last executing test programs: 3m42.25561697s ago: executing program 2 (id=2302): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x78, 0x13, 0x53b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_sample={0x60, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x78}}, 0x0) 3m41.887046111s ago: executing program 2 (id=2307): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) 3m41.61755156s ago: executing program 2 (id=2310): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) 3m41.435920315s ago: executing program 2 (id=2313): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x847, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0xe0, 0xc2e, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m41.011817471s ago: executing program 2 (id=2319): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xcb, 0x0, 0x4b) 3m40.345795732s ago: executing program 2 (id=2331): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='permprofile && \r:', @ANYBLOB="20c6"], 0xff) 3m39.683821206s ago: executing program 32 (id=2331): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='permprofile && \r:', @ANYBLOB="20c6"], 0xff) 1m25.774531623s ago: executing program 3 (id=4204): ioperm(0x0, 0x7, 0x7) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xf) 1m25.629816232s ago: executing program 3 (id=4206): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000240)) 1m25.473857368s ago: executing program 3 (id=4208): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x1d0, 0x90, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 1m25.253198814s ago: executing program 3 (id=4210): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x4, 0x6, 0x568, 0x0, 0x0, 0x378, 0x1c0, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x13a, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev, @ipv6=@private0}}}, {{@ipv6={@private0, @remote, [], [], 'bridge_slave_1\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) 1m25.107670452s ago: executing program 3 (id=4212): r0 = syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000140)={[{@grpid}, {@filestreams}, {@uqnoenforce}, {@largeio}, {}, {@quota}]}, 0xfe, 0x97d9, &(0x7f000001c700)="$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") fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff}) 1m23.293552414s ago: executing program 3 (id=4226): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x5f, 0xb8, 0xe5, 0x20, 0xccd, 0x80, 0x4a83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0xd8, 0x23}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x8, "a085c56aafb0b26c"}, 0x0, 0x0, 0x0, 0x0}) 1m8.167647939s ago: executing program 33 (id=4226): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x5f, 0xb8, 0xe5, 0x20, 0xccd, 0x80, 0x4a83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0xd8, 0x23}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x8, "a085c56aafb0b26c"}, 0x0, 0x0, 0x0, 0x0}) 1.27168635s ago: executing program 4 (id=5247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x29, 0x49, 0x0, 0x4) 1.115617707s ago: executing program 4 (id=5251): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_opts(r0, 0x0, 0x5, 0x0, 0x0) 1.103662843s ago: executing program 5 (id=5252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.00175332s ago: executing program 0 (id=5253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x1, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 993.79645ms ago: executing program 6 (id=5254): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xc, 0xa, 0x1, "b75cbb1844038d2cd97c00", 0x3436324d}) 970.988885ms ago: executing program 1 (id=5255): syz_open_procfs(0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0xee00, 0x0, 0x141, 0x9}, 0x94, 0x1, 0x5, 0x6, 0x0, 0x0, 0xb63e}) 912.222427ms ago: executing program 4 (id=5256): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') read$FUSE(r0, &(0x7f0000006c00)={0x2020}, 0x2020) 911.745077ms ago: executing program 5 (id=5257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x60}}, 0x0) 832.621918ms ago: executing program 0 (id=5258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x40854}, 0x0) 799.901489ms ago: executing program 6 (id=5259): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0xe0000, 0x0) inotify_add_watch(r0, 0x0, 0x80000000) 741.779934ms ago: executing program 1 (id=5260): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x27, &(0x7f0000005500)=""/178, &(0x7f00000055c0)=0xb2) 728.869954ms ago: executing program 4 (id=5261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000200), 0x0}, 0x20) 682.50058ms ago: executing program 5 (id=5262): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffc}}, 0x0, 0x1f4, 0x0, 0x0, 0x17a5aaef4ddded03}, 0x9c) 637.764503ms ago: executing program 1 (id=5263): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 612.286714ms ago: executing program 0 (id=5264): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x5411, &(0x7f0000000580)) 562.81094ms ago: executing program 4 (id=5265): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) pread64(r0, 0x0, 0x0, 0x8) 463.745043ms ago: executing program 6 (id=5266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x1}}) 463.459891ms ago: executing program 5 (id=5267): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100030e00000000000000000000000500060000003a000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff00000000000000000200130003"], 0x70}, 0x1, 0x7}, 0x0) 455.928545ms ago: executing program 0 (id=5268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800000001ff000000000008000100ac14140008000700ac141443"], 0x2c}}, 0x0) 373.891056ms ago: executing program 1 (id=5269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 373.62357ms ago: executing program 6 (id=5270): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x1}], 0x1) 299.188231ms ago: executing program 6 (id=5271): r0 = gettid() setpgid(0x0, r0) 283.035768ms ago: executing program 5 (id=5272): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0x11, &(0x7f0000000100)={{0xa, 0x4e22, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x5c) 262.004019ms ago: executing program 4 (id=5273): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x21, 0x9e85, &(0x7f000000a040)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x0) 247.710187ms ago: executing program 0 (id=5274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 193.853814ms ago: executing program 1 (id=5275): r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) cachestat(r0, &(0x7f0000000c40), 0x0, 0x0) 49.76111ms ago: executing program 6 (id=5276): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc}], @IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}]}}}]}, 0x48}}, 0x0) 39.816557ms ago: executing program 1 (id=5277): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x24, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 12.626961ms ago: executing program 0 (id=5278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) 0s ago: executing program 5 (id=5279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): AT-fs (loop0): Directory bread(block 66) failed [ 343.713916][T16106] FAT-fs (loop0): Directory bread(block 67) failed [ 343.720759][T16106] FAT-fs (loop0): Directory bread(block 68) failed [ 343.727374][T16106] FAT-fs (loop0): Directory bread(block 69) failed [ 343.734049][T16106] FAT-fs (loop0): Directory bread(block 70) failed [ 343.741162][T16106] FAT-fs (loop0): Directory bread(block 71) failed [ 343.747762][T16106] FAT-fs (loop0): Directory bread(block 72) failed [ 343.754848][T16106] FAT-fs (loop0): Directory bread(block 73) failed [ 343.793318][T16104] loop3: detected capacity change from 0 to 32768 [ 343.910140][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 343.918112][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 343.937644][ T9] usb 6-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 343.956450][ T9] usb 6-1: Product: syz [ 343.973091][ T9] usb 6-1: config 0 descriptor?? [ 343.985903][ T9] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 343.995115][T16110] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 344.036879][ T9] gspca_stv06xx: st6422 sensor detected [ 344.285020][T16125] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 344.323678][T16125] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 344.524646][ T9] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 344.577918][ T9] usb 6-1: USB disconnect, device number 8 [ 344.632433][T16134] loop0: detected capacity change from 0 to 16 [ 344.641845][T16135] tmpfs: Bad value for 'nr_inodes' [ 344.664855][T16134] erofs (device loop0): mounted with root inode @ nid 36. [ 345.290134][ T5882] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 345.327574][T16131] loop4: detected capacity change from 0 to 32768 [ 345.492341][ T5882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.519823][ T5882] usb 4-1: not running at top speed; connect to a high speed hub [ 345.556957][ T5882] usb 4-1: config 129 has an invalid interface number: 28 but max is 0 [ 345.571669][ T5882] usb 4-1: config 129 has no interface number 0 [ 345.598434][ T5882] usb 4-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 345.630726][ T5882] usb 4-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 345.659251][ T5882] usb 4-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 345.716509][ T5882] usb 4-1: config 129 interface 28 has no altsetting 0 [ 345.756693][ T5882] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 345.786470][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.806946][ T5882] usb 4-1: Product: syz [ 345.821789][ T5882] usb 4-1: Manufacturer: syz [ 345.826432][ T5882] usb 4-1: SerialNumber: syz [ 345.835586][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3971'. [ 345.850531][ T29] audit: type=1326 audit(2000000207.979:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 345.894329][T16147] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.910594][ T29] audit: type=1326 audit(2000000207.979:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 345.965016][ T29] audit: type=1326 audit(2000000207.979:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 346.038311][ T29] audit: type=1326 audit(2000000208.009:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 346.060775][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.108978][T16183] syz.1.3978: attempt to access beyond end of device [ 346.108978][T16183] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 346.134089][ T29] audit: type=1326 audit(2000000208.009:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 