last executing test programs: 5.686615894s ago: executing program 3 (id=2444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.697269719s ago: executing program 0 (id=2455): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x0, 0x0, {}, {0x4, 0x2}, {0x4000000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 4.412695119s ago: executing program 3 (id=2458): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 4.32984888s ago: executing program 0 (id=2460): pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffc) 4.066543102s ago: executing program 5 (id=2462): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0xfffffffd, 0x7, 0x4, {0x1, @pix_mp={0x0, 0x9, 0x0, 0x4, 0x7, [{0xadb, 0x2}, {0xfffffffc, 0xc}, {0x8c5e, 0x400}, {0x6, 0x2}, {0x3, 0x4}, {0x4, 0xac}, {0x8, 0x3000000}, {0x8, 0x3}], 0x2, 0x88, 0x6, 0x0, 0x7}}, 0x8}) 4.000483456s ago: executing program 0 (id=2464): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 3.92300148s ago: executing program 3 (id=2465): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) lseek(r0, 0x625d, 0x3) 3.674403673s ago: executing program 5 (id=2468): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3e, 0x107, 0xfffffffe, 0x0, {0xfe, 0x7c}, [@generic="a5"]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008840) 3.666524078s ago: executing program 0 (id=2469): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000640)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,errors=continue,iocharset=cp869,discard=0x0000000000000005,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00}tU,\v\x00'/17, @ANYRESHEX=0xee01, @ANYBLOB=',\x00'], 0x24, 0x61b6, &(0x7f000001b700)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000064c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2052, 0x0, 0xfc, 0x0, &(0x7f00000064c0)) 3.551134011s ago: executing program 3 (id=2470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x8894) 3.331256228s ago: executing program 5 (id=2472): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f021}) 3.218504356s ago: executing program 3 (id=2474): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="6469725f756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d5854282b2c636f6465706167653d63703836342c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c696f636861727365743d63703933362c00ba1cc62fbe041529634cde88021ff02412206543ae25eb5d122f77a94c2113ab796077de9bf46a3b2ed6ec105974f75d13331615810ad28e84c8f2bbd75c4ede6d5a1180afc5acdd01cf83c26042fcc06e0fa14c46671668ded793e0abb1906ae7dbe9e9685e464b1f1d9084009fd14442fac19683285a28a602058e1679c2eac481d62ed27f76c08da8a3e927b48e15d64c837cb723680909354543caa3aafc79fbd2f1a373e039f041072f2b67e922c7e3e492f2b60c93910734743df706deea148a3a296485c2c4f2d611428112a5592bc4eee256ddd27fafd8f3b8de832e181ef5be014215e88cdd7356cdc1bd8d7587c3d604f4f4f0b058dd1d15c6938aa1ffc162"], 0x1, 0x30e, &(0x7f0000000900)="$eJzs3b9u00AcB/DvnZ02pVExbRESC6hQCZaKAgNiCUJZ2ZkQkKRShFVEWyRgIVSMiAdgYuEVeAgWEC8ALExsLNmM7nx27PjiJGocp+X7kRo55/vzu/jP3VkCg4j+W3cbPz7d+K3+BODAAXAbkACqgAvgLM5Vn+8edA78diuvIkeXUH8CYUmRydPcbduKqnK6hOGpby5qyTQqRhAEd36WHQSVTl/9FhJYNNeh3l+dcVzTMti5LnChpFBKk/wNRA89vMBKieEQEdEcMOO/NMNETScJSAlsmmF/nsf/7FpjhF4xcZTlpp9JCnILJMZ/PbsLhDq+p/Wu/npP/6xqv4xWieMEUxn4voDwzErNwYR9VfkrCJlY5NJOx8VW8w1aEoeoG4kC6/qzFZ66kRHRbkx2vgyvrYJ7p8LeqBnl0uDuKKSdjt9eVBuW+Ncma/HoxBfxTTwQHj6gFc//3ECow6SPlDdwpGRFxX9teI3LupTKBXMp1ut1mcpyRjdy3rRgjOhl1b4iSdYZPSDoxhFY4jyMNnTbq0g/Vgh7t21rQPQrX7OV8uJv2bK6rfVUKcecCVvNp37uo5RiRF0U78V9sYE/+IxGYv4vVXybSFyZebd6oXOaMyPsz4I9p6tzepmRoxtvXYwjMBYn7hsBEz4te4fHuIWV/Zevnji+395TG48sG89qe8KkVN4C1jzFbzjIyYNuP0UPHq+DYNyag3TKx7/AUUJVQ18/5epUfwR1/4hT1OVjy6yusjhFFn10ohFvWhV6mP2plb/hwrar8RV5J2ShG9HUZSoVqonWkF1Tvz/RHNoX0UE3CZlJLJ1wat4lwvWfnsmbWZ2+z6gPL2eenr/IRKrG7XgFl54KrtrmLiPWBsvDV3CJFq8PWTPqNdelK8DlRKJAbouejvPEEA18x0M+/yciIiIiIiIiIiIiIiIiIiIiIiIiOm5m8S8Wyu4jEREREREREREREREREREREREREREREdFxN/77f5f6b2qy/R/x+v2/3sj3/6ZeAGxeFMX3/xKV418AAAD///k/d1Y=") syz_mount_image$exfat(0x0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 2.958466991s ago: executing program 5 (id=2476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x40, 0x3, @empty}}, 0x0, 0x0, 0x0, 0x80, 0x331, 0x9}, 0x9c) 2.910107234s ago: executing program 1 (id=2478): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.685610342s ago: executing program 5 (id=2479): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) 2.601757429s ago: executing program 3 (id=2481): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@ref_verify}, {}, {@skip_balance}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000000)={0x105, 0xfd13, [0xde, 0xc0, 0xfffffffffffffff8, 0x20000001002], 0x0}) 2.397289571s ago: executing program 1 (id=2483): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) 2.287597106s ago: executing program 2 (id=2484): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) 2.067452664s ago: executing program 4 (id=2485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) fallocate(r0, 0x20, 0x66, 0x4000000001) 1.959767477s ago: executing program 1 (id=2486): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) pwritev2(r0, &(0x7f0000002d00)=[{&(0x7f0000000900)="b201", 0x2}], 0x1, 0x3, 0x5, 0x5) 1.936619286s ago: executing program 2 (id=2487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 1.678324482s ago: executing program 4 (id=2488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 1.562904609s ago: executing program 1 (id=2489): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c00018006000600050a0000f01602"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) 1.476334876s ago: executing program 2 (id=2490): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x8e5c3f41fd9764b2}) 1.403168289s ago: executing program 4 (id=2491): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000002c0)={0x22b, 0x7d, 0x0, {{0x500, 0xed, 0x0, 0x0, {0x10, 0x0, 0x400000}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{evboh%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\x00\x00\x00', 0x34, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\xd9\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x1e, '\xcf\x02\x00\x00\x00\xfc\x04\x00\x00\x00\x00\x00\x00\xbce\x00+\n\x82\xc7\x92\xea\xb0|*\xd8`\xcc\xe6\x00', 0x49, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4E\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1cW{th\xbe6\xf4\xfd:L\xc2\x80\xe8\xd4\x89\xda'}, 0x129, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00'/297, 0xffffffffffffffff}}, 0x22b) 1.138444797s ago: executing program 1 (id=2492): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x4000005, 0x3, 0x6b, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) 1.087759235s ago: executing program 2 (id=2493): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 961.903728ms ago: executing program 4 (id=2494): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setlease(r0, 0x400, 0x0) 856.182543ms ago: executing program 1 (id=2495): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0xfffffe3d}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 704.868613ms ago: executing program 2 (id=2496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) 703.771778ms ago: executing program 0 (id=2497): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x400) 604.251703ms ago: executing program 4 (id=2498): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'rti802\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x5, 0xf, 0x1000, 0x80000009, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x7fd, 0xe2df, 0x2b57, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) 410.179774ms ago: executing program 2 (id=2499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 230.204ms ago: executing program 0 (id=2500): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x9, "e95ae995171101bfe6463a5115eb325fd5e8686b2958d79ee35cb7b146ee6301", 0x2, 0x8, 0x4, 0x90f9, 0x1, 0x2, 0x7, 0xd}) 138.290749ms ago: executing program 5 (id=2501): r0 = syz_open_dev$video4linux(&(0x7f0000001f00), 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000003300)={0x0, @bt={0x26, 0x9, 0x1, 0x3, 0x0, 0x9, 0xffffffff, 0x3ff, 0x6, 0x5, 0x80000001, 0x7f, 0x7, 0x8, 0x1, 0x11, {0x2, 0xed4}, 0x3, 0x81}}) 0s ago: executing program 4 (id=2502): setresuid(0xee00, 0xee01, 0x0) ioprio_set$uid(0x3, 0x0, 0x4007) kernel console output (not intermixed with test programs): 2.571893][ T5984] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 172.608109][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.636650][ T5984] usb 1-1: Product: syz [ 172.667725][ T5984] usb 1-1: Manufacturer: syz [ 172.688571][ T5984] usb 1-1: SerialNumber: syz [ 172.758798][ T5984] usb 1-1: config 0 descriptor?? [ 172.764731][ T7525] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.774912][ T5984] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 172.839035][ T5984] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 173.114452][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 173.143376][ T7546] loop2: detected capacity change from 0 to 4096 [ 173.329258][ T7546] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 173.355218][ T5984] usb 1-1: USB disconnect, device number 8 [ 173.380350][ T7546] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 173.399742][ T5984] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 173.463050][ T5984] cyberjack 1-1:0.69: device disconnected [ 174.099118][ T7571] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 174.138797][ T5965] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.215248][ T7573] loop2: detected capacity change from 0 to 2048 [ 174.248188][ T7573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.318774][ T5965] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 174.355737][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.390032][ T5965] usb 5-1: config 0 descriptor?? [ 174.547201][ T7581] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 174.629136][ T5965] usb 5-1: string descriptor 0 read error: -71 [ 174.635393][ T5965] ldusb 5-1:0.0: Interrupt in endpoint not found [ 174.684647][ T7583] loop0: detected capacity change from 0 to 2048 [ 174.691577][ T7585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.729835][ T5965] usb 5-1: USB disconnect, device number 9 [ 174.841428][ T6063] GPT:first_usable_lbas don't match. [ 174.854681][ T6063] GPT:34 != 290 [ 174.875387][ T6063] GPT: Use GNU Parted to correct GPT errors. [ 174.911858][ T6063] loop0: p1 p2 p3 [ 175.013704][ T7583] GPT:first_usable_lbas don't match. [ 175.036737][ T7583] GPT:34 != 290 [ 175.052749][ T7583] GPT: Use GNU Parted to correct GPT errors. [ 175.068848][ T7583] loop0: p1 p2 p3 [ 175.103646][ T7596] loop2: detected capacity change from 0 to 128 [ 175.409342][ T7601] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 175.849362][ T7616] netlink: 13 bytes leftover after parsing attributes in process `syz.0.714'. [ 175.909543][ T7616] netlink: 13 bytes leftover after parsing attributes in process `syz.0.714'. [ 175.926258][ T6063] udevd[6063]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 175.926955][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 175.957763][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 176.115027][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 176.128499][ T7623] loop1: detected capacity change from 0 to 128 [ 176.163669][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 176.193323][ T6063] udevd[6063]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 176.247819][ T7623] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.328818][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.367838][ T7623] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.405367][ T7623] EXT4-fs warning (device loop1): verify_group_input:136: Cannot add at group 25 (only 1 groups) [ 176.497322][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 176.513920][ T10] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 176.564820][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.626291][ T10] usb 3-1: config 0 descriptor?? [ 176.676940][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.690952][ T10] usb 3-1: selecting invalid altsetting 3 [ 176.732927][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 176.767773][ T10] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 176.832404][ T10] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 176.890057][ T10] usb 3-1: USB disconnect, device number 7 [ 177.000618][ T7644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.587846][ T7654] erspan1: entered promiscuous mode [ 177.641159][ T7654] erspan1: entered allmulticast mode [ 178.034770][ T7636] loop5: detected capacity change from 0 to 32768 [ 178.074509][ T7670] loop4: detected capacity change from 0 to 64 [ 178.110071][ T7636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.723 (7636) [ 178.212460][ T7636] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.279771][ T7636] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 178.354678][ T7636] BTRFS info (device loop5): using free-space-tree [ 178.372827][ T7673] loop3: detected capacity change from 0 to 128 [ 178.424354][ T7678] loop0: detected capacity change from 0 to 64 [ 178.485198][ T7673] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.511170][ T7678] Bad inode number on dev loop0: 6 is out of range [ 178.528805][ T7690] loop4: detected capacity change from 0 to 1024 [ 178.632406][ T7673] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.738003][ T7690] hfsplus: bad catalog entry type [ 178.769922][ T7673] EXT4-fs warning (device loop3): verify_group_input:136: Cannot add at group 1025 (only 1 groups) [ 178.815113][ T7636] BTRFS error: failed to open device for path É-””µòÚ”Ñ,dšÒóF}¾ÂOÄ]—2UÁ´…¢¿°H£ž±B6· ™æaoóЦ{!-—蹑‹áQ`\Š_½ûyµä+÷/‰ÅŠo1hÕiN™«9ð{WOÉp䲘 Š{½‘įkÉž¹f6ó¡‚Y' ÖPðÂü“+îS¦k»ê’Š‹ë·­YŒÚÿŸ %ǺÊùdÑU†!5=ºñ춇Ða)ƸY DðâÀtZ%Øx))øŒÃœ+42Q"¼ÿ’=HPÜ.Ûž·võ7WG‡jÓPˆw ÜÒJ ¤å>p=älh4“÷,wÇtzu«—mbäol«›6¤6»Qa=æŸÆfZ‰<ɾ+z`¼fìŸï4Ç Íü­¸ÂW–…E”‘iÿìÌAaQÕ@•Uv´8Úª+Å‘®¿1¡–•Ø€ M(1vAQÞ^Ž #²FYáîâEfMS>=|¶ýùuíkçå‘e§$ª‘« ÜÑd{EtD­†§w߉- [ 178.815113][ T7636] ˆ'ÙkܪìöÑ.