:1.0: skipping garbage [ 263.543657][ T787] cdc_wdm 4-1:1.0: skipping garbage [ 263.555945][ T787] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 263.562020][ T787] cdc_wdm 4-1:1.0: Unknown control protocol [ 263.659687][T10883] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 263.767002][T10877] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 263.803879][ T787] usb 4-1: USB disconnect, device number 12 [ 263.942494][ T27] audit: type=1326 audit(1776790739.064:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 263.996296][ T27] audit: type=1326 audit(1776790739.064:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 264.018590][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.040166][ T27] audit: type=1326 audit(1776790739.064:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 264.065668][ T27] audit: type=1326 audit(1776790739.064:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 264.087944][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.115385][ T27] audit: type=1326 audit(1776790739.064:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.1.2325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 264.137684][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.467712][T10909] loop2: detected capacity change from 0 to 128 [ 264.485404][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 264.521532][T10909] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 264.562126][T10909] hpfs: filesystem error: improperly stopped [ 264.569788][T10909] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 264.587923][T10909] hpfs: You really don't want any checks? You are crazy... [ 264.604533][T10909] hpfs: hpfs_map_sector(): read error [ 264.620720][T10909] hpfs: code page support is disabled [ 264.636777][T10909] hpfs: hpfs_map_4sectors(): unaligned read [ 264.649805][T10909] hpfs: hpfs_map_4sectors(): unaligned read [ 264.656084][T10909] hpfs: filesystem error: unable to find root dir [ 264.679686][ T8] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 264.708559][ T8] usb 2-1: config 0 has no interface number 0 [ 264.714774][ T8] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 264.736149][ T5813] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 264.743930][ T8] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 264.790134][ T8] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 264.829232][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 264.837309][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.870398][ T8] usb 2-1: config 0 descriptor?? [ 264.887021][T10917] loop2: detected capacity change from 0 to 8 [ 264.896966][ T8] ttusbir 2-1:0.83: cannot find expected altsetting [ 264.949869][ T5813] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 264.965815][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.996579][ T5813] usb 1-1: Product: syz [ 265.000861][ T5813] usb 1-1: Manufacturer: syz [ 265.030932][ T5813] usb 1-1: SerialNumber: syz [ 265.043989][ T5813] usb 1-1: config 0 descriptor?? [ 265.069702][ T5813] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 021 [ 265.166790][ T9] usb 2-1: USB disconnect, device number 15 [ 265.309637][T10925] tipc: Can't bind to reserved service type 0 [ 265.506390][ T5813] (null): failure reading functionality [ 265.520199][ T5813] i2c i2c-1: failure reading functionality [ 265.536169][ T5813] i2c i2c-1: connected i2c-tiny-usb device [ 265.549693][ T5813] usb 1-1: USB disconnect, device number 21 [ 265.718959][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2347'. [ 265.772692][T10939] loop3: detected capacity change from 0 to 256 [ 265.787649][T10939] exfat: Deprecated parameter 'utf8' [ 265.793130][T10939] exfat: Deprecated parameter 'namecase' [ 265.818144][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2349'. [ 265.825574][T10939] exfat: Deprecated parameter 'namecase' [ 265.852328][T10939] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 266.162209][T10945] loop1: detected capacity change from 0 to 4096 [ 266.248444][T10945] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 266.278921][T10945] ntfs3: loop1: Failed to load $Extend (-22). [ 266.285084][T10945] ntfs3: loop1: Failed to initialize $Extend. [ 266.851467][T10970] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2362'. [ 267.676184][T10975] loop2: detected capacity change from 0 to 32768 [ 267.695428][ T5836] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 267.735138][T10975] JBD2: Ignoring recovery information on journal [ 267.804828][T10975] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 267.893692][T10975] (syz.2.2366,10975,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 267.914176][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 267.916445][T10975] (syz.2.2366,10975,1):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 267.931551][T11004] loop0: detected capacity change from 0 to 8 [ 267.958355][ T5836] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 267.994217][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.033543][ T5836] usb 4-1: Product: syz [ 268.050351][ T5836] usb 4-1: Manufacturer: syz [ 268.067418][ T5836] usb 4-1: SerialNumber: syz [ 268.085207][ T5836] usb 4-1: config 0 descriptor?? [ 268.117964][ T5836] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 268.166714][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 268.421029][ T8] usb 4-1: USB disconnect, device number 13 [ 269.265705][ T28] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 269.340784][T11038] loop0: detected capacity change from 0 to 512 [ 269.447117][T11038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.465890][T11038] ext4 filesystem being mounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.506765][ T28] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 269.517058][ T28] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 269.544769][T11049] loop3: detected capacity change from 0 to 64 [ 269.553970][ T28] usb 3-1: Product: syz [ 269.573806][ T28] usb 3-1: Manufacturer: syz [ 269.585364][ T28] usb 3-1: SerialNumber: syz [ 269.603817][ T28] usb 3-1: config 0 descriptor?? [ 269.623608][ T28] ch341 3-1:0.0: ch341-uart converter detected [ 269.660063][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.059961][ T28] usb 3-1: failed to send control message: -71 [ 270.085682][ T28] ch341-uart: probe of ttyUSB0 failed with error -71 [ 270.115565][ T28] usb 3-1: USB disconnect, device number 19 [ 270.136766][ T28] ch341 3-1:0.0: device disconnected [ 270.780189][T11086] loop0: detected capacity change from 0 to 1024 [ 270.816145][T11086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.847474][T11086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.867313][T11086] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38790!=20869) [ 270.911645][T11086] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 270.938351][T11086] JBD2: no valid journal superblock found [ 270.955428][T11086] EXT4-fs (loop0): Could not load journal inode [ 271.075666][ T5836] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 271.265522][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 271.281187][ T5836] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 271.292115][T11105] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 271.311268][ T5836] usb 3-1: config 0 has no interface number 0 [ 271.331866][ T5836] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 271.344389][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.375528][ T5836] usb 3-1: Product: syz [ 271.379783][ T5836] usb 3-1: Manufacturer: syz [ 271.397821][ T5836] usb 3-1: SerialNumber: syz [ 271.412135][ T5836] usb 3-1: config 0 descriptor?? [ 271.515170][T11110] overlayfs: unescaped trailing colons in lowerdir mount option. [ 271.653775][ T5836] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 271.674033][ T5836] usb 3-1: No valid video chain found. [ 271.718848][ T5836] usb 3-1: USB disconnect, device number 20 [ 271.790838][T11117] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2433'. [ 271.815414][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 271.847623][T11119] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 272.027654][ T8] usb 1-1: config 0 has no interfaces? [ 272.037064][ T8] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 272.079913][ T8] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 272.105210][ T8] usb 1-1: Manufacturer: syz [ 272.127793][ T8] usb 1-1: config 0 descriptor?? [ 272.350844][ T8] usb 1-1: USB disconnect, device number 22 [ 272.524248][T11136] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 272.524335][T11136] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 272.689087][T11141] netlink: 'syz.1.2445': attribute type 3 has an invalid length. [ 272.845564][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 273.035370][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 273.063090][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 273.082513][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.102383][ T8] usb 4-1: Product: syz [ 273.115313][ T8] usb 4-1: Manufacturer: syz [ 273.121832][ T8] usb 4-1: SerialNumber: syz [ 273.169879][ T8] usb 4-1: config 0 descriptor?? [ 273.607760][ T8] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 273.624650][ T8] airspy 4-1:0.0: Could not detect board [ 273.640147][ T8] airspy: probe of 4-1:0.0 failed with error -71 [ 273.668514][ T8] usb 4-1: USB disconnect, device number 14 [ 273.934930][T11185] loop1: detected capacity change from 0 to 1024 [ 273.956617][T11185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.982811][T11185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.992338][T11185] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38790!