last executing test programs: 7m59.873737686s ago: executing program 3 (id=1250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000100)=0x1, 0x4) 7m59.665668403s ago: executing program 3 (id=1253): r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x32315241, 0x3, 0x9, [{0x7ca9, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x80000000}, {0x5, 0x400}, {0xc}], 0xd, 0x3, 0x3, 0x0, 0x7}}) 7m59.524108364s ago: executing program 3 (id=1255): r0 = socket(0x840000000002, 0x3, 0xc3) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) 7m59.393923775s ago: executing program 3 (id=1258): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 7m58.696660361s ago: executing program 3 (id=1265): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x8044610a, 0x0) 7m58.08472384s ago: executing program 3 (id=1273): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f000000cffc)=0x3, 0x1, 0x1, 0x0, 0x0, 0x2) 7m57.752143467s ago: executing program 32 (id=1273): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f000000cffc)=0x3, 0x1, 0x1, 0x0, 0x0, 0x2) 3.317447343s ago: executing program 1 (id=7974): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0xd0, 0x208, 0x2d8, 0x3c8, 0xd0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@frag={{0x30}, {[0x0, 0x8], 0x6, 0xd, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x4], 0x9, 0x2, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 3.148015516s ago: executing program 0 (id=7977): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x4, 0xda00, 0x6, 0xffe}}, 0xfffffffffffffffe, 0x1000) 3.051092674s ago: executing program 1 (id=7979): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf000201061ae3bb8b6d481d50000904000001020d00000524060001052400a9b30d240f01020000000300ffefceb54935232f2042cf6e1c000606241a0c001407240a0509"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.934016334s ago: executing program 0 (id=7981): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) set_tid_address(0x0) 2.679125574s ago: executing program 0 (id=7986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 2.448182703s ago: executing program 2 (id=7989): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) sendfile(r0, r0, 0x0, 0x4) 2.416440345s ago: executing program 0 (id=7990): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000004ec0)=ANY=[@ANYBLOB='discard,discard=0x0000000000020001,discard,iocharset=cp857,errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c696f636861727365743d69736f383835392d342c00179d993df3adcbbbd5134b8f8ad2e9326e7749200a3b61487736ac423ebb37c210c855bea3704b4f1534016a399e7ac07c9fde78ed933628dc5ce1f92fde1d59b8219cfcdd938a3bd09a0273cde0f840ef3b504717dc1f03f6310823ae0f1f24e8a831e8712124e1e2d9a70dd0a6d2c558e980d07d613b6d0dbcc4602019f4db299f6ae242163ec9584fc5c1387f506cb2e58af0a7a0bd048eae125e35a692"], 0x23, 0x61c3, &(0x7f000000c9c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 2.151678667s ago: executing program 2 (id=7993): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"fbff0a00", 0x5b, 0x6, 0x3, 0x14625b, 0x3, "000000ff00070000000900", '\x00', "22010400", "0100", ["9ef806070000007eff7d7f00", "0000000000000000008000", "ffffff0200ffff7f00", "00720cfcffffff00e9002000"]}) 1.945078053s ago: executing program 2 (id=7995): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 1.755610038s ago: executing program 2 (id=7997): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) 1.507472778s ago: executing program 2 (id=8000): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.457261463s ago: executing program 4 (id=8001): r0 = io_uring_setup(0x5b89, &(0x7f0000000000)={0x0, 0x4efb, 0x10, 0x0, 0x3e6}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) 1.436154794s ago: executing program 5 (id=8002): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "d0c09ca8c9a044d18c1f59d1ed624a358f39cfc467329fec437c907e0ca7779ca8c0c2d26abf36f064770a70a88130dfa112562f1ad75b59c390ca9d280872fb", 0x40}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 1.269240597s ago: executing program 4 (id=8003): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x88ffff, 0x2], [0x0, 0x0, 0x2b41, 0x4], [0x400000000000000]}) 1.191187214s ago: executing program 5 (id=8004): r0 = socket(0x22, 0x2, 0x24) recvfrom$inet6(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) 1.189975754s ago: executing program 1 (id=8005): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x30a0080, 0x0) 986.93766ms ago: executing program 0 (id=8006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) 959.043162ms ago: executing program 4 (id=8007): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e3f27f670000ec67838717bd88a8", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 958.517693ms ago: executing program 5 (id=8008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b780)=@setlink={0x30, 0x13, 0x3, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x16, 0x408a}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 933.305194ms ago: executing program 1 (id=8009): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c646d6f64653d30303030303030303030303030303030303030303030342c726f6f746469723d30303030303030303030303030303030303030342c696f636861727365743d63703836362c756e686964652c6e6f6164696e6963622c6e6f7374726963742c7569643d666f726765742c006e646058ca3be182cc43baaaf2f77a30538415e6cd8618f1936a4cc4515f736be0cf653e6d411a18db5d62a4cc1dca6e05b1200c3e50270c9902df1ebd79437f74a1b37db2bf05cda881dd68d2c53a4780f47d"], 0x1, 0xc32, &(0x7f0000000e00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 817.630014ms ago: executing program 2 (id=8010): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000180)='./file0\x00', 0x10080, &(0x7f0000000000), 0x1, 0xb958, &(0x7f0000017a80)="$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") removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='trusted.\t']) 689.596294ms ago: executing program 0 (id=8011): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f0000000180)={[{@balloc_test4}, {@usrjquota_file, 0x4}, {@acl}, {@notail}, {@usrjquota, 0x3d}]}, 0x2, 0x110f, &(0x7f0000001140)="$eJzs2LFqFEEYB/D/7B2Y7mTTL4IWFhISzs4qRYRrrW0kpDJVrooI4rv4OJLKPuQBLAKWwshusp5IIGAuhoPfD2Z3+OabmW/KmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCVV/1nu0naMdIkKUnXnS0uknRj/PHXSZOSN0eL5cHJ/PUyyWRIL33rZ/XT0u493Wrn7bzda19u7z9rl6cf3r87Pj46uV6mpMv55foPUq7rudHW+vcDAACATVHvbPb3ktP/uz8AAABwm7U+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8gzpb9dskP2utaZKUpOvOFhdJuocsEAAAALizkiZvZzfFMzwDrLzIt1kZ4mP7Ufqc3XwZ5j9apR429184AAAAbJTprRnlj/v480xTa/00jj3JNDs7V/3+1w98308mpwfZ/X0n/zx8zy8/Ho6t1Mk9nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAB8FAAD//6zC3aE=") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 669.256206ms ago: executing program 4 (id=8012): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x80c00) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 641.773828ms ago: executing program 5 (id=8013): r0 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0x10000, 0x3, 0x5, 0x5}}) 435.744934ms ago: executing program 4 (id=8014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 370.843079ms ago: executing program 1 (id=8015): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0xc, 0x2) 325.631163ms ago: executing program 5 (id=8016): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short}, 0x14) 242.81734ms ago: executing program 4 (id=8017): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 95.911612ms ago: executing program 1 (id=8018): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x8001) 0s ago: executing program 5 (id=8019): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) kernel console output (not intermixed with test programs): failed [ 519.902060][T17918] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.917544][T17920] FAT-fs (loop4): Directory bread(block 66) failed [ 519.948762][T17920] FAT-fs (loop4): Directory bread(block 67) failed [ 519.989305][T17920] FAT-fs (loop4): Directory bread(block 68) failed [ 520.028454][T17920] FAT-fs (loop4): Directory bread(block 69) failed [ 520.065477][T17920] FAT-fs (loop4): Directory bread(block 70) failed [ 520.090380][T17927] loop1: detected capacity change from 0 to 256 [ 520.106807][T17920] FAT-fs (loop4): Directory bread(block 71) failed [ 520.143817][T17920] FAT-fs (loop4): Directory bread(block 72) failed [ 520.176248][T17927] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d) [ 520.201303][T17920] FAT-fs (loop4): Directory bread(block 73) failed [ 520.744155][ T14] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 520.759732][T17944] loop2: detected capacity change from 0 to 1024 [ 520.948657][ T14] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 520.974200][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.007699][ T14] usb 1-1: Product: syz [ 521.033474][ T14] usb 1-1: Manufacturer: syz [ 521.037496][ T52] hfsplus: b-tree write err: -5, ino 4 [ 521.054027][ T14] usb 1-1: SerialNumber: syz [ 521.081182][ T14] usb 1-1: config 0 descriptor?? [ 521.182183][T17954] loop1: detected capacity change from 0 to 1764 [ 521.248324][T17956] loop4: detected capacity change from 0 to 512 [ 521.285028][T17956] EXT4-fs: Ignoring removed orlov option [ 521.310520][ T14] usb-storage 1-1:0.0: USB Mass Storage device detected [ 521.335375][T17956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 521.390629][T17956] EXT4-fs (loop4): 1 orphan inode deleted [ 521.404417][T17956] EXT4-fs (loop4): 1 truncate cleaned up [ 521.412986][T17956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 521.484916][T17956] EXT4-fs error (device loop4): empty_inline_dir:1877: inode #12: block 7: comm syz.4.6150: bad entry in directory: rec_len is too small for name_len - offset=4, inode=13, rec_len=16, size=60 fake=0 [ 521.560525][ T14] usb 1-1: USB disconnect, device number 18 [ 521.630159][T17956] EXT4-fs (loop4): Remounting filesystem read-only [ 521.666616][T17956] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - inode 13, rec_len 16, name_len 53inline size 60 [ 521.861280][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 522.119886][T17979] device bond1 entered promiscuous mode [ 522.157969][T17979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.359597][T17991] netlink: 'syz.4.6163': attribute type 6 has an invalid length. [ 522.411773][T17990] loop5: detected capacity change from 0 to 2048 [ 522.450214][T17990] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 522.478001][T17994] device sit0 entered promiscuous mode [ 522.518834][T17994] netlink: 'syz.2.6165': attribute type 1 has an invalid length. [ 522.544502][T17990] syz.5.6164: attempt to access beyond end of device [ 522.544502][T17990] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 522.566145][T17998] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 522.594136][T17994] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6165'. [ 522.631066][T17997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6167'. [ 522.648698][T17990] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 522.718466][T17990] Remounting filesystem read-only [ 523.279903][T18022] netlink: 'syz.5.6179': attribute type 21 has an invalid length. [ 523.296902][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6179'. [ 523.655389][T18036] xt_l2tp: invalid flags combination: 4 [ 523.827048][T18040] loop1: detected capacity change from 0 to 16 [ 523.848403][T18039] loop5: detected capacity change from 0 to 1024 [ 523.911180][T18039] hfsplus: catalog name length corrupted [ 523.934235][T18040] erofs: (device loop1): mounted with root inode @ nid 36. [ 523.950346][T18040] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 524.013121][T18040] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 524.044080][T18040] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-95] [ 524.205881][T18020] loop0: detected capacity change from 0 to 32768 [ 524.342529][T18020] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 524.360919][T18020] (syz.0.6178,18020,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 524.373672][T18020] (syz.0.6178,18020,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 524.382204][T18020] (syz.0.6178,18020,1):ocfs2_symlink:2065 ERROR: status = -117 [ 524.435723][ T4265] (syz-executor,4265,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 524.487056][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 524.502119][T18030] loop4: detected capacity change from 0 to 32768 [ 524.516834][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6193'. [ 524.572681][T18030] jfs_strtoUCS: char2uni returned -22. [ 524.599201][T18030] charset = euc-jp, char = 0xd4 [ 525.748805][T18086] loop4: detected capacity change from 0 to 128 [ 525.912019][T18067] loop0: detected capacity change from 0 to 32768 [ 525.984673][T18067] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 526.017176][T18067] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 526.057181][T18067] BTRFS info (device loop0): enabling ssd optimizations [ 526.066884][T18068] loop5: detected capacity change from 0 to 32768 [ 526.075145][T18067] BTRFS info (device loop0): using free space tree [ 526.200949][T18068] JBD2: Ignoring recovery information on journal [ 526.477739][T18068] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 526.538525][T18122] netlink: 'syz.4.6217': attribute type 30 has an invalid length. [ 526.627649][ T4265] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 526.999369][ T4277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4277) [ 527.155194][T18129] vcan0 speed is unknown, defaulting to 1000 [ 527.201107][ T7318] ocfs2: Unmounting device (7,5) on (node local) [ 527.617531][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6227'. [ 527.952002][T18149] loop5: detected capacity change from 0 to 128 [ 527.970518][T18151] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6231'. [ 528.040662][T18149] hpfs: hpfs_map_4sectors(): unaligned read [ 528.044075][T18151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6231'. [ 528.079294][T18151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6231'. [ 528.087480][T18149] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 528.141616][T18149] hpfs: hpfs_map_sector(): read error [ 528.691385][T18173] overlayfs: workdir and upperdir must be separate subtrees [ 529.671817][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6255'. [ 529.732296][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6255'. [ 530.306885][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6262'. [ 530.356948][T18223] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6262'. [ 530.413271][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6262'. [ 530.744314][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6270'. [ 531.196493][T18255] loop0: detected capacity change from 0 to 2048 [ 531.238680][T18255] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 531.311359][T18264] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.357070][T18265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.389756][T18255] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 531.523001][T18255] Remounting filesystem read-only [ 531.667199][T18273] loop5: detected capacity change from 0 to 164 [ 531.750466][T18273] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 532.573372][T18267] loop2: detected capacity change from 0 to 32768 [ 532.612217][T18267] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.6280 (18267) [ 532.657562][T18267] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 532.714106][T18267] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 532.744738][T18267] BTRFS info (device loop2): enabling ssd optimizations [ 532.753239][T18267] BTRFS info (device loop2): not using ssd optimizations [ 