ƒÞg˜AçœGª u0N7ƒl~ÞðàBà8«€¿Æ³ÈÔý”† with flags 0x1: -2 [ 178.868207][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.174693][ T5841] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.241948][ T5861] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.402134][ T7658] loop1: detected capacity change from 0 to 32768 [ 179.538125][ T7658] JBD2: Ignoring recovery information on journal [ 179.647448][ T7702] loop3: detected capacity change from 0 to 2048 [ 179.690394][ T7658] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 179.768345][ T7702] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.915491][ T7658] OCFS2: ERROR (device loop1): ocfs2_xattr_find_entry: corrupted xattr entries [ 179.915532][ T7658] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 180.027817][ T7658] OCFS2: File system is now read-only. [ 180.062557][ T7658] (syz.1.733,7658,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 180.122477][ T7658] (syz.1.733,7658,0):ocfs2_mknod:334 ERROR: status = -117 [ 180.184242][ T7658] (syz.1.733,7658,0):ocfs2_mknod:502 ERROR: status = -117 [ 180.255104][ T7658] (syz.1.733,7658,0):ocfs2_mkdir:658 ERROR: status = -117 [ 180.308294][ T7716] erspan1: entered promiscuous mode [ 180.366002][ T7718] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 180.375462][ T7716] erspan1: entered allmulticast mode [ 180.419349][ T7718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.753'. [ 180.442893][ T7675] loop2: detected capacity change from 0 to 32768 [ 180.541712][ T5845] ocfs2: Unmounting device (7,1) on (node local) [ 180.586687][ T7720] loop4: detected capacity change from 0 to 2048 [ 180.600040][ T7718] team0: Port device geneve0 added [ 180.822089][ T6063] GPT:first_usable_lbas don't match. [ 180.827424][ T6063] GPT:34 != 290 [ 180.899050][ T6063] GPT: Use GNU Parted to correct GPT errors. [ 180.947374][ T6063] loop4: p1 p2 p3 [ 181.034428][ T7720] GPT:first_usable_lbas don't match. [ 181.065907][ T7728] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 181.069453][ T7720] GPT:34 != 290 [ 181.079784][ T7728] netlink: 15 bytes leftover after parsing attributes in process `syz.0.758'. [ 181.111087][ T7720] GPT: Use GNU Parted to correct GPT errors. [ 181.117214][ T7720] loop4: p1 p2 p3 [ 181.748664][ T5965] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 181.794527][ T7743] netlink: 188348 bytes leftover after parsing attributes in process `syz.4.767'. [ 181.841994][ T7745] __vm_enough_memory: pid: 7745, comm: syz.5.766, bytes: 4503599627366400 not enough memory for the allocation [ 181.976731][ T5965] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.013805][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 182.028957][ T5965] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.054065][ T6777] udevd[6777]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 182.077097][ T5965] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.101969][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 182.146356][ T5965] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 182.205240][ T5965] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 182.243706][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 182.248589][ T5965] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 182.263208][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 182.271516][ T6063] udevd[6063]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 182.346365][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.412715][ T7737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.454878][ T5965] hub 2-1:1.0: bad descriptor, ignoring hub [ 182.480325][ T5965] hub 2-1:1.0: probe with driver hub failed with error -5 [ 182.519339][ T5965] cdc_wdm 2-1:1.0: skipping garbage [ 182.524574][ T5965] cdc_wdm 2-1:1.0: skipping garbage [ 182.564341][ T7754] loop4: detected capacity change from 0 to 4096 [ 182.594229][ T5965] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 182.628909][ T5965] cdc_wdm 2-1:1.0: Unknown control protocol [ 182.666855][ T7763] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.698655][ T5965] usb 2-1: USB disconnect, device number 5 [ 183.005185][ T7766] loop0: detected capacity change from 0 to 4096 [ 183.233691][ T7766] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 183.276340][ T7766] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 183.412808][ T7778] loop2: detected capacity change from 0 to 256 [ 183.564368][ T7778] FAT-fs (loop2): Directory bread(block 64) failed [ 183.618118][ T7778] FAT-fs (loop2): Directory bread(block 65) failed [ 183.676297][ T7778] FAT-fs (loop2): Directory bread(block 66) failed [ 183.693987][ T7778] FAT-fs (loop2): Directory bread(block 67) failed [ 183.728760][ T7778] FAT-fs (loop2): Directory bread(block 68) failed [ 183.735311][ T7778] FAT-fs (loop2): Directory bread(block 69) failed [ 183.824116][ T7778] FAT-fs (loop2): Directory bread(block 70) failed [ 183.834757][ T7786] netlink: set zone limit has 4 unknown bytes [ 183.866253][ T7778] FAT-fs (loop2): Directory bread(block 71) failed [ 183.898955][ T7778] FAT-fs (loop2): Directory bread(block 72) failed [ 183.929234][ T7778] FAT-fs (loop2): Directory bread(block 73) failed [ 183.967154][ T7792] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 185.031934][ T30] audit: type=1326 audit(1753100638.594:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 185.158751][ T30] audit: type=1326 audit(1753100638.624:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 185.180753][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.203625][ T7832] loop5: detected capacity change from 0 to 256 [ 185.251959][ T7832] exfat: Deprecated parameter 'namecase' [ 185.289327][ T30] audit: type=1326 audit(1753100638.644:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 185.339176][ T7832] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 185.365769][ T7836] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.388659][ T30] audit: type=1326 audit(1753100638.644:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 185.444879][ T7836] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.489908][ T7836] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.508619][ T30] audit: type=1326 audit(1753100638.644:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 185.530602][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.568620][ T7836] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 185.577837][ T7836] geneve2: entered promiscuous mode [ 185.628583][ T7836] geneve2: entered allmulticast mode [ 185.633993][ T30] audit: type=1326 audit(1753100638.694:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 185.742785][ T30] audit: type=1326 audit(1753100638.714:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 185.764775][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.779206][ T30] audit: type=1326 audit(1753100638.714:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 185.785060][ T7836] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.801279][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.802092][ T30] audit: type=1326 audit(1753100638.714:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 185.842222][ T30] audit: type=1326 audit(1753100638.714:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 185.864296][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.888574][ T7836] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.938646][ T7836] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.986672][ T7836] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 186.748966][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.773625][ T7875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.939563][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 186.991720][ T5932] usb 1-1: config 162 has an invalid interface number: 246 but max is 1 [ 187.028015][ T5932] usb 1-1: config 162 has an invalid interface number: 245 but max is 1 [ 187.047224][ T5932] usb 1-1: config 162 has no interface number 0 [ 187.064823][ T5932] usb 1-1: config 162 has no interface number 1 [ 187.071777][ T5932] usb 1-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.105366][ T5932] usb 1-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 187.118795][ T5965] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 187.128959][ T5932] usb 1-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 187.178894][ T5932] usb 1-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 187.208664][ T7883] loop3: detected capacity change from 0 to 4096 [ 187.233096][ T5932] usb 1-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 187.278660][ T5932] usb 1-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 187.299569][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 187.323622][ T5932] usb 1-1: config 162 interface 246 has no altsetting 0 [ 187.339081][ T7891] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.349499][ T5965] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 187.357680][ T5965] usb 2-1: config 0 has no interface number 0 [ 187.368071][ T5932] usb 1-1: config 162 interface 245 has no altsetting 0 [ 187.390721][ T5932] usb 1-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 187.416946][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.468612][ T5932] usb 1-1: Product: syz [ 187.468667][ T5965] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 187.472802][ T5932] usb 1-1: Manufacturer: syz [ 187.472832][ T5932] usb 1-1: SerialNumber: syz [ 187.490245][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.557087][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 187.573140][ T5965] usb 2-1: Product: syz [ 187.593030][ T5965] usb 2-1: Manufacturer: syz [ 187.607820][ T5965] usb 2-1: SerialNumber: syz [ 187.664219][ T5965] usb 2-1: config 0 descriptor?? [ 187.696184][ T5965] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 187.767223][ T5932] Bluetooth: failed to set interface 0, alt 0 -22 [ 187.824716][ T5932] btusb 1-1:162.245: probe with driver btusb failed with error -22 [ 187.859537][ T7901] netlink: 'syz.3.843': attribute type 5 has an invalid length. [ 187.880559][ T7901] netlink: 5 bytes leftover after parsing attributes in process `syz.3.843'. [ 187.908608][ T7901] macvtap0: entered allmulticast mode [ 187.925888][ T5932] usb 1-1: USB disconnect, device number 9 [ 187.925950][ T5965] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 187.959683][ T7901] veth0_macvtap: entered allmulticast mode [ 187.977061][ T5965] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 188.133947][ T5939] usb 2-1: USB disconnect, device number 6 [ 188.787191][ T7922] loop2: detected capacity change from 0 to 2048 [ 188.844808][ T7922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.958496][ T7930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.220876][ T7937] loop4: detected capacity change from 0 to 256 [ 189.224656][ T7936] loop5: detected capacity change from 0 to 1764 [ 189.339558][ T7936] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 189.410801][ T7943] loop2: detected capacity change from 0 to 512 [ 189.470591][ T7943] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 189.529184][ T7943] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.633303][ T7943] EXT4-fs (loop2): 1 truncate cleaned up [ 189.671220][ T7943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.723806][ T7943] EXT4-fs error (device loop2): ext4_generic_delete_entry:2667: inode #2: block 13: comm syz.2.865: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 189.809904][ T7943] EXT4-fs (loop2): Remounting filesystem read-only [ 189.868861][ T7943] EXT4-fs warning (device loop2): ext4_rename_delete:3724: inode #2: comm syz.2.865: Deleting old file: nlink 4, error=-117 [ 189.919367][ T7957] comedi comedi1: s526: I/O port conflict (0xffffffffffffffff,64) [ 190.097863][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.104747][ T7960] overlay: Unknown parameter '/' [ 191.078659][ T5932] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 191.217723][ T8010] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 191.251761][ T5932] usb 6-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.292948][ T5932] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.326537][ T5932] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.406894][ T5932] usb 6-1: config 0 interface 0 has no altsetting 0 [ 191.479647][ T5932] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 191.521575][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.559798][ T5932] usb 6-1: Product: syz [ 191.563992][ T5932] usb 6-1: Manufacturer: syz [ 191.592943][ T5932] usb 6-1: SerialNumber: syz [ 191.636574][ T5932] usb 6-1: config 0 descriptor?? [ 191.907684][ T5932] usbtest 6-1:0.0: Linux user mode ISO test driver [ 191.946702][ T5932] usbtest 6-1:0.0: high-speed {control iso-in} tests (+alt) [ 192.015693][ T30] audit: type=1326 audit(1753100645.574:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ddd8e9a9 code=0x7ffc0000 [ 192.019066][ T30] audit: type=1326 audit(1753100645.584:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ddd8e9a9 code=0x7ffc0000 [ 192.019627][ T30] audit: type=1326 audit(1753100645.584:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fa8ddd8e9a9 code=0x7ffc0000 [ 192.019892][ T30] audit: type=1326 audit(1753100645.584:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ddd8e9a9 code=0x7ffc0000 [ 192.020166][ T30] audit: type=1326 audit(1753100645.584:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8046 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ddd8e9a9 code=0x7ffc0000 [ 192.088186][ T8063] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.903'. [ 192.119115][ T5984] usb 6-1: USB disconnect, device number 9 [ 192.214873][ T8065] tmpfs: Bad value for 'mpol' [ 192.576448][ T8086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.698010][ T8092] netlink: 'syz.1.910': attribute type 8 has an invalid length. [ 192.808950][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 193.045386][ T8107] x_tables: unsorted underflow at hook 3 [ 193.371561][ T8123] comedi comedi4: bad chanlist[0]=0x00400004 chan=4 range length=2 [ 193.788786][ T8140] netlink: 32 bytes leftover after parsing attributes in process `syz.4.927'. [ 193.809571][ T8140] netlink: 32 bytes leftover after parsing attributes in process `syz.4.927'. [ 193.819969][ T8143] netlink: 88 bytes leftover after parsing attributes in process `syz.5.925'. [ 194.309897][ T8167] loop0: detected capacity change from 0 to 512 [ 194.351955][ T8162] loop5: detected capacity change from 0 to 2048 [ 194.368805][ T8167] EXT4-fs: Ignoring removed nobh option [ 194.398950][ T8162] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 194.476156][ T8162] syz.5.933: attempt to access beyond end of device [ 194.476156][ T8162] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 194.481240][ T8174] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.551198][ T8167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.601133][ T8162] syz.5.933: attempt to access beyond end of device [ 194.601133][ T8162] loop5: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 194.693700][ T8182] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.938'. [ 194.703296][ T8162] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=0) [ 194.785743][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.481845][ T8144] loop2: detected capacity change from 0 to 32768 [ 195.641748][ T8221] loop3: detected capacity change from 0 to 128 [ 195.701418][ T8144] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 195.718890][ T8221] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.019555][ T8144] XFS (loop2): Ending clean mount [ 196.051827][ T8144] XFS (loop2): Quotacheck needed: Please wait. [ 196.061184][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 196.217076][ T8144] XFS (loop2): Quotacheck: Done. [ 196.581813][ T5846] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.732925][ T8252] loop5: detected capacity change from 0 to 8192 [ 196.787246][ T8252] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.859530][ T8196] loop0: detected capacity change from 0 to 32768 [ 196.874582][ T8252] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 196.886580][ T8269] loop4: detected capacity change from 0 to 256 [ 196.901474][ T8252] FAT-fs (loop5): Filesystem has been set read-only [ 196.919330][ T8196] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.940 (8196) [ 196.978590][ T8196] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 196.980062][ T8269] exFAT-fs (loop4): start_clu is invalid cluster(0x400) [ 197.037189][ T8196] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 197.084709][ T8196] BTRFS info (device loop0): using free-space-tree [ 197.101228][ T5861] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 197.640777][ T5844] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 197.910335][ T8323] netlink: 164 bytes leftover after parsing attributes in process `syz.1.969'. [ 198.508939][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 198.540321][ T8353] netlink: 36 bytes leftover after parsing attributes in process `syz.4.974'. [ 198.688709][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.746921][ T5984] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 198.877483][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.916716][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.958697][ T9] usb 2-1: Product: syz [ 198.962888][ T9] usb 2-1: Manufacturer: syz [ 198.982448][ T5984] usb 1-1: Using ep0 maxpacket: 32 [ 199.018305][ T9] usb 2-1: SerialNumber: syz [ 199.024792][ T5984] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 199.034207][ T8374] loop3: detected capacity change from 0 to 512 [ 199.046633][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 199.060578][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.119848][ T5984] usb 1-1: Product: syz [ 199.121729][ T5965] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.124013][ T5984] usb 1-1: Manufacturer: syz [ 199.124051][ T5984] usb 1-1: SerialNumber: syz [ 199.186591][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.984'. [ 199.257390][ T8374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.348928][ T8374] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.383495][ T5984] empeg 1-1:1.0: empeg converter detected [ 199.446844][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 199.608081][ T5984] usb 1-1: empeg converter now attached to ttyUSB0 [ 199.608686][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 199.725353][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 199.796029][ T5984] usb 1-1: USB disconnect, device number 10 [ 199.858717][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 199.885450][ T5984] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 199.903340][ T8407] netlink: 31 bytes leftover after parsing attributes in process `syz.2.987'. [ 199.919337][ T5984] empeg 1-1:1.0: device disconnected [ 199.938641][ T8407] netlink: 'syz.2.987': attribute type 3 has an invalid length. [ 199.964074][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.038633][ T8407] netlink: 'syz.2.987': attribute type 2 has an invalid length. [ 200.079642][ T8407] netlink: 31 bytes leftover after parsing attributes in process `syz.2.987'. [ 201.516605][ T9] usb 2-1: USB disconnect, device number 7 [ 201.547743][ T5965] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 201.555214][ T5965] ath9k_htc: Failed to initialize the device [ 201.562762][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 201.921747][ T8473] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 202.621890][ T8505] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 203.069017][ T8529] netlink: 'syz.5.1024': attribute type 1 has an invalid length. [ 203.086836][ T8529] netlink: 'syz.5.1024': attribute type 1 has an invalid length. [ 203.190364][ T8532] netlink: 'syz.3.1025': attribute type 8 has an invalid length. [ 203.323118][ T8535] MPI: mpi too large (124808 bits) [ 203.782168][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.790076][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.248748][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1042'. [ 204.287952][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1042'. [ 204.378313][ T8586] netlink: 'syz.1.1044': attribute type 7 has an invalid length. [ 205.060700][ T8598] loop3: detected capacity change from 0 to 8192 [ 205.140629][ T8598] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.226076][ T8598] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 205.302374][ T8598] FAT-fs (loop3): Filesystem has been set read-only [ 205.340077][ T8626] --map-set only usable from mangle table [ 205.574775][ T5841] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 206.418934][ T8677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.959065][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.263817][ T8716] loop4: detected capacity change from 0 to 22 [ 207.274116][ T8716] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 207.294201][ T8716] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 207.339059][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 207.394243][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.428076][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.466177][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.491412][ T8723] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1089'. [ 207.496734][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.524745][ T8723] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1089'. [ 207.567885][ T24] usb 6-1: Product: syz [ 207.588183][ T24] usb 6-1: Manufacturer: syz [ 207.602635][ T24] usb 6-1: SerialNumber: syz [ 207.709453][ T8730] loop3: detected capacity change from 0 to 256 [ 207.768108][ T8730] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 207.882952][ T24] usb 6-1: 0:2 : does not exist [ 207.932282][ T24] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 207.959633][ T8747] x_tables: unsorted entry at hook 3 [ 208.026520][ T24] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 208.158175][ T24] usb 6-1: USB disconnect, device number 10 [ 208.365436][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.207425][ T8805] delete_channel: no stack [ 209.658702][ T5988] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.840684][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 209.885284][ T5988] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 209.921121][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.974153][ T5988] usb 1-1: config 0 descriptor?? [ 210.012688][ T5988] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 210.049962][ T8849] __vm_enough_memory: pid: 8849, comm: syz.3.1123, bytes: 4503599627366400 not enough memory for the allocation [ 210.452518][ T5988] gspca_nw80x: reg_r err -71 [ 210.468346][ T5988] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 210.525604][ T5988] usb 1-1: USB disconnect, device number 11 [ 211.459013][ T8908] loop5: detected capacity change from 0 to 4096 [ 211.487369][ T8918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1140'. [ 211.533675][ T8908] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 212.098747][ T5939] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 212.278939][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 212.326073][ T5939] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 212.358786][ T5939] usb 6-1: config 0 has no interface number 0 [ 212.382461][ T5939] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 212.417709][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.458638][ T5939] usb 6-1: Product: syz [ 212.470333][ T5939] usb 6-1: Manufacturer: syz [ 212.480853][ T5939] usb 6-1: SerialNumber: syz [ 212.506506][ T5939] usb 6-1: config 0 descriptor?? [ 212.553802][ T8963] loop1: detected capacity change from 0 to 256 [ 212.649788][ T8963] exfat: Deprecated parameter 'namecase' [ 212.742840][ T5939] ath6kl: Failed to submit usb control message: -71 [ 212.743946][ T8963] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 212.759091][ T5939] ath6kl: unable to send the bmi data to the device: -71 [ 212.775926][ T5939] ath6kl: Unable to send get target info: -71 [ 212.811237][ T5939] ath6kl: Failed to init ath6kl core: -71 [ 212.849468][ T5939] ath6kl_usb 6-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 212.915849][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.936935][ T5939] usb 6-1: USB disconnect, device number 11 [ 213.857605][ T9021] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 213.918236][ T9021] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 213.979708][ T9021] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.025853][ T9021] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.049131][ T9021] geneve2: entered promiscuous mode [ 214.088421][ T9021] geneve2: entered allmulticast mode [ 214.139736][ T9021] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.168275][ T9021] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.205470][ T9038] netlink: 'syz.4.1171': attribute type 5 has an invalid length. [ 214.214531][ T9021] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.237855][ T9038] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1171'. [ 214.248652][ T9021] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 214.367798][ T9046] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 214.376361][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 214.398160][ T9038] macvtap0: entered allmulticast mode [ 214.406703][ T9038] veth0_macvtap: entered allmulticast mode [ 215.071802][ T9073] loop1: detected capacity change from 0 to 256 [ 215.075709][ T9079] overlayfs: unescaped trailing colons in lowerdir mount option. [ 215.097933][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1186'. [ 215.879334][ T9116] loop5: detected capacity change from 0 to 64 [ 215.943126][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 215.962278][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 216.484425][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 217.086805][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1216'. [ 217.658957][ T9202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1225'. [ 217.668453][ T9202] unsupported nlmsg_type 40 [ 217.850900][ T9214] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 217.886012][ T9214] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 217.940313][ T9214] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 217.986658][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 218.023899][ T5932] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 218.180776][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 218.214715][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 218.276560][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 218.287737][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 218.305764][ T5932] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 218.316553][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.355507][ T5932] usb 3-1: config 0 descriptor?? [ 218.592966][ T5932] hdpvr 3-1:0.0: firmware version 0x8 dated [ 218.797839][ T5932] hdpvr 3-1:0.0: device init failed [ 218.838502][ T5932] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 218.883343][ T9257] binder: 9253:9257 ioctl c018620c 200000000000 returned -1 [ 218.890862][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 218.899052][ T5932] usb 3-1: USB disconnect, device number 8 [ 219.278962][ T9279] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 219.286729][ T9279] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1248'. [ 219.596985][ T9288] : entered promiscuous mode [ 220.436584][ T9329] netlink: 'syz.4.1264': attribute type 1 has an invalid length. [ 220.445379][ T9325] delete_channel: no stack [ 220.532801][ T9337] loop2: detected capacity change from 0 to 256 [ 221.057422][ T9356] xt_HMARK: spi-set and port-set can't be combined [ 221.076281][ T9357] loop2: detected capacity change from 0 to 256 [ 221.213045][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 221.213524][ T9364] warning: `syz.1.1276' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.219397][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 221.237128][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 221.243209][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 221.248659][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 221.250229][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 222.368444][ T9425] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1292'. [ 222.425563][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1292'. [ 222.501578][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1292'. [ 222.783795][ T9445] IPv6: sit1: Disabled Multicast RS [ 222.861068][ T9445] sit1: entered allmulticast mode [ 223.848053][ T9433] loop2: detected capacity change from 0 to 32768 [ 223.863324][ T9433] XFS: ikeep mount option is deprecated. [ 223.903072][ T9433] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 224.019177][ T9433] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.029196][ T51] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 224.305073][ T9433] XFS (loop2): Ending clean mount [ 224.336022][ T9433] XFS (loop2): Quotacheck needed: Please wait. [ 224.493708][ T9433] XFS (loop2): Quotacheck: Done. [ 224.518843][ T9529] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.548951][ T9533] SET target dimension over the limit! [ 224.899007][ T5846] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.987405][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 225.199842][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 225.217070][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.238643][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.305226][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.324480][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.344700][ T9] usb 2-1: Product: syz [ 225.349139][ T9] usb 2-1: Manufacturer: syz [ 225.353756][ T9] usb 2-1: SerialNumber: syz [ 225.455191][ T9570] loop4: detected capacity change from 0 to 1024 [ 225.571485][ T9570] hfsplus: filesystem is marked journaled, leaving read-only. [ 