=20869) [ 274.027500][T11185] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 274.048619][T11185] JBD2: no valid journal superblock found [ 274.081652][T11185] EXT4-fs (loop1): Could not load journal inode [ 274.569979][T11206] [U] „ [ 274.635386][ T5813] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 274.829444][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 274.866301][ T5813] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.897602][ T5813] usb 2-1: config 0 interface 0 has no altsetting 0 [ 274.908681][ T5813] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 274.925682][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.946770][ T5813] usb 2-1: config 0 descriptor?? [ 275.176586][ T5813] usbhid 2-1:0.0: can't add hid device: -71 [ 275.183877][ T5813] usbhid: probe of 2-1:0.0 failed with error -71 [ 275.211763][ T5813] usb 2-1: USB disconnect, device number 16 [ 275.492466][T11239] loop2: detected capacity change from 0 to 256 [ 275.950792][T11254] netlink: 'syz.0.2502': attribute type 7 has an invalid length. [ 275.965814][T11254] netlink: 'syz.0.2502': attribute type 8 has an invalid length. [ 276.273237][T11267] loop2: detected capacity change from 0 to 1024 [ 276.396607][T11267] 9pnet_fd: p9_fd_create_unix (11267): problem connecting socket: ./file1: -13 [ 276.448555][T11273] loop3: detected capacity change from 0 to 512 [ 276.472933][T11273] EXT4-fs: inline encryption not supported [ 276.559744][T11273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.635437][T11273] ext4 filesystem being mounted at /700/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.762097][T11273] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 276.831066][T11273] Quota error (device loop3): write_blk: dquota write failed [ 276.869882][T11273] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 276.895718][T11273] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2511: Failed to acquire dquot type 0 [ 277.008575][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.684214][T11280] loop1: detected capacity change from 0 to 32768 [ 277.718683][T11280] [ 277.718683][T11280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.718683][T11280] [ 277.791143][T11311] loop2: detected capacity change from 0 to 164 [ 277.851283][ T55] ERROR: (device loop1): diWrite: ixpxd invalid [ 277.851283][ T55] [ 277.884960][T11311] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 277.887849][ T55] ERROR: (device loop1): txCommit: [ 277.887849][ T55] [ 277.903033][ T55] jfs_write_inode: jfs_commit_inode failed! [ 277.928202][ T5769] [ 277.928202][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.928202][ T5769] [ 277.955430][ T787] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 277.970485][T11311] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 277.985608][ T5769] [ 277.985608][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.985608][ T5769] [ 278.020673][T11311] Symlink component flag not implemented [ 278.039913][T11311] Symlink component flag not implemented [ 278.061860][T11311] Symlink component flag not implemented (7) [ 278.085403][T11311] Symlink component flag not implemented (116) [ 278.166113][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 278.216300][ T787] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 278.230932][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.247873][ T787] usb 1-1: Product: syz [ 278.261729][ T787] usb 1-1: Manufacturer: syz [ 278.272277][ T787] usb 1-1: SerialNumber: syz [ 278.287932][ T787] r8152-cfgselector 1-1: config 0 descriptor?? [ 278.578575][ T787] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 278.726266][T11316] bridge0: port 2(team0) entered disabled state [ 278.733210][T11316] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.821531][ T787] usb 1-1: USB disconnect, device number 23 [ 278.958753][T11330] loop2: detected capacity change from 0 to 256 [ 279.040164][T11330] FAT-fs (loop2): Directory bread(block 64) failed [ 279.047756][T11330] FAT-fs (loop2): Directory bread(block 65) failed [ 279.054489][T11330] FAT-fs (loop2): Directory bread(block 66) failed [ 279.061706][T11330] FAT-fs (loop2): Directory bread(block 67) failed [ 279.070645][T11330] FAT-fs (loop2): Directory bread(block 68) failed [ 279.077917][T11330] FAT-fs (loop2): Directory bread(block 69) failed [ 279.084612][T11330] FAT-fs (loop2): Directory bread(block 70) failed [ 279.098512][T11330] FAT-fs (loop2): Directory bread(block 71) failed [ 279.105212][T11330] FAT-fs (loop2): Directory bread(block 72) failed [ 279.114902][T11330] FAT-fs (loop2): Directory bread(block 73) failed [ 279.673648][T11316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.777320][T11316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.273313][T11316] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.282867][T11316] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.293177][T11316] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.304018][T11316] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.744233][T11351] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 280.910173][T11358] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 281.041646][T11363] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2554'. [ 281.066097][T11363] bond0: (slave 5@ÿ): Releasing backup interface [ 281.086836][T11363] A link change request failed with some changes committed already. Interface 5@ÿ may have been left with an inconsistent configuration, please check. [ 281.331293][T11376] sctp: [Deprecated]: syz.2.2560 (pid 11376) Use of int in max_burst socket option. [ 281.331293][T11376] Use struct sctp_assoc_value instead [ 281.425795][T11378] binder: Bad value for 'stats' [ 281.465670][T11381] xt_cgroup: path and classid specified [ 281.597996][T11386] loop2: detected capacity change from 0 to 256 [ 281.700885][T11390] netlink: 'syz.1.2567': attribute type 15 has an invalid length. [ 281.712589][T11386] FAT-fs (loop2): Directory bread(block 64) failed [ 281.735988][T11386] FAT-fs (loop2): Directory bread(block 65) failed [ 281.759212][T11386] FAT-fs (loop2): Directory bread(block 66) failed [ 281.795454][T11386] FAT-fs (loop2): Directory bread(block 67) failed [ 281.802190][T11386] FAT-fs (loop2): Directory bread(block 68) failed [ 281.846310][T11386] FAT-fs (loop2): Directory bread(block 69) failed [ 281.876706][T11386] FAT-fs (loop2): Directory bread(block 70) failed [ 281.883369][T11386] FAT-fs (loop2): Directory bread(block 71) failed [ 281.895483][T11386] FAT-fs (loop2): Directory bread(block 72) failed [ 281.902207][T11386] FAT-fs (loop2): Directory bread(block 73) failed [ 281.956568][T11397] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 282.032812][ T27] audit: type=1800 audit(2000000008.680:58): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2564" name="file1" dev="loop2" ino=1048613 res=0 errno=0 [ 282.298260][T11407] block nbd3: NBD_DISCONNECT [ 282.530624][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 283.114952][T11409] loop0: detected capacity change from 0 to 32768 [ 283.408318][T11445] loop1: detected capacity change from 0 to 164 [ 283.427804][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2595'. [ 283.495440][T11444] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2595'. [ 283.564651][T11449] loop2: detected capacity change from 0 to 764 [ 283.751090][T11449] Symlink component flag not implemented [ 283.768291][T11449] Symlink component flag not implemented (122) [ 284.445598][T11480] netlink: 'syz.3.2611': attribute type 25 has an invalid length. [ 284.453499][T11480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2611'. [ 284.988603][T11501] netlink: 