532.786056][T18267] BTRFS info (device loop2): turning off barriers [ 532.798987][T18267] BTRFS info (device loop2): using free space tree [ 533.043403][T18321] loop0: detected capacity change from 0 to 64 [ 533.307427][ T4264] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 533.397749][T18325] netlink: 'syz.4.6300': attribute type 1 has an invalid length. [ 533.449011][T18325] netlink: 'syz.4.6300': attribute type 2 has an invalid length. [ 533.490108][T18327] netlink: 'syz.0.6301': attribute type 11 has an invalid length. [ 533.509536][T18325] __nla_validate_parse: 4 callbacks suppressed [ 533.509554][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6300'. [ 533.709504][T18297] loop1: detected capacity change from 0 to 32768 [ 534.004728][T18332] netlink: 'syz.4.6304': attribute type 1 has an invalid length. [ 534.044900][T18297] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 534.106292][T18297] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 534.123331][T18335] loop0: detected capacity change from 0 to 128 [ 534.160648][T18297] BTRFS info (device loop1): force clearing of disk cache [ 534.194107][T18297] BTRFS info (device loop1): metadata ratio 0 [ 534.200655][T18297] BTRFS info (device loop1): enabling ssd optimizations [ 534.238947][T18297] BTRFS info (device loop1): using spread ssd allocation scheme [ 534.240916][T18300] loop5: detected capacity change from 0 to 32768 [ 534.279587][T18297] BTRFS info (device loop1): using free space tree [ 534.439222][T18300] ialloc: diAlloc returned -5! [ 534.627692][T18297] BTRFS info (device loop1): rebuilding free space tree [ 534.796002][T18363] loop2: detected capacity change from 0 to 16 [ 534.846267][T18363] erofs: (device loop2): mounted with root inode @ nid 36. [ 534.897904][T18363] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 534.926867][T18363] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 534.980945][T18363] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 535.020352][ T26] audit: type=1800 audit(1756225709.211:1646): pid=18363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6310" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 535.265746][ T4266] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 535.555147][ T4268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (4268) [ 536.076439][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6322'. [ 536.438457][T18397] loop4: detected capacity change from 0 to 128 [ 536.449277][T18365] loop5: detected capacity change from 0 to 40427 [ 536.485480][T18365] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 536.492166][T18365] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 536.566079][T18397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 536.567164][T18365] F2FS-fs (loop5): Found nat_bits in checkpoint [ 536.657627][T18397] ext4 filesystem being mounted at /1258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 536.797701][T18365] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 536.842553][T18365] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 536.991169][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 536.999917][T18365] syz.5.6309: attempt to access beyond end of device [ 536.999917][T18365] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 537.204558][ T7318] syz-executor: attempt to access beyond end of device [ 537.204558][ T7318] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 537.528475][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6337'. [ 538.078231][T18438] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 538.128369][T18438] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 538.264076][ T6516] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 538.337991][T18444] netlink: 'syz.2.6345': attribute type 1 has an invalid length. [ 538.386142][T18424] loop0: detected capacity change from 0 to 32768 [ 538.394050][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6345'. [ 538.456197][ T6516] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 538.482313][ T6516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.530532][ T6516] usb 2-1: config 0 descriptor?? [ 538.549246][T18424] XFS (loop0): Mounting V5 Filesystem [ 538.552165][ T6516] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 538.785781][T18424] XFS (loop0): Ending clean mount [ 538.857430][T18424] XFS (loop0): Quotacheck needed: Please wait. [ 538.932326][T18424] XFS (loop0): Quotacheck: Done. [ 538.954423][ T6516] gp8psk: usb in 128 operation failed. [ 538.964317][ T6516] gp8psk: usb in 137 operation failed. [ 538.971059][ T6516] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 538.992059][ T6516] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 539.055169][ T6516] usb 2-1: USB disconnect, device number 18 [ 539.184376][ T4265] XFS (loop0): Unmounting Filesystem [ 539.270204][T18469] raw_sendmsg: syz.4.6354 forgot to set AF_INET. Fix it! [ 539.973384][T18489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6353'. [ 540.414185][ T6516] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 540.595760][ T6516] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 540.604812][ T6516] usb 2-1: config 0 has no interface number 0 [ 540.613126][ T6516] usb 2-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 540.632847][ T6516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.641095][ T6516] usb 2-1: Product: syz [ 540.645639][ T6516] usb 2-1: Manufacturer: syz [ 540.650425][ T6516] usb 2-1: SerialNumber: syz [ 540.657569][ T6516] usb 2-1: config 0 descriptor?? [ 540.666061][ T6516] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 540.674738][ T6516] dvb-usb: bulk message failed: -22 (4/0) [ 540.680509][ T6516] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 540.690982][ T6516] dvb-usb: bulk message failed: -22 (5/0) [ 540.696941][ T6516] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 540.712994][ T6516] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 540.726740][ T6516] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 540.868187][ T953] usb 2-1: USB disconnect, device number 19 [ 541.475767][T18504] libceph: resolve '0' (ret=-3): failed [ 541.484825][T18502] TCP: TCP_TX_DELAY enabled [ 541.627338][T18506] vcan0 speed is unknown, defaulting to 1000 [ 541.890440][T18520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6379'. [ 541.906726][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6376'. [ 541.921594][T18520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6379'. [ 541.994063][ T5004] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 542.100728][T18523] loop4: detected capacity change from 0 to 256 [ 542.167644][T18523] FAT-fs (loop4): Directory bread(block 64) failed [ 542.191127][T18523] FAT-fs (loop4): Directory bread(block 65) failed [ 542.194130][ T5004] usb 1-1: Using ep0 maxpacket: 32 [ 542.223315][T18523] FAT-fs (loop4): Directory bread(block 66) failed [ 542.226246][ T5004] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.243125][T18523] FAT-fs (loop4): Directory bread(block 67) failed [ 542.276350][ T5004] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 542.282142][T18523] FAT-fs (loop4): Directory bread(block 68) failed [ 542.309344][T18523] FAT-fs (loop4): Directory bread(block 69) failed [ 542.326445][ T5004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.356847][ T5004] usb 1-1: config 0 descriptor?? [ 542.356992][T18523] FAT-fs (loop4): Directory bread(block 70) failed [ 542.389980][ T5004] gspca_main: spca501-2.14.0 probing 0000:0000 [ 542.402464][T18523] FAT-fs (loop4): Directory bread(block 71) failed [ 542.425714][T18523] FAT-fs (loop4): Directory bread(block 72) failed [ 542.432332][T18523] FAT-fs (loop4): Directory bread(block 73) failed [ 542.775694][ T5004] gspca_spca501: reg write: error -71 [ 542.781321][ T5004] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 542.821190][ T5004] spca501: probe of 1-1:0.0 failed with error -22 [ 542.849332][ T5004] usb 1-1: USB disconnect, device number 19 [ 542.932560][T18544] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 542.937275][T18543] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 543.302064][T18556] sctp: [Deprecated]: syz.4.6394 (pid 18556) Use of int in max_burst socket option. [ 543.302064][T18556] Use struct sctp_assoc_value instead [ 543.376529][T18558] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6396'. [ 543.588005][T18564] autofs4:pid:18564:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(31.1), cmd(0xc018937e) [ 543.640716][T18564] autofs4:pid:18564:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 543.814327][ T6516] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 544.045178][ T6516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 544.074052][ T6516] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 544.085170][ T6516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.102455][T18582] loop5: detected capacity change from 0 to 256 [ 544.132879][ T6516] usb 2-1: config 0 descriptor?? [ 544.176349][ T6516] usb 2-1: Found UVC 0.00 device (10c4:ea90) [ 544.183481][ T6516] usb 2-1: No valid video chain found. [ 544.202343][T18582] FAT-fs (loop5): Directory bread(block 64) failed [ 544.253865][T18582] FAT-fs (loop5): Directory bread(block 65) failed [ 544.260947][T18582] FAT-fs (loop5): Directory bread(block 66) failed [ 544.336725][T18582] FAT-fs (loop5): Directory bread(block 67) failed [ 544.343455][T18582] FAT-fs (loop5): Directory bread(block 68) failed [ 544.351175][T18588] loop2: detected capacity change from 0 to 8 [ 544.379111][T18588] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 544.382185][T18582] FAT-fs (loop5): Directory bread(block 69) failed [ 544.398281][ T6667] udevd[6667]: incorrect cramfs checksum on /dev/loop2 [ 544.413800][T18582] FAT-fs (loop5): Directory bread(block 70) failed [ 544.423099][T18588] cramfs: Error -3 while decompressing! [ 544.430060][T18582] FAT-fs (loop5): Directory bread(block 71) failed [ 544.441175][ T5294] usb 2-1: USB disconnect, device number 20 [ 544.444440][T18582] FAT-fs (loop5): Directory bread(block 72) failed [ 544.469886][T18588] cramfs: ffffffff96d761a8(1306)->ffff88804e47b000(4096) [ 544.486072][T18582] FAT-fs (loop5): Directory bread(block 73) failed [ 544.497705][T18592] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 544.504206][T18588] cramfs: bad data blocksize 3221485966 [ 544.524028][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.544246][T18588] cramfs: Error -3 while decompressing! [ 544.575744][T18588] cramfs: ffffffff96d761a8(1306)->ffff88804e47b000(4096) [ 544.603749][T18592] CIFS mount error: No usable UNC path provided in device string! [ 544.603749][T18592] [ 544.625196][T18592] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 544.999616][T18600] loop2: detected capacity change from 0 to 764 [ 545.064064][T18600] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 545.357586][T18614] loop2: detected capacity change from 0 to 2048 [ 545.395523][T18614] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 545.532720][T18618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.074327][T18642] netlink: 'syz.1.6432': attribute type 1 has an invalid length. [ 546.155380][T18642] netlink: 'syz.1.6432': attribute type 2 has an invalid length. [ 546.990571][T18676] loop2: detected capacity change from 0 to 164 [ 547.104619][T18676] ISOFS: unable to read i-node block [ 547.110119][T18676] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 547.216142][T18683] loop0: detected capacity change from 0 to 512 [ 547.278782][T18676] ISOFS: unable to read i-node block [ 547.294079][T18683] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 547.379479][T18683] EXT4-fs (loop0): 1 truncate cleaned up [ 547.399857][T18683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 547.507862][T18693] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6458'. [ 547.627227][T18683] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.6454: invalid indirect mapped block 4294901760 (level 0) [ 547.720575][T18683] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.6454: invalid indirect mapped block 4294967295 (level 1) [ 547.782825][T18683] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.6454: invalid indirect mapped block 65535 (level 2) [ 548.009031][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 548.326358][T18707] loop4: detected capacity change from 0 to 4096 [ 548.368619][T18707] ntfs3: loop4: ino=3, Correct links count -> 2. [ 548.839769][T18729] loop5: detected capacity change from 0 to 256 [ 548.916190][T18733] loop2: detected capacity change from 0 to 256 [ 550.330296][T18776] loop1: detected capacity change from 0 to 256 [ 550.763094][T18785] loop5: detected capacity change from 0 to 1024 [ 550.835025][T18787] netlink: 'syz.1.6504': attribute type 21 has an invalid length. [ 550.869480][T18787] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6504'. [ 551.054710][ T52] hfsplus: b-tree write err: -5, ino 4 [ 551.187626][T18797] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6507'. [ 551.234093][T18799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6510'. [ 551.359436][T18805] loop0: detected capacity change from 0 to 256 [ 551.432237][T18807] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6514'. [ 551.469105][T18809] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6515'. [ 551.478505][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6514'. [ 551.495844][T18805] FAT-fs (loop0): Directory bread(block 64) failed [ 551.519203][T18809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6515'. [ 551.535377][T18805] FAT-fs (loop0): Directory bread(block 65) failed [ 551.554400][T18805] FAT-fs (loop0): Directory bread(block 66) failed [ 551.579121][T18805] FAT-fs (loop0): Directory bread(block 67) failed [ 551.591415][T18813] loop2: detected capacity change from 0 to 512 [ 551.602093][T18805] FAT-fs (loop0): Directory bread(block 68) failed [ 551.610222][T18805] FAT-fs (loop0): Directory bread(block 69) failed [ 551.631528][T18813] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 551.646081][T18805] FAT-fs (loop0): Directory bread(block 70) failed [ 551.688223][T18805] FAT-fs (loop0): Directory bread(block 71) failed [ 551.702031][T18805] FAT-fs (loop0): Directory bread(block 72) failed [ 551.729491][T18805] FAT-fs (loop0): Directory bread(block 73) failed [ 551.730826][T18813] EXT4-fs (loop2): 1 truncate cleaned up [ 551.744541][T18813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 551.820998][T18813] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.6517: invalid indirect mapped block 4294901760 (level 0) [ 551.911558][T18813] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.6517: invalid indirect mapped block 4294967295 (level 1) [ 551.935838][T18813] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.6517: invalid indirect mapped block 65535 (level 2) [ 552.064778][T18819] xt_CT: No such helper "pptp" [ 552.169863][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 552.268025][T18830] snd_dummy snd_dummy.0: control 2:0:128:syz0:0 is already present [ 553.046974][T18864] cgroup: subsys name conflicts with all [ 553.099336][T18857] nvme_fabrics: missing parameter 'transport=%s' [ 553.134128][T18857] nvme_fabrics: missing parameter 'nqn=%s' [ 553.194323][ T953] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 553.246875][T18870] netlink: 'syz.2.6544': attribute type 4 has an invalid length. [ 553.406101][ T953] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 553.434578][ T953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.469645][ T953] usb 2-1: config 0 descriptor?? [ 553.492748][T18875] loop5: detected capacity change from 0 to 4096 [ 553.506256][ T953] cp210x 2-1:0.0: cp210x converter detected [ 553.626563][T18882] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 553.713128][ T953] usb 2-1: cp210x converter now attached to ttyUSB0 [ 553.920528][ T953] usb 2-1: USB disconnect, device number 21 [ 553.934558][ T953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 553.973666][ T953] cp210x 2-1:0.0: device disconnected [ 554.183960][ T5288] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 554.403612][T18902] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6560'. [ 554.406029][ T5288] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 554.450999][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.484691][ T5288] usb 1-1: config 0 descriptor?? [ 554.685359][T18910] netlink: 'syz.4.6564': attribute type 3 has an invalid length. [ 554.724746][ T5288] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 554.733514][ T5288] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 554.745400][T18910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6564'. [ 554.864101][ T5004] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 554.914861][T18918] netlink: 'syz.5.6567': attribute type 11 has an invalid length. [ 554.943855][ T5288] [drm:udl_init] *ERROR* Selecting channel failed [ 554.981667][ T5288] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 555.006812][ T5288] [drm] Initialized udl on minor 2 [ 555.046380][ T5288] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 555.077122][ T5288] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 555.077848][ T5004] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 555.109436][ T5288] usb 1-1: USB disconnect, device number 20 [ 555.120007][ T5004] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 555.130281][ T5300] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 555.152916][ T5004] usb 2-1: Product: syz [ 555.163296][ T5004] usb 2-1: SerialNumber: syz [ 555.177832][ T5300] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 555.187017][ T5004] usb 2-1: config 0 descriptor?? [ 555.215359][ T5300] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 555.364848][T18929] overlayfs: missing 'lowerdir' [ 555.410982][ T5004] hso 2-1:0.0: Failed to find BULK IN ep [ 555.511685][T18931] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 555.640183][ T5004] usb 2-1: USB disconnect, device number 22 [ 555.867647][T18945] loop2: detected capacity change from 0 to 128 [ 556.279111][T18959] loop4: detected capacity change from 0 to 64 [ 556.285925][T18955] loop0: detected capacity change from 0 to 1024 [ 556.381693][T18961] loop1: detected capacity change from 0 to 1024 [ 556.389339][T18955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 556.434767][T18961] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 556.571570][T18961] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 556.667099][T18961] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 556.695446][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 556.774622][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 556.869136][T18978] loop2: detected capacity change from 0 to 64 [ 556.942312][ T1205] block nbd1: Attempted send on invalid socket [ 556.949847][ T1205] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.974671][T18984] vxfs: unable to read disk superblock at 1 [ 556.986377][ T53] block nbd1: Attempted send on invalid socket [ 556.992689][ T53] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 557.055110][T18984] vxfs: unable to read disk superblock at 8 [ 557.061093][T18984] vxfs: can't find superblock. [ 557.214432][T18994] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6600'. [ 557.223587][T18994] netlink: 'syz.0.6600': attribute type 1 has an invalid length. [ 557.254173][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6600'. [ 557.702474][T19018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6614'. [ 557.740891][T19018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6614'. [ 557.764091][T19018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6614'. [ 557.824166][ T5288] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 557.869005][T19023] loop2: detected capacity change from 0 to 1024 [ 557.888154][T19024] loop5: detected capacity change from 0 to 256 [ 558.027289][ T5288] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 558.054833][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 558.070752][ T52] hfsplus: b-tree write err: -5, ino 4 [ 558.071493][T19028] loop0: detected capacity change from 0 to 64 [ 558.087069][T19024] FAT-fs (loop5): Directory bread(block 64) failed [ 558.121718][T19024] FAT-fs (loop5): Directory bread(block 65) failed [ 558.129336][ T5288] usb 5-1: SerialNumber: syz [ 558.149001][ T5288] usb 5-1: config 0 descriptor?? [ 558.184851][T19024] FAT-fs (loop5): Directory bread(block 66) failed [ 558.191484][T19024] FAT-fs (loop5): Directory bread(block 67) failed [ 558.238922][T19024] FAT-fs (loop5): Directory bread(block 68) failed [ 558.257032][T19024] FAT-fs (loop5): Directory bread(block 69) failed [ 558.274559][T19024] FAT-fs (loop5): Directory bread(block 70) failed [ 558.286519][T19024] FAT-fs (loop5): Directory bread(block 71) failed [ 558.305481][T19024] FAT-fs (loop5): Directory bread(block 72) failed [ 558.312545][T19024] FAT-fs (loop5): Directory bread(block 73) failed [ 558.536598][T19034] tipc: Can't bind to reserved service type 2 [ 558.603125][T19036] loop0: detected capacity change from 0 to 1024 [ 558.617624][ T5288] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 558.644878][ T5288] hackrf 5-1:0.0: Could not detect board [ 558.654714][T19036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.664743][ T5288] hackrf: probe of 5-1:0.0 failed with error -71 [ 558.678269][T19036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.696730][T19036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 558.719308][ T5288] usb 5-1: USB disconnect, device number 24 [ 558.736221][T19036] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 558.822615][T19036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 559.057474][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 559.101402][T19046] netlink: 'syz.1.6627': attribute type 5 has an invalid length. [ 559.124216][T19046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6627'. [ 559.339467][T19056] loop1: detected capacity change from 0 to 64 [ 559.374038][T19056] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 559.483177][ T6516] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 559.698833][ T6516] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 559.724134][ T6516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.732212][ T6516] usb 3-1: Product: syz [ 559.763962][ T6516] usb 3-1: Manufacturer: syz [ 559.768737][ T6516] usb 3-1: SerialNumber: syz [ 559.807308][ T6516] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 559.846267][ T6516] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 559.931404][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 559.954343][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 559.962630][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 559.972471][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 559.980523][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 559.989304][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 559.997388][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.005453][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.013051][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.018262][T19078] netlink: 'syz.0.6643': attribute type 2 has an invalid length. [ 560.021805][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.037477][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.049996][T19078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.072521][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.088551][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.096704][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.104816][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.112627][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.120910][ T5004] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 560.178394][ T5004] hid-generic C990:0003:007F.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 560.210753][ T26] audit: type=1326 audit(1756225734.401:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bdf8ebe9 code=0x7ffc0000 [ 560.283562][ T26] audit: type=1326 audit(1756225734.401:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7ff9bdf8ebe9 code=0x7ffc0000 [ 560.358317][ T5004] usb 3-1: USB disconnect, device number 14 [ 560.386866][ T26] audit: type=1326 audit(1756225734.401:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bdf8ebe9 code=0x7ffc0000 [ 560.410305][ T26] audit: type=1326 audit(1756225734.401:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.1.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bdf8ebe9 code=0x7ffc0000 [ 560.795867][T19085] fido_id[19085]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 560.934222][ T6516] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 560.941336][ T6516] ath9k_htc: Failed to initialize the device [ 560.984612][ T5004] usb 3-1: ath9k_htc: USB layer deinitialized [ 561.081631][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6657'. [ 561.099106][ T26] audit: type=1326 audit(1756225735.291:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.0.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 561.141920][T19107] netlink: zone id is out of range [ 561.154175][T19107] netlink: zone id is out of range [ 561.164098][ T26] audit: type=1326 audit(1756225735.321:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.0.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 561.198769][T19107] netlink: zone id is out of range [ 561.214012][T19107] netlink: zone id is out of range [ 561.224034][T19107] netlink: zone id is out of range [ 561.244138][T19107] netlink: zone id is out of range [ 561.253989][ T26] audit: type=1326 audit(1756225735.321:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.0.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 561.285938][T19107] netlink: zone id is out of range [ 561.304318][T19107] netlink: zone id is out of range [ 561.314046][T19107] netlink: zone id is out of range [ 561.367929][ T26] audit: type=1326 audit(1756225735.321:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.0.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 561.578700][T19125] loop1: detected capacity change from 0 to 764 [ 561.629274][T19125] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 561.931673][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6672'. [ 562.214638][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6677'. [ 562.235931][T19152] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6678'. [ 562.268723][ T26] audit: type=1326 audit(1756225736.461:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.5.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3638ebe9 code=0x7ffc0000 [ 562.380085][ T26] audit: type=1326 audit(1756225736.461:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.5.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3638ebe9 code=0x7ffc0000 [ 562.450254][T19158] loop2: detected capacity change from 0 to 64 [ 562.627801][T19163] loop4: detected capacity change from 0 to 2048 [ 562.667149][T19163] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 562.717070][T19163] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 562.758807][T19163] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 562.793073][T19168] libceph: resolve '. [ 562.793073][T19168] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 562.793073][T19168] ' (ret=-3): failed [ 562.801071][T19163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.031076][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.038743][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.324231][T19186] netlink: 'syz.2.6695': attribute type 12 has an invalid length. [ 563.806716][T19203] netlink: 'syz.4.6703': attribute type 1 has an invalid length. [ 563.850787][T19203] netlink: 'syz.4.6703': attribute type 2 has an invalid length. [ 563.879619][T19205] device geneve4 entered promiscuous mode [ 564.050147][T19209] loop2: detected capacity change from 0 to 256 [ 564.134593][T19209] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 564.265896][T19214] loop0: detected capacity change from 0 to 1764 [ 564.286401][T19189] loop1: detected capacity change from 0 to 32768 [ 564.338571][T19214] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 564.822072][T19232] loop1: detected capacity change from 0 to 256 [ 566.130850][T19271] loop4: detected capacity change from 0 to 1024 [ 566.690856][T19296] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6745'. [ 566.827780][T19299] loop1: detected capacity change from 0 to 128 [ 567.070523][T19310] loop4: detected capacity change from 0 to 512 [ 567.117252][T19310] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 567.194504][ T6516] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 567.232330][T19314] loop0: detected capacity change from 0 to 64 [ 567.289425][T19314] overlayfs: filesystem on './file0' not supported [ 567.384259][ T5294] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 567.396898][ T6516] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 567.424264][ T6516] usb 3-1: config 0 has no interface number 0 [ 567.443980][ T6516] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 567.484195][ T6516] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.535112][ T6516] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 567.574167][ T6516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.584099][ T5294] usb 2-1: Using ep0 maxpacket: 8 [ 567.593313][ T5294] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 567.597802][ T6516] usb 3-1: Product: syz [ 567.609303][ T6516] usb 3-1: Manufacturer: syz [ 567.615022][ T6516] usb 3-1: SerialNumber: syz [ 567.638560][ T6516] usb 3-1: config 0 descriptor?? [ 567.639661][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.664537][T19304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 567.675696][ T6516] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 567.692631][ T5294] usb 2-1: Product: syz [ 567.695227][ T6516] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 567.710235][ T5294] usb 2-1: Manufacturer: syz [ 567.724097][ T5294] usb 2-1: SerialNumber: syz [ 567.748539][ T5294] usb 2-1: config 0 descriptor?? [ 567.774841][T19326] loop5: detected capacity change from 0 to 512 [ 567.845251][T19326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 567.848893][T19328] loop4: detected capacity change from 0 to 512 [ 567.922772][ T5288] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 567.946725][T19326] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 567.956554][T19328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 567.978156][T19326] ext4 filesystem being mounted at /1068/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.989889][T19328] ext4 filesystem being mounted at /1358/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.068406][T19328] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.6763: corrupted xattr block 33 [ 568.124155][ T5288] usb 1-1: Using ep0 maxpacket: 8 [ 568.142164][ T5288] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 568.170690][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 568.182511][ T5294] usb 2-1: USB disconnect, device number 23 [ 568.189529][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.244006][ T5288] usb 1-1: Product: syz [ 568.248271][ T5288] usb 1-1: Manufacturer: syz [ 568.252901][ T5288] usb 