225.615208][ T9] usb 2-1: 0:2 : does not exist [ 225.648219][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 225.709860][ T9] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 225.778423][ T9584] usb usb9: usbfs: process 9584 (syz.0.1339) did not claim interface 0 before use [ 225.850149][ T9] usb 2-1: USB disconnect, device number 8 [ 225.927862][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.996076][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1341'. [ 226.058723][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1341'. [ 226.336644][ T9613] loop4: detected capacity change from 0 to 256 [ 226.430008][ T9613] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 226.725499][ T9563] loop3: detected capacity change from 0 to 32768 [ 226.765908][ T9563] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1334 (9563) [ 226.845078][ T9629] loop5: detected capacity change from 0 to 1024 [ 226.911539][ T9563] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 226.958636][ T9563] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 227.020613][ T9563] BTRFS info (device loop3): using free-space-tree [ 227.542874][ T9680] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1358'. [ 227.759958][ T5841] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 227.798717][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 227.842127][ T9693] loop1: detected capacity change from 0 to 256 [ 227.923841][ T9693] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 228.015828][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 228.048585][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.086498][ T9693] loop1: Can't mount, would change RO state [ 228.101367][ T9] usb 5-1: Product: syz [ 228.105558][ T9] usb 5-1: Manufacturer: syz [ 228.136105][ T9706] wg1: entered promiscuous mode [ 228.153629][ T9] usb 5-1: SerialNumber: syz [ 228.169091][ T9706] wg1: entered allmulticast mode [ 228.193653][ T9] usb 5-1: config 0 descriptor?? [ 228.238327][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 228.277561][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 228.310172][ T9] f81232 5-1:0.0: f81534a converter detected [ 228.466054][ T9] usb 5-1: f81534a converter now attached to ttyUSB0 [ 228.541465][ T9719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.817210][ T9] usb 5-1: USB disconnect, device number 10 [ 228.866488][ T9] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 228.906361][ T9] f81232 5-1:0.0: device disconnected [ 229.819201][ T9787] Cannot find add_set index 0 as target [ 229.967808][ T9785] loop1: detected capacity change from 0 to 4096 [ 230.028125][ T9785] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 230.093560][ T9785] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 230.765072][ T9828] process 'syz.3.1402' launched './file0' with NULL argv: empty string added [ 231.170720][ T9841] loop2: detected capacity change from 0 to 256 [ 231.272643][ T9841] FAT-fs (loop2): Directory bread(block 64) failed [ 231.285442][ T9847] loop3: detected capacity change from 0 to 256 [ 231.292496][ T9848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1409'. [ 231.298651][ T9841] FAT-fs (loop2): Directory bread(block 65) failed [ 231.348842][ T9841] FAT-fs (loop2): Directory bread(block 66) failed [ 231.355506][ T9841] FAT-fs (loop2): Directory bread(block 67) failed [ 231.428797][ T9841] FAT-fs (loop2): Directory bread(block 68) failed [ 231.437270][ T9841] FAT-fs (loop2): Directory bread(block 69) failed [ 231.519877][ T9841] FAT-fs (loop2): Directory bread(block 70) failed [ 231.560733][ T9841] FAT-fs (loop2): Directory bread(block 71) failed [ 231.595291][ T9841] FAT-fs (loop2): Directory bread(block 72) failed [ 231.637378][ T9841] FAT-fs (loop2): Directory bread(block 73) failed [ 231.793772][ T30] audit: type=1326 audit(1753100685.354:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 231.898893][ T30] audit: type=1326 audit(1753100685.354:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 231.949480][ T30] audit: type=1326 audit(1753100685.404:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 231.973107][ T30] audit: type=1326 audit(1753100685.404:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 231.996950][ T30] audit: type=1326 audit(1753100685.404:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9866 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 232.918795][ T9922] block nbd3: NBD_DISCONNECT [ 233.001360][ T9923] loop2: detected capacity change from 0 to 2048 [ 233.089931][ T9923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.228584][ T9923] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 188 with incorrect tag 0 [ 233.261309][ T9935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.321748][ T9939] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 233.367888][ T9939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1437'. [ 233.875039][ T9966] netlink: 'syz.4.1445': attribute type 2 has an invalid length. [ 233.903224][ T9966] netlink: 'syz.4.1445': attribute type 3 has an invalid length. [ 233.912060][ T9970] netlink: 'syz.3.1446': attribute type 4 has an invalid length. [ 233.977417][ T9973] syz.5.1444 uses obsolete (PF_INET,SOCK_PACKET) [ 234.273325][ T9982] loop3: detected capacity change from 0 to 512 [ 234.515836][ T9982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.541859][ T9982] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.853515][ T9930] loop1: detected capacity change from 0 to 32768 [ 234.890358][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.990877][ T9930] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.038748][ T5984] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 235.067172][T10027] loop2: detected capacity change from 0 to 8 [ 235.080684][T10023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.137349][ T9930] XFS (loop1): Ending clean mount [ 235.170918][ T9930] XFS (loop1): Quotacheck needed: Please wait. [ 235.188636][ T5984] usb 5-1: Using ep0 maxpacket: 8 [ 235.226914][ T9930] XFS (loop1): Quotacheck: Done. [ 235.238674][ T5984] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 235.287390][ T5984] usb 5-1: config 0 has no interface number 1 [ 235.315232][ T5984] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 235.379070][ T5984] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 235.422830][ T5984] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 235.468606][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.476668][ T5984] usb 5-1: Product: syz [ 235.509212][ T5984] usb 5-1: Manufacturer: syz [ 235.513862][ T5984] usb 5-1: SerialNumber: syz [ 235.565607][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.579731][ T5984] usb 5-1: config 0 descriptor?? [ 235.616609][ T5984] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 235.862361][ T5984] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 235.877354][ T2336] pvrusb2: Invalid read control endpoint [ 235.908997][ T2336] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 235.918313][ T2336] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 236.068671][ T5984] usb 5-1: USB disconnect, device number 11 [ 236.205209][ T5988] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 236.459516][ T5988] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 236.479050][T10087] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 236.497960][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.540312][ T5988] usb 1-1: config 0 descriptor?? [ 236.609250][ T5988] cp210x 1-1:0.0: cp210x converter detected [ 236.822431][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1477'. [ 236.862895][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1477'. [ 237.061732][ T5988] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 237.091930][ T5988] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 237.108933][ T5988] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 237.135463][ T5988] usb 1-1: cp210x converter now attached to ttyUSB0 [ 237.153577][ T5988] usb 1-1: USB disconnect, device number 12 [ 237.208289][ T5988] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 237.255519][ T5988] cp210x 1-1:0.0: device disconnected [ 237.587739][T10153] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1490'. [ 238.391017][ T30] audit: type=1326 audit(1753100691.934:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 238.413297][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.520966][ T30] audit: type=1326 audit(1753100691.934:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 238.561186][T10199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.596626][ T30] audit: type=1326 audit(1753100692.004:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 238.707254][ T30] audit: type=1326 audit(1753100692.004:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 238.729559][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.872120][ T30] audit: type=1326 audit(1753100692.004:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10194 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 238.920426][ T5988] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 239.127493][ T5988] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 239.177070][ T5988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 239.250249][ T5988] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 239.297165][ T5988] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 239.337864][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.389573][ T5988] usb 6-1: config 0 descriptor?? [ 239.414468][T10209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 239.456221][ T5988] gspca_main: spca561-2.14.0 probing abcd:cdee [ 239.663350][ T5988] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 239.694790][ T5988] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.734917][ T5988] usb 6-1: MIDIStreaming interface descriptor not found [ 239.907700][ T5988] usb 6-1: USB disconnect, device number 12 [ 240.079812][T10283] loop2: detected capacity change from 0 to 1024 [ 240.358921][ T49] hfsplus: b-tree write err: -5, ino 4 [ 240.436214][T10298] loop4: detected capacity change from 0 to 256 [ 240.609375][T10298] FAT-fs (loop4): Directory bread(block 64) failed [ 240.667759][T10298] FAT-fs (loop4): Directory bread(block 65) failed [ 240.708352][T10298] FAT-fs (loop4): Directory bread(block 66) failed [ 240.752967][T10298] FAT-fs (loop4): Directory bread(block 67) failed [ 240.813700][T10298] FAT-fs (loop4): Directory bread(block 68) failed [ 240.875052][T10298] FAT-fs (loop4): Directory bread(block 69) failed [ 240.908678][T10298] FAT-fs (loop4): Directory bread(block 70) failed [ 240.943488][T10298] FAT-fs (loop4): Directory bread(block 71) failed [ 240.968934][T10298] FAT-fs (loop4): Directory bread(block 72) failed [ 240.990153][T10310] loop2: detected capacity change from 0 to 4096 [ 240.995869][T10298] FAT-fs (loop4): Directory bread(block 73) failed [ 241.185767][T10298] FAT-fs (loop4): Filesystem has been set read-only [ 241.218394][ T30] audit: type=1800 audit(1753100694.774:28): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1519" name="cpu.stat" dev="loop4" ino=1048636 res=0 errno=0 [ 241.239088][ T5988] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 241.258039][T10298] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006c61) [ 241.428592][ T5988] usb 6-1: Using ep0 maxpacket: 16 [ 241.442161][ T5988] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 241.471568][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.522190][ T5988] usb 6-1: Product: syz [ 241.526382][ T5988] usb 6-1: Manufacturer: syz [ 241.582001][ T5988] usb 6-1: SerialNumber: syz [ 241.668722][ T5988] r8152-cfgselector 6-1: Unknown version 0x0000 [ 241.676984][ T5988] r8152-cfgselector 6-1: config 0 descriptor?? [ 242.150143][ T5988] r8152-cfgselector 6-1: USB disconnect, device number 13 [ 242.294450][T10299] loop1: detected capacity change from 0 to 32768 [ 242.385891][T10299] [ 242.385891][T10299] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.385891][T10299] [ 242.453684][T10299] jfs_rename did not expect dtDelete to return rc = -5 [ 242.498602][T10299] ERROR: (device loop1): txAbort: [ 242.498602][T10299] [ 242.621189][T10369] loop3: detected capacity change from 0 to 64 [ 242.679098][ T5971] [ 242.679098][ T5971] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.679098][ T5971] [ 242.734756][ T5971] [ 242.734756][ T5971] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.734756][ T5971] [ 242.770510][T10369] Trying to free block not in datazone [ 242.780483][ T5845] [ 242.780483][ T5845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.780483][ T5845] [ 242.849477][ T111] [ 242.849477][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.849477][ T111] [ 242.907148][ T5845] [ 242.907148][ T5845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.907148][ T5845] [ 243.685746][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 244.233023][T10432] loop3: detected capacity change from 0 to 736 [ 244.661285][T10452] trusted_key: encrypted_key: insufficient parameters specified [ 244.758906][ T5965] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 244.942640][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 244.986452][ T5965] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 244.998638][ T5965] usb 2-1: config 0 has no interface number 0 [ 245.004767][ T5965] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.070955][ T5965] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 245.104611][ T5965] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 245.114712][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.134461][ T5965] usb 2-1: Product: syz [ 245.144579][ T5965] usb 2-1: Manufacturer: syz [ 245.154703][ T5965] usb 2-1: SerialNumber: syz [ 245.169440][ T5965] usb 2-1: config 0 descriptor?? [ 245.394642][ T5965] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 245.456682][ T5965] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 245.497866][ T5965] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 245.548645][ T5965] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 245.596828][ T5965] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 245.677003][ T5965] usb 2-1: USB disconnect, device number 9 [ 245.740134][ T5965] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 245.841488][ T5965] keyspan 2-1:0.133: device disconnected [ 246.402249][T10534] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 246.694132][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1572'. [ 246.703259][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1572'. [ 246.851275][T10555] Cannot find del_set index 2 as target [ 247.280732][T10560] loop5: detected capacity change from 0 to 1764 [ 247.800194][T10584] loop3: detected capacity change from 0 to 1024 [ 247.948294][T10584] hfsplus: extend alloc file! (8192,512,16777719) [ 247.973201][ T5939] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 248.214602][ T5939] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 248.257027][ T5939] usb 3-1: config 0 has no interface number 0 [ 248.278652][ T5939] usb 3-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 248.292597][T10542] loop4: detected capacity change from 0 to 32768 [ 248.318589][ T5939] usb 3-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 248.368617][ T5939] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid maxpacket 1696, setting to 64 [ 248.414630][ T5939] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 248.464838][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.470950][T10613] openvswitch: netlink: Missing key (keys=40, expected=100) [ 248.523142][ T5939] usb 3-1: config 0 descriptor?? [ 248.547652][T10585] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.807940][ T5939] usb 3-1: string descriptor 0 read error: -71 [ 248.833314][ T5939] usbtest 3-1:0.138: Linux gadget zero [ 248.850678][ T5939] usbtest 3-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt) [ 248.902900][ T5939] usb 3-1: USB disconnect, device number 9 [ 248.921126][T10629] loop3: detected capacity change from 0 to 64 [ 249.371307][T10644] loop4: detected capacity change from 0 to 2048 [ 249.448167][T10644] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 249.533865][T10644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.538635][ T5939] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 250.756120][ T5939] usb 1-1: config 6 has an invalid interface number: 108 but max is 0 [ 250.783177][ T5939] usb 1-1: config 6 has no interface number 0 [ 250.804619][ T5939] usb 1-1: config 6 interface 108 has no altsetting 0 [ 250.866430][ T5939] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 250.893135][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.915277][ T5939] usb 1-1: Product: syz [ 250.928570][ T5939] usb 1-1: Manufacturer: syz [ 250.933196][ T5939] usb 1-1: SerialNumber: syz [ 251.225705][ T5939] mos7840 1-1:6.108: missing endpoints [ 251.248912][T10713] loop1: detected capacity change from 0 to 256 [ 251.279856][ T5939] usb 1-1: USB disconnect, device number 13 [ 251.807667][T10742] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 251.848595][T10742] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1620'. [ 251.898704][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 252.087866][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 252.178661][ T5939] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 252.382239][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1629'. [ 252.391441][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 252.412708][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 252.454869][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1629'. [ 252.473528][T10760] loop2: detected capacity change from 0 to 4096 [ 252.474470][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 252.499411][T10765] netlink: 'syz.0.1629': attribute type 4 has an invalid length. [ 252.541087][ T5939] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 252.558622][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.607884][ T5939] usb 4-1: Product: syz [ 252.621583][ T5939] usb 4-1: Manufacturer: syz [ 252.626214][ T5939] usb 4-1: SerialNumber: syz [ 252.686719][ T5939] usb 4-1: config 0 descriptor?? [ 252.724535][T10746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.764882][T10746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.799953][ T5939] usb 4-1: ucan: probing device on interface #0 [ 253.040306][ T5939] usb 4-1: ucan: device protocol version 0 is not supported [ 253.050390][ T5939] usb 4-1: ucan: probe failed; try to update the device firmware [ 253.313667][ T5988] usb 4-1: USB disconnect, device number 6 [ 253.900260][T10810] loop1: detected capacity change from 0 to 1764 [ 253.981541][T10817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1642'. [ 254.076801][T10780] loop4: detected capacity change from 0 to 32768 [ 254.201530][T10780] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.446653][ T30] audit: type=1326 audit(1753100708.004:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10835 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 254.532528][ T30] audit: type=1326 audit(1753100708.004:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10835 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 254.633850][ T30] audit: type=1326 audit(1753100708.064:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10835 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 254.715672][T10780] XFS (loop4): Ending clean mount [ 254.731266][T10847] comedi: No check for data length of config insn id 4095 is implemented [ 254.784728][ T30] audit: type=1326 audit(1753100708.064:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10835 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 254.818722][T10847] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 254.874269][T10847] comedi: Assuming n=15 is correct [ 254.906347][ T30] audit: type=1326 audit(1753100708.064:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10835 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 255.069137][ T5840] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.933133][T10895] loop3: detected capacity change from 0 to 8 [ 255.970226][T10895] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 256.034132][ T5860] udevd[5860]: incorrect cramfs checksum on /dev/loop3 [ 256.050581][T10895] cramfs: Error -5 while decompressing! [ 256.056314][T10895] cramfs: ffffffff9aec2ec8(26)->ffff88807843c000(4096) [ 256.099457][T10895] cramfs: Error -3 while decompressing! [ 256.107723][ T5860] udevd[5860]: incorrect cramfs checksum on /dev/loop3 [ 256.134541][T10895] cramfs: ffffffff9aec2ee2(26)->ffff88806dd03000(4096) [ 256.166221][T10895] cramfs: Error -3 while decompressing! [ 256.193697][T10895] cramfs: ffffffff9aec2efc(16)->ffff88806dd02000(4096) [ 256.209146][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 256.209562][T10895] cramfs: Error -5 while decompressing! [ 256.274568][T10895] cramfs: ffffffff9aec2ec8(26)->ffff88807843c000(4096) [ 256.300033][ T30] audit: type=1800 audit(1753100709.864:34): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1664" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 256.425589][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 256.459278][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.487660][ T9] usb 1-1: config 0 has no interface number 0 [ 256.508058][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 256.565403][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 256.584828][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.618125][ T9] usb 1-1: Product: syz [ 256.646685][ T9] usb 1-1: Manufacturer: syz [ 256.658812][ T9] usb 1-1: SerialNumber: syz [ 256.741008][ T9] usb 1-1: config 0 descriptor?? [ 256.810095][T10930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1674'. [ 256.896704][T10937] loop2: detected capacity change from 0 to 1024 [ 256.960143][ T9] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 257.082781][T10947] loop1: detected capacity change from 0 to 64 [ 257.119532][ T5965] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 257.194074][T10947] Trying to free block not in datazone [ 257.222530][ T10] usb 1-1: USB disconnect, device number 14 [ 257.319332][ T5965] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 257.356597][ T5965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.407736][ T5965] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.448789][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.477113][ T5965] usb 4-1: Product: syz [ 257.489521][ T5965] usb 4-1: Manufacturer: syz [ 257.512293][ T5965] usb 4-1: SerialNumber: syz [ 257.541364][ T5965] usb 4-1: config 0 descriptor?? [ 257.572032][ T5965] usb 4-1: selecting invalid altsetting 0 [ 257.842668][ T5932] usb 4-1: USB disconnect, device number 7 [ 257.869287][T10997] C: renamed from lo (while UP) [ 257.948469][T10997] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 258.039611][T10999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.166702][T11060] xt_ipcomp: unknown flags 12 [ 259.436049][ T5939] IPVS: starting estimator thread 0... [ 259.540342][T11079] IPVS: using max 21 ests per chain, 50400 per kthread [ 259.947530][T11061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.959132][T11061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 259.984986][T11099] ipt_REJECT: TCP_RESET invalid for non-tcp [ 259.987585][T11061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.016580][T11101] gtp0: entered promiscuous mode [ 260.019394][T11093] loop2: detected capacity change from 0 to 4096 [ 260.023058][T11061] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 260.056009][T11101] gtp0: entered allmulticast mode [ 260.075954][T11061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.083160][T11061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 260.150521][T11061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.189027][T11061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 260.217723][T11111] loop5: detected capacity change from 0 to 512 [ 260.238867][T11093] ntfs3(loop2): ino=5, "/" indx_read [ 260.337432][T11111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.361717][T11061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.367733][T11061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 260.420549][T11111] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.494316][T11061] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 260.530028][T11061] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 260.643071][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.868777][ T5965] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 260.934203][T11145] loop5: detected capacity change from 0 to 256 [ 261.053875][ T5965] usb 1-1: unable to get BOS descriptor or descriptor too short [ 261.080940][ T5965] usb 1-1: config 66 interface 0 has no altsetting 0 [ 261.089098][T11145] FAT-fs (loop5): Directory bread(block 64) failed [ 261.095643][T11145] FAT-fs (loop5): Directory bread(block 65) failed [ 261.108995][T11145] FAT-fs (loop5): Directory bread(block 66) failed [ 261.116832][T11145] FAT-fs (loop5): Directory bread(block 67) failed [ 261.123547][ T5965] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 261.134913][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.156113][T11145] FAT-fs (loop5): Directory bread(block 68) failed [ 261.166163][ T5965] usb 1-1: Product: syz [ 261.175126][ T5965] usb 1-1: Manufacturer: syz [ 261.180260][T11145] FAT-fs (loop5): Directory bread(block 69) failed [ 261.188797][ T5965] usb 1-1: SerialNumber: syz [ 261.193609][T11145] FAT-fs (loop5): Directory bread(block 70) failed [ 261.206639][T11145] FAT-fs (loop5): Directory bread(block 71) failed [ 261.214192][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 261.220619][T11145] FAT-fs (loop5): Directory bread(block 72) failed [ 261.227240][T11145] FAT-fs (loop5): Directory bread(block 73) failed [ 261.454483][ T5965] ati_remote2 1-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 261.525411][ T5965] usb 1-1: USB disconnect, device number 15 [ 262.008973][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 262.091679][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 262.177514][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 262.408747][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 262.568647][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 262.591688][T11159] loop1: detected capacity change from 0 to 32768 [ 262.610699][T11209] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 262.612325][ T30] audit: type=1800 audit(1753100716.174:35): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1730" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 263.295466][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 263.975318][T11259] xt_CT: No such helper "snmp" [ 264.089250][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 264.168948][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 264.248744][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 264.490002][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 264.574235][ T796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.588791][T11296] syz.4.1774 uses old SIOCAX25GETINFO [ 264.658715][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 264.727247][T11294] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 265.035677][T11318] Unknown options in mask 5 [ 265.213121][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.220697][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.555971][T11425] loop5: detected capacity change from 0 to 4096 [ 267.592865][T11425] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 267.717412][T11425] ntfs3(loop5): ino=19, mi_enum_attr [ 267.735732][T11425] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 267.815159][T11440] loop3: detected capacity change from 0 to 4096 [ 267.851797][T11425] ntfs3(loop5): failed to convert "c46c" to maccyrillic [ 267.864321][T11440] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 267.890947][T11425] ntfs3(loop5): ino=20, mi_enum_attr [ 268.006515][T11440] ntfs3(loop3): ino=19, mi_enum_attr [ 268.110309][T11440] ntfs3(loop3): failed to convert "c46c" to cp936 [ 268.160417][T11440] ntfs3(loop3): ino=20, mi_enum_attr [ 269.005472][T11459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.029149][T11459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.035651][T11459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.089019][T11459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.095147][T11459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.148512][T11459] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 269.487264][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'. [ 269.803485][T11485] loop3: detected capacity change from 0 to 32768 [ 269.858631][T11485] (syz.3.1836,11485,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 269.929796][T11485] (syz.3.1836,11485,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 270.195204][T11485] JBD2: Ignoring recovery information on journal [ 270.318629][T11485] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 270.329902][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 270.337450][ T5971] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.363963][ T796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.767161][T11557] loop2: detected capacity change from 0 to 2048 [ 