'syz.0.2622': attribute type 9 has an invalid length. [ 285.584023][T11524] syz_tun: entered promiscuous mode [ 285.674601][T11526] netlink: 'syz.3.2634': attribute type 5 has an invalid length. [ 285.742098][T11528] loop0: detected capacity change from 0 to 1764 [ 285.948639][T11534] bridge3: entered promiscuous mode [ 285.953953][T11534] bridge3: entered allmulticast mode [ 286.216440][T11545] openvswitch: netlink: Actions may not be safe on all matching packets [ 286.370811][T11548] loop2: detected capacity change from 0 to 256 [ 286.665420][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 286.691695][T11556] ip6tnl1: entered allmulticast mode [ 287.053859][T11572] netlink: 'syz.0.2657': attribute type 30 has an invalid length. [ 287.238230][T11577] openvswitch: netlink: Actions may not be safe on all matching packets [ 287.568969][T11590] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2664'. [ 287.589032][T11592] CIFS mount error: No usable UNC path provided in device string! [ 287.589032][T11592] [ 287.665292][T11592] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 287.945594][T11607] loop0: detected capacity change from 0 to 256 [ 288.027709][T11607] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 288.125571][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 288.323808][T11616] No such timeout policy "syz1" [ 288.365900][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2680'. [ 288.964836][T11640] loop0: detected capacity change from 0 to 4096 [ 289.013124][T11645] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.045021][T11640] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 289.155409][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 289.177256][ T5814] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 289.244322][T11647] SET target dimension over the limit! [ 289.365414][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 289.370819][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 289.382502][ T8] usb 4-1: config 0 has no interfaces? [ 289.399447][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 289.409222][ T5814] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.430460][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.444883][ T5814] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 289.454234][ T8] usb 4-1: Product: syz [ 289.474530][ T8] usb 4-1: Manufacturer: syz [ 289.479414][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.498863][ T8] usb 4-1: SerialNumber: syz [ 289.511455][ T5814] usb 3-1: Product: syz [ 289.517720][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 289.527745][ T5814] usb 3-1: Manufacturer: syz [ 289.532434][ T5814] usb 3-1: SerialNumber: syz [ 289.551160][ T5814] usb 3-1: config 0 descriptor?? [ 289.561139][ T5814] cdc_ether: probe of 3-1:0.0 failed with error -22 [ 289.577232][ T5814] usb 3-1: unsupported MDLM descriptors [ 289.605722][T11653] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 289.765901][ T8] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 289.790153][ T1129] usb 4-1: config 0 descriptor?? [ 289.812723][ T28] usb 3-1: USB disconnect, device number 21 [ 289.914057][T11659] netlink: 'syz.0.2700': attribute type 29 has an invalid length. [ 289.922383][T11659] netlink: 'syz.0.2700': attribute type 29 has an invalid length. [ 289.983539][ T8] usb 4-1: USB disconnect, device number 15 [ 289.988224][ T1129] usb 4-1: can't set config #0, error -71 [ 290.091474][T11662] affs: No valid root block on device nbd0 [ 290.250798][T11668] loop1: detected capacity change from 0 to 1024 [ 290.475674][ T1322] hfsplus: b-tree write err: -5, ino 25 [ 290.498880][ T1322] hfsplus: b-tree write err: -5, ino 4 [ 290.504514][ T1322] hfsplus: b-tree write err: -5, ino 2 [ 290.755504][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 290.919229][ T27] audit: type=1326 audit(2000000017.580:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11686 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 290.954897][ T27] audit: type=1326 audit(2000000017.610:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11686 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 290.968346][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.029831][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.055376][ T27] audit: type=1326 audit(2000000017.710:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11686 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 291.064325][ T8] usb 1-1: Product: syz [ 291.115414][ T27] audit: type=1326 audit(2000000017.710:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11686 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 291.137867][ T8] usb 1-1: Manufacturer: syz [ 291.137889][ T8] usb 1-1: SerialNumber: syz [ 291.164493][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 291.202574][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 291.216296][ T27] audit: type=1326 audit(2000000017.710:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11686 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 291.737049][ T28] usb 1-1: USB disconnect, device number 24 [ 292.288632][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 292.306022][ T9] ath9k_htc: Failed to initialize the device [ 292.312799][ T28] usb 1-1: ath9k_htc: USB layer deinitialized [ 292.945111][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2744'. [ 292.995905][T11749] netlink: 'syz.2.2744': attribute type 1 has an invalid length. [ 292.998781][T11751] tmpfs: Bad value for 'mpol' [ 293.003692][T11749] netlink: 'syz.2.2744': attribute type 2 has an invalid length. [ 293.046935][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2744'. [ 293.207362][T11757] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2748'. [ 293.235844][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 293.393628][T11767] netlink: 'syz.1.2753': attribute type 4 has an invalid length. [ 293.425429][T11767] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2753'. [ 293.438620][T11761] loop2: detected capacity change from 0 to 4096 [ 293.465775][T11761] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 293.631706][T11761] ntfs3: loop2: failed to convert "c46c" to koi8-u [ 293.734865][T11777] loop3: detected capacity change from 0 to 164 [ 294.146476][T11787] loop0: detected capacity change from 0 to 164 [ 294.546158][T11800] loop3: detected capacity change from 0 to 1024 [ 295.063714][T11819] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 295.249328][T11826] loop3: detected capacity change from 0 to 256 [ 295.321671][T11830] tmpfs: Bad value for 'mpol' [ 295.333675][T11826] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x268716bb, utbl_chksum : 0xe619d30d) [ 295.781089][T11845] loop0: detected capacity change from 0 to 1024 [ 296.038736][T11852] loop2: detected capacity change from 0 to 1024 [ 296.061031][T11852] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.094668][T11852] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 296.116576][T11852] EXT4-fs (loop2): Test dummy encryption mode enabled [ 296.162186][T11852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.223235][T11852] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.230149][T11852] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 296.240107][T11852] EXT4-fs: Cannot change quota options when quota turned on [ 296.360580][ T1322] hfsplus: b-tree write err: -5, ino 8 [ 296.372397][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.608049][T11864] binder: 11863:11864 ioctl c018620c 200000000280 returned -22 [ 296.716339][T11870] overlayfs: conflicting options: metacopy=off,verity=on [ 296.895980][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'. [ 296.921833][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'. [ 296.951217][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2805'. [ 297.881894][T11906] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 297.889212][T11906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.955644][T11906] vhci_hcd vhci_hcd.0: Device attached [ 298.192350][ T5814] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 298.215539][ T8] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 298.241213][T11921] xfrm1: entered allmulticast mode [ 298.331998][T11925] loop0: detected capacity change from 0 to 64 [ 298.406669][ T5814] usb 4-1: config 0 has no interfaces? [ 298.412268][ T5814] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 298.437198][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.472982][ T5814] usb 4-1: config 0 descriptor?? [ 298.710666][T11935] loop1: detected capacity change from 0 to 256 [ 298.718208][ T9] usb 4-1: USB disconnect, device number 16 [ 298.729481][T11935] exfat: Deprecated parameter 'utf8' [ 298.735502][T11907] vhci_hcd: connection reset by peer [ 298.752129][ T55] vhci_hcd: stop threads [ 298.772886][ T55] vhci_hcd: release socket [ 298.789871][T11935] exfat: Deprecated parameter 'namecase' [ 298.803097][ T55] vhci_hcd: disconnect device [ 298.814133][T11935] exfat: Deprecated parameter 'namecase' [ 298.903435][T11935] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 299.207140][T11949] netlink: 'syz.1.2838': attribute type 1 has an invalid length. [ 299.419358][T11955] netlink: 'syz.3.2842': attribute type 5 has an invalid length. [ 300.391883][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 300.569962][ T27] audit: type=1326 audit(2000000027.230:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 300.645735][ T27] audit: type=1326 audit(2000000027.230:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 300.775569][ T27] audit: type=1326 audit(2000000027.260:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 300.891065][ T27] audit: type=1326 audit(2000000027.260:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 300.977208][ T27] audit: type=1326 audit(2000000027.260:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cb19c819 code=0x7ffc0000 [ 301.029344][T12021] loop2: detected capacity change from 0 to 256 [ 301.084489][T12021] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.548846][T12040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.559545][T12040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.600500][T12040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.647147][T12040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.323379][T12061] netlink: 'syz.1.2892': attribute type 2 has an invalid length. [ 302.457032][ T27] audit: type=1326 audit(2000000029.120:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061d9c819 code=0x7ffc0000 [ 302.555392][ T27] audit: type=1326 audit(2000000029.150:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061d9c819 code=0x7ffc0000 [ 302.643737][ T27] audit: type=1326 audit(2000000029.150:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd061d9c819 code=0x7ffc0000 [ 302.694327][ T27] audit: type=1326 audit(2000000029.150:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061d9c819 code=0x7ffc0000 [ 302.718557][ T27] audit: type=1326 audit(2000000029.150:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061d9c819 code=0x7ffc0000 [ 302.747975][T12072] netlink: 'syz.2.2898': attribute type 7 has an invalid length. [ 302.775427][T12072] netlink: 'syz.2.2898': attribute type 8 has an invalid length. [ 302.783240][T12072] netlink: 'syz.2.2898': attribute type 15 has an invalid length. [ 303.266517][T12092] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2908'. [ 303.325627][ T8] vhci_hcd: vhci_device speed not set [ 303.448667][T12096] loop2: detected capacity change from 0 to 2048 [ 303.487687][T12098] netlink: 'syz.0.2911': attribute type 1 has an invalid length. [ 303.505427][T12098] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2911'. [ 303.514997][T12098] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2911'. [ 303.549863][T12103] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.630005][T12096] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 303.701532][T12096] Remounting filesystem read-only [ 303.701715][T12105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.740838][T12105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.772537][T12105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.791440][T12105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.937414][T12108] loop1: detected capacity change from 0 to 4096 [ 303.960643][T12108] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 304.004533][T12108] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 304.014751][T12108] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 304.416380][T12123] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2923'. [ 304.471636][T12127] loop1: detected capacity change from 0 to 64 [ 305.041893][T12139] loop0: detected capacity change from 0 to 4096 [ 305.075688][T12139] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 305.113989][T12145] loop3: detected capacity change from 0 to 1764 [ 305.193263][T12139] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 305.239750][T12139] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 305.354823][T12153] loop1: detected capacity change from 0 to 64 [ 305.921253][T12173] bad cache= option: no%e [ 305.921253][T12173] [ 305.931017][T12173] CIFS: VFS: bad cache= option: no%e [ 306.341993][ T27] audit: type=1326 audit(2000000033.000:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.2.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061d9c819 code=0x7ffc0000 [ 306.419698][ T27] audit: type=1326 audit(2000000033.000:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.2.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061d9c819 code=0x7ffc0000 [ 306.436022][T12189] netlink: 'syz.0.2953': attribute type 1 has an invalid length. [ 306.475316][T12189] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2953'. [ 306.483859][ T27] audit: type=1326 audit(2000000033.050:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.2.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd061d9c819 code=0x7ffc0000 [ 306.523858][ T27] audit: type=1326 audit(2000000033.050:77): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.2.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061d9c819 code=0x7ffc0000 [ 306.572126][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2957'. [ 306.581718][T12193] netlink: ct family unspecified [ 306.586946][T12193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.785407][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 306.940374][T12205] netlink: 'syz.0.2963': attribute type 21 has an invalid length. [ 306.974374][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 306.991606][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 307.013682][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.022530][ T9] usb 4-1: Product: syz [ 307.027261][ T9] usb 4-1: Manufacturer: syz [ 307.031921][ T9] usb 4-1: SerialNumber: syz [ 307.054401][ T9] usb 4-1: config 0 descriptor?? [ 307.075715][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 307.093864][ T9] usb 4-1: Detected FT-X [ 307.297137][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 307.299193][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 307.299654][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 307.302515][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 307.308639][ T9] usb 4-1: USB disconnect, device number 17 [ 307.331921][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 307.332503][ T9] ftdi_sio 4-1:0.0: device disconnected [ 307.440160][T12217] loop2: detected capacity change from 0 to 4096 [ 307.451873][T12217] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 307.482124][T12217] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 307.515390][ T5814] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 307.524571][T12217] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 307.535113][T12217] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 307.564514][T12217] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 307.598816][T12217] ntfs: volume version 3.1. [ 307.644246][T12217] ntfs: (device loop2): map_mft_record_page(): Mft record 0x44 is corrupt. Run chkdsk. [ 307.750584][ T5814] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 307.771522][ T5814] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 307.791594][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.833777][ T5814] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 307.968200][T12228] loop3: detected capacity change from 0 to 1764 [ 308.191665][T12236] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.935400][ T5814] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 309.146210][ T5814] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 309.164710][ T5814] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 309.198035][ T5814] usb 1-1: USB disconnect, device number 25 [ 309.326888][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 309.356223][T12281] binder: BC_ACQUIRE_RESULT not supported [ 309.371644][T12281] binder: 12280:12281 ioctl c0306201 200000000040 returned -22 [ 309.597583][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 309.643746][T12292] netlink: 'syz.1.3005': attribute type 1 has an invalid length. [ 309.673599][T12292] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3005'. [ 309.781829][T12296] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.796636][T12298] netlink: 'syz.0.3008': attribute