1-1: SerialNumber: syz [ 568.262548][ T7318] EXT4-fs (loop5): unmounting filesystem. [ 568.303717][ T5288] usb 1-1: config 0 descriptor?? [ 568.315006][ T5288] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 568.334400][ T5300] usb 3-1: USB disconnect, device number 15 [ 568.376928][ T5300] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 568.409817][ T5300] cyberjack 3-1:0.69: device disconnected [ 568.527503][ T6667] udevd[6667]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.757339][ T5288] gspca_vc032x: reg_w err -71 [ 568.762159][ T5288] vc032x: probe of 1-1:0.0 failed with error -71 [ 568.799632][ T5288] usb 1-1: USB disconnect, device number 21 [ 569.421797][T19369] netlink: 'syz.1.6780': attribute type 1 has an invalid length. [ 569.706953][T19381] ieee802154 phy0 wpan0: encryption failed: -90 [ 570.315701][T19398] rdma_rxe: rxe creation allowed on top of a real device only [ 570.551882][T19406] netlink: 'syz.2.6798': attribute type 1 has an invalid length. [ 571.009356][T19416] loop0: detected capacity change from 0 to 1024 [ 571.070117][T19416] EXT4-fs: Ignoring removed orlov option [ 571.104396][T19416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 571.184835][T19416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 571.539912][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 571.583559][T19438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 571.625048][T19438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 571.654544][T19438] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 571.679272][T19438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 571.698079][T19438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 571.786912][T19440] device geneve2 entered promiscuous mode [ 571.796367][ T4342] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 571.912916][T19442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6812'. [ 572.152172][T19419] loop4: detected capacity change from 0 to 32768 [ 572.192526][T19450] loop0: detected capacity change from 0 to 256 [ 572.200479][T19419] XFS: ikeep mount option is deprecated. [ 572.217897][T19452] loop1: detected capacity change from 0 to 256 [ 572.260843][T19452] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 572.273704][T19450] FAT-fs (loop0): Directory bread(block 64) failed [ 572.278666][T19454] loop2: detected capacity change from 0 to 4096 [ 572.291262][T19450] FAT-fs (loop0): Directory bread(block 65) failed [ 572.294327][ T4342] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 572.323213][T19450] FAT-fs (loop0): Directory bread(block 66) failed [ 572.349483][T19419] XFS (loop4): Mounting V5 Filesystem [ 572.383295][T19450] FAT-fs (loop0): Directory bread(block 67) failed [ 572.450383][T19450] FAT-fs (loop0): Directory bread(block 68) failed [ 572.464717][T19454] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 572.485795][T19419] XFS (loop4): Ending clean mount [ 572.494409][T19450] FAT-fs (loop0): Directory bread(block 69) failed [ 572.501105][T19450] FAT-fs (loop0): Directory bread(block 70) failed [ 572.518690][T19419] XFS (loop4): Quotacheck needed: Please wait. [ 572.586440][T19464] loop5: detected capacity change from 0 to 2048 [ 572.599383][T19450] FAT-fs (loop0): Directory bread(block 71) failed [ 572.656997][T19466] loop1: detected capacity change from 0 to 1024 [ 572.662545][T19419] XFS (loop4): Quotacheck: Done. [ 572.670025][T19450] FAT-fs (loop0): Directory bread(block 72) failed [ 572.678679][T19464] loop5: p2 < > [ 572.742666][T19450] FAT-fs (loop0): Directory bread(block 73) failed [ 572.754962][T19466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 572.808628][T19466] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.1.6821: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 572.896807][T19466] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 572.900623][ T4267] XFS (loop4): Unmounting Filesystem [ 573.160140][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 573.216020][T19474] loop2: detected capacity change from 0 to 16 [ 573.304097][T19474] erofs: (device loop2): mounted with root inode @ nid 36. [ 573.350749][T19474] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 573.377600][T19476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 573.394372][T19474] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 573.402965][T19476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 573.426783][T19476] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 573.439622][T19476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 573.443383][T19474] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 573.481197][T19476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 573.483569][T19474] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 573.514771][T19474] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 573.778091][T19486] loop2: detected capacity change from 0 to 256 [ 574.037124][T19494] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6834'. [ 574.175185][T19499] loop0: detected capacity change from 0 to 1024 [ 574.242759][T19504] loop1: detected capacity change from 0 to 128 [ 574.260614][T19499] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 574.405829][T19499] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.0.6836: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 574.515296][T19499] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 574.714131][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 575.092201][T19534] bond0: Unable to set up delay as MII monitoring is disabled [ 575.449212][T19550] bond0: option all_slaves_active: invalid value (223) [ 575.745241][T19558] loop5: detected capacity change from 0 to 2048 [ 575.777555][T19558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.007436][T19610] loop2: detected capacity change from 0 to 164 [ 577.492797][T19588] loop0: detected capacity change from 0 to 40427 [ 577.519122][T19588] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 577.589591][T19588] F2FS-fs (loop0): invalid crc value [ 577.658357][T19588] F2FS-fs (loop0): Found nat_bits in checkpoint [ 577.797357][T19588] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 577.924757][ T6516] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 578.124734][ T6516] usb 2-1: Using ep0 maxpacket: 8 [ 578.132865][ T6516] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 578.179883][ T6516] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.205720][ T6516] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 578.263977][ T6516] usb 2-1: config 0 has no interface number 0 [ 578.285208][ T6516] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 578.368479][ T6516] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 578.403971][ T6516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.412315][ T6516] usb 2-1: Product: syz [ 578.442798][ T6516] usb 2-1: Manufacturer: syz [ 578.464057][ T6516] usb 2-1: SerialNumber: syz [ 578.504998][ T6516] usb 2-1: config 0 descriptor?? [ 578.541147][ T6516] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 578.722360][ T2310] pvrusb2: Invalid write control endpoint [ 578.759699][ T6516] usb 2-1: USB disconnect, device number 24 [ 578.782530][ T2310] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 578.864248][ T2310] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 579.409743][T19678] loop1: detected capacity change from 0 to 512 [ 579.449337][T19681] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 579.489333][T19676] loop5: detected capacity change from 0 to 4096 [ 579.507337][T19678] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.6923: casefold flag without casefold feature [ 579.644497][T19676] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 579.656554][T19678] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.6923: couldn't read orphan inode 15 (err -117) [ 579.694353][T19678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 579.740074][T19676] ntfs3: loop5: Failed to load $Extend. [ 579.935617][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 580.227192][T19702] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6932'. [ 580.415404][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6937'. [ 580.455319][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6937'. [ 580.597707][T19715] loop4: detected capacity change from 0 to 1024 [ 580.990278][T19732] ieee802154 phy0 wpan0: encryption failed: -90 [ 581.349248][T19743] loop5: detected capacity change from 0 to 2048 [ 581.385127][T19743] NILFS (loop5): unrecognized mount option "cp=0x" [ 581.419696][T19750] loop1: detected capacity change from 0 to 1024 [ 581.560138][T19752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6958'. [ 581.956945][T19770] program syz.1.6967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.649309][T19800] loop5: detected capacity change from 0 to 512 [ 582.726325][T19800] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 582.790073][T19800] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6981: bg 0: block 384: padding at end of block bitmap is not set [ 582.836180][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 582.843028][T19800] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 582.945732][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 582.952362][T19800] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.6981: attempt to clear invalid blocks 983260 len 1 [ 583.058694][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 583.103180][T19800] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.6981: Invalid inode table block 0 in block_group 0 [ 583.188391][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 583.214107][T19800] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 583.240061][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 583.249054][T19816] loop1: detected capacity change from 0 to 4096 [ 583.264061][T19800] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 583.293756][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 583.311185][T19800] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.6981: Invalid inode table block 0 in block_group 0 [ 583.326013][T19816] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 583.345091][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 583.364044][T19800] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 583.404955][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 583.452842][T19800] EXT4-fs error (device loop5): ext4_truncate:4312: inode #11: comm syz.5.6981: mark_inode_dirty error [ 583.462239][T19816] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 583.495244][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 583.503613][T19816] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 583.513594][T19800] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 583.531031][T19816] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 583.554717][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 583.561352][T19800] EXT4-fs (loop5): 1 truncate cleaned up [ 583.624057][T19800] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 583.703528][T19800] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.6981: Invalid inode table block 0 in block_group 0 [ 583.784525][T19800] EXT4-fs (loop5): Remounting filesystem read-only [ 583.943250][ T7318] EXT4-fs (loop5): unmounting filesystem. [ 584.113060][T19840] netlink: 'syz.5.6999': attribute type 1 has an invalid length. [ 584.797863][T19866] program syz.1.7012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.208901][T19871] loop0: detected capacity change from 0 to 4096 [ 585.223135][T19881] loop4: detected capacity change from 0 to 1024 [ 585.410356][T19871] ntfs3: loop0: ino=5, "/" attr_set_size [ 585.448003][ T51] hfsplus: b-tree write err: -5, ino 4 [ 585.463802][T19884] loop2: detected capacity change from 0 to 4096 [ 585.469312][T19871] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 585.593833][T19884] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 585.623436][T19889] loop1: detected capacity change from 0 to 1024 [ 585.662890][T19884] ntfs3: loop2: Failed to load $Extend. [ 586.094077][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7030'. [ 586.154351][T19901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7030'. [ 586.557204][T19914] SET target dimension over the limit! [ 586.691706][T19919] loop2: detected capacity change from 0 to 1024 [ 587.053614][T19927] loop1: detected capacity change from 0 to 4096 [ 587.096002][T19927] __ntfs_error: 3 callbacks suppressed [ 587.096024][T19927] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 587.162631][T19927] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 587.194912][T19927] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 587.226253][T19927] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 587.258400][T19937] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 587.264076][ T14] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 587.295745][T19927] ntfs: volume version 3.1. [ 587.464059][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 587.470473][T19941] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.472722][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.520130][ T14] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 587.546805][ T14] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 587.574079][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.602650][ T14] usb 3-1: Product: syz [ 587.617552][ T14] usb 3-1: Manufacturer: syz [ 587.622230][ T14] usb 3-1: SerialNumber: syz [ 587.654880][ T14] r8152-cfgselector 3-1: config 0 descriptor?? [ 587.889007][ T14] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 587.906604][T19955] netlink: 'syz.1.7057': attribute type 15 has an invalid length. [ 588.038521][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7058'. [ 588.110199][ T14] usb 3-1: USB disconnect, device number 16 [ 588.786334][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7071'. [ 589.071373][T19995] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 589.071373][T19995] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 589.556599][T20011] loop2: detected capacity change from 0 to 512 [ 589.688061][T20011] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 589.734771][T20011] ext4 filesystem being mounted at /1461/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.767312][T20026] net_ratelimit: 320 callbacks suppressed [ 589.767334][T20026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.945720][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 590.441783][T20065] netlink: 'syz.5.7102': attribute type 5 has an invalid length. [ 591.036474][T20091] openvswitch: netlink: Key type 29 is not supported [ 591.119900][T20095] loop1: detected capacity change from 0 to 8 [ 591.208342][T20095] SQUASHFS error: Failed to read block 0x738: -5 [ 591.233981][T20095] SQUASHFS error: Unable to read metadata cache entry [736] [ 591.845532][T20054] loop0: detected capacity change from 0 to 32768 [ 591.933608][T20054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.7096 (20054) [ 592.194070][T20054] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 592.250964][T20054] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 592.263510][T20139] autofs4:pid:20139:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 592.341409][T20054] BTRFS info (device loop0): using free space tree [ 592.357680][T20139] autofs4:pid:20139:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 592.612018][T20054] BTRFS info (device loop0): enabling ssd optimizations [ 592.624125][ T5294] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 592.768294][ T4265] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 