346.200433][ T5882] etas_es58x 4-1:129.28: Starting syz syz (Serial Number syz) [ 346.231004][T16183] syz.1.3978: attempt to access beyond end of device [ 346.231004][T16183] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 346.245375][ T5882] etas_es58x 4-1:129.28: could not retrieve the product info string [ 346.249322][T16183] Mount JFS Failure: -5 [ 346.258328][T16183] jfs_mount failed w/return code = -5 [ 346.398463][ T5882] usb 4-1: USB disconnect, device number 18 [ 346.406239][ T5882] etas_es58x 4-1:129.28: Disconnecting syz syz [ 346.549456][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3986'. [ 346.900955][T16207] loop4: detected capacity change from 0 to 32768 [ 346.987660][T16220] loop3: detected capacity change from 0 to 512 [ 347.018599][T16207] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,compression=lz4,wide_macs,degraded,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 347.061266][T16207] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 347.070692][T16207] bcachefs (loop4): Version upgrade required: [ 347.070692][T16207] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 347.070692][T16207] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors [ 347.070692][T16207] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 347.169590][T16207] bcachefs (loop4): dropping and reconstructing all alloc info [ 347.231156][T16207] bcachefs (loop4): accounting_read... done [ 347.245259][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3995'. [ 347.253734][T16207] bcachefs (loop4): alloc_read... done [ 347.289105][T16225] loop1: detected capacity change from 0 to 1024 [ 347.300523][T16207] bcachefs (loop4): stripes_read... done [ 347.306259][T16207] bcachefs (loop4): snapshots_read... done [ 347.313654][T16207] bcachefs (loop4): done starting filesystem [ 347.704362][ T5836] bcachefs (loop4): shutting down [ 347.766283][ T5836] bcachefs (loop4): shutdown complete [ 347.772118][T16242] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 347.909047][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4008'. [ 348.199857][ T29] audit: type=1326 audit(2000000210.329:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.5.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 348.261033][ T29] audit: type=1326 audit(2000000210.379:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.5.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 348.334185][ T29] audit: type=1326 audit(2000000210.409:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.5.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 348.403937][ T29] audit: type=1326 audit(2000000210.409:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.5.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 348.484412][T16271] xt_hashlimit: Unknown mode mask D1, kernel too old? [ 348.509581][ T29] audit: type=1326 audit(2000000210.409:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.5.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 348.654424][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4021'. [ 348.697633][T16282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.757491][T16284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.765395][T16284] IPv6: NLM_F_CREATE should be set when creating new route [ 348.772761][T16284] IPv6: NLM_F_CREATE should be set when creating new route [ 349.056024][T16298] loop1: detected capacity change from 0 to 256 [ 349.305169][T16306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4037'. [ 349.403074][T16310] loop1: detected capacity change from 0 to 256 [ 349.730964][T16319] mmap: syz.5.4033 (16319) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 349.889273][ T46] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 350.041707][ T46] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 350.071807][ T46] usb 2-1: config 5 has no interface number 0 [ 350.077973][ T46] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 350.140433][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 350.155283][ T46] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 350.189270][ T46] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid maxpacket 13625, setting to 64 [ 350.220059][ T46] usb 2-1: config 5 interface 123 has no altsetting 0 [ 350.230093][ T46] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 350.239422][T16334] x_tables: duplicate entry at hook 3 [ 350.252989][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.261246][ T46] usb 2-1: Product: syz [ 350.265505][ T46] usb 2-1: Manufacturer: syz [ 350.270263][ T46] usb 2-1: SerialNumber: syz [ 350.301750][T16310] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.373271][T16340] netlink: 34 bytes leftover after parsing attributes in process `syz.5.4053'. [ 350.495310][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4057'. [ 350.504866][T16347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4057'. [ 350.573146][ T46] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 350.673210][ T46] usb 2-1: USB disconnect, device number 22 [ 351.055514][T16373] loop3: detected capacity change from 0 to 2048 [ 351.083615][T16373] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 351.126520][T16373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.539505][T16394] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 351.571143][T16394] cramfs: wrong magic [ 351.646839][T16401] loop5: detected capacity change from 0 to 1024 [ 351.682142][T16401] EXT4-fs: Ignoring removed orlov option [ 351.697298][T16401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 351.773166][T16401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.900533][T16415] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4088'. [ 352.048458][T11757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.110552][T16428] syz.1.4094 (16428): drop_caches: 0 [ 352.135610][T16419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.142952][T16419] IPv6: NLM_F_CREATE should be set when creating new route [ 352.150249][T16419] IPv6: NLM_F_CREATE should be set when creating new route [ 352.338582][T16436] loop1: detected capacity change from 0 to 256 [ 352.518180][T16442] : entered promiscuous mode [ 352.532841][T16444] netlink: 'syz.4.4101': attribute type 10 has an invalid length. [ 352.587860][T16448] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 352.596027][T16444] veth1_macvtap: left promiscuous mode [ 352.669479][T16450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4104'. [ 352.728804][T16452] netlink: 'syz.3.4105': attribute type 6 has an invalid length. [ 353.310752][T16478] loop5: detected capacity change from 0 to 512 [ 353.329338][T16481] openvswitch: netlink: IP tunnel dst address not specified [ 353.379968][T16478] EXT4-fs: Ignoring removed nobh option [ 353.417398][T16479] loop4: detected capacity change from 0 to 4096 [ 353.427695][T16479] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 353.464282][T16478] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.572561][T16478] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.594897][T16479] ntfs3(loop4): ino=5, "/" directory corrupted [ 353.694318][T16478] EXT4-fs error (device loop5): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.5.4117: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 353.797783][T16478] EXT4-fs (loop5): Remounting filesystem read-only [ 353.856877][T16503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4129'. [ 353.883201][T11757] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 354.099278][ T5882] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 354.310998][T16524] overlayfs: missing 'lowerdir' [ 354.451332][ T5882] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 354.460810][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.468830][ T5882] usb 4-1: Product: syz [ 354.473174][ T5882] usb 4-1: Manufacturer: syz [ 354.477792][ T5882] usb 4-1: SerialNumber: syz [ 354.491193][ T5882] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 354.540970][ T5880] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 354.596561][T16529] loop1: detected capacity change from 0 to 4096 [ 354.610381][T16535] loop4: detected capacity change from 0 to 256 [ 354.618013][T16529] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 354.638021][T16535] exfat: Deprecated parameter 'namecase' [ 354.657997][T16535] exfat: Deprecated parameter 'namecase' [ 354.667446][T16529] ntfs3(loop1): Failed to load $MFTMirr (-22). [ 354.755635][T16535] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 355.082043][ T46] usb 4-1: USB disconnect, device number 19 [ 355.367757][T16565] loop0: detected capacity change from 0 to 512 [ 355.386814][T16565] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.4156: corrupted in-inode xattr: invalid ea_ino [ 355.417880][T16565] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4156: couldn't read orphan inode 15 (err -117) [ 355.464788][T16565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.493770][T16565] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz.0.4156: deleted inode referenced: 15 [ 355.601798][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.642133][ T5880] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 355.649981][ T5880] ath9k_htc: Failed to initialize the device [ 355.656665][ T46] usb 4-1: ath9k_htc: USB layer deinitialized [ 355.796467][T16580] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4164'. [ 355.841568][T16580] netlink: 'syz.3.4164': attribute type 1 has an invalid length. [ 356.032329][T16588] kAFS: No cell specified [ 356.359665][T16598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.387551][T16570] loop5: detected capacity change from 0 to 40427 [ 356.428894][T16570] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 356.437713][T16570] F2FS-fs (loop5): Image doesn't support compression [ 356.445075][T16570] F2FS-fs (loop5): Image doesn't support compression [ 356.460799][T16570] F2FS-fs (loop5): invalid crc value [ 356.468461][T16570] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240904077664388581) [ 356.500220][T16600] loop3: detected capacity change from 0 to 512 [ 356.527400][T16606] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4175'. [ 356.565310][T16600] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 356.593893][T16606] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4175'. [ 356.664366][T16570] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 356.714368][ T5842] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 356.779448][ T46] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 