type 15 has an invalid length. [ 309.855418][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3008'. [ 310.329325][T12318] loop1: detected capacity change from 0 to 764 [ 310.390933][T12318] Symlink component flag not implemented [ 310.401252][T12318] Symlink component flag not implemented [ 310.413508][T12318] Symlink component flag not implemented (129) [ 310.420804][T12318] Symlink component flag not implemented (6) [ 310.438546][T12320] loop3: detected capacity change from 0 to 8 [ 310.680755][T12326] loop0: detected capacity change from 0 to 8 [ 310.708246][T12327] loop1: detected capacity change from 0 to 64 [ 310.888300][T12330] netlink: 'syz.3.3023': attribute type 30 has an invalid length. [ 311.396233][T12344] bond3: entered allmulticast mode [ 311.401994][T12344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.456434][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 312.456451][ T27] audit: type=1326 audit(2000000039.110:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12389 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a99c819 code=0x7ffc0000 [ 312.545324][ T27] audit: type=1326 audit(2000000039.110:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12389 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a99c819 code=0x7ffc0000 [ 312.631052][ T27] audit: type=1326 audit(2000000039.140:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12389 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f692a99c819 code=0x7ffc0000 [ 312.707725][ T27] audit: type=1326 audit(2000000039.140:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12389 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a99c819 code=0x7ffc0000 [ 312.730041][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.799873][ T27] audit: type=1326 audit(2000000039.140:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12389 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a99c819 code=0x7ffc0000 [ 312.826034][ T5781] Bluetooth: hci1: unexpected event for opcode 0x200b [ 313.295216][T12423] loop1: detected capacity change from 0 to 2048 [ 313.323296][T12423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.819553][T12445] loop2: detected capacity change from 0 to 512 [ 313.834900][T12445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.898132][T12445] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 313.918076][T12445] EXT4-fs (loop2): orphan cleanup on readonly fs [ 313.971720][T12445] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 314.067317][T12445] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 314.095974][T12445] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #13: comm syz.2.3075: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 314.157016][T12445] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3075: couldn't read orphan inode 13 (err -117) [ 314.229560][T12445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.347986][T12445] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 314.384642][T12445] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 314.422426][T12445] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 314.587686][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.900027][T12480] loop2: detected capacity change from 0 to 4096 [ 314.927843][T12480] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 315.225532][ T787] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 315.277129][T12494] geneve2: entered promiscuous mode [ 315.450339][ T787] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.475726][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.516274][ T787] usb 2-1: config 0 descriptor?? [ 315.537823][ T787] cp210x 2-1:0.0: cp210x converter detected [ 315.599590][T12508] netlink: 'syz.3.3104': attribute type 6 has an invalid length. [ 315.717070][T12512] geneve2: entered promiscuous mode [ 315.732410][T12512] geneve2: entered allmulticast mode [ 315.742866][ T787] usb 2-1: cp210x converter now attached to ttyUSB0 [ 315.918114][T12518] netlink: 'syz.2.3109': attribute type 1 has an invalid length. [ 315.928665][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 315.997332][ T28] usb 2-1: USB disconnect, device number 17 [ 316.024412][ T28] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 316.051519][ T28] cp210x 2-1:0.0: device disconnected [ 316.356021][ T787] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 316.548785][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 316.571756][ T787] usb 4-1: not running at top speed; connect to a high speed hub [ 316.586822][ T787] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 316.599395][ T787] usb 4-1: config 0 has no interface number 0 [ 316.606002][ T787] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 316.633593][ T787] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 316.675919][ T787] usb 4-1: config 0 interface 88 has no altsetting 0 [ 316.703627][ T787] usb 4-1: string descriptor 0 read error: -22 [ 316.710203][ T787] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 316.732475][ T787] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 316.768499][ T787] usb 4-1: config 0 descriptor?? [ 316.803579][ T787] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input20 [ 316.936657][ T787] input: failed to attach handler mousedev to device input20, error: -5 [ 316.999699][ T787] usb 4-1: USB disconnect, device number 18 [ 317.078601][ T8135] udevd[8135]: Error opening device "/dev/input/event4": No such file or directory [ 317.108509][ T8135] udevd[8135]: Unable to EVIOCGABS device "/dev/input/event4" [ 317.137445][ T8135] udevd[8135]: Unable to EVIOCGABS device "/dev/input/event4" [ 317.456187][ T28] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 317.472584][T12568] loop1: detected capacity change from 0 to 512 [ 317.507342][T12568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.532354][T12568] ext4 filesystem being mounted at /801/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.574033][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.580617][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.639581][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.669075][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.708631][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.738422][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 317.796597][ T28] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.817943][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.856450][ T28] hub 3-1:1.0: bad descriptor, ignoring hub [ 317.890133][ T28] hub: probe of 3-1:1.0 failed with error -5 [ 317.909140][ T28] cdc_wdm 3-1:1.0: skipping garbage [ 317.914475][ T28] cdc_wdm 3-1:1.0: skipping garbage [ 317.927854][T12579] program syz.3.3136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.937228][ T28] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 317.975760][T12579] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 318.131124][T12585] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3139'. [ 318.215889][ T787] usb 3-1: USB disconnect, device number 22 [ 318.441803][T12596] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3144'. [ 318.630062][T12599] loop3: detected capacity change from 0 to 4096 [ 318.670995][T12599] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 318.741384][T12583] loop1: detected capacity change from 0 to 32768 [ 318.794075][T12583] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 319.153719][T12583] XFS (loop1): Ending clean mount [ 319.362373][T12583] syz.1.3138: attempt to access beyond end of device [ 319.362373][T12583] loop1: rw=4096, sector=4227071, nr_sectors = 1 limit=32768 [ 319.373459][T12624] netlink: 'syz.2.3154': attribute type 1 has an invalid length. [ 319.443154][T12624] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3154'. [ 319.511617][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 319.935086][T12637] JFS: discard option not supported on device [ 319.959494][T12637] Mount JFS Failure: -22 [ 319.987739][T12637] jfs_mount failed w/return code = -22 [ 320.364072][T12650] loop1: detected capacity change from 0 to 256 [ 320.877776][T12669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3177'. [ 321.195188][T12681] loop1: detected capacity change from 0 to 512 [ 321.231619][T12681] EXT4-fs (loop1): Test dummy encryption mode enabled [ 321.295764][T12681] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.3182: dx entry: limit 0 != root limit 125 [ 321.322913][T12680] loop3: detected capacity change from 0 to 4096 [ 321.375574][T12681] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3182: Corrupt directory, running e2fsck is recommended [ 321.476366][T12681] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 