592.816783][ T5294] usb 5-1: Using ep0 maxpacket: 16 [ 592.826009][ T5294] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 592.885595][ T5294] usb 5-1: config 254 has no interface number 0 [ 592.909857][ T5294] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 592.944032][ T5294] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 592.988679][ T5294] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 593.029651][ T5294] usb 5-1: config 254 interface 235 has no altsetting 0 [ 593.061005][ T5294] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 593.091649][T20198] loop2: detected capacity change from 0 to 736 [ 593.092168][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 593.134009][ T5294] usb 5-1: Product: syz [ 593.160857][ T5294] usb 5-1: Manufacturer: syz [ 593.187636][ T5294] usb 5-1: SerialNumber: syz [ 593.241929][T20145] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 593.381643][T20198] rock: directory entry would overflow storage [ 593.393689][T20198] rock: sig=0x3b10, size=4, remaining=3 [ 593.431170][T20215] xt_HMARK: spi-set and port-set can't be combined [ 593.465338][ T5294] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 593.474016][ T5294] usbtest: probe of 5-1:254.235 failed with error -71 [ 593.519423][ T5294] usb 5-1: USB disconnect, device number 25 [ 593.959223][T20239] xt_CT: No such helper "pptp" [ 594.216366][T20257] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7150'. [ 594.248545][T20257] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7150'. [ 594.268095][T20260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.284133][T20257] device vlan0 entered promiscuous mode [ 595.212729][T20256] loop5: detected capacity change from 0 to 32768 [ 595.274227][T20313] netlink: 'syz.2.7169': attribute type 4 has an invalid length. [ 595.302870][T20317] netlink: 'syz.4.7168': attribute type 3 has an invalid length. [ 595.316779][T20256] XFS (loop5): Mounting V5 Filesystem [ 595.353720][T20317] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7168'. [ 595.598603][T20256] XFS (loop5): Ending clean mount [ 595.644427][T20256] XFS (loop5): Quotacheck needed: Please wait. [ 595.730996][T20340] loop2: detected capacity change from 0 to 1024 [ 595.798828][T20256] XFS (loop5): Quotacheck: Done. [ 595.829923][T20340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 595.979494][ T7318] XFS (loop5): Unmounting Filesystem [ 595.997941][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 596.718975][T20385] loop4: detected capacity change from 0 to 2048 [ 596.774852][T20385] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 596.815313][T20385] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 596.852418][T20385] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 596.861902][T20393] device veth1_macvtap left promiscuous mode [ 596.895240][T20385] UDF-fs: Scanning with blocksize 512 failed [ 596.945949][T20385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 597.093589][T20361] loop2: detected capacity change from 0 to 32768 [ 597.205772][T20361] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 597.260415][T20361] (syz.2.7181,20361,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=0, inode=0, rec_len=49, name_len=1 [ 597.294519][T20361] (syz.2.7181,20361,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 597.384308][T20361] (syz.2.7181,20361,0):ocfs2_symlink:1864 ERROR: status = -2 [ 597.415331][T20361] (syz.2.7181,20361,0):ocfs2_symlink:2065 ERROR: status = -2 [ 597.601884][ T4264] ocfs2: Unmounting device (7,2) on (node local) [ 597.764026][T20432] IPVS: length: 139 != 8 [ 598.190370][T20458] loop4: detected capacity change from 0 to 512 [ 598.238884][T20458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 598.265706][T20458] ext4 filesystem being mounted at /1452/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 598.334036][T20458] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 598.425403][T20458] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 598.444699][T20458] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.7206: Failed to acquire dquot type 0 [ 598.667307][T20483] loop5: detected capacity change from 0 to 2048 [ 598.675330][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 598.767080][T20483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.809516][T20483] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag e01 [ 598.822888][T20496] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 599.330177][T20525] netlink: 'syz.5.7227': attribute type 13 has an invalid length. [ 599.364358][T20525] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7227'. [ 599.386412][T20525] syz_tun: refused to change device tx_queue_len [ 599.415653][T20525] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 599.449373][T20531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7228'. [ 599.630352][T20536] loop0: detected capacity change from 0 to 4096 [ 599.700152][T20544] loop4: detected capacity change from 0 to 512 [ 599.707544][T20536] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 599.771479][T20544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 599.874965][T20544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 599.917173][T20544] ext4 filesystem being mounted at /1456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.002089][T20564] netlink: 'syz.2.7238': attribute type 1 has an invalid length. [ 600.011255][T20564] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.7238'. [ 600.176556][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 600.835224][T20598] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7248'. [ 600.874199][T20598] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7248'. [ 601.093805][T20570] loop1: detected capacity change from 0 to 32768 [ 601.132693][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7251'. [ 601.132740][T20611] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7251'. [ 601.132761][T20611] netlink: 'syz.0.7251': attribute type 1 has an invalid length. [ 601.140544][T20570] (syz.1.7240,20570,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 601.152753][T20570] (syz.1.7240,20570,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 601.267905][T20570] JBD2: Ignoring recovery information on journal [ 601.321256][T20572] loop2: detected capacity change from 0 to 32768 [ 601.335542][T20570] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 601.573239][T20632] loop0: detected capacity change from 0 to 256 [ 601.647712][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.647864][T20632] FAT-fs (loop0): Filesystem has been set read-only [ 601.648000][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.648026][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.648056][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.648117][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.648143][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.648170][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.648662][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.648749][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.648834][T20632] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 601.650961][ T26] audit: type=1800 audit(1756225775.841:1660): pid=20632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7258" name="file1" dev="loop0" ino=1048775 res=0 errno=0 [ 602.076206][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 602.446724][T20664] loop4: detected capacity change from 0 to 256 [ 602.798259][T20685] QAT: Invalid ioctl 1075883590 [ 602.837034][T20691] netlink: 'syz.5.7274': attribute type 11 has an invalid length. [ 602.840955][T20685] QAT: Invalid ioctl 1075883590 [ 602.887770][T20685] QAT: Invalid ioctl 1075883590 [ 602.899574][T20685] QAT: Invalid ioctl 1075883590 [ 602.936717][T20685] QAT: Invalid ioctl 1075883590 [ 602.950947][T20685] QAT: Invalid ioctl 1075883590 [ 603.004046][T20685] QAT: Invalid ioctl 1075883590 [ 603.009108][T20685] QAT: Invalid ioctl 1075883590 [ 603.045212][T20685] QAT: Invalid ioctl 1075883590 [ 603.081119][T20687] xt_CT: No such helper "pptp" [ 603.085264][T20685] QAT: Invalid ioctl 1075883590 [ 603.104705][T20702] IPv6: NLM_F_CREATE should be specified when creating new route [ 603.330768][T20718] netlink: 'syz.1.7281': attribute type 1 has an invalid length. [ 603.561784][T20729] loop0: detected capacity change from 0 to 1024 [ 603.599914][T20733] loop1: detected capacity change from 0 to 764 [ 603.826182][ T9] hfsplus: b-tree write err: -5, ino 4 [ 603.974132][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 603.984264][T20755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7293'. [ 604.283061][T20772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7299'. [ 604.433305][T20780] loop5: detected capacity change from 0 to 64 [ 604.634240][T20788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7304'. [ 604.957245][T20806] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 605.007369][T20759] loop1: detected capacity change from 0 to 32768 [ 605.154141][T20759] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 605.168584][T20759] XFS (loop1): Mounting V5 Filesystem [ 605.233548][T20824] i2c i2c-0: Invalid block write size 34 [ 605.281328][T20829] loop0: detected capacity change from 0 to 1024 [ 605.355334][T20759] XFS (loop1): Ending clean mount [ 605.440116][T20759] XFS (loop1): Quotacheck needed: Please wait. [ 605.614004][T20759] XFS (loop1): Quotacheck: Done. [ 605.675956][T20849] loop4: detected capacity change from 0 to 256 [ 605.781621][T20849] loop4: Can't mount, would change RO state [ 605.807895][ T4266] XFS (loop1): Unmounting Filesystem [ 606.398428][T20885] loop5: detected capacity change from 0 to 1024 [ 606.615046][T20896] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7323'. [ 606.721037][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7333'. [ 607.144274][T20914] loop4: detected capacity change from 0 to 1764 [ 607.186535][T20917] device geneve2 entered promiscuous mode [ 607.192655][T20917] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 607.208930][T20881] loop2: detected capacity change from 0 to 32768 [ 607.218044][T20914] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 607.238509][T20881] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 607.267154][T20924] netlink: 192 bytes leftover after parsing attributes in process `syz.5.7340'. [ 607.397793][T20889] loop0: detected capacity change from 0 to 32768 [ 607.567842][T20889] XFS (loop0): Mounting V5 Filesystem [ 607.689708][ T6667] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 607.723634][T20947] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 607.735953][T20889] XFS (loop0): Ending clean mount [ 607.764358][T20889] XFS (loop0): Quotacheck needed: Please wait. [ 607.865865][T20889] XFS (loop0): Quotacheck: Done. [ 608.045278][ T4265] XFS (loop0): Unmounting Filesystem [ 608.451335][T21013] loop1: detected capacity change from 0 to 2048 [ 608.458456][T21015] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7356'. [ 608.492536][T21013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.094091][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 610.075835][T21105] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 610.113975][T21105] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 610.149527][T21105] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 610.171455][T21105] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 610.196587][T21105] device geneve3 entered promiscuous mode [ 610.222556][T21105] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 610.251045][T21105] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 610.279538][T21105] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 610.298821][T21105] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 610.445677][T21107] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 610.634470][T21125] Timeout policy `syz1' can only be used by L3 protocol number 37632 [ 610.751842][T21101] loop4: detected capacity change from 0 to 32768 [ 610.861921][T21101] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 611.100093][ T4267] ocfs2: Unmounting device (7,4) on (node local) [ 611.482396][T21176] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 612.064503][T21207] ieee802154 phy0 wpan0: encryption failed: -22 [ 612.658975][T21247] loop2: detected capacity change from 0 to 256 [ 613.183030][T21283] loop0: detected capacity change from 0 to 16 [ 613.227782][T21283] erofs: (device loop0): mounted with root inode @ nid 36. [ 613.269593][T21283] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 9895604650073 [ 613.311147][ T4288] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[8192] [ 613.322414][T21283] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[4096] [ 613.356408][ T26] audit: type=1800 audit(1756225787.551:1661): pid=21283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7436" name="file3" dev="loop0" ino=9895604650073 res=0 errno=0 [ 613.377153][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.182081][T21281] loop2: detected capacity change from 0 to 32768 [ 614.214956][T21281] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 614.523030][T21354] xt_l2tp: v2 sid > 0xffff: 262144 [ 614.631860][ T26] audit: type=1326 audit(1756225788.821:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21358 comm="syz.0.7462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 614.668157][ T6667] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 614.715160][ T26] audit: type=1326 audit(1756225788.851:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21358 comm="syz.0.7462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 614.798786][ T26] audit: type=1326 audit(1756225788.851:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21358 comm="syz.0.7462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 614.913759][ T26] audit: type=1326 audit(1756225788.851:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21358 comm="syz.0.7462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 614.997851][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7466'. [ 615.104012][ T5300] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 615.304136][ T5300] usb 3-1: Using ep0 maxpacket: 8 [ 615.311262][ T5300] usb 3-1: config 0 interface 0 has no altsetting 0 [ 615.339442][ T5300] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 615.375293][ T5300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.380287][T21403] loop0: detected capacity change from 0 to 256 [ 615.393741][ T5300] usb 3-1: Product: syz [ 615.404443][ T5300] usb 3-1: Manufacturer: syz [ 615.409148][ T5300] usb 3-1: SerialNumber: syz [ 615.433725][T21403] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 615.453767][ T5300] usb 3-1: config 0 descriptor?? [ 615.486416][ T5300] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 615.574462][ T4342] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 615.675980][ T5300] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 615.706625][ T5300] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 615.764131][ T4342] usb 6-1: Using ep0 maxpacket: 16 [ 615.780902][ T4342] usb 6-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 615.825339][ T4342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.843973][ T4342] usb 6-1: Product: syz [ 615.848308][ T4342] usb 6-1: Manufacturer: syz [ 615.853036][ T4342] usb 6-1: SerialNumber: syz [ 615.889245][ T4342] usb 6-1: config 0 descriptor?? [ 615.896722][ T5300] usb 3-1: USB disconnect, device number 17 [ 615.916379][ T4342] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 615.945323][ T4342] dvb-usb: bulk message failed: -22 (3/0) [ 615.949256][T21446] netlink: 'syz.4.7481': attribute type 10 has an invalid length. [ 615.973445][ T4342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 615.985890][T21446] team0: Device hsr_slave_0 failed to register rx_handler [ 615.994145][ T4342] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 616.004853][ T4342] usb 6-1: media controller created [ 616.023397][ T4342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.066766][ T4342] dvb-usb: bulk message failed: -22 (6/0) [ 616.073260][ T4342] dvb-usb: bulk message failed: -22 (6/0) [ 616.082059][ T4342] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 616.093468][ T4342] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 616.145043][ T4342] dvb-usb: schedule remote query interval to 150 msecs. [ 616.162703][ T4342] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 616.185233][ T4342] usb 6-1: USB disconnect, device number 14 [ 616.233956][ T5006] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 616.326060][ T4342] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 616.437719][ T5006] usb 1-1: Using ep0 maxpacket: 16 [ 616.451744][ T5006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 616.507350][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7486'. [ 616.515007][ T5006] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 616.542684][ T5006] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 616.588554][ T5006] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 616.629082][ T5006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.647837][ T5006] usb 1-1: Product: syz [ 616.657857][ T5006] usb 1-1: Manufacturer: syz [ 616.662524][ T5006] usb 1-1: SerialNumber: syz [ 616.710182][ T5006] usb 1-1: config 0 descriptor?? [ 616.735115][T21433] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 616.742464][T21433] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 616.770458][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 616.778080][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 616.787327][ T5006] port100 1-1:0.0: NFC: Could not get supported command types [ 617.002265][ T5006] usb 1-1: USB disconnect, device number 22 [ 618.064129][T21569] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7511'. [ 618.312068][T21542] loop4: detected capacity change from 0 to 32768 [ 618.400525][T21542] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 618.434873][T21542] XFS (loop4): Mounting V5 Filesystem [ 618.524202][T21542] XFS (loop4): Ending clean mount [ 618.564975][T21542] XFS (loop4): Quotacheck needed: Please wait. [ 618.582521][T21600] loop5: detected capacity change from 0 to 256 [ 618.690532][T21600] FAT-fs (loop5): Directory bread(block 64) failed [ 618.693981][T21542] XFS (loop4): Quotacheck: Done. [ 618.745656][T21600] FAT-fs (loop5): Directory bread(block 65) failed [ 618.794128][T21600] FAT-fs (loop5): Directory bread(block 66) failed [ 618.800738][T21600] FAT-fs (loop5): Directory bread(block 67) failed [ 618.824592][T21613] netlink: 'syz.0.7521': attribute type 10 has an invalid length. [ 618.875488][T21600] FAT-fs (loop5): Directory bread(block 68) failed [ 618.882136][T21600] FAT-fs (loop5): Directory bread(block 69) failed [ 618.923344][ T4267] XFS (loop4): Unmounting Filesystem [ 618.929356][T21600] FAT-fs (loop5): Directory bread(block 70) failed [ 618.958586][T21600] FAT-fs (loop5): Directory bread(block 71) failed [ 618.990052][T21600] FAT-fs (loop5): Directory bread(block 72) failed [ 619.012599][T21613] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.019534][T21600] FAT-fs (loop5): Directory bread(block 73) failed [ 619.109867][T21613] bond0: (slave team0): Enslaving as an active interface with an up link [ 619.659929][T21640] loop5: detected capacity change from 0 to 4096 [ 620.320693][T21628] loop2: detected capacity change from 0 to 32768 [ 620.475473][T21628] CIFS mount error: No usable UNC path provided in device string! [ 620.475473][T21628] [ 620.526477][T21628] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 620.696365][T21686] loop5: detected capacity change from 0 to 16 [ 620.734233][T21686] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 620.805677][T21692] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7544'. [ 620.823991][T21692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7544'. [ 620.889562][T21651] loop4: detected capacity change from 0 to 32768 [ 621.017510][T21651] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 621.048402][T21707] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7546'. [ 621.120604][T21708] netlink: 'syz.1.7548': attribute type 3 has an invalid length. [ 621.142425][T21708] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7548'. [ 621.223684][ T4267] ocfs2: Unmounting device (7,4) on (node local) [ 621.448925][T21727] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 621.474189][ T4342] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 621.665973][ T4342] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.688521][T21741] binder: BC_ATTEMPT_ACQUIRE not supported [ 621.697293][ T4342] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 621.714271][T21741] binder: 21738:21741 ioctl c0306201 2000000003c0 returned -22 [ 621.749092][ T4342] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 621.834640][ T4342] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 621.874507][ T4342] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 621.904904][T21753] loop1: detected capacity change from 0 to 24 [ 621.934115][ T4342] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.980556][ T4342] usb 6-1: config 1 interface 1 has no altsetting 0 [ 622.028046][ T4342] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.063737][ T4342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.094579][ T4342] usb 6-1: Product: syz [ 622.103069][ T4342] usb 6-1: Manufacturer: syz [ 622.124619][ T4342] usb 6-1: SerialNumber: syz [ 622.155168][T21712] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 622.585577][ T4342] usb 6-1: USB disconnect, device number 15 [ 622.675651][T21804] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7574'. [ 623.046289][T21824] loop4: detected capacity change from 0 to 1024 [ 623.148095][T21831] loop1: detected capacity change from 0 to 256 [ 623.206684][T21831] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 623.292529][ T9064] hfsplus: b-tree write err: -5, ino 4 [ 623.315942][T21831] fuse: Bad value for 'fd' [ 623.566661][T21854] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 623.719231][T21863] loop4: detected capacity change from 0 to 64 [ 624.011653][T21883] netlink: 'syz.2.7596': attribute type 3 has an invalid length. [ 624.065070][T21883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.077563][T21888] overlayfs: bad mount option "redirect_dir=on:/" [ 624.347122][T21899] loop2: detected capacity change from 0 to 512 [ 624.458102][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.464523][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.210039][T21948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7616'. [ 625.334568][T21953] loop5: detected capacity change from 0 to 512 [ 625.341876][T21953] EXT4-fs: Ignoring removed i_version option [ 625.384101][T21953] EXT4-fs: Ignoring removed mblk_io_submit option [ 625.433250][T21906] loop1: detected capacity change from 0 to 32768 [ 625.475324][T21906] JBD2: Ignoring recovery information on journal [ 625.525195][T21953] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.7617: inode #13: comm syz.5.7617: iget: illegal inode # [ 625.602556][T21906] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 625.619186][T21953] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.7617: couldn't read orphan inode 13 (err -117) [ 625.652621][T21973] netlink: 'syz.0.7623': attribute type 27 has an invalid length. [ 625.661401][T21973] netlink: 'syz.0.7623': attribute type 3 has an invalid length. [ 625.676283][T21973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7623'. [ 625.710432][T21953] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 625.739712][T21906] (syz.1.7603,21906,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22 [ 625.803207][T21906] ocfs2: Unmounting device (7,1) on (node local) [ 625.972096][ T7318] EXT4-fs (loop5): unmounting filesystem. [ 625.985916][T21982] loop4: detected capacity change from 0 to 8 [ 626.143373][T21982] SQUASHFS error: Unable to read directory block [629:26] [ 626.361880][T21993] loop0: detected capacity change from 0 to 4096 [ 626.440013][T21993] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 626.482774][T21993] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 626.538693][T21993] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 626.614236][T21993] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 626.664669][T21993] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 626.691533][T22006] loop5: detected capacity change from 0 to 4096 [ 626.734258][T22006] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 626.744098][T21993] ntfs: volume version 3.1. [ 626.750479][T21993] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 626.843457][T21993] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 626.867819][T22006] ntfs3: loop5: failed to convert "c46c" to iso8859-5 [ 626.934328][T21993] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 626.978458][T21993] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 627.034307][T21993] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 627.577659][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7643'. [ 627.623406][T22009] loop4: detected capacity change from 0 to 32768 [ 627.768652][T22009] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 627.768652][T22009] [ 627.798553][T22009] ERROR: (device loop4): remounting filesystem as read-only [ 627.824255][T22009] ERROR: (device loop4): jfs_rename: [ 627.824255][T22009] [ 628.109616][ T4267] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 628.109616][ T4267] [ 628.530363][T22094] loop1: detected capacity change from 0 to 4096 [ 628.597478][T22094] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 628.933533][ T1205] block nbd5: Attempted send on invalid socket [ 628.940318][ T1205] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 629.190209][T22131] loop4: detected capacity change from 0 to 1764 [ 629.271290][T22131] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 629.455679][T22150] SET target dimension over the limit! [ 629.557722][T22158] loop4: detected capacity change from 0 to 512 [ 629.636535][T22158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 629.653827][T22158] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 629.702412][T22158] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 629.711741][T22158] EXT4-fs (loop4): orphan cleanup on readonly fs [ 629.718909][T22158] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 629.733690][T22158] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 629.741599][T22158] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.7676: bg 0: block 40: padding at end of block bitmap is not set [ 629.766634][T22158] EXT4-fs (loop4): Remounting filesystem read-only [ 629.773326][T22158] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 629.790343][T22158] EXT4-fs (loop4): Remounting filesystem read-only [ 629.797952][T22158] EXT4-fs (loop4): 1 truncate cleaned up [ 629.803985][T22158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 629.828181][T22158] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.7676: bad symlink. [ 629.918673][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 630.018860][T22183] loop2: detected capacity change from 0 to 128 [ 630.080146][T22183] EXT4-fs (loop2): Test dummy encryption mode enabled [ 630.129563][T22171] loop5: detected capacity change from 0 to 8192 [ 630.137659][T22183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 630.164349][T22183] ext4 filesystem being mounted at /1589/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 630.209326][T22171] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 630.268649][T22176] loop1: detected capacity change from 0 to 8192 [ 630.279202][T22171] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 630.289646][T22171] REISERFS (device loop5): using ordered data mode [ 630.296563][T22171] reiserfs: using flush barriers [ 630.301918][T22176] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 630.321439][T22171] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 630.384969][T22176] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 630.425424][T22176] FAT-fs (loop1): Filesystem has been set read-only [ 630.445311][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 630.522386][T22171] REISERFS (device loop5): checking transaction log (loop5) [ 630.576161][T22171] REISERFS (device loop5): Using rupasov hash to sort names [ 630.624388][T22171] REISERFS (device loop5): using 3.5.x disk format [ 630.631252][T22171] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 630.675782][ T4266] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 630.680192][T22171] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 630.732686][T22171] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 630.782669][T22171] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 630.885991][T22171] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 630.944061][T22171] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 630.951417][T22223] netlink: 'syz.0.7693': attribute type 2 has an invalid length. [ 631.001678][T22223] netlink: 'syz.0.7693': attribute type 8 has an invalid length. [ 631.024129][T22171] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 631.039827][T22224] loop2: detected capacity change from 0 to 2048 [ 631.060418][T22223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7693'. [ 631.083667][T22216] loop1: detected capacity change from 0 to 4096 [ 631.135476][T22216] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 631.174140][T22231] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 631.270164][T22224] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 631.284901][T22216] ntfs3: loop1: no free space to extend mft [ 631.369240][T22224] Remounting filesystem read-only [ 631.398274][T22224] NILFS (loop2): error -2 truncating bmap (ino=16) [ 631.656108][ T4264] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 631.668488][T22237] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7699'. [ 631.885203][T22252] comedi comedi0: rti800: I/O port conflict (0xffffffff80000000,16) [ 632.121371][T22264] loop0: detected capacity change from 0 to 256 [ 632.155604][T22264] exFAT-fs (loop0): bogus sector size bits : 0 [ 632.194911][T22264] exFAT-fs (loop0): failed to read boot sector [ 632.254138][T22264] exFAT-fs (loop0): failed to recognize exfat type [ 632.313832][T22264] exFAT-fs (loop0): bogus sector size bits : 0 [ 632.335315][T22264] exFAT-fs (loop0): failed to read boot sector [ 632.368702][T22264] exFAT-fs (loop0): failed to recognize exfat type [ 632.654295][T22296] xt_ecn: cannot match TCP bits for non-tcp packets [ 632.926713][T22305] loop1: detected capacity change from 0 to 764 [ 632.981149][T22305] Symlink component flag not implemented [ 633.015483][T22305] Symlink component flag not implemented (116) [ 633.241536][T22311] device wlan0 entered promiscuous mode [ 634.024137][T22387] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7730'. [ 634.264534][ T4342] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 634.435647][T22331] loop2: detected capacity change from 0 to 32768 [ 634.464150][ T4342] usb 5-1: Using ep0 maxpacket: 32 [ 634.472678][ T4342] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 