357.259273][ T46] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 357.268391][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.276654][ T46] usb 2-1: Product: syz [ 357.280903][ T46] usb 2-1: Manufacturer: syz [ 357.285546][ T46] usb 2-1: SerialNumber: syz [ 357.295106][ T46] usb 2-1: config 0 descriptor?? [ 357.550994][ T46] hso 2-1:0.0: Failed to find BULK IN ep [ 357.559846][ T46] usb-storage 2-1:0.0: USB Mass Storage device detected [ 357.722806][ T5880] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 357.780570][ T46] usb 2-1: USB disconnect, device number 23 [ 357.814323][T16643] syz.0.4191: attempt to access beyond end of device [ 357.814323][T16643] nbd0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 357.844867][T16639] loop4: detected capacity change from 0 to 2048 [ 357.880151][T16639] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 357.922800][ T5880] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 357.933370][T16639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.949265][ T5880] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 357.959564][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.989608][ T29] audit: type=1800 audit(2000000220.119:216): pid=16639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4189" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 358.000260][ T5880] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 358.039332][ T5880] usb 6-1: config 0 has no interface number 0 [ 358.046427][ T5880] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 358.056400][ T5880] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 358.067576][ T5880] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 358.077824][ T5880] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.091349][ T5880] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 358.100461][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.120147][ T5880] usb 6-1: config 0 descriptor?? [ 358.129667][ T5880] gspca_main: spca561-2.14.0 probing abcd:cdee [ 358.342740][ T5880] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 358.352793][ T5880] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.382101][ T5880] usb 6-1: MIDIStreaming interface descriptor not found [ 358.403076][T16654] loop3: detected capacity change from 0 to 2048 [ 358.435985][T16654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.485786][ T5880] usb 6-1: USB disconnect, device number 9 [ 358.524013][ T29] audit: type=1800 audit(2000000220.639:217): pid=16654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4195" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 358.561996][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 358.631044][T16659] loop1: detected capacity change from 0 to 4096 [ 358.640135][T16659] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 358.688537][T16659] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 358.708166][T16661] loop3: detected capacity change from 0 to 16 [ 358.726651][T16661] erofs (device loop3): mounted with root inode @ nid 36. [ 358.734438][T16659] ntfs3(loop1): ino=1e, "file1" failed to parse mft record [ 358.744682][T16659] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 358.759322][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 358.768493][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.778878][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.795695][ T9] usb 5-1: Product: syz [ 358.800092][ T9] usb 5-1: Manufacturer: syz [ 358.815148][ T9] usb 5-1: SerialNumber: syz [ 358.831103][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 358.846526][ T5880] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 359.122701][T16667] loop5: detected capacity change from 0 to 4096 [ 359.202679][T16670] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.349692][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 361.050633][T16688] loop3: detected capacity change from 0 to 32768 [ 361.175527][T16688] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 361.290455][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4224'. [ 361.299953][T16688] XFS (loop3): Ending clean mount [ 361.320807][T16688] XFS (loop3): Quotacheck needed: Please wait. [ 361.339416][ T46] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 361.438301][T16688] XFS (loop3): Quotacheck: Done. [ 361.520391][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 361.551362][ T46] usb 6-1: too many configurations: 21, using maximum allowed: 8 [ 361.582971][ T46] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 361.620074][ T46] usb 6-1: config 0 has no interface number 0 [ 361.643370][ T46] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 361.675068][ T5842] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 361.702021][ T46] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 361.747874][ T46] usb 6-1: config 0 has no interface number 0 [ 361.780704][ T46] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 361.829031][ T46] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 361.850854][ T46] usb 6-1: config 0 has no interface number 0 [ 361.879854][ T46] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 361.918965][ T46] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 361.944034][ T46] usb 6-1: config 0 has no interface number 0 [ 361.969987][ T46] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 362.003695][ T46] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 362.039318][ T46] usb 6-1: config 0 has no interface number 0 [ 362.068669][ T46] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 362.152744][ T46] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 362.189260][ T46] usb 6-1: config 0 has no interface number 0 [ 362.225605][ T46] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 362.263072][ T46] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 362.277301][T16726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.297732][ T46] usb 6-1: config 0 has no interface number 0 [ 362.350404][ T46] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 362.437280][ T46] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 362.474360][ T46] usb 6-1: config 0 has no interface number 0 [ 362.519997][ T46] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 362.622351][ T46] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 362.665073][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=215 [ 362.709314][ T46] usb 6-1: Product: syz [ 362.720006][ T46] usb 6-1: Manufacturer: syz [ 362.756369][ T46] usb 6-1: SerialNumber: syz [ 362.792862][ T46] usb 6-1: config 0 descriptor?? [ 362.846273][ T46] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 362.905326][ T46] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 362.945876][T16733] loop0: detected capacity change from 0 to 64 [ 363.069824][ T46] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 363.304341][ T46] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 363.404749][ T46] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 363.416256][T16737] overlayfs: cannot append lower layer [ 363.483468][ T46] usb 6-1: USB disconnect, device number 10 [ 363.490923][T16724] loop4: detected capacity change from 0 to 32768 [ 363.528299][ T46] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 363.828768][T16741] loop1: detected capacity change from 0 to 128 [ 363.883159][T16741] befs: (loop1): No write support. Marking filesystem read-only [ 363.983357][T16741] befs: (loop1): invalid magic header [ 364.224797][T16724] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 364.224797][T16724] [ 364.359396][T16724] ERROR: (device loop4): remounting filesystem as read-only [ 364.408724][T16724] xtLookup: xtSearch returned -5 [ 364.486487][T16724] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 364.486487][T16724] [ 365.842044][T16785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4249'. [ 366.260153][T16795] loop4: detected capacity change from 0 to 512 [ 366.295591][T16794] loop1: detected capacity change from 0 to 1024 [ 366.350743][T16795] EXT4-fs (loop4): orphan cleanup on readonly fs [ 366.393285][T16795] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.4252: casefold flag without casefold feature [ 366.441394][T16794] overlay: filesystem on ./file0 not supported [ 366.515956][T16795] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4252: couldn't read orphan inode 15 (err -117) [ 366.636591][T16795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.948841][T16804] xt_CT: No such helper "snmp" [ 367.449627][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.672419][T16825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4263'. [ 367.730222][T16825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4263'. [ 368.011713][T16835] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4266'. [ 368.028168][T16834] loop0: detected capacity change from 0 to 1024 [ 368.062735][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4266'. [ 368.084502][T16838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4268'. [ 368.129439][T16835] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4266'. [ 368.607902][T16847] nfs: Bad value for 'source' [ 369.037838][T16858] netlink: 'syz.1.4275': attribute type 15 has an invalid length. [ 369.339750][T16864] loop0: detected capacity change from 0 to 1024 [ 370.139426][T16886] netlink: 'syz.1.4284': attribute type 21 has an invalid length. [ 370.147368][T16886] netlink: 'syz.1.4284': attribute type 6 has an invalid length. [ 370.259420][T16886] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4284'. [ 370.882708][T16905] vivid-002: disconnect [ 370.934086][T16904] vivid-002: reconnect [ 371.281739][T16917] loop1: detected capacity change from 0 to 8 [ 372.222234][T16939] netlink: 'syz.0.4304': attribute type 9 has an invalid length. [ 372.269667][T16939] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4304'. [ 373.228245][T16958] loop0: detected capacity change from 0 to 256 [ 373.603277][T16942] loop1: detected capacity change from 0 to 32768 [ 373.637967][T16942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4305 (16942) [ 374.159315][ T29] audit: type=1326 audit(2000000236.259:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16977 comm="syz.5.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 374.181707][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.243746][ T29] audit: type=1326 audit(2000000236.259:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16977 comm="syz.5.