321.492496][T12681] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.3182: corrupted in-inode xattr: invalid ea_ino [ 321.508880][T12681] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3182: couldn't read orphan inode 15 (err -117) [ 321.524576][T12681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.573974][T12681] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.583659][T12680] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 321.606441][T12680] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 321.752152][T12693] loop0: detected capacity change from 0 to 64 [ 321.788406][ T3488] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 321.814568][ T5770] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 321.850912][ T5770] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 321.889045][ T5770] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 321.931373][ T1322] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 322.121340][T12699] loop0: detected capacity change from 0 to 2048 [ 322.151039][T12699] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 322.185059][T12702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.738684][T12723] binder: BINDER_SET_CONTEXT_MGR already set [ 322.753011][T12721] loop2: detected capacity change from 0 to 1024 [ 322.771834][T12723] binder: 12722:12723 ioctl 40046207 0 returned -16 [ 322.857289][T12721] hfsplus: bad catalog entry type [ 322.927555][T12725] loop3: detected capacity change from 0 to 4096 [ 322.948236][ T1322] hfsplus: b-tree write err: -5, ino 25 [ 322.956107][T12725] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 322.966522][T12725] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 322.981183][ T1322] hfsplus: b-tree write err: -5, ino 4 [ 322.997727][ T1322] hfsplus: b-tree write err: -5, ino 2 [ 323.006999][T12725] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 323.065514][T12725] ntfs: volume version 3.1. [ 323.145978][ T787] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 323.219772][ T5770] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 323.362004][ T787] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 323.392731][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.411092][ T787] usb 1-1: Product: syz [ 323.425592][ T787] usb 1-1: Manufacturer: syz [ 323.430274][ T787] usb 1-1: SerialNumber: syz [ 323.904838][ T787] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 323.933882][ T787] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 323.968987][ T787] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 323.995651][ T787] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 324.013952][T12734] loop2: detected capacity change from 0 to 32768 [ 324.030075][ T787] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 324.059607][T12734] JBD2: Ignoring recovery information on journal [ 324.068106][ T787] lan78xx: probe of 1-1:1.0 failed with error -71 [ 324.081157][ T787] usb 1-1: USB disconnect, device number 26 [ 324.110396][T12751] ptrace attach of "./syz-executor exec"[5770] was attempted by " [ 324.208890][T12734] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 324.383814][T12754] loop1: detected capacity change from 0 to 1024 [ 324.426409][T12754] EXT4-fs: inline encryption not supported [ 324.462057][T12754] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 324.475957][T12734] (syz.2.3206,12734,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 324.564960][T12734] (syz.2.3206,12734,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 324.620466][T12754] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.3214: lblock 2 mapped to illegal pblock 2 (length 1) [ 324.633582][T12734] (syz.2.3206,12734,1):ocfs2_mknod:298 ERROR: status = -2 [ 324.663450][T12734] (syz.2.3206,12734,1):ocfs2_mknod:502 ERROR: status = -2 [ 324.705751][T12734] (syz.2.3206,12734,1):ocfs2_create:676 ERROR: status = -2 [ 324.723048][T12754] EXT4-fs (loop1): Remounting filesystem read-only [ 324.741504][T12754] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 324.771206][T12754] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 324.795691][T12754] EXT4-fs (loop1): 1 orphan inode deleted [ 324.804747][T12761] binder: 12760:12761 ioctl c0306201 0 returned -14 [ 324.819119][T12761] binder: 12760:12761 ioctl c00c6211 0 returned -14 [ 324.819886][T12754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.908623][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 325.014682][T12767] loop3: detected capacity change from 0 to 64 [ 325.147501][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.289309][T12772] program syz.1.3222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.493600][T12776] loop2: detected capacity change from 0 to 4096 [ 325.517131][T12780] loop3: detected capacity change from 0 to 256 [ 325.535450][T12780] exfat: Deprecated parameter 'namecase' [ 325.551005][T12780] exfat: Deprecated parameter 'namecase' [ 325.604641][T12776] ntfs3: loop2: Failed to load $Extend (-22). [ 325.611848][T12776] ntfs3: loop2: Failed to initialize $Extend. [ 325.620068][T12780] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd8f5bb5e, utbl_chksum : 0xe619d30d) [ 325.695807][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3227'. [ 325.710408][T12776] ntfs3: loop2: ino=5, "/" directory corrupted [ 325.913122][T12786] 9pnet_rdma: rdma_create_trans (12786): problem binding to privport: 13 [ 325.944571][ T27] audit: type=1400 audit(2000000052.600:83): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26F81648AA2A pid=12787 comm="syz.2.3229" [ 326.560704][T12812] loop2: detected capacity change from 0 to 512 [ 326.579635][T12812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 326.624038][T12812] EXT4-fs (loop2): 1 truncate cleaned up [ 326.637389][T12812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.685541][ T5814] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 326.778655][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.892254][ T5814] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 326.912266][ T5814] usb 1-1: config 0 has no interface number 0 [ 326.936463][ T5814] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 326.963607][ T5814] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 326.983206][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 326.993328][ T5814] usb 1-1: Manufacturer: syz [ 327.003462][ T5814] usb 1-1: SerialNumber: syz [ 327.024949][ T5814] usb 1-1: config 0 descriptor?? [ 327.356858][T12828] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3249'. [ 327.370692][T12828] netlink: 'syz.1.3249': attribute type 9 has an invalid length. [ 327.379330][T12828] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3249'. [ 327.392328][T12828] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3249'. [ 327.403847][T12830] loop2: detected capacity change from 0 to 2048 [ 327.416200][T12814] loop3: detected capacity change from 0 to 32768 [ 327.457140][T12814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3242 (12814) [ 327.473926][T12831] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.507837][T12814] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 327.538797][T12814] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 327.579986][T12814] BTRFS info (device loop3): force clearing of disk cache [ 327.602409][T12814] BTRFS info (device loop3): force zlib compression, level 3 [ 327.623443][T12830] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 327.646504][T12814] BTRFS info (device loop3): enabling auto defrag [ 327.670671][T12814] BTRFS info (device loop3): max_inline at 0 [ 327.676981][ T5814] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 327.685804][T12814] BTRFS info (device loop3): enabling disk space caching [ 327.692908][T12814] BTRFS info (device loop3): disk space caching is enabled [ 327.702066][ T5814] usb 1-1: USB disconnect, device number 27 [ 327.713923][T12830] Remounting filesystem read-only [ 327.742827][T12833] FAT-fs (loop1): Directory bread(block 64) failed [ 327.770171][T12833] FAT-fs (loop1): Directory bread(block 65) failed [ 327.810039][T12833] FAT-fs (loop1): Directory bread(block 66) failed [ 327.842051][T12833] FAT-fs (loop1): Directory bread(block 67) failed [ 327.856166][T12833] FAT-fs (loop1): Directory bread(block 68) failed [ 327.862824][T12833] FAT-fs (loop1): Directory bread(block 69) failed [ 327.909112][T12833] FAT-fs (loop1): Directory bread(block 70) failed [ 327.916883][T12814] BTRFS info (device loop3): enabling ssd optimizations [ 327.919655][T12833] FAT-fs (loop1): Directory bread(block 71) failed [ 327.931329][T12833] FAT-fs (loop1): Directory bread(block 72) failed [ 327.938257][T12833] FAT-fs (loop1): Directory