270.824961][T11557] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 270.921785][T11557] syz.2.1861: attempt to access beyond end of device [ 270.921785][T11557] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 270.922264][T11574] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.018844][ T5939] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 271.049242][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 271.049819][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 271.131187][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 271.132015][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 271.147130][ T5841] ocfs2: Unmounting device (7,3) on (node local) [ 271.178809][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 271.186062][ T5939] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 271.208787][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.219521][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 271.238898][ T5939] usb 1-1: config 0 has no interface number 0 [ 271.257959][ T5939] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 271.268767][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.276784][ T5939] usb 1-1: Product: syz [ 271.281546][ T5939] usb 1-1: Manufacturer: syz [ 271.286181][ T5939] usb 1-1: SerialNumber: syz [ 271.301583][ T5939] usb 1-1: config 0 descriptor?? [ 271.489144][ T5965] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 271.561324][ T5939] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 271.586218][T11596] xt_TCPMSS: Only works on TCP SYN packets [ 271.588644][ T5939] usb 1-1: No valid video chain found. [ 271.684700][ T5965] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 271.707710][ T5965] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.742161][ T5965] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 271.759728][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.784379][ T5855] Bluetooth: hci0: unexpected event for opcode 0x042c [ 271.805732][ T5965] usb 6-1: Product: syz [ 271.818727][ T5965] usb 6-1: Manufacturer: syz [ 271.823357][ T5965] usb 6-1: SerialNumber: syz [ 271.880678][ T10] usb 1-1: USB disconnect, device number 16 [ 271.887759][ T5965] usb 6-1: config 0 descriptor?? [ 271.929183][T11607] netlink: 'syz.3.1879': attribute type 5 has an invalid length. [ 271.934888][ T5965] usb 6-1: selecting invalid altsetting 0 [ 271.944689][T11607] netlink: 'syz.3.1879': attribute type 7 has an invalid length. [ 271.949014][T11601] loop4: detected capacity change from 0 to 1024 [ 271.994052][T11601] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 272.015535][T11607] : entered promiscuous mode [ 272.249493][T11634] loop1: detected capacity change from 0 to 64 [ 272.318231][ T5965] usb 6-1: USB disconnect, device number 14 [ 272.347110][T11641] netlink: 'syz.2.1876': attribute type 3 has an invalid length. [ 272.799491][T11672] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 273.545377][T11700] netlink: 'syz.2.1891': attribute type 10 has an invalid length. [ 273.605033][T11700] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1891'. [ 273.659793][T11705] bridge1: entered promiscuous mode [ 274.118739][T11731] tipc: Can't bind to reserved service type 2 [ 274.478719][T11747] netlink: 'syz.4.1907': attribute type 29 has an invalid length. [ 274.486585][T11747] netlink: 'syz.4.1907': attribute type 3 has an invalid length. [ 274.544359][T11747] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1907'. [ 274.981411][T11773] loop4: detected capacity change from 0 to 256 [ 275.159204][T11773] FAT-fs (loop4): Directory bread(block 64) failed [ 275.197371][T11773] FAT-fs (loop4): Directory bread(block 65) failed [ 275.235829][T11773] FAT-fs (loop4): Directory bread(block 66) failed [ 275.252139][T11786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1919'. [ 275.281246][T11773] FAT-fs (loop4): Directory bread(block 67) failed [ 275.299705][T11786] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1919'. [ 275.319436][T11773] FAT-fs (loop4): Directory bread(block 68) failed [ 275.329462][T11786] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1919'. [ 275.355191][T11773] FAT-fs (loop4): Directory bread(block 69) failed [ 275.370404][T11786] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 275.392512][T11773] FAT-fs (loop4): Directory bread(block 70) failed [ 275.400577][T11773] FAT-fs (loop4): Directory bread(block 71) failed [ 275.411982][T11790] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1922'. [ 275.455927][T11773] FAT-fs (loop4): Directory bread(block 72) failed [ 275.504227][T11773] FAT-fs (loop4): Directory bread(block 73) failed [ 275.854674][ T5855] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 275.863384][ T5855] Bluetooth: hci0: Injecting HCI hardware error event [ 275.879048][ T5855] Bluetooth: hci0: hardware error 0x00 [ 276.036149][T11820] loop2: detected capacity change from 0 to 16 [ 276.089152][ T2980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.089636][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.121931][T11820] erofs (device loop2): mounted with root inode @ nid 36. [ 276.183476][T11820] erofs (device loop2): invalid tail-packing pclustersize 32768 [ 276.204004][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 276.207265][T11820] erofs (device loop2): invalid tail-packing pclustersize 32768 [ 276.248651][T11820] erofs (device loop2): read error -117 @ 32811 of nid 36 [ 276.256040][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 276.390924][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 276.431593][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 276.455605][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 276.546356][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 276.570465][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.578483][ T9] usb 1-1: Product: syz [ 276.616544][ T9] usb 1-1: Manufacturer: syz [ 276.635805][ T9] usb 1-1: SerialNumber: syz [ 276.661976][ T9] usb 1-1: config 0 descriptor?? [ 276.923548][ T9] usb 1-1: USB disconnect, device number 17 [ 276.960600][T11870] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 277.788600][ T30] audit: type=1326 audit(1753100731.344:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11910 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5518e9a9 code=0x7ffc0000 [ 277.911971][ T30] audit: type=1326 audit(1753100731.344:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11910 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5518e9a9 code=0x7ffc0000 [ 277.938955][ T5855] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 278.078663][ T30] audit: type=1326 audit(1753100731.374:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11910 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f3a5518e9a9 code=0x7ffc0000 [ 278.172386][ T30] audit: type=1326 audit(1753100731.374:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11910 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5518e9a9 code=0x7ffc0000 [ 278.291248][ T30] audit: type=1326 audit(1753100731.374:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11910 comm="syz.0.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5518e9a9 code=0x7ffc0000 [ 278.313510][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.369016][T11938] loop2: detected capacity change from 0 to 764 [ 278.428698][ T30] audit: type=1326 audit(1753100731.984:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11939 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5518e9a9 code=0x50000 [ 278.459641][T11938] rock: directory entry would overflow storage [ 278.470709][T11938] rock: sig=0x5245, size=8, remaining=5 [ 278.493422][ T30] audit: type=1326 audit(1753100731.984:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11939 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5518e9a9 code=0x50000 [ 278.515411][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.592861][ T30] audit: type=1326 audit(1753100731.984:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11939 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5518e9a9 code=0x50000 [ 278.614855][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.708114][ T30] audit: type=1326 audit(1753100731.984:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11939 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5518e9a9 code=0x50000 [ 278.762381][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1965'. [ 278.825435][ T30] audit: type=1326 audit(1753100731.984:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11939 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a5518e9a9 code=0x50000 [ 279.206402][T11919] loop1: detected capacity change from 0 to 32768 [ 279.228213][T11960] loop2: detected capacity change from 0 to 1024 [ 279.258818][ T5939] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 279.301389][T11922] loop3: detected capacity change from 0 to 32768 [ 279.433903][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 279.458246][ T5939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.498626][ T5939] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 279.533690][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.578370][ T5939] usb 6-1: config 0 descriptor?? [ 279.600428][ T796] hfsplus: b-tree write err: -5, ino 4 [ 279.612514][ T5939] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 280.023641][ T5939] gspca_vc032x: reg_w err -71 [ 280.041119][ T5939] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 280.081460][ T5939] usb 6-1: USB disconnect, device number 15 [ 280.296102][T11994] loop2: detected capacity change from 0 to 1024 [ 280.700019][ T5971] hfsplus: b-tree write err: -5, ino 4 [ 281.478694][T12033] bond0: Error: Cannot enslave bond to itself. [ 281.616814][T12040] loop2: detected capacity change from 0 to 1024 [ 281.849407][ T5971] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.858913][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.969491][ T12] hfsplus: b-tree write err: -5, ino 4 [ 282.354848][T12071] loop1: detected capacity change from 0 to 128 [ 282.429677][T12071] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 282.453207][T12077] netlink: 'syz.3.1998': attribute type 4 has an invalid length. [ 282.489207][T12071] FAT-fs (loop1): Filesystem has been set read-only [ 282.669683][T12091] gre0: entered allmulticast mode [ 283.289587][T12118] netlink: 'syz.1.2011': attribute type 2 has an invalid length. [ 283.545797][ T30] kauditd_printk_skb: 1694 callbacks suppressed [ 283.545820][ T30] audit: type=1326 audit(1753100737.104:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 283.657256][T12131] comedi comedi0: pcl726: I/O port conflict (0x9,16) [ 283.678642][ T30] audit: type=1326 audit(1753100737.104:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 283.777528][ T30] audit: type=1326 audit(1753100737.154:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 283.908824][ T30] audit: type=1326 audit(1753100737.154:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 284.038851][ T30] audit: type=1326 audit(1753100737.154:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc118e9a9 code=0x7ffc0000 [ 284.513117][T12112] loop5: detected capacity change from 0 to 32768 [ 284.580087][T12112] (syz.5.2008,12112,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.676347][T12112] (syz.5.2008,12112,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.826738][T12112] JBD2: Ignoring recovery information on journal [ 284.867493][T12178] loop3: detected capacity change from 0 to 2048 [ 285.005591][T12112] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 285.054395][T12190] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.073629][T12181] loop1: detected capacity change from 0 to 4096 [ 285.138467][T12178] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 285.166262][T12181] ntfs3(loop1): ino=3, Correct links count -> 2. [ 285.250686][T12178] Remounting filesystem read-only [ 285.726333][ T5861] ocfs2: Unmounting device (7,5) on (node local) [ 285.756925][T12211] netlink: 'syz.3.2038': attribute type 12 has an invalid length. [ 286.970323][ T796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.508855][T12291] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 287.618171][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.772131][T12253] loop1: detected capacity change from 0 to 32768 [ 287.809428][T12253] (syz.1.2051,12253,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 287.865320][T12253] (syz.1.2051,12253,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 287.965761][T12253] JBD2: Ignoring recovery information on journal [ 288.111778][T12253] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 288.520561][ T5845] ocfs2: Unmounting device (7,1) on (node local) [ 289.065132][T12347] loop5: detected capacity change from 0 to 1024 [ 289.132144][T12347] EXT4-fs: Ignoring removed oldalloc option [ 289.197736][T12347] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 289.282159][T12347] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 289.395321][T12347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.501759][T12347] fscrypt (loop5, inode 15): Error -61 getting encryption context [ 289.695432][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.170699][T12337] loop2: detected capacity change from 0 to 32768 [ 290.225223][T12337] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2079 (12337) [ 290.289234][T12337] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 290.318207][T12337] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 290.366424][T12337] BTRFS info (device loop2): using free-space-tree [ 290.636667][T12417] ip6gre2: entered allmulticast mode [ 290.843281][T12356] loop1: detected capacity change from 0 to 32768 [ 291.090918][ T5846] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 291.101908][T12356] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 291.190267][T12356] (syz.1.2077,12356,1):ocfs2_mknod:502 ERROR: status = -2 [ 291.222613][T12356] (syz.1.2077,12356,1):ocfs2_create:675 ERROR: status = -2 [ 291.529233][ T5845] (syz-executor,5845,1):ocfs2_inode_is_valid_to_delete:866 ERROR: Skipping delete of root inode. [ 291.608306][ T5845] ocfs2: Unmounting device (7,1) on (node local) [ 291.798890][T12458] netlink: 'syz.1.2105': attribute type 9 has an invalid length. [ 291.911289][T12458] netlink: 'syz.1.2105': attribute type 6 has an invalid length. [ 292.368899][T12475] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2112'. [ 292.730908][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.982212][T12496] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 293.226856][T12504] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 293.243405][T12504] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2122'. [ 