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 374.349290][ T29] audit: type=1326 audit(2000000236.269:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16977 comm="syz.5.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 374.459480][ T29] audit: type=1326 audit(2000000236.269:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16977 comm="syz.5.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 374.481861][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.563598][ T29] audit: type=1326 audit(2000000236.269:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16977 comm="syz.5.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 375.107270][T16996] loop0: detected capacity change from 0 to 1024 [ 375.162771][T16996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.195460][T16996] ext4 filesystem being mounted at /909/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.241492][T16996] fscrypt (loop0, inode 15): Error -61 getting encryption context [ 375.313238][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.590469][T16998] loop5: detected capacity change from 0 to 32768 [ 375.659390][ C0] sched: DL replenish lagged too much [ 375.997433][T16998] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4331 (16998) [ 376.019579][ T5882] usb 5-1: USB disconnect, device number 13 [ 376.028181][ T5880] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 376.039325][ T5880] ath9k_htc: Failed to initialize the device [ 376.048613][ T5882] usb 5-1: ath9k_htc: USB layer deinitialized [ 376.155665][T17006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.303366][T16998] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 376.379470][T16998] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 376.409377][T16998] BTRFS info (device loop5): using free-space-tree [ 376.629355][ T3965] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 376.753329][T17039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4339'. [ 376.770016][T17037] fuse: Bad value for 'fd' [ 376.802367][ T3965] usb 4-1: Using ep0 maxpacket: 32 [ 377.324945][T11757] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 377.455878][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.468283][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.476865][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.485978][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.494690][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 377.502156][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.758901][ T3965] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 377.809373][ T3965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.829277][ T3965] usb 4-1: Product: syz [ 377.833498][ T3965] usb 4-1: Manufacturer: syz [ 377.857466][ T3965] usb 4-1: config 0 descriptor?? [ 377.862963][ T3965] usb 4-1: can't set config #0, error -71 [ 378.039629][ T3965] usb 4-1: USB disconnect, device number 20 [ 378.229373][T17080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.236677][T17080] IPv6: NLM_F_CREATE should be set when creating new route [ 378.332342][T17055] chnl_net:caif_netlink_parms(): no params data found [ 378.627024][T17082] loop4: detected capacity change from 0 to 32768 [ 378.797997][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.886226][T17082] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=lz4,degraded,no_splitbrain_check,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 378.940077][T17082] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 378.962568][T17082] bcachefs (loop4): Version upgrade required: [ 378.962568][T17082] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 378.962568][T17082] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors [ 378.962568][T17082] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 379.032648][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.044173][T17055] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.053666][T17055] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.069489][T17055] bridge_slave_0: entered allmulticast mode [ 379.080602][T17055] bridge_slave_0: entered promiscuous mode [ 379.088933][T17055] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.096374][T17055] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.104332][T17055] bridge_slave_1: entered allmulticast mode [ 379.112620][T17055] bridge_slave_1: entered promiscuous mode [ 379.137072][T17082] bcachefs (loop4): dropping and reconstructing all alloc info [ 379.148943][T17082] invalid bkey in btree_node btree=extents level=0: u64s 18 type extent 536870914:8:U32_MAX len 8 ver 0: durability: 0 ptr: 108:7447854426007 gen 101 cached crc: c_size 93 size 58 offset 121 nonce 0 csum (unknown csum_type 10) 0:6c6c616b compress (unknown compression_type 7) ptr: 97:7385860486950 gen 108 crc: c_size 174 size 295 offset 411 nonce 485 csum (unknown csum_type 10) 616b:6b7a797372656c6c compress (unknown compression_type 7) ptr: 121:7933447816902 gen 122 ptr: 115:7861246019094 gen 121 cached crc: c_size 95 size 54 offset 97 nonce 0 csum (unknown csum_type 12) 0:7372656c compress (unknown compression_type 6) ptr: 101:7450796668839 gen 114 ptr: 108:7447854426007 gen 101 cached crc: c_size 93 size 58 offset 121 nonce 0 csum (unknown csum_type 10) 0:6c6c616b compress (unknown compression_type 7) ptr: 97:7385860486950 gen 108 crc: c_size 174 size 295 offset 411 nonce 1 csum none 0:0 compress none [ 379.149019][T17082] multiple pointers to same device (108): delete?, fixing [ 379.231684][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.295977][T17055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.298270][T17055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.444811][T17055] team0: Port device team_slave_0 added [ 379.461876][T17055] team0: Port device team_slave_1 added [ 379.475830][T17082] bcachefs (loop4): accounting_read... done [ 379.485853][T17082] bcachefs (loop4): alloc_read... done [ 379.509423][T17082] bcachefs (loop4): stripes_read... done [ 379.515204][T17082] bcachefs (loop4): snapshots_read... done [ 379.539326][T17082] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 379.572576][T17082] bcachefs (loop4): done starting filesystem [ 379.579577][ T5835] Bluetooth: hci5: command tx timeout [ 379.667138][T17055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.692750][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.758683][ T5836] bcachefs (loop4): shutting down [ 379.788193][T17055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.869804][ T5836] bcachefs (loop4): shutdown complete [ 379.880329][T17055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.887300][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.917165][T17055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.961529][T17145] overlay: Bad value for 'upperdir' [ 380.085679][T17055] hsr_slave_0: entered promiscuous mode [ 380.101055][T17055] hsr_slave_1: entered promiscuous mode [ 380.117978][T17055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.126700][T17055] Cannot create hsr debugfs directory [ 380.182085][T17151] loop1: detected capacity change from 0 to 512 [ 380.253041][T17151] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4384: Invalid inode bitmap blk 4 in block_group 0 [ 380.266873][T17151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.353592][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.396134][T17157] ipt_ECN: cannot use operation on non-tcp rule [ 380.527401][T17055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 380.560780][T17055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.598997][T17163] loop1: detected capacity change from 0 to 2048 [ 380.602384][T17055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.624059][T17163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.641602][T17055] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.674342][T17163] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 380.732617][T17055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.785295][T17055] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.849114][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.856292][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.888667][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.895917][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.087263][T17055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.295015][T17166] loop1: detected capacity change from 0 to 32768 [ 381.312273][T17166] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4390 (17166) [ 381.330332][T17166] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 381.346631][T17166] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 381.477948][T17191] loop5: detected capacity change from 0 to 8 [ 381.485424][T17191] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 381.532597][T17191] cramfs: Error -3 while decompressing! [ 381.538380][T17191] cramfs: ffffffff9a510b68(26)->ffff88804d2de000(4096) [ 381.545910][T17191] cramfs: Error -3 while decompressing! [ 381.563651][T17191] cramfs: ffffffff9a510b82(26)->ffff88805a874000(4096) [ 381.580362][T17055] veth0_vlan: entered promiscuous mode [ 381.586086][T17191] cramfs: Error -3 while decompressing! [ 381.599027][T17191] cramfs: ffffffff9a510b9c(16)->ffff88804f55e000(4096) [ 381.599078][T17166] BTRFS info (device loop1): rebuilding free space tree [ 381.612376][T17191] cramfs: Error -3 while decompressing! [ 381.634014][T17055] veth1_vlan: entered promiscuous mode [ 381.667295][ T5835] Bluetooth: hci5: command tx timeout [ 381.761079][T17166] BTRFS info (device loop1): disabling free space tree [ 381.768039][T17166] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 381.791905][T17055] veth0_macvtap: entered promiscuous mode [ 381.799280][T17166] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 381.811452][T17055] veth1_macvtap: entered promiscuous mode [ 381.833183][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.844239][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.854633][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.865242][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.875145][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.878756][T17191] cramfs: ffffffff9a510b68(26)->ffff88804d2de000(4096) [ 381.886767][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.903076][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.913696][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.923599][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.934174][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.960440][T17055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.007458][T17201] loop4: detected capacity change from 0 to 512 [ 382.014680][T17201] EXT4-fs: Ignoring removed i_version option [ 382.031175][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.042943][T17201] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 382.053307][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.063506][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.094300][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.104675][T17201] EXT4-fs (loop4): 1 truncate cleaned up [ 382.112746][T17201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.116868][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.135563][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.151461][T17201] EXT4-fs error (device loop4): ext4_find_extent:902: inode #15: comm syz.4.4393: inode has invalid extent depth: 25964 [ 382.154186][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.171191][T17201] EXT4-fs (loop4): Remounting filesystem read-only [ 382.174581][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.185551][T17201] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 382.191110][T17055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.209963][T17055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.257436][T17055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.283302][T17055] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.308893][T17055] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.325083][T17166] BTRFS info (device loop1 state M): max_inline set to 0 [ 382.329283][T17055] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.359505][T17055] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.391715][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.442825][ T5839] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 382.679552][T17208] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 382.691872][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.717475][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.773953][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.800946][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.979371][T17217] openvswitch: netlink: Duplicate key (type 32). [ 383.412178][T17235] loop0: detected capacity change from 0 to 256 [ 383.683327][T17234] loop6: detected capacity change from 0 to 32768 [ 383.690464][T17221] loop4: detected capacity change from 0 to 32768 [ 383.724131][T17234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4408 (17234) [ 383.737494][T17221] (syz.4.4402,17221,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 383.755673][T17234] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 383.758671][ T5835] Bluetooth: hci5: command tx timeout [ 383.766332][T17234] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 383.781889][T17234] BTRFS info (device loop6): disk space caching is enabled [ 383.789092][T17234] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 383.839661][T17221] (syz.4.4402,17221,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 384.035519][T17221] JBD2: Ignoring recovery information on journal [ 384.044533][T17235] FAT-fs (loop0): Directory bread(block 64) failed [ 384.059915][T17235] FAT-fs (loop0): Directory bread(block 65) failed [ 384.087122][T17235] FAT-fs (loop0): Directory bread(block 66) failed [ 384.119287][T17235] FAT-fs (loop0): Directory bread(block 67) failed [ 384.125954][T17235] FAT-fs (loop0): Directory bread(block 68) failed [ 384.148349][T17234] BTRFS info (device loop6): rebuilding free space tree [ 384.182307][T17221] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 384.201357][T17235] FAT-fs (loop0): Directory bread(block 69) failed [ 384.208081][T17235] FAT-fs (loop0): Directory bread(block 70) failed [ 384.247911][T17235] FAT-fs (loop0): Directory bread(block 71) failed [ 384.288389][T17235] FAT-fs (loop0): Directory bread(block 72) failed [ 384.313541][T17235] FAT-fs (loop0): Directory bread(block 73) failed [ 384.523637][T17266] loop5: detected capacity change from 0 to 16 [ 384.591192][T17266] erofs (device loop5): mounted with root inode @ nid 36. [ 384.602482][T17234] BTRFS info (device loop6): disabling free space tree [ 384.609504][T17234] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 384.642516][T17234] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 384.711197][ T5836] ocfs2: Unmounting device (7,4) on (node local) [ 384.917256][T17274] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4414'. [ 384.931083][T17274] vlan2: entered allmulticast mode [ 384.977903][T17277] x_tables: unsorted underflow at hook 3 [ 385.074363][T17280] netlink: 'syz.5.4418': attribute type 6 has an invalid length. [ 385.082262][T17280] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4418'. [ 385.218097][T17242] loop1: detected capacity change from 0 to 32768 [ 385.252939][T17282] loop0: detected capacity change from 0 to 4096 [ 385.284871][T17055] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 385.824000][ T5835] Bluetooth: hci5: command tx timeout [ 386.120800][ T3965] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 386.370807][ T3965] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 386.389847][ T3965] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 386.429396][ T3965] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 386.484647][ T3965] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 386.543250][ T3965] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 386.579601][ T3965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.847785][ T3965] ath6kl: Failed to submit usb control message: -71 [ 386.847830][ T3965] ath6kl: unable to send the bmi data to the device: -71 [ 386.847846][ T3965] ath6kl: Unable to send get target info: -71 [ 386.853115][ T3965] ath6kl: Failed to init ath6kl core: -71 [ 386.870208][ T3965] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 386.894208][ T3965] usb 7-1: USB disconnect, device number 2 [ 387.136142][T17344] xt_l2tp: unknown flags: 3b [ 387.171297][ T5835] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 387.783069][T17359] loop0: detected capacity change from 0 to 32768 [ 387.801233][T17359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4442 (17359) [ 387.928628][T17359] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 388.006027][T17359] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 388.015571][T17370] libceph: resolve 'c' (ret=-3): failed [ 388.055753][T17359] BTRFS info (device loop0): using free-space-tree [ 388.241101][T17393] loop4: detected capacity change from 0 to 64 [ 388.340352][T17349] loop5: detected capacity change from 0 to 32768 [ 388.415577][T17349] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 388.428883][T17404] loop6: detected capacity change from 0 to 16 [ 388.529604][T17404] erofs (device loop6): mounted with root inode @ nid 36. [ 388.573581][T17349] XFS (loop5): Ending clean mount [ 388.580864][T17349] XFS (loop5): Quotacheck needed: Please wait. [ 388.662760][T17349] XFS (loop5): Quotacheck: Done. [ 388.675414][ T5832] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 389.337215][T11757] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 389.955899][T17466] loop4: detected capacity change from 0 to 8 [ 389.984501][T17470] netlink: 'syz.6.4465': attribute type 2 has an invalid length. [ 390.011974][T17470] netlink: 'syz.6.4465': attribute type 1 has an invalid length. [ 390.058868][T17470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4465'. [ 390.092811][T17477] loop0: detected capacity change from 0 to 64 [ 390.216688][T17466] SQUASHFS error: xz decompression failed, data probably corrupt [ 390.308174][T17466] SQUASHFS error: Failed to read block 0x60: -5 [ 390.362017][T17484] netlink: 'syz.5.4475': attribute type 1 has an invalid length. [ 390.393321][T17466] SQUASHFS error: xz decompression failed, data probably corrupt [ 390.428487][T17466] SQUASHFS error: Failed to read block 0x60: -5 [ 390.471152][ T29] audit: type=1800 audit(2000000252.589:223): pid=17466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4471" name="file1" dev="loop4" ino=1 res=0 errno=0 [ 390.548871][T17488] loop6: detected capacity change from 0 to 2048 [ 390.577692][ T29] audit: type=1326 audit(2000000252.699:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17491 comm="syz.1.4478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401f785d29 code=0x0 [ 390.651713][T17488] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 390.657776][T17495] netlink: 'syz.0.4479': attribute type 2 has an invalid length. [ 390.688257][T17488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.048652][T17509] loop1: detected capacity change from 0 to 8 [ 391.088449][T17509] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 391.123753][T17504] loop5: detected capacity change from 0 to 4096 [ 391.313189][T17504] ntfs3(loop5): mft corrupted [ 391.388468][T17520] netlink: 'syz.4.4490': attribute type 9 has an invalid length. [ 391.751040][T17513] loop0: detected capacity change from 0 to 32768 [ 391.856203][T17513] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 391.918989][T17528] loop6: detected capacity change from 0 to 4096 [ 391.935770][T17513] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 392.030916][T17526] loop5: detected capacity change from 0 to 32768 [ 392.038907][T17526] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4493 (17526) [ 392.055202][T17526] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 392.067239][T17526] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 392.101328][T17526] BTRFS info (device loop5): using free-space-tree [ 392.164664][T17513] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 392.450640][T17513] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 392.458566][T17554] loop4: detected capacity change from 0 to 256 [ 392.499343][ T5882] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 392.628471][T17554] FAT-fs (loop4): Directory bread(block 64) failed [ 392.668005][T17554] FAT-fs (loop4): Directory bread(block 65) failed [ 392.676089][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 392.719399][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.725203][T17554] FAT-fs (loop4): Directory bread(block 66) failed [ 392.737767][T17554] FAT-fs (loop4): Directory bread(block 67) failed [ 392.745469][T17554] FAT-fs (loop4): Directory bread(block 68) failed [ 392.752452][T17554] FAT-fs (loop4): Directory bread(block 69) failed [ 392.776259][T11757] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 