634.490095][T22331] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 634.490095][T22331] [ 634.517106][ T4342] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 634.527727][T22331] ERROR: (device loop2): remounting filesystem as read-only [ 634.542466][T22340] loop5: detected capacity change from 0 to 32768 [ 634.565229][T22331] ERROR: (device loop2): jfs_rename: [ 634.565229][T22331] [ 634.574958][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.584516][ T4342] usb 5-1: Product: syz [ 634.588746][ T4342] usb 5-1: Manufacturer: syz [ 634.593476][ T4342] usb 5-1: SerialNumber: syz [ 634.656539][ T4342] usb 5-1: config 0 descriptor?? [ 634.680163][T22381] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 634.680563][ T4264] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 634.680563][ T4264] [ 634.698138][ T4342] hub 5-1:0.0: bad descriptor, ignoring hub [ 634.698167][ T4342] hub: probe of 5-1:0.0 failed with error -5 [ 634.722540][ T4342] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 [ 634.982913][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 634.982931][ T26] audit: type=1326 audit(1756226038.130:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22422 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58ebe9 code=0x7ffc0000 [ 635.035419][T22381] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 635.042815][T22381] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 635.129562][T22381] vhci_hcd vhci_hcd.0: Device attached [ 635.158267][ T26] audit: type=1326 audit(1756226038.210:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22422 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f9abd58ebe9 code=0x7ffc0000 [ 635.245171][T22427] vhci_hcd: connection closed [ 635.248993][ T5300] usb 5-1: USB disconnect, device number 26 [ 635.250088][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 635.324466][ T5294] vhci_hcd: vhci_device speed not set [ 635.370847][ T4357] vhci_hcd: stop threads [ 635.394589][ T26] audit: type=1326 audit(1756226038.210:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22422 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58ebe9 code=0x7ffc0000 [ 635.418158][ T5294] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 635.426389][ T4357] vhci_hcd: release socket [ 635.464376][ T4357] vhci_hcd: disconnect device [ 635.515685][ T26] audit: type=1326 audit(1756226038.210:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22422 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9abd58ebe9 code=0x7ffc0000 [ 635.761072][T22451] loop5: detected capacity change from 0 to 4096 [ 635.780520][T22451] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 635.802821][T22462] loop1: detected capacity change from 0 to 1024 [ 636.015737][T22471] device hsr0 entered promiscuous mode [ 636.105359][T22471] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 636.247492][T22478] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7751'. [ 636.469563][ T4288] Bluetooth: hci2: unexpected event 0x3e length: 262 > 260 [ 636.469605][ T4288] Bluetooth: hci2: unexpected subevent 0x02 length: 261 > 260 [ 636.476391][T22492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.477881][ T4288] Bluetooth: hci2: Dropping invalid advertising data [ 636.503568][ T4288] Bluetooth: hci2: Malformed LE Event: 0x02 [ 636.661249][T22503] device wlan0 entered promiscuous mode [ 636.705746][T22507] loop5: detected capacity change from 0 to 128 [ 636.815131][T22507] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 636.834257][T22507] FAT-fs (loop5): Filesystem has been set read-only [ 637.316688][T22539] loop0: detected capacity change from 0 to 4096 [ 637.345952][T22544] netlink: 'syz.4.7770': attribute type 6 has an invalid length. [ 637.368860][T22539] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 637.456716][T22539] ntfs: volume version 3.1. [ 637.688714][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7773'. [ 638.288475][T22587] loop5: detected capacity change from 0 to 512 [ 638.388510][T22587] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 638.517749][T22587] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.7784: Invalid block bitmap block 0 in block_group 0 [ 638.588047][ T26] audit: type=1400 audit(1756226041.780:1670): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=22601 comm="syz.4.7788" [ 638.616978][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 638.653002][T22562] loop1: detected capacity change from 0 to 40427 [ 638.667725][T22587] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 638.684534][T22562] F2FS-fs (loop1): invalid crc value [ 638.698704][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 638.709499][T22587] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.7784: attempt to clear invalid blocks 983261 len 1 [ 638.744252][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 638.751632][T22587] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.7784: Invalid inode table block 0 in block_group 0 [ 638.769572][T22562] F2FS-fs (loop1): Found nat_bits in checkpoint [ 638.881280][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 638.898630][T22587] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 638.919371][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 638.934113][T22587] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 638.969164][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 638.989148][T22587] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.7784: Invalid inode table block 0 in block_group 0 [ 639.017617][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 639.032321][T22587] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 639.064181][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 639.085262][T22587] EXT4-fs error (device loop5): ext4_truncate:4312: inode #11: comm syz.5.7784: mark_inode_dirty error [ 639.114110][T22562] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 639.114304][T22616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7790'. [ 639.140088][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 639.169909][T22587] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 639.206202][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 639.244903][T22587] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.7784: Invalid inode table block 0 in block_group 0 [ 639.284208][T22587] EXT4-fs (loop5): Remounting filesystem read-only [ 639.301915][T22587] EXT4-fs (loop5): 1 truncate cleaned up [ 639.313751][T22587] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 639.327990][T22622] Error parsing options; rc = [-22] [ 639.559552][ T7318] EXT4-fs (loop5): unmounting filesystem. [ 639.658424][T22632] loop4: detected capacity change from 0 to 2048 [ 639.738502][T22632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 639.828285][ T2310] pvrusb2: request_firmware fatal error with code=-110 [ 639.878840][T22632] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 639.899295][ T2310] pvrusb2: Failure uploading firmware1 [ 639.918118][T22651] loop0: detected capacity change from 0 to 256 [ 639.918904][T22633] loop2: detected capacity change from 0 to 8192 [ 639.940254][ T2310] pvrusb2: Device initialization was not successful. [ 639.945356][T22651] exfat: Deprecated parameter 'namecase' [ 639.975162][T22651] exfat: Deprecated parameter 'namecase' [ 639.993909][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 640.002644][T22651] exfat: Deprecated parameter 'namecase' [ 640.030710][T22633] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 640.032162][T22651] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 640.055766][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 640.104387][ T6516] pvrusb2: Device being rendered inoperable [ 640.112360][T22633] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 640.141730][T22651] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 640.155702][T22633] REISERFS (device loop2): using ordered data mode [ 640.162554][T22633] reiserfs: using flush barriers [ 640.217982][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 640.265688][T22633] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 640.322444][T22633] REISERFS (device loop2): checking transaction log (loop2) [ 640.366412][T22633] REISERFS (device loop2): Using rupasov hash to sort names [ 640.405849][T22633] REISERFS (device loop2): using 3.5.x disk format [ 640.452370][T22633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 640.512704][T22633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 640.515040][T22677] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7803'. [ 640.545552][ T5294] vhci_hcd: vhci_device speed not set [ 640.562251][T22633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 640.604475][T22677] unsupported nlmsg_type 40 [ 640.655377][T22633] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 640.716106][T22633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 640.854187][T22633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 640.933989][T22633] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 641.449676][T22716] loop1: detected capacity change from 0 to 512 [ 641.524299][T22716] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 641.680349][T22716] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 642.058276][T22740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7822'. [ 642.302569][T22707] loop0: detected capacity change from 0 to 32768 [ 642.321311][T22707] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 642.710510][T22773] loop4: detected capacity change from 0 to 8 [ 642.725097][ T6667] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 642.785456][T22773] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 642.833637][T22773] cramfs: Error -3 while decompressing! [ 642.859990][T22773] cramfs: ffffffff96d721a8(26)->ffff88804f3d2000(4096) [ 642.901697][T22773] cramfs: Error -3 while decompressing! [ 642.918049][ T4277] udevd[4277]: incorrect cramfs checksum on /dev/loop4 [ 642.933598][T22773] cramfs: ffffffff96d721c2(26)->ffff888045a41000(4096) [ 642.968129][T22773] cramfs: Error -3 while decompressing! [ 643.002773][T22773] cramfs: ffffffff96d721dc(16)->ffff888046058000(4096) [ 643.025935][T22773] cramfs: Error -3 while decompressing! [ 643.031216][ T4277] udevd[4277]: incorrect cramfs checksum on /dev/loop4 [ 643.063008][T22773] cramfs: ffffffff96d721a8(26)->ffff88804f3d2000(4096) [ 643.104821][ T26] audit: type=1800 audit(1756226046.300:1671): pid=22773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7831" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 643.177697][ T26] audit: type=1326 audit(1756226046.350:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.7837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bdf8ebe9 code=0x7ffc0000 [ 643.206003][T22790] loop2: detected capacity change from 0 to 4096 [ 643.249112][T22790] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 643.260886][ T26] audit: type=1326 audit(1756226046.370:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.7837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7ff9bdf8ebe9 code=0x7ffc0000 [ 643.378332][ T26] audit: type=1326 audit(1756226046.370:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.7837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bdf8ebe9 code=0x7ffc0000 [ 643.442597][T22790] ntfs3: loop2: failed to convert "c46c" to iso8859-3 [ 643.505167][ T26] audit: type=1326 audit(1756226046.370:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.7837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9bdf8ebe9 code=0x7ffc0000 [ 643.993020][T22830] loop4: detected capacity change from 0 to 2048 [ 644.074328][T22830] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 644.164263][T22839] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 644.511808][T22812] loop1: detected capacity change from 0 to 32768 [ 644.610577][T22812] [ 644.610577][T22812] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 644.610577][T22812] [ 644.682898][T22812] [ 644.682898][T22812] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 644.682898][T22812] [ 644.731833][T22812] [ 644.731833][T22812] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 644.731833][T22812] [ 644.850877][ T107] [ 644.850877][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 644.850877][ T107] [ 644.961311][ T4266] [ 644.961311][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 644.961311][ T4266] [ 645.001761][ T4266] [ 645.001761][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 645.001761][ T4266] [ 645.019661][T22865] nvme_fabrics: missing parameter 'transport=%s' [ 645.019744][T22865] nvme_fabrics: missing parameter 'nqn=%s' [ 645.653252][T22912] loop4: detected capacity change from 0 to 1024 [ 645.704097][ T6516] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 645.856505][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 645.879331][T22920] loop2: detected capacity change from 0 to 4096 [ 645.894193][ T6516] usb 2-1: Using ep0 maxpacket: 32 [ 645.901369][ T6516] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 645.943412][T22920] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 645.956569][ T6516] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 645.994557][ T6516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.033780][ T6516] usb 2-1: Product: syz [ 646.054246][ T6516] usb 2-1: Manufacturer: syz [ 646.067982][ T6516] usb 2-1: SerialNumber: syz [ 646.097009][ T6516] usb 2-1: config 0 descriptor?? [ 646.103086][T22894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 646.155111][ T6516] hub 2-1:0.0: bad descriptor, ignoring hub [ 646.167680][ T6516] hub: probe of 2-1:0.0 failed with error -5 [ 646.176815][ T6516] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 646.237055][T22920] ntfs3: loop2: failed to convert "c46c" to cp855 [ 646.465313][T22894] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 646.472095][T22894] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 646.539086][T22956] xt_bpf: check failed: parse error [ 646.544223][T22894] vhci_hcd vhci_hcd.0: Device attached [ 646.635789][T22952] vhci_hcd: connection closed [ 646.638315][ T9064] vhci_hcd: stop threads [ 646.649750][ T5300] usb 2-1: USB disconnect, device number 25 [ 646.649796][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 646.678167][ T9064] vhci_hcd: release socket [ 646.724016][ T9064] vhci_hcd: disconnect device [ 646.744707][ T4342] vhci_hcd: vhci_device speed not set [ 646.876700][T22983] binder: 22982:22983 ioctl c018620c 0 returned -14 [ 647.421791][T23001] loop5: detected capacity change from 0 to 4096 [ 647.515413][T23001] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 647.683434][T23001] ntfs3: loop5: failed to convert "c46c" to cp855 [ 647.770879][T23029] loop1: detected capacity change from 0 to 64 [ 647.786877][T23032] netlink: 'syz.0.7903': attribute type 1 has an invalid length. [ 647.875355][T23029] hfs: request for non-existent node 16777216 in B*Tree [ 647.914626][T23029] hfs: request for non-existent node 16777216 in B*Tree [ 647.984244][T23029] hfs: request for non-existent node 16777216 in B*Tree [ 648.028874][T23029] hfs: request for non-existent node 16777216 in B*Tree [ 648.067908][T23029] hfs: request for non-existent node 16777216 in B*Tree [ 648.093995][T23029] hfs: request for non-existent node 16777216 in B*Tree [ 648.296595][T23053] loop5: detected capacity change from 0 to 1024 [ 648.350590][T23053] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 649.023734][T23091] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7920'. [ 649.641174][T23126] loop2: detected capacity change from 0 to 128 [ 649.750353][T23126] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 649.769823][T23126] ext4 filesystem being mounted at /1642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 649.962649][T23088] loop1: detected capacity change from 0 to 32768 [ 649.966951][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 650.082999][T23088] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 650.153698][T23088] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 650.596398][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 650.695015][T23174] vcan0 speed is unknown, defaulting to 1000 [ 650.979639][ T6516] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 651.164009][ T6516] usb 6-1: Using ep0 maxpacket: 16 [ 651.171466][ T6516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.204880][T23220] ax25_connect(): syz.1.7952 uses autobind, please contact jreuter@yaina.de [ 651.223626][ T6516] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 651.239132][ T6516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.272523][ T6516] usb 6-1: config 0 descriptor?? [ 651.294988][ T6516] xbox_remote_probe: Unexpected endpoint_in [ 651.318476][ T6516] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 651.512378][ T6516] usb 6-1: USB disconnect, device number 16 [ 652.203812][T23262] loop2: detected capacity change from 0 to 2048 [ 652.552044][T23183] syz.4.7949 (23183): drop_caches: 2 [ 652.586434][T23262] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 652.634061][T23262] ext4 filesystem being mounted at /1651/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.706196][T23284] misc userio: The device must be registered before sending interrupts [ 652.719541][T23262] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.7963: bg 0: block 345: padding at end of block bitmap is not set [ 652.804130][T23262] EXT4-fs (loop2): Remounting filesystem read-only [ 652.962129][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 652.975855][T23299] SET target dimension over the limit! [ 653.346663][ T26] audit: type=1326 audit(1756226056.540:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.0.