293.369473][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.409488][T12455] loop5: detected capacity change from 0 to 40427 [ 293.445517][T12455] F2FS-fs (loop5): Image doesn't support compression [ 293.474614][T12455] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 293.524766][T12455] F2FS-fs (loop5): invalid crc value [ 293.973116][T12455] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 293.985433][T12532] loop3: detected capacity change from 0 to 512 [ 294.096864][T12532] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2131: casefold flag without casefold feature [ 294.129314][T12532] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2131: couldn't read orphan inode 15 (err -117) [ 294.164262][T12532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.198972][T12532] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.2131: Directory hole found for htree leaf block 0 [ 294.213080][T12543] loop2: detected capacity change from 0 to 2048 [ 294.311924][T12543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.365974][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.377237][ T5861] syz-executor: attempt to access beyond end of device [ 294.377237][ T5861] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 294.417423][T12551] syz.1.2137: attempt to access beyond end of device [ 294.417423][T12551] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 294.430928][T12551] hpfs: hpfs_map_sector(): read error [ 294.454903][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 294.454950][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.454973][ T5861] Call Trace: [ 294.454984][ T5861] [ 294.454998][ T5861] dump_stack_lvl+0x16c/0x1f0 [ 294.455043][ T5861] f2fs_handle_critical_error+0x621/0x9f0 [ 294.455107][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.455153][ T5861] ? f2fs_build_fault_attr+0x53/0x1f0 [ 294.455214][ T5861] f2fs_write_end_io+0x785/0xc20 [ 294.455279][ T5861] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 294.455347][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.455404][ T5861] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 294.455464][ T5861] bio_endio+0x70d/0x850 [ 294.455515][ T5861] submit_bio_noacct+0x56d/0x1eb0 [ 294.455587][ T5861] __submit_merged_bio+0x33c/0x770 [ 294.455655][ T5861] __submit_merged_write_cond+0x319/0x3f0 [ 294.455730][ T5861] f2fs_write_cache_pages+0x2067/0x2570 [ 294.455805][ T5861] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 294.455856][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.455900][ T5861] ? __kasan_check_byte+0x13/0x50 [ 294.455956][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.456004][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.456056][ T5861] ? rcu_is_watching+0x12/0xc0 [ 294.456104][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.456152][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.456219][ T5861] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 294.456349][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.456397][ T5861] ? add_lock_to_list+0x9d/0x130 [ 294.456458][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.456513][ T5861] f2fs_write_data_pages+0x4ad/0xd90 [ 294.456564][ T5861] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 294.456603][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.456665][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.456717][ T5861] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 294.456762][ T5861] do_writepages+0x27a/0x600 [ 294.456811][ T5861] ? __pfx_do_writepages+0x10/0x10 [ 294.456850][ T5861] ? do_raw_spin_unlock+0x172/0x230 [ 294.456894][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.456939][ T5861] ? _raw_spin_unlock+0x28/0x50 [ 294.457003][ T5861] filemap_fdatawrite_wbc+0x104/0x160 [ 294.457051][ T5861] ? __pfx_stack_trace_save+0x10/0x10 [ 294.457106][ T5861] __filemap_fdatawrite_range+0xb2/0xf0 [ 294.457162][ T5861] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 294.457215][ T5861] ? check_path.constprop.0+0x24/0x50 [ 294.457334][ T5861] ? find_held_lock+0x2b/0x80 [ 294.457384][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.457430][ T5861] ? do_raw_spin_unlock+0x172/0x230 [ 294.457473][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.457527][ T5861] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 294.457595][ T5861] block_operations+0x2a3/0xfd0 [ 294.457652][ T5861] ? __pfx_block_operations+0x10/0x10 [ 294.457692][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.457803][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.457848][ T5861] ? down_write+0x14d/0x200 [ 294.457891][ T5861] ? __pfx_down_write+0x10/0x10 [ 294.457939][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.457983][ T5861] ? rcu_is_watching+0x12/0xc0 [ 294.458039][ T5861] f2fs_write_checkpoint+0x2b8/0x4c60 [ 294.458100][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.458144][ T5861] ? kfree+0x2b4/0x4d0 [ 294.458181][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.458232][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.458277][ T5861] ? rcu_is_watching+0x12/0xc0 [ 294.458325][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.458370][ T5861] ? kthread_stop+0x273/0x650 [ 294.458438][ T5861] kill_f2fs_super+0x3c2/0x470 [ 294.458483][ T5861] ? __pfx_kill_f2fs_super+0x10/0x10 [ 294.458531][ T5861] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.458593][ T5861] deactivate_locked_super+0xc1/0x1a0 [ 294.458643][ T5861] deactivate_super+0xde/0x100 [ 294.458692][ T5861] cleanup_mnt+0x225/0x450 [ 294.458746][ T5861] task_work_run+0x150/0x240 [ 294.458789][ T5861] ? __pfx_task_work_run+0x10/0x10 [ 294.458826][ T5861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.458874][ T5861] ? __pfx___x64_sys_umount+0x10/0x10 [ 294.458941][ T5861] exit_to_user_mode_loop+0xeb/0x110 [ 294.458986][ T5861] do_syscall_64+0x3f6/0x4c0 [ 294.459031][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.459073][ T5861] RIP: 0033:0x7f26efb8fcd7 [ 294.459101][ T5861] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 294.459138][ T5861] RSP: 002b:00007ffd10fe6238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 294.459172][ T5861] RAX: 0000000000000000 RBX: 00007f26efc10b55 RCX: 00007f26efb8fcd7 [ 294.459197][ T5861] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd10fe62f0 [ 294.459220][ T5861] RBP: 00007ffd10fe62f0 R08: 0000000000000000 R09: 0000000000000000 [ 294.459243][ T5861] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd10fe7380 [ 294.459267][ T5861] R13: 00007f26efc10b55 R14: 0000000000047cff R15: 00007ffd10fe73c0 [ 294.459321][ T5861] [ 294.963030][ T5861] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 295.217540][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.893101][T12592] loop3: detected capacity change from 0 to 512 [ 295.980873][T12592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.048761][T12592] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.202975][T12592] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 296.205365][T12610] loop2: detected capacity change from 0 to 512 [ 296.260269][T12610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.297184][T12592] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 64512 [ 296.331188][T12610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.366348][T12610] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.377020][T12592] EXT4-fs error (device loop3): ext4_acquire_dquot:6931: comm syz.3.2148: Failed to acquire dquot type 0 [ 296.541654][T12610] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 296.591468][T12610] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 296.625137][T12610] EXT4-fs error (device loop2): ext4_acquire_dquot:6931: comm syz.2.2152: Failed to acquire dquot type 1 [ 296.672015][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.950336][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.181699][T12644] batadv2: entered promiscuous mode [ 297.607033][T12673] netlink: 'syz.1.2167': attribute type 10 has an invalid length. [ 297.715800][T12673] veth0_macvtap: left promiscuous mode [ 297.752430][T12673] batman_adv: batadv0: Adding interface: macvtap0 [ 297.774765][T12673] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.800175][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.865246][T12673] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 298.417060][ T5939] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 298.489797][ T5971] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.507530][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.618695][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 298.637477][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.673816][ T5939] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 298.718187][ T5939] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 298.761700][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.800578][ T5939] usb 1-1: Product: syz [ 298.804773][ T5939] usb 1-1: Manufacturer: syz [ 298.838732][ T5939] usb 1-1: SerialNumber: syz [ 298.863084][ T5939] usb 1-1: config 0 descriptor?? [ 298.923685][T12733] loop5: detected capacity change from 0 to 128 [ 298.965718][T12732] loop2: detected capacity change from 0 to 512 [ 298.988066][T12733] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.008449][T12732] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.030905][T12733] ext4 filesystem being mounted at /352/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.170176][T12732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 299.212945][T12686] loop3: detected capacity change from 0 to 32768 [ 299.261916][T12732] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.389007][ T10] usb 1-1: USB disconnect, device number 18 [ 299.399566][T12686] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 299.465940][T12760] libceph: resolve '4..' (ret=-3): failed [ 299.467230][ T5861] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.637761][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 299.760810][ T5841] ocfs2: Unmounting device (7,3) on (node local) [ 299.978900][T12788] netlink: 'syz.4.2199': attribute type 2 has an invalid length. [ 300.054580][T12790] netlink: 'syz.3.2198': attribute type 1 has an invalid length. [ 300.611469][T12815] loop1: detected capacity change from 0 to 64 [ 300.664127][T12815] hfs: unable to locate alternate MDB [ 300.702667][T12815] hfs: continuing without an alternate MDB [ 300.745627][T12815] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 300.790910][T12825] xt_policy: output policy not valid in PREROUTING and INPUT [ 301.051017][ T2336] pvrusb2: request_firmware fatal error with code=-110 [ 301.057915][ T2336] pvrusb2: Failure uploading firmware1 [ 301.110948][ T2336] pvrusb2: Device initialization was not successful. [ 301.150173][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 301.218196][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 301.259037][ T2336] pvrusb2: Failed to submit write-control URB status=-19 [ 301.276457][ T5984] pvrusb2: Device being rendered inoperable [ 301.295733][ T2336] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 301.318900][T12848] netlink: zone id is out of range [ 301.324033][T12848] netlink: zone id is out of range [ 301.353346][ T2336] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 301.368612][T12848] netlink: zone id is out of range [ 301.395860][T12848] netlink: zone id is out of range [ 301.440035][T12848] netlink: zone id is out of range [ 301.446021][T12848] netlink: del zone limit has 4 unknown bytes [ 301.650567][ T6054] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 301.848355][ T6054] usb 6-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 301.862788][ T6054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.903100][ T6054] usb 6-1: config 0 descriptor?? [ 301.942784][ T6054] gspca_main: spca505-2.14.0 probing 0733:0430 [ 302.373275][ T6054] gspca_spca505: reg write: error -71 [ 302.398386][ T6054] spca505 6-1:0.0: probe with driver spca505 failed with error -5 [ 302.450513][ T6054] usb 6-1: USB disconnect, device number 16 [ 302.454442][T12896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2230'. [ 302.565288][T12904] netlink: 'syz.3.2231': attribute type 5 has an invalid length. [ 303.078359][T12868] loop1: detected capacity change from 0 to 32768 [ 303.140092][T12868] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2222 (12868) [ 303.260787][T12868] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 303.287878][T12868] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 303.314828][T12868] BTRFS info (device loop1): using free-space-tree [ 303.510030][T12933] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.606895][T12954] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2241'. [ 303.838090][T12933] bridge_slave_0 (unregistering): left allmulticast mode [ 303.864333][T12933] bridge_slave_0 (unregistering): left promiscuous mode [ 303.909207][T12933] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.910657][ T5845] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 304.249500][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.251411][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.835076][T12997] loop4: detected capacity change from 0 to 2048 [ 304.941776][T12997] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 305.020397][T12997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.878848][T13042] loop2: detected capacity change from 0 to 256 [ 306.033511][T13042] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 306.108861][T13042] FAT-fs (loop2): Filesystem has been set read-only [ 306.404597][T13061] openvswitch: netlink: IP tunnel dst address not specified [ 306.526122][T13012] loop5: detected capacity change from 0 to 32768 [ 306.536672][T13067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.602645][T13012] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2260 (13012) [ 306.618673][ T5855] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 306.643348][T13012] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 306.754132][T13012] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 306.844474][T13012] BTRFS info (device loop5): using free-space-tree [ 306.878767][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 307.095242][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 307.137369][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.168783][ T9] usb 2-1: Product: syz [ 307.172969][ T9] usb 2-1: Manufacturer: syz [ 307.233777][ T9] usb 2-1: SerialNumber: syz [ 307.279937][ T9] usb 2-1: config 0 descriptor?? [ 307.429356][ T5861] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 307.532730][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 307.724171][T13126] loop4: detected capacity change from 0 to 1764 [ 307.771669][T13050] loop3: detected capacity change from 0 to 32768 [ 307.787741][ T9] usb 2-1: USB disconnect, device number 10 [ 307.796531][T13127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.800948][T13126] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 307.954469][T13050] jfs_strtoUCS: char2uni returned -22. [ 307.990679][T13050] charset = cp857, char = 0xd5 [ 308.161654][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2292'. [ 308.176523][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2292'. [ 308.301162][T13147] wg1: entered promiscuous mode [ 308.306070][T13147] wg1: entered allmulticast mode [ 308.479081][ T30] audit: type=1326 audit(1753100762.034:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.3.