392.788943][ T5882] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 392.806861][T17554] FAT-fs (loop4): Directory bread(block 70) failed [ 392.813636][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.813663][ T5882] usb 2-1: Product: syz [ 392.826227][ T5882] usb 2-1: Manufacturer: syz [ 392.831191][ T5882] usb 2-1: SerialNumber: syz [ 392.845163][ T5882] usb 2-1: config 0 descriptor?? [ 392.850695][T17554] FAT-fs (loop4): Directory bread(block 71) failed [ 392.857415][T17554] FAT-fs (loop4): Directory bread(block 72) failed [ 392.876476][ T5882] usb 2-1: bad CDC descriptors [ 392.881835][ T5882] usb 2-1: unsupported MDLM descriptors [ 392.984795][T17554] FAT-fs (loop4): Directory bread(block 73) failed [ 393.087849][ T46] usb 2-1: USB disconnect, device number 25 [ 393.222831][ T29] audit: type=1800 audit(2000000255.349:225): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4502" name="file1" dev="loop4" ino=1048669 res=0 errno=0 [ 393.801496][T17590] netlink: 'syz.1.4516': attribute type 32 has an invalid length. [ 394.114834][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 394.211034][T17582] loop0: detected capacity change from 0 to 32768 [ 394.300106][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 394.318907][T17582] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 394.328890][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.345905][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 394.381440][T17582] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 394.422533][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 394.533154][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.559526][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.579429][ T9] usb 7-1: Product: syz [ 394.584257][ T9] usb 7-1: Manufacturer: syz [ 394.599099][ T9] usb 7-1: SerialNumber: syz [ 394.610360][ T5832] ocfs2: Unmounting device (7,0) on (node local) [ 394.741597][T17625] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 394.755931][T17628] loop5: detected capacity change from 0 to 256 [ 394.815880][T17628] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 394.932725][ T9] hub 7-1:1.2: bad descriptor, ignoring hub [ 394.950115][ T9] hub 7-1:1.2: probe with driver hub failed with error -5 [ 395.051363][ T9] usb 7-1: USB disconnect, device number 3 [ 395.271951][T17012] udevd[17012]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.394813][T17649] ebt_among: src integrity fail: 100 [ 395.599401][T17655] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4547'. [ 395.607569][T17657] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4548'. [ 395.615512][T17655] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4547'. [ 395.762626][T17664] loop1: detected capacity change from 0 to 16 [ 395.874011][T17664] erofs (device loop1): mounted with root inode @ nid 36. [ 395.910469][T17664] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 395.965806][T17671] loop5: detected capacity change from 0 to 512 [ 396.075790][T17661] loop6: detected capacity change from 0 to 32768 [ 396.083025][T17661] XFS: noikeep mount option is deprecated. [ 396.116283][T17664] erofs (device loop1): read error -117 @ 43 of nid 36 [ 396.174405][T17671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.204586][T17661] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 396.236419][T17671] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 396.267776][T17661] XFS (loop6): Ending clean mount [ 396.277270][T17661] XFS (loop6): Quotacheck needed: Please wait. [ 396.390026][T17661] XFS (loop6): Quotacheck: Done. [ 396.411792][T11757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.572757][T17055] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 396.573331][T17692] loop1: detected capacity change from 0 to 4096 [ 396.653977][T17698] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4564'. [ 396.654688][T17692] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 396.839454][T17701] loop6: detected capacity change from 0 to 1024 [ 396.931216][T17692] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 396.952579][T17701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.997474][T17710] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4567'. [ 397.022652][T17692] ntfs3(loop1): ino=1e, "file1" failed to parse mft record [ 397.057052][T17701] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.4563: Abort forced by user [ 397.067485][T17692] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 397.075384][T17712] No source specified [ 397.180728][T17701] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 397.335797][T17055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.388886][T17716] loop5: detected capacity change from 0 to 4096 [ 397.456737][T17725] netlink: 'syz.6.4574': attribute type 1 has an invalid length. [ 397.526410][T17716] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 397.645591][T17716] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 397.692305][T17716] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 397.715914][T17716] ntfs3(loop5): ino=1a, ntfs_sync_fs failed, -22. [ 397.949463][ T46] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 398.017008][T17747] loop4: detected capacity change from 0 to 512 [ 398.057879][T17747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.086624][T17747] ext4 filesystem being mounted at /939/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.114676][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4588'. [ 398.125288][T17753] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4588'. [ 398.132862][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 398.165896][ T46] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 398.195219][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.208538][ T46] usb 7-1: Product: syz [ 398.209581][ T5882] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 398.231215][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.240544][ T46] usb 7-1: Manufacturer: syz [ 398.245157][ T46] usb 7-1: SerialNumber: syz [ 398.271239][ T46] usb 7-1: config 0 descriptor?? [ 398.392594][ T5882] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 398.406613][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.449504][ T5882] usb 6-1: Product: syz [ 398.453727][ T5882] usb 6-1: Manufacturer: syz [ 398.458340][ T5882] usb 6-1: SerialNumber: syz [ 398.483690][ T46] speedtch 7-1:0.0: speedtch_bind: wrong device class 141 [ 398.491758][ T46] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 398.505853][ T5882] usb 6-1: config 0 descriptor?? [ 398.622356][T17767] loop4: detected capacity change from 0 to 256 [ 398.704897][ T46] usb 7-1: USB disconnect, device number 4 [ 398.735758][ T5882] hso 6-1:0.0: Failed to find BULK IN ep [ 398.736391][T17767] FAT-fs (loop4): Directory bread(block 64) failed [ 398.750513][ T5882] usb-storage 6-1:0.0: USB Mass Storage device detected [ 398.764240][T17767] FAT-fs (loop4): Directory bread(block 65) failed [ 398.808146][T17767] FAT-fs (loop4): Directory bread(block 66) failed [ 398.821479][T17773] new mount options do not match the existing superblock, will be ignored [ 398.825105][T17767] FAT-fs (loop4): Directory bread(block 67) failed [ 398.846669][T17767] FAT-fs (loop4): Directory bread(block 68) failed [ 398.880031][T17767] FAT-fs (loop4): Directory bread(block 69) failed [ 398.897812][T17767] FAT-fs (loop4): Directory bread(block 70) failed [ 398.915292][T17767] FAT-fs (loop4): Directory bread(block 71) failed [ 398.924874][T17767] FAT-fs (loop4): Directory bread(block 72) failed [ 398.942896][T17767] FAT-fs (loop4): Directory bread(block 73) failed [ 398.989119][ T5882] usb 6-1: USB disconnect, device number 11 [ 399.275028][T17788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4605'. [ 399.400993][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 399.559514][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 399.577953][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 399.609731][ T46] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 399.627300][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 399.639255][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 399.650684][ T9] usb 2-1: Product: syz [ 399.655623][ T9] usb 2-1: Manufacturer: syz [ 399.660326][ T9] usb 2-1: SerialNumber: syz [ 399.667432][ T9] usb 2-1: config 0 descriptor?? [ 399.674453][T17783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 399.739414][T17042] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 399.771690][T17804] loop5: detected capacity change from 0 to 4096 [ 399.792579][ T46] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.802422][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.816666][T17804] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 399.826519][ T46] usb 7-1: Product: syz [ 399.837022][ T46] usb 7-1: Manufacturer: syz [ 399.864177][ T46] usb 7-1: SerialNumber: syz [ 399.886409][ T46] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.905339][T17042] usb 5-1: Using ep0 maxpacket: 16 [ 399.932957][T17042] usb 5-1: unable to get BOS descriptor or descriptor too short [ 399.949325][T17804] ntfs3(loop5): failed to convert "c46c" to cp865 [ 399.949985][ T3965] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.960856][ T9] usb 2-1: USB disconnect, device number 26 [ 399.977194][T17042] usb 5-1: config 8 has an invalid interface number: 249 but max is 0 [ 399.986076][T17042] usb 5-1: config 8 has no interface number 0 [ 400.014872][T17042] usb 5-1: config 8 interface 249 has no altsetting 0 [ 400.042414][T17042] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 400.052330][T17042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.069405][T17042] usb 5-1: Product: syz [ 400.078844][T17042] usb 5-1: Manufacturer: syz [ 400.088028][T17042] usb 5-1: SerialNumber: syz [ 400.345731][T17042] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 400.425484][ T9] usb 7-1: USB disconnect, device number 5 [ 400.455992][T17042] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 400.469532][T17042] dib0700: firmware download failed at 7 with -8 [ 400.483007][T17042] usb 5-1: USB disconnect, device number 14 [ 400.624214][T17827] geneve2: entered promiscuous mode [ 400.630711][T17827] geneve2: entered allmulticast mode [ 400.727761][ T29] audit: type=1326 audit(2000000262.829:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.1.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f785d29 code=0x7ffc0000 [ 400.751393][ T29] audit: type=1326 audit(2000000262.839:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.1.