bread(block 73) failed [ 327.963819][T12814] BTRFS info (device loop3): auto enabling async discard [ 327.993949][T12814] BTRFS info (device loop3): rebuilding free space tree [ 328.053370][T12814] BTRFS info (device loop3): disabling free space tree [ 328.072703][T12814] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 328.099095][T12814] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 328.192507][T12814] BTRFS error (device loop3: state M): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿ0x0000000000000000ÿÿÿÿ' [ 328.263116][T12853] set_capacity_and_notify: 1 callbacks suppressed [ 328.263132][T12853] loop2: detected capacity change from 0 to 2048 [ 328.278827][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 328.318754][T12853] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 328.401385][T12856] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.496836][T12853] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 328.578633][T12853] Remounting filesystem read-only [ 328.618848][T12853] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 328.684221][T12853] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 328.718830][T12853] NILFS (loop2): error -5 truncating bmap (ino=15) [ 328.792900][T12864] loop3: detected capacity change from 0 to 1024 [ 328.819812][T12864] EXT4-fs: Ignoring removed bh option [ 328.852877][ T5772] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 328.868779][T12864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.885856][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 328.894797][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 328.942051][ T5772] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 328.949678][ T5772] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 328.957409][ T5772] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 328.975128][ T5772] NILFS (loop2): discard dirty page: offset=0, ino=15 [ 328.982048][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 328.992060][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 329.001038][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 329.010863][ T5772] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 329.019956][ T5772] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 329.026929][ T5772] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 329.034313][ T5772] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 329.042443][ T5772] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 329.049888][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 329.059039][ T5772] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 329.068886][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 329.080637][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 329.143348][ T5772] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 329.161276][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 329.175038][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.339734][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.358203][T12871] loop0: detected capacity change from 0 to 1024 [ 329.389880][T12873] loop2: detected capacity change from 0 to 256 [ 329.470823][T12873] FAT-fs (loop2): Directory bread(block 64) failed [ 329.494571][T12873] FAT-fs (loop2): Directory bread(block 65) failed [ 329.510984][T12873] FAT-fs (loop2): Directory bread(block 66) failed [ 329.529572][T12873] FAT-fs (loop2): Directory bread(block 67) failed [ 329.568926][T12873] FAT-fs (loop2): Directory bread(block 68) failed [ 329.604575][T12873] FAT-fs (loop2): Directory bread(block 69) failed [ 329.627372][T12873] FAT-fs (loop2): Directory bread(block 70) failed [ 329.633997][T12873] FAT-fs (loop2): Directory bread(block 71) failed [ 329.651738][ T49] hfsplus: b-tree write err: -5, ino 25 [ 329.666437][ T49] hfsplus: b-tree write err: -5, ino 4 [ 329.682349][ T49] hfsplus: b-tree write err: -5, ino 2 [ 329.686311][T12873] FAT-fs (loop2): Directory bread(block 72) failed [ 329.694761][T12873] FAT-fs (loop2): Directory bread(block 73) failed [ 329.705599][ T49] hfsplus: b-tree write err: -5, ino 17 [ 329.942537][T12865] loop1: detected capacity change from 0 to 32768 [ 329.956700][T12865] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.3257 (12865) [ 330.006172][T12865] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 330.020183][T12865] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 330.046881][T12865] BTRFS info (device loop1): using free space tree [ 330.133985][T12896] loop2: detected capacity change from 0 to 64 [ 330.175387][T12865] BTRFS info (device loop1): enabling ssd optimizations [ 330.224024][T12865] BTRFS info (device loop1): auto enabling async discard [ 330.241232][T12900] tmpfs: Cannot retroactively limit inodes [ 330.285629][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 330.348136][ T27] audit: type=1800 audit(2000000057.000:84): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3257" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 330.434104][ T5769] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 330.495309][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 330.513398][T12903] mkiss: ax0: crc mode is auto. [ 330.534259][ T9] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 330.548951][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.561659][ T9] usb 1-1: Product: syz [ 330.589885][ T9] usb 1-1: Manufacturer: syz [ 330.594623][ T9] usb 1-1: SerialNumber: syz [ 330.623126][ T9] usb 1-1: config 0 descriptor?? [ 330.659869][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 330.679083][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 330.711257][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 330.734086][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 330.762123][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 330.807289][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 330.832502][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 330.878756][ T9] usb 1-1: media controller created [ 330.994015][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.094247][T12910] loop1: detected capacity change from 0 to 2048 [ 331.098373][ T9] usb 1-1: selecting invalid altsetting 3 [ 331.126713][T12910] EXT4-fs: Ignoring removed oldalloc option [ 331.135411][ T9] ttusb2: set interface to alts=3 failed [ 331.218225][T12910] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 331.237158][T12910] System zones: 0-7 [ 331.243635][ T9] DVB: Unable to find symbol tda10086_attach() [ 331.274530][T12910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.283569][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 331.346910][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 331.376434][T12910] EXT4-fs error (device loop1): ext4_ext_precache:637: inode #2: comm syz.1.3271: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 331.398967][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 331.450170][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 331.451653][T12905] loop3: detected capacity change from 0 to 32768 [ 331.479116][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 331.484286][T12910] EXT4-fs (loop1): Remounting filesystem read-only [ 331.523757][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 331.586339][ T9] usb 1-1: USB disconnect, device number 28 [ 331.621533][T12905] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 331.685697][T12905] JBD2: Ignoring recovery information on journal [ 331.720248][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 331.768212][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.865982][T12905] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 332.164153][T12933] loop1: detected capacity change from 0 to 256 [ 332.196835][T12933] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 332.257895][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 332.621477][T12943] nbd: couldn't find device at index 10240 [ 332.656510][T12945] loop0: detected capacity change from 0 to 1024 [ 332.811173][ T3532] hfsplus: b-tree write err: -5, ino 25 [ 332.827763][ T3532] hfsplus: b-tree write err: -5, ino 4 [ 332.844880][ T3532] hfsplus: b-tree write err: -5, ino 2 [ 333.083495][T12960] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.366300][T12966] set_capacity_and_notify: 2 callbacks suppressed [ 333.366319][T12966] loop0: detected capacity change from 0 to 128 [ 333.430010][T12966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003] [ 333.445646][T12966] System zones: 1-3, 19-19, 35-36 [ 333.452561][T12966] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.490495][T12966] ext4 filesystem being mounted at /770/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.628892][T12966] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 