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 653.415289][ T26] audit: type=1326 audit(1756226056.560:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.0.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 653.495298][ T26] audit: type=1326 audit(1756226056.560:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.0.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 653.520721][ T5288] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 653.574011][ T26] audit: type=1326 audit(1756226056.560:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.0.7981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ebf8ebe9 code=0x7ffc0000 [ 653.636342][T23343] loop4: detected capacity change from 0 to 1024 [ 653.663326][ T26] audit: type=1326 audit(1756226056.750:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.5.7984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3638ebe9 code=0x7ffc0000 [ 653.746710][ T5288] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 653.774003][ T26] audit: type=1326 audit(1756226056.750:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.5.7984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3638ebe9 code=0x7ffc0000 [ 653.804364][ T5288] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 653.834120][ T5288] usb 2-1: config 220 has no interface number 2 [ 653.853271][ T5288] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 653.870324][ T26] audit: type=1326 audit(1756226056.750:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.5.7984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3638ebe9 code=0x7ffc0000 [ 653.894577][ T5288] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 653.923962][ T5288] usb 2-1: config 220 interface 0 has no altsetting 0 [ 653.941235][ T26] audit: type=1326 audit(1756226056.770:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.5.7984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f2c3638ebe9 code=0x7ffc0000 [ 653.964816][ T5288] usb 2-1: config 220 interface 76 has no altsetting 0 [ 653.971923][ T5288] usb 2-1: config 220 interface 1 has no altsetting 0 [ 654.001208][ T5288] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 654.032066][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.054528][ T26] audit: type=1326 audit(1756226056.770:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.5.7984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3638ebe9 code=0x7ffc0000 [ 654.082618][ T5288] usb 2-1: Product: syz [ 654.100461][ T5288] usb 2-1: Manufacturer: syz [ 654.117805][ T5288] usb 2-1: SerialNumber: syz [ 654.144907][ T26] audit: type=1326 audit(1756226056.770:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23335 comm="syz.5.7984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3638ebe9 code=0x7ffc0000 [ 654.327542][T23369] genirq: Flags mismatch irq 1. 00000000 (dt2814) vs. 00000080 (i8042) [ 654.351715][ T5288] usb 2-1: selecting invalid altsetting 0 [ 654.366603][ T5288] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 654.373028][ T5288] usb 2-1: No valid video chain found. [ 654.428712][ T5288] usb 2-1: selecting invalid altsetting 0 [ 654.454115][ T5288] usbtest: probe of 2-1:220.1 failed with error -22 [ 654.494130][ T5288] usb 2-1: USB disconnect, device number 26 [ 654.748596][T23399] wg1 speed is unknown, defaulting to 1000 [ 654.784002][T23399] wg1 speed is unknown, defaulting to 1000 [ 654.815742][T23399] wg1 speed is unknown, defaulting to 1000 [ 654.828313][T23399] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 654.869945][T23399] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 654.915955][T23354] loop0: detected capacity change from 0 to 32768 [ 654.973730][T23399] wg1 speed is unknown, defaulting to 1000 [ 655.015834][T23399] wg1 speed is unknown, defaulting to 1000 [ 655.035005][T23399] wg1 speed is unknown, defaulting to 1000 [ 655.061254][T23399] wg1 speed is unknown, defaulting to 1000 [ 655.086201][T23399] wg1 speed is unknown, defaulting to 1000 [ 655.094884][T23412] delete_channel: no stack [ 655.467054][T23430] loop1: detected capacity change from 0 to 2048 [ 655.508266][T23430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.828796][T23439] loop0: detected capacity change from 0 to 8192 [ 655.890057][T23439] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 655.962137][T23439] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 655.975900][T23439] REISERFS (device loop0): using ordered data mode [ 656.004223][T23439] reiserfs: using flush barriers [ 656.026612][T23439] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 656.047761][T23439] REISERFS (device loop0): checking transaction log (loop0) [ 656.067717][T23439] REISERFS (device loop0): Using r5 hash to sort names [ 656.099372][T23439] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 656.164176][T23439] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 656.218097][T23439] [ 656.220593][T23439] ====================================================== [ 656.227741][T23439] WARNING: possible circular locking dependency detected [ 656.234893][T23439] 6.1.148-syzkaller #0 Not tainted [ 656.240121][T23439] ------------------------------------------------------ [ 656.247214][T23439] syz.0.8011/23439 is trying to acquire lock: [ 656.251117][T23466] loop5: detected capacity change from 0 to 764 [ 656.253304][T23439] ffff8880547596c0 (&type->i_mutex_dir_key#22/3){+.+.}-{3:3}, at: open_xa_dir+0x11e/0x6f0 [ 656.269839][T23439] [ 656.269839][T23439] but task is already holding lock: [ 656.277240][T23439] ffff88807a7b2090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 656.286999][T23439] [ 656.286999][T23439] which lock already depends on the new lock. [ 656.286999][T23439] [ 656.297776][T23439] [ 656.297776][T23439] the existing dependency chain (in reverse order) is: [ 656.307095][T23439] [ 656.307095][T23439] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 656.314565][T23439] __mutex_lock+0x120/0xaf0 [ 656.319808][T23439] reiserfs_write_lock+0x75/0xd0 [ 656.325382][T23439] reiserfs_mkdir+0x30c/0x970 [ 656.330776][T23439] open_xa_dir+0x316/0x6f0 [ 656.335816][T23439] xattr_lookup+0x22/0x2a0 [ 656.340773][T23439] reiserfs_xattr_set_handle+0xf3/0xca0 [ 656.346945][T23439] __reiserfs_set_acl+0x4ec/0x680 [ 656.352516][T23439] reiserfs_set_acl+0x447/0x5f0 [ 656.357915][T23439] posix_acl_xattr_set+0x387/0x3f0 [ 656.363782][T23439] __vfs_setxattr+0x3e0/0x420 [ 656.369000][T23439] __vfs_setxattr_noperm+0x129/0x5e0 [ 656.374824][T23439] vfs_setxattr+0x168/0x2f0 [ 656.379865][T23439] setxattr+0x2b2/0x2d0 [ 656.384648][T23439] path_setxattr+0x142/0x280 [ 656.389864][T23439] __x64_sys_setxattr+0xb7/0xd0 [ 656.395603][T23439] do_syscall_64+0x4c/0xa0 [ 656.400560][T23439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.407092][T23439] [ 656.407092][T23439] -> #0 (&type->i_mutex_dir_key#22/3){+.+.}-{3:3}: [ 656.415814][T23439] __lock_acquire+0x2cf8/0x7c50 [ 656.421296][T23439] lock_acquire+0x1b4/0x490 [ 656.426351][T23439] down_write_nested+0x39/0x60 [ 656.431670][T23439] open_xa_dir+0x11e/0x6f0 [ 656.436626][T23439] reiserfs_for_each_xattr+0x174/0x7b0 [ 656.442621][T23439] reiserfs_delete_xattrs+0x1c/0x80 [ 656.448442][T23439] reiserfs_evict_inode+0x221/0x490 [ 656.454188][T23439] evict+0x485/0x870 [ 656.458631][T23439] reiserfs_new_inode+0x5c8/0x1860 [ 656.464543][T23439] reiserfs_symlink+0x4cf/0x770 [ 656.470016][T23439] vfs_symlink+0x247/0x3d0 [ 656.474971][T23439] do_symlinkat+0x1ae/0x3f0 [ 656.480015][T23439] __x64_sys_symlink+0x7a/0x90 [ 656.485315][T23439] do_syscall_64+0x4c/0xa0 [ 656.490294][T23439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.496747][T23439] [ 656.496747][T23439] other info that might help us debug this: [ 656.496747][T23439] [ 656.507083][T23439] Possible unsafe locking scenario: [ 656.507083][T23439] [ 656.514628][T23439] CPU0 CPU1 [ 656.520003][T23439] ---- ---- [ 656.525378][T23439] lock(&sbi->lock); [ 656.529374][T23439] lock(&type->i_mutex_dir_key#22/3); [ 656.537381][T23439] lock(&sbi->lock); [ 656.544071][T23439] lock(&type->i_mutex_dir_key#22/3); [ 656.549563][T23439] [ 656.549563][T23439] *** DEADLOCK *** [ 656.549563][T23439] [ 656.557713][T23439] 3 locks held by syz.0.8011/23439: [ 656.563014][T23439] #0: ffff888078554460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 656.572543][T23439] #1: ffff888054759d60 (&type->i_mutex_dir_key#22/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 656.583285][T23439] #2: ffff88807a7b2090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 656.593322][T23439] [ 656.593322][T23439] stack backtrace: [ 656.599231][T23439] CPU: 0 PID: 23439 Comm: syz.0.8011 Not tainted 6.1.148-syzkaller #0 [ 656.607511][T23439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.617595][T23439] Call Trace: [ 656.620932][T23439] [ 656.623921][T23439] dump_stack_lvl+0x168/0x22e [ 656.628659][T23439] ? load_image+0x3b0/0x3b0 [ 656.633306][T23439] ? show_regs_print_info+0x12/0x12 [ 656.638607][T23439] ? print_circular_bug+0x12b/0x1a0 [ 656.643832][T23439] check_noncircular+0x274/0x310 [ 656.648877][T23439] ? add_chain_block+0x940/0x940 [ 656.653924][T23439] ? lockdep_lock+0xdc/0x1e0 [ 656.658544][T23439] ? mark_lock+0x94/0x320 [ 656.662985][T23439] ? _find_first_zero_bit+0xcf/0x100 [ 656.668314][T23439] __lock_acquire+0x2cf8/0x7c50 [ 656.673196][T23439] ? verify_lock_unused+0x140/0x140 [ 656.678413][T23439] ? is_bpf_text_address+0x22/0x2a0 [ 656.683629][T23439] ? kernel_text_address+0x9c/0xd0 [ 656.688766][T23439] ? __kernel_text_address+0x9/0x30 [ 656.694074][T23439] ? unwind_get_return_address+0x49/0x80 [ 656.699720][T23439] ? stack_trace_save+0xe0/0xe0 [ 656.704587][T23439] ? arch_stack_walk+0xf2/0x140 [ 656.709465][T23439] lock_acquire+0x1b4/0x490 [ 656.714011][T23439] ? open_xa_dir+0x11e/0x6f0 [ 656.718640][T23439] ? __might_sleep+0xd0/0xd0 [ 656.723262][T23439] ? read_lock_is_recursive+0x10/0x10 [ 656.728657][T23439] down_write_nested+0x39/0x60 [ 656.733521][T23439] ? open_xa_dir+0x11e/0x6f0 [ 656.738128][T23439] open_xa_dir+0x11e/0x6f0 [ 656.742564][T23439] ? verify_lock_unused+0x140/0x140 [ 656.747788][T23439] ? listxattr_filler+0x3f0/0x3f0 [ 656.752942][T23439] ? truncate_inode_pages_range+0x34d/0xff0 [ 656.758917][T23439] reiserfs_for_each_xattr+0x174/0x7b0 [ 656.764391][T23439] ? mapping_evict_folio+0x520/0x520 [ 656.769840][T23439] ? reiserfs_for_each_xattr+0x7b0/0x7b0 [ 656.775493][T23439] ? reiserfs_delete_xattrs+0x80/0x80 [ 656.781010][T23439] ? reiserfs_xattr_init+0x720/0x720 [ 656.786323][T23439] ? dquot_initialize+0x20/0x20 [ 656.791213][T23439] ? __rwlock_init+0x140/0x140 [ 656.796095][T23439] reiserfs_delete_xattrs+0x1c/0x80 [ 656.801408][T23439] reiserfs_evict_inode+0x221/0x490 [ 656.806631][T23439] ? entry_points_to_object+0x7d0/0x7d0 [ 656.812203][T23439] ? do_raw_spin_lock+0x11d/0x280 [ 656.817256][T23439] ? do_raw_spin_unlock+0x11d/0x230 [ 656.822714][T23439] ? entry_points_to_object+0x7d0/0x7d0 [ 656.828398][T23439] evict+0x485/0x870 [ 656.832335][T23439] ? __lock_acquire+0x7c50/0x7c50 [ 656.837390][T23439] ? proc_nr_inodes+0x2f0/0x2f0 [ 656.842280][T23439] ? do_raw_spin_unlock+0x11d/0x230 [ 656.847510][T23439] ? _raw_spin_unlock+0x24/0x40 [ 656.852404][T23439] ? iput+0x768/0x980 [ 656.856493][T23439] reiserfs_new_inode+0x5c8/0x1860 [ 656.861804][T23439] ? reiserfs_write_inode+0x2a0/0x2a0 [ 656.867196][T23439] ? do_journal_begin_r+0xdec/0x1040 [ 656.872511][T23439] ? journal_begin+0x1f1/0x350 [ 656.877289][T23439] reiserfs_symlink+0x4cf/0x770 [ 656.882321][T23439] ? reiserfs_unlink+0x6d0/0x6d0 [ 656.887293][T23439] ? generic_permission+0x292/0x510 [ 656.892600][T23439] ? open_xa_dir+0x6f0/0x6f0 [ 656.897291][T23439] ? inode_permission+0xef/0x480 [ 656.902248][T23439] ? bpf_lsm_inode_symlink+0x5/0x10 [ 656.907572][T23439] ? security_inode_symlink+0xb2/0x100 [ 656.913136][T23439] vfs_symlink+0x247/0x3d0 [ 656.917656][T23439] do_symlinkat+0x1ae/0x3f0 [ 656.922173][T23439] ? vfs_symlink+0x3d0/0x3d0 [ 656.926777][T23439] ? getname_flags+0x206/0x500 [ 656.931645][T23439] __x64_sys_symlink+0x7a/0x90 [ 656.936503][T23439] do_syscall_64+0x4c/0xa0 [ 656.940959][T23439] ? clear_bhb_loop+0x60/0xb0 [ 656.945651][T23439] ? clear_bhb_loop+0x60/0xb0 [ 656.950343][T23439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.956524][T23439] RIP: 0033:0x7fc6ebf8ebe9 [ 656.961040][T23439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.980658][T23439] RSP: 002b:00007fc6ecdca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 656.989351][T23439] RAX: ffffffffffffffda RBX: 00007fc6ec1b5fa0 RCX: 00007fc6ebf8ebe9 [ 656.997421][T23439] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 657.005401][T23439] RBP: 00007fc6ec011e19 R08: 0000000000000000 R09: 0000000000000000 [ 657.013557][T23439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.021540][T23439] R13: 00007fc6ec1b6038 R14: 00007fc6ec1b5fa0 R15: 00007ffe49495cc8 [ 657.029630][T23439] [ 657.051462][T23466] ISOFS: File unit size != 0 for ISO file (1792). [ 657.084791][T23466] ISOFS: Interleaved files not (yet) supported. [ 657.094948][T23466] ISOFS: File unit size != 0 for ISO file (1856). [ 657.113179][T23466] Symlink component flag not implemented [ 657.153912][T23466] Symlink component flag not implemented [ 657.168557][T23466] Symlink component flag not implemented (128) [ 657.194132][T23466] Symlink component flag not implemented (122) [ 657.220537][T23471] loop4: detected capacity change from 0 to 4096 [ 657.459295][T23434] loop2: detected capacity change from 0 to 65536 [ 657.503482][T23434] XFS (loop2): Mounting V5 Filesystem [ 657.538583][T23434] XFS (loop2): Ending clean mount [ 657.604095][ T4264] XFS (loop2): Unmounting Filesystem