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 308.642548][ T30] audit: type=1326 audit(1753100762.034:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.3.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 308.665006][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.748638][ T30] audit: type=1326 audit(1753100762.094:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.3.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 308.919239][ T30] audit: type=1326 audit(1753100762.094:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.3.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 309.074551][ T30] audit: type=1326 audit(1753100762.094:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.3.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613158e9a9 code=0x7ffc0000 [ 309.097020][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.225548][T13177] mmap: syz.4.2303 (13177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 309.371674][ T2980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.449479][ T2980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.688627][ T30] audit: type=1326 audit(1753100763.244:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13193 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 309.822838][ T30] audit: type=1326 audit(1753100763.244:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13193 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 309.879387][T13202] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 309.958766][ T30] audit: type=1326 audit(1753100763.264:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13193 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 310.080189][ T30] audit: type=1326 audit(1753100763.264:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13193 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 310.193972][ T30] audit: type=1326 audit(1753100763.264:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13193 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e398e9a9 code=0x7ffc0000 [ 310.273909][T13217] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 310.350028][ T9] kernel write not supported for file /802/clear_refs (pid: 9 comm: kworker/0:0) [ 311.278803][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 311.348058][T13271] loop4: detected capacity change from 0 to 256 [ 311.442239][T13277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.451516][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 311.521008][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 311.532956][ T10] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 311.598650][ T10] usb 6-1: config 1 interface 0 has no altsetting 1 [ 311.632383][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 311.658737][T13281] vivid-007: ================= START STATUS ================= [ 311.663784][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.666722][T13281] vivid-007: Enable Output Cropping: [ 311.729351][ T10] usb 6-1: Product: syz [ 311.736090][T13281] true [ 311.753659][T13281] vivid-007: Enable Output Composing: true [ 311.755984][ T10] usb 6-1: Manufacturer: syz [ 311.768805][ T10] usb 6-1: SerialNumber: syz [ 311.797212][T13281] vivid-007: Enable Output Scaler: true [ 311.824263][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 311.848835][T13281] vivid-007: Tx RGB Quantization Range: Automatic [ 311.855312][T13281] vivid-007: Transmit Mode: HDMI [ 311.918895][T13281] vivid-007: Hotplug Present: 0x00000000 [ 311.924592][T13281] vivid-007: RxSense Present: 0x00000000 [ 311.968617][T13281] vivid-007: EDID Present: 0x00000000 [ 311.974100][T13281] vivid-007: ================== END STATUS ================== [ 312.046300][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 312.293628][ T10] usb 6-1: USB disconnect, device number 17 [ 312.572409][T13331] netlink: 'syz.3.2349': attribute type 2 has an invalid length. [ 312.965961][T13349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2356'. [ 313.287336][T13360] loop1: detected capacity change from 0 to 512 [ 313.302834][T13360] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.313027][T13360] EXT4-fs: inline encryption not supported [ 313.333770][T13364] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 313.354939][T13360] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.399045][T13360] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 313.440721][T13360] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 313.504115][T13360] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002] [ 313.549164][T13360] System zones: 0-2, 18-18, 34-34 [ 313.586582][T13360] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2360: couldn't read orphan inode 15 (err -116) [ 313.628493][T13360] EXT4-fs (loop1): Remounting filesystem read-only [ 313.666125][T13360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.681448][T13380] ipvlan0: entered promiscuous mode [ 313.686681][T13380] ipvlan0: entered allmulticast mode [ 313.716569][T13380] veth0_vlan: entered allmulticast mode [ 313.798695][T13383] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2366'. [ 313.995632][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.074361][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'. [ 314.536494][T13420] loop2: detected capacity change from 0 to 1024 [ 315.018858][T13445] netlink: 'syz.1.2387': attribute type 3 has an invalid length. [ 315.056218][T13445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2387'. [ 315.129387][ T2980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.140013][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.285014][T13454] loop5: detected capacity change from 0 to 512 [ 315.308713][ T5965] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 315.344960][T13454] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 315.363460][T13465] netlink: 'syz.3.2391': attribute type 1 has an invalid length. [ 315.388936][T13454] EXT4-fs (loop5): orphan cleanup on readonly fs [ 315.395606][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 315.428638][T13454] __quota_error: 1 callbacks suppressed [ 315.428660][T13454] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 315.471359][ T5965] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.485671][T13468] netlink: 'syz.1.2392': attribute type 4 has an invalid length. [ 315.494928][ T5965] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 315.508427][T13468] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2392'. [ 315.523931][T13454] EXT4-fs warning (device loop5): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 315.525325][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 315.571205][T13468] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 315.596963][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 315.621482][ T5965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 315.627041][T13454] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 315.642142][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'. [ 315.647641][ T5965] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 315.664724][T13454] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #16: comm syz.5.2388: casefold flag without casefold feature [ 315.705751][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 315.729499][ T5965] usb 3-1: Product: syz [ 315.733687][ T5965] usb 3-1: Manufacturer: syz [ 315.752622][T13454] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2388: couldn't read orphan inode 16 (err -117) [ 315.759620][ T5965] usb 3-1: SerialNumber: syz [ 315.805014][ T5965] usb 3-1: config 0 descriptor?? [ 315.839666][T13454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.042642][T13486] usb usb8: usbfs: process 13486 (syz.0.2397) did not claim interface 0 before use [ 316.059830][T13454] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 316.090262][ T5965] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 316.118734][ T5965] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 316.294409][ T5965] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 316.307854][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.327185][ T5965] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 316.369131][ T5965] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 316.537584][ T5965] usb 3-1: USB disconnect, device number 10 [ 316.956806][T13529] bridge2: entered promiscuous mode [ 317.474918][T13553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2417'. [ 317.619970][T13564] capability: warning: `syz.4.2421' uses 32-bit capabilities (legacy support in use) [ 320.257284][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.906505][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.488980][T13743] loop3: detected capacity change from 0 to 64 [ 322.277513][T13781] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 322.793643][T13795] xt_socket: unknown flags 0x8 [ 323.674322][T13777] loop3: detected capacity change from 0 to 32768 [ 323.767692][T13770] loop5: detected capacity change from 0 to 32768 [ 323.774482][T13777] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2481 (13777) [ 323.920573][T13777] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 323.945980][T13770] [ 323.945980][T13770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.945980][T13770] [ 323.973101][T13777] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 324.044008][T13777] BTRFS info (device loop3): using free-space-tree [ 324.166252][T13841] comedi comedi0: rti802: I/O port conflict (0xee,4) [ 324.324038][ T5971] [ 324.324038][ T5971] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.324038][ T5971] [ 324.385071][ T5971] [ 324.385071][ T5971] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.385071][ T5971] [ 324.407890][ T5861] [ 324.407890][ T5861] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.407890][ T5861] [ 324.433444][ T5861] [ 324.433444][ T5861] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.433444][ T5861] [ 324.454644][T13856] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 324.490622][ T111] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 324.502712][ T111] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 324.511132][ T111] CPU: 1 UID: 0 PID: 111 Comm: jfsCommit Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 324.521217][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.531278][ T111] RIP: 0010:write_special_inodes+0x71/0x170 [ 324.537204][ T111] Code: df e8 43 14 75 fe 48 8d 7b 10 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 c0 00 00 00 4c 8b 6b 10 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 da 00 00 00 49 8b 7d 30 2e e8 0b 15 40 08 48 8d [ 324.556827][ T111] RSP: 0018:ffffc90002647bd8 EFLAGS: 00010216 [ 324.562908][ T111] RAX: 0000000000000006 RBX: ffff888035a23e00 RCX: ffffffff834769f6 [ 324.570895][ T111] RDX: ffff88801fb2da00 RSI: ffffffff8346d37d RDI: 0000000000000030 [ 324.578878][ T111] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 324.586855][ T111] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff81f18430 [ 324.594838][ T111] R13: 0000000000000000 R14: ffff88806c9a6000 R15: ffffc900026d9112 [ 324.602823][ T111] FS: 0000000000000000(0000) GS:ffff888124827000(0000) knlGS:0000000000000000 [ 324.611763][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.618356][ T111] CR2: 00007f2c707ba000 CR3: 000000005856a000 CR4: 0000000000350ef0 [ 324.626358][ T111] Call Trace: [ 324.629639][ T111] [ 324.632573][ T111] lmLogSync+0xd2/0x820 [ 324.636757][ T111] ? __pfx_lmLogSync+0x10/0x10 [ 324.641555][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.647209][ T111] ? find_held_lock+0x2b/0x80 [ 324.651915][ T111] jfs_syncpt+0x89/0xa0 [ 324.656104][ T111] txEnd+0x30a/0x5a0 [ 324.660030][ T111] jfs_lazycommit+0x783/0xb30 [ 324.664747][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 324.669979][ T111] ? __pfx_default_wake_function+0x10/0x10 [ 324.675814][ T111] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.681024][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.686679][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.692333][ T111] ? __kthread_parkme+0x19e/0x250 [ 324.697391][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 324.702625][ T111] kthread+0x3c5/0x780 [ 324.706709][ T111] ? __pfx_kthread+0x10/0x10 [ 324.711314][ T111] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.716969][ T111] ? rcu_is_watching+0x12/0xc0 [ 324.721759][ T111] ? __pfx_kthread+0x10/0x10 [ 324.726363][ T111] ret_from_fork+0x5d7/0x6f0 [ 324.730986][ T111] ? __pfx_kthread+0x10/0x10 [ 324.735590][ T111] ret_from_fork_asm+0x1a/0x30 [ 324.740383][ T111] [ 324.743403][ T111] Modules linked in: [ 324.747357][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.758021][ T111] ---[ end trace 0000000000000000 ]--- [ 324.786032][ T111] RIP: 0010:write_special_inodes+0x71/0x170 [ 324.794670][ T111] Code: df e8 43 14 75 fe 48 8d 7b 10 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 c0 00 00 00 4c 8b 6b 10 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 da 00 00 00 49 8b 7d 30 2e e8 0b 15 40 08 48 8d [ 324.826943][ T111] RSP: 0018:ffffc90002647bd8 EFLAGS: 00010216 [ 324.833084][ T111] RAX: 0000000000000006 RBX: ffff888035a23e00 RCX: ffffffff834769f6 [ 324.841189][ T111] RDX: ffff88801fb2da00 RSI: ffffffff8346d37d RDI: 0000000000000030 [ 324.849218][ T111] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 324.857275][ T111] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff81f18430 [ 324.865308][ T111] R13: 0000000000000000 R14: ffff88806c9a6000 R15: ffffc900026d9112 [ 324.873466][ T111] FS: 0000000000000000(0000) GS:ffff888124827000(0000) knlGS:0000000000000000 [ 324.882879][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.889700][ T111] CR2: 000055a9a7000168 CR3: 0000000058cb1000 CR4: 0000000000350ef0 [ 324.897701][ T111] Kernel panic - not syncing: Fatal exception [ 324.903982][ T111] Kernel Offset: disabled [ 324.908311][ T111] Rebooting in 86400 seconds..