129 (only 1 groups) [ 333.686196][T12972] loop2: detected capacity change from 0 to 128 [ 333.783458][T12975] netlink: 'syz.1.3299': attribute type 10 has an invalid length. [ 333.870429][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.886585][T12975] dummy0: entered promiscuous mode [ 333.892065][T12975] dummy0: entered allmulticast mode [ 333.962890][T12975] team0: Port device dummy0 added [ 333.989602][T12976] netlink: 'syz.1.3299': attribute type 10 has an invalid length. [ 334.062233][T12976] dummy0: left promiscuous mode [ 334.087123][T12976] dummy0: left allmulticast mode [ 334.152192][T12976] team0: Port device dummy0 removed [ 334.189675][T12976] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 334.844802][T12995] loop1: detected capacity change from 0 to 1024 [ 334.914741][T12982] loop0: detected capacity change from 0 to 32768 [ 334.978067][T12980] loop2: detected capacity change from 0 to 40427 [ 335.025375][T12980] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 335.031836][T12980] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 335.057856][ T1322] hfsplus: b-tree write err: -5, ino 25 [ 335.073519][T12980] F2FS-fs (loop2): invalid crc value [ 335.095535][ T1322] hfsplus: b-tree write err: -5, ino 4 [ 335.101215][ T1322] hfsplus: b-tree write err: -5, ino 2 [ 335.419575][T12980] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 335.431167][T12980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 335.661033][T13015] loop1: detected capacity change from 0 to 136 [ 335.675097][ T5772] syz-executor: attempt to access beyond end of device [ 335.675097][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 335.722682][T13015] Attempt to read inode for relocated directory [ 335.733939][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 335.862297][T13019] loop0: detected capacity change from 0 to 1024 [ 336.230357][T13027] loop1: detected capacity change from 0 to 1024 [ 336.289066][T13027] hfsplus: bad catalog entry type [ 336.381690][ T3488] hfsplus: b-tree write err: -5, ino 25 [ 336.399229][ T3488] hfsplus: b-tree write err: -5, ino 4 [ 336.409991][T13029] loop0: detected capacity change from 0 to 4096 [ 336.418501][ T3488] hfsplus: b-tree write err: -5, ino 2 [ 336.476214][T13032] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.588428][T13029] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 337.029876][ T27] audit: type=1326 audit(2000000063.690:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88879c819 code=0x7ffc0000 [ 337.078785][ T27] audit: type=1326 audit(2000000063.690:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88879c819 code=0x7ffc0000 [ 337.143380][ T27] audit: type=1326 audit(2000000063.730:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa88879c819 code=0x7ffc0000 [ 337.184502][ T27] audit: type=1326 audit(2000000063.740:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa88879c582 code=0x7ffc0000 [ 337.255370][ T27] audit: type=1326 audit(2000000063.740:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa88879c582 code=0x7ffc0000 [ 337.316783][T13051] loop3: detected capacity change from 0 to 4096 [ 337.332586][ T27] audit: type=1326 audit(2000000063.780:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88879c819 code=0x7ffc0000 [ 337.409162][T13055] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.421707][ T27] audit: type=1326 audit(2000000063.800:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88879c819 code=0x7ffc0000 [ 337.548272][ T27] audit: type=1326 audit(2000000063.800:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa88879c819 code=0x7ffc0000 [ 337.621331][T13051] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 337.627571][ T27] audit: type=1326 audit(2000000063.800:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fa88879c819 code=0x7ffc0000 [ 337.680836][T13051] Remounting filesystem read-only [ 337.711336][T13058] FAT-fs (loop0): Unrecognized mount option "ÝšÑõI‰ã÷CÀmq;VÏÑ_—å=ðöpr¸·è‹7n&¯AcrUɯ|kiUàR¢—¢Î¬ßåqjîÜí¢.àUFGˆv-æ¤ÖŸ¤œD~Ïa*Ð }ÎÆ¦T=» P:ë¦ šTÎùš×ãžÂÃðSIqJÊK$õ3Ü1i+=1ÏCè‚" or missing value [ 337.745341][ T27] audit: type=1326 audit(2000000063.800:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88879c819 code=0x7ffc0000 [ 338.255615][T11343] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 338.344302][ T55] ------------[ cut here ]------------ [ 338.350137][ T55] kernel BUG at fs/hfs/inode.c:449! [ 338.368757][ T55] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 338.374949][ T55] CPU: 1 PID: 55 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 338.382401][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.392497][ T55] Workqueue: writeback wb_workfn (flush-7:1) [ 338.398552][ T55] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 338.404183][ T55] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 338.423908][ T55] RSP: 0018:ffffc9000120f340 EFLAGS: 00010293 [ 338.430007][ T55] RAX: ffffffff825b5f5a RBX: ffff888030a535a8 RCX: ffff88801c6e0000 [ 338.438002][ T55] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 338.445992][ T55] RBP: ffffc9000120f4d0 R08: ffff88801c6e0000 R09: 0000000000000003 [ 338.453993][ T55] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 338.462016][ T55] R13: 1ffff92000241e6c R14: ffff888030a53558 R15: 0000000000000000 [ 338.470009][ T55] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 338.478965][ T55] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.485591][ T55] CR2: 00007fede18b73bd CR3: 0000000061b59000 CR4: 00000000003506e0 [ 338.493586][ T55] Call Trace: [ 338.496900][ T55] [ 338.499850][ T55] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 338.505261][ T55] ? __rwlock_init+0x150/0x150 [ 338.510063][ T55] __writeback_single_inode+0x705/0xec0 [ 338.515642][ T55] writeback_sb_inodes+0x7cd/0xf50 [ 338.520791][ T55] ? queue_io+0x550/0x550 [ 338.525153][ T55] ? rcu_is_watching+0x15/0xb0 [ 338.529950][ T55] wb_writeback+0x46a/0xbf0 [ 338.534515][ T55] ? queue_io+0x351/0x550 [ 338.538879][ T55] ? percpu_ref_tryget+0x250/0x250 [ 338.544031][ T55] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 338.550126][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.555383][ T55] wb_workfn+0x400/0xe60 [ 338.559663][ T55] ? try_to_wake_up+0x70a/0x1190 [ 338.564639][ T55] ? inode_wait_for_writeback+0x230/0x230 [ 338.570405][ T55] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 338.576438][ T55] ? read_lock_is_recursive+0x20/0x20 [ 338.581841][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.587071][ T55] ? process_scheduled_works+0x96f/0x15d0 [ 338.592831][ T55] ? process_scheduled_works+0x96f/0x15d0 [ 338.598585][ T55] process_scheduled_works+0xa5d/0x15d0 [ 338.604177][ T55] ? worker_attach_to_pool+0x380/0x380 [ 338.609659][ T55] ? assign_work+0x3d2/0x5d0 [ 338.614276][ T55] worker_thread+0xa55/0xfc0 [ 338.618905][ T55] kthread+0x2fa/0x390 [ 338.622998][ T55] ? pr_cont_work+0x560/0x560 [ 338.627698][ T55] ? kthread_blkcg+0xd0/0xd0 [ 338.632315][ T55] ret_from_fork+0x48/0x80 [ 338.636782][ T55] ? kthread_blkcg+0xd0/0xd0 [ 338.641397][ T55] ret_from_fork_asm+0x11/0x20 [ 338.646188][ T55] [ 338.649223][ T55] Modules linked in: [ 338.657378][ T55] ---[ end trace 0000000000000000 ]--- [ 338.663487][ T55] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 338.674402][ T55] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 338.694669][ T55] RSP: 0018:ffffc9000120f340 EFLAGS: 00010293 [ 338.695674][T11343] usb 4-1: Using ep0 maxpacket: 32 [ 338.705997][ T55] RAX: ffffffff825b5f5a RBX: ffff888030a535a8 RCX: ffff88801c6e0000 [ 338.714054][ T55] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 338.717560][T13056] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 338.724016][ T55] RBP: ffffc9000120f4d0 R08: ffff88801c6e0000 R09: 0000000000000003 [ 338.738806][ T55] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 338.746864][ T55] R13: 1ffff92000241e6c R14: ffff888030a53558 R15: 0000000000000000 [ 338.754880][ T55] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 338.755873][T11343] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 338.774716][ T55] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.779520][T11343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.784282][ T55] CR2: 00007f2abef3f000 CR3: 0000000019aac000 CR4: 00000000003506f0 [ 338.797616][T11343] usb 4-1: Product: syz [ 338.797637][T11343] usb 4-1: Manufacturer: syz [ 338.806905][T11343] usb 4-1: SerialNumber: syz [ 338.813913][T11343] usb 4-1: config 0 descriptor?? [ 338.819158][ T55] Kernel panic - not syncing: Fatal exception [ 338.825863][ T55] Kernel Offset: disabled [ 338.830202][ T55] Rebooting in 86400 seconds..