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f785d29 code=0x7ffc0000 [ 400.774046][ T29] audit: type=1326 audit(2000000262.839:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.1.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f401f785d29 code=0x7ffc0000 [ 400.796813][ T29] audit: type=1326 audit(2000000262.839:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.1.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f785d29 code=0x7ffc0000 [ 400.819768][ T29] audit: type=1326 audit(2000000262.839:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17830 comm="syz.1.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f785d29 code=0x7ffc0000 [ 401.025787][ T3965] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 401.052996][ T3965] ath9k_htc: Failed to initialize the device [ 401.079956][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 401.467377][T17860] loop6: detected capacity change from 0 to 64 [ 401.558423][T17860] hfs: keylen 94 too large [ 401.853817][T17879] loop0: detected capacity change from 0 to 1024 [ 402.105874][ T29] audit: type=1107 audit(2000000264.159:231): pid=17884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 402.257128][T17867] loop4: detected capacity change from 0 to 32768 [ 402.265133][ T2909] hfsplus: b-tree write err: -5, ino 4 [ 402.359318][T17867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4644 (17867) [ 402.387829][T17867] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 402.398335][T17867] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 402.409015][T17867] BTRFS info (device loop4): using free-space-tree [ 403.056232][ T5836] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.199949][T17950] x_tables: duplicate entry at hook 2 [ 403.487785][T17955] team0: Port device team_slave_0 removed [ 403.495152][T17955] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 403.624206][T17964] binder: 17960:17964 ioctl c0306201 20000340 returned -14 [ 404.195029][T17997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4690'. [ 404.229251][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4690'. [ 404.534979][T18011] loop6: detected capacity change from 0 to 512 [ 404.556728][T18011] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 404.602485][T18013] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4700'. [ 404.615363][T18011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 404.630622][T18011] System zones: 1-12 [ 404.647774][T18011] EXT4-fs (loop6): 1 truncate cleaned up [ 404.667138][T18011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.814492][T17055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.991331][T18031] loop6: detected capacity change from 0 to 256 [ 405.037922][T18031] FAT-fs (loop6): Directory bread(block 64) failed [ 405.042216][T18033] loop5: detected capacity change from 0 to 1024 [ 405.045339][T18031] FAT-fs (loop6): Directory bread(block 65) failed [ 405.095811][T18031] FAT-fs (loop6): Directory bread(block 66) failed [ 405.109091][T18031] FAT-fs (loop6): Directory bread(block 67) failed [ 405.122918][T18031] FAT-fs (loop6): Directory bread(block 68) failed [ 405.147138][T18033] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 405.165845][T18031] FAT-fs (loop6): Directory bread(block 69) failed [ 405.170926][T18039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.226066][T18031] FAT-fs (loop6): Directory bread(block 70) failed [ 405.233039][T18033] System zones: 0-1, 3-12 [ 405.259710][ T5837] Bluetooth: hci5: command 0x0405 tx timeout [ 405.260759][T18033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.278004][T18031] FAT-fs (loop6): Directory bread(block 71) failed [ 405.290705][T18031] FAT-fs (loop6): Directory bread(block 72) failed [ 405.297288][T18031] FAT-fs (loop6): Directory bread(block 73) failed [ 405.485482][T11757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.929543][T18061] netlink: 'syz.0.4722': attribute type 39 has an invalid length. [ 405.947823][T18061] netlink: 'syz.0.4722': attribute type 4 has an invalid length. [ 405.976070][T18061] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4722'. [ 406.055314][T18061] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 406.162577][T18073] loop4: detected capacity change from 0 to 256 [ 406.241781][T18073] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x24500465, utbl_chksum : 0xe619d30d) [ 406.250891][T18075] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 406.693051][T18095] loop1: detected capacity change from 0 to 1024 [ 406.803401][T18095] hfsplus: catalog searching failed [ 407.231846][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4751'. [ 407.758915][ T29] audit: type=1326 audit(2000000269.879:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.1.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f785d29 code=0x7ffc0000 [ 407.812091][ T29] audit: type=1326 audit(2000000269.909:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.1.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f401f785d29 code=0x7ffc0000 [ 407.867282][ T29] audit: type=1326 audit(2000000269.909:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.1.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f785d29 code=0x7ffc0000 [ 407.940191][ T29] audit: type=1326 audit(2000000269.909:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.1.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401f785d29 code=0x7ffc0000 [ 407.964052][T18145] netlink: 'syz.0.4764': attribute type 3 has an invalid length. [ 407.972860][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 408.121252][T18113] loop5: detected capacity change from 0 to 32768 [ 408.144260][ T9] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 408.163700][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.183685][ T9] usb 7-1: Product: syz [ 408.187896][ T9] usb 7-1: Manufacturer: syz [ 408.208904][T18113] read_mapping_page failed! [ 408.217759][ T9] usb 7-1: SerialNumber: syz [ 408.248202][T18113] ERROR: (device loop5): txCommit: [ 408.248202][T18113] [ 408.257519][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 408.268587][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 408.298962][T18113] ERROR: (device loop5): remounting filesystem as read-only [ 408.405272][T11757] ERROR: (device loop5): diFree: numfree > numinos [ 408.405272][T11757] [ 408.473517][T18159] xt_hashlimit: max too large, truncated to 1048576 [ 408.545419][T18159] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 408.621286][T18161] loop0: detected capacity change from 0 to 256 [ 408.642313][T18161] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 408.678163][T18161] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.786995][ T3965] r8152-cfgselector 7-1: USB disconnect, device number 6 [ 409.006380][T18164] loop5: detected capacity change from 0 to 4096 [ 409.019629][T18170] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4776'. [ 409.032186][T18164] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 409.337888][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4780'. [ 409.600514][T18188] ip6gre1: entered allmulticast mode [ 409.850172][ T3965] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 409.944978][T18208] loop5: detected capacity change from 0 to 256 [ 410.048349][ T3965] usb 2-1: Using ep0 maxpacket: 32 [ 410.062740][ T3965] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.076147][T18203] loop6: detected capacity change from 0 to 4096 [ 410.079346][ T3965] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.096614][ T3965] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 410.105900][ T3965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.138004][ T3965] hub 2-1:4.0: USB hub found [ 410.297547][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4799'. [ 410.349304][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4799'. [ 410.368491][ T3965] hub 2-1:4.0: 2 ports detected [ 410.374429][ T3965] usb 2-1: selecting invalid altsetting 1 [ 410.379386][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4799'. [ 410.394424][ T3965] hub 2-1:4.0: Using single TT (err -22) [ 410.594918][ T3965] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 410.626092][ T3965] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 410.671516][ T3965] usb 2-1: USB disconnect, device number 27 [ 410.740546][T18231] netlink: 'syz.4.4805': attribute type 64 has an invalid length. [ 411.560081][T18272] loop0: detected capacity change from 0 to 64 [ 411.675297][T18280] loop4: detected capacity change from 0 to 2048 [ 411.708573][T18282] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.826494][T18280] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 411.885391][T18280] Remounting filesystem read-only [ 412.219890][T18300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4837'. [ 412.250043][T18300] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4837'. [ 413.011628][T18332] ufs: You didn't specify the type of your ufs filesystem [ 413.011628][T18332] [ 413.011628][T18332] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 413.011628][T18332] [ 413.011628][T18332] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 413.014070][T18334] loop4: detected capacity change from 0 to 512 [ 413.044811][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.080451][T18332] ufs: ufstype=old is supported read-only [ 413.100004][T18332] syz.6.4854: attempt to access beyond end of device [ 413.100004][T18332] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 413.148858][T18334] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4853: attempt to clear invalid blocks 1 len 1 [ 413.163935][T18334] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4853: bg 0: block 343: padding at end of block bitmap is not set [ 413.187740][T18334] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 413.199090][T18334] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4853: invalid indirect mapped block 1819239214 (level 0) [ 413.215366][T18334] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4853: invalid indirect mapped block 1819239214 (level 1) [ 413.249970][T18334] EXT4-fs (loop4): 1 truncate cleaned up [ 413.270935][T18334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.316128][T18334] tmpfs: Bad value for 'mpol' [ 413.418242][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.543975][ T29] audit: type=1326 audit(2000000275.669:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18351 comm="syz.4.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 413.619513][ T29] audit: type=1326 audit(2000000275.669:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18351 comm="syz.4.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 413.704161][ T29] audit: type=1326 audit(2000000275.669:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18351 comm="syz.4.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 413.778383][T18360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4866'. [ 413.786860][ T29] audit: type=1326 audit(2000000275.669:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18351 comm="syz.4.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 413.825663][T18364] loop5: detected capacity change from 0 to 16 [ 413.832052][ T29] audit: type=1326 audit(2000000275.669:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18351 comm="syz.4.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 413.856244][T18364] erofs (device loop5): mounted with root inode @ nid 36. [ 414.068126][T18370] loop4: detected capacity change from 0 to 512 [ 414.117220][T18370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.161955][T18370] ext4 filesystem being mounted at /995/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 414.331499][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.769683][T18398] loop5: detected capacity change from 0 to 1024 [ 414.869397][T18398] EXT4-fs (loop5): stripe (2047) is not aligned with cluster size (16), stripe is disabled [ 414.963192][T18386] loop6: detected capacity change from 0 to 32768 [ 415.012309][T18386] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 415.026400][T18405] loop4: detected capacity change from 0 to 256 [ 415.034119][T18386] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 415.045416][T18398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.077817][T18372] loop1: detected capacity change from 0 to 40427 [ 415.082057][T18386] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 415.092379][T18372] F2FS-fs (loop1): Invalid log sectors per block(3) log sectorsize(10) [ 415.101099][T18372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.110069][T18405] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 415.124556][T18372] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045589454292453) [ 415.161822][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 415.189408][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 415.208636][T18372] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 415.217831][T11757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.228373][T18372] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 415.355352][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 165ms [ 415.410341][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 415.437073][T18386] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 415.475974][T18412] loop4: detected capacity change from 0 to 1024 [ 415.938530][T18423] loop4: detected capacity change from 0 to 512 [ 416.026682][T18423] EXT4-fs: Ignoring removed nobh option [ 416.071896][T18423] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 416.200958][T18423] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.4894: corrupted in-inode xattr: e_name out of bounds [ 416.287566][T18423] EXT4-fs (loop4): 1 truncate cleaned up [ 416.295553][T18423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.328919][T18423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.509685][ T3965] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 416.559249][ T29] audit: type=1326 audit(2000000278.659:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.4.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 416.644894][ T29] audit: type=1326 audit(2000000278.679:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.4.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 416.681812][ T3965] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 416.689808][T18449] loop6: detected capacity change from 0 to 1764 [ 416.703223][ T3965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 416.723316][ T29] audit: type=1326 audit(2000000278.679:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.4.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 416.745661][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.770802][ T3965] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 416.795621][ T3965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.812564][ T29] audit: type=1326 audit(2000000278.679:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.4.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 416.826366][ T3965] usb 6-1: Product: syz [ 416.873847][ T3965] usb 6-1: Manufacturer: syz [ 416.891700][ T3965] usb 6-1: SerialNumber: syz [ 416.897893][T18438] loop1: detected capacity change from 0 to 32768 [ 416.910251][T18438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4899 (18438) [ 416.925570][ T3965] usb 6-1: config 0 descriptor?? [ 416.980863][T18438] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 416.985274][T17042] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 416.995608][T18438] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 417.007594][T18438] BTRFS info (device loop1): using free-space-tree [ 417.160895][ T3965] input: Griffin PowerMate as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 417.175509][ C1] powermate: config urb returned -71 [ 417.181596][ C1] powermate: config urb returned -71 [ 417.188788][ C1] powermate: config urb returned -71 [ 417.194689][ C1] powermate: config urb returned -71 [ 417.203619][T17042] usb 5-1: Using ep0 maxpacket: 32 [ 417.216843][T17042] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 417.228782][T17042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.278469][ T5839] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 417.301488][ T3965] usb 6-1: USB disconnect, device number 12 [ 417.307465][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 417.334805][T17042] usb 5-1: Product: syz [ 417.339024][T17042] usb 5-1: Manufacturer: syz [ 417.361141][T17042] usb 5-1: SerialNumber: syz [ 417.430376][T17042] usb 5-1: config 0 descriptor?? [ 417.901642][T17042] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 417.908834][T17042] airspy 5-1:0.0: Could not detect board [ 417.938559][T17042] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 417.988035][T18485] loop6: detected capacity change from 0 to 32768 [ 417.994516][T17042] usb 5-1: USB disconnect, device number 15 [ 418.039520][T18485] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4915 (18485) [ 418.055242][T18485] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 418.066931][T18485] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 418.089369][T18485] BTRFS info (device loop6): using free-space-tree [ 418.445708][T17055] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 418.862337][T18522] loop6: detected capacity change from 0 to 64 [ 418.949766][T18522] Trying to free block not in datazone [ 419.079229][T18511] 9pnet_fd: p9_fd_create_tcp (18511): problem connecting socket to 127.0.0.1 [ 419.285073][T18533] loop0: detected capacity change from 0 to 256 [ 419.370660][T18533] FAT-fs (loop0): Directory bread(block 64) failed [ 419.377463][T18533] FAT-fs (loop0): Directory bread(block 65) failed [ 419.398783][T18533] FAT-fs (loop0): Directory bread(block 66) failed [ 419.408234][T18533] FAT-fs (loop0): Directory bread(block 67) failed [ 419.429386][T18533] FAT-fs (loop0): Directory bread(block 68) failed [ 419.439516][ T29] audit: type=1326 audit(2000000281.559:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 419.462213][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.486189][T18533] FAT-fs (loop0): Directory bread(block 69) failed [ 419.517588][ T29] audit: type=1326 audit(2000000281.569:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 419.540859][T18533] FAT-fs (loop0): Directory bread(block 70) failed [ 419.547431][T18533] FAT-fs (loop0): Directory bread(block 71) failed [ 419.554162][T18533] FAT-fs (loop0): Directory bread(block 72) failed [ 419.560781][T18533] FAT-fs (loop0): Directory bread(block 73) failed [ 419.567723][ T29] audit: type=1326 audit(2000000281.579:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 419.597937][ T29] audit: type=1326 audit(2000000281.579:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 419.620904][ T29] audit: type=1326 audit(2000000281.579:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18535 comm="syz.4.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811e185d29 code=0x7ffc0000 [ 419.643236][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.677432][T18516] loop1: detected capacity change from 0 to 40427 [ 419.719370][T18516] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 419.726842][T18516] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 419.763922][T18544] loop5: detected capacity change from 0 to 64 [ 419.800715][T18516] F2FS-fs (loop1): invalid crc value [ 419.822575][T18538] loop6: detected capacity change from 0 to 4096 [ 419.837086][T18516] F2FS-fs (loop1): Found nat_bits in checkpoint [ 419.864135][T18538] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 419.937367][T18548] loop4: detected capacity change from 0 to 256 [ 419.984723][T18516] F2FS-fs (loop1): Start checkpoint disabled! [ 420.017942][T18516] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 420.025330][T18516] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 420.095024][T18516] syz.1.4921: attempt to access beyond end of device [ 420.095024][T18516] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 420.165633][T18538] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 420.320773][T18557] loop0: detected capacity change from 0 to 16 [ 420.396120][T18557] erofs (device loop0): mounted with root inode @ nid 36. [ 420.450231][ T742] kworker/u8:5: attempt to access beyond end of device [ 420.450231][ T742] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 420.460706][T18557] erofs (device loop0): bogus lookback distance 0 @ lcn 4 of nid 36 [ 420.466692][ T742] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 420.480334][ T742] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 420.487241][ T742] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 420.494419][ T742] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 420.509798][T18557] erofs (device loop0): bogus lookback distance 0 @ lcn 4 of nid 36 [ 420.521107][T18557] erofs (device loop0): read error -117 @ 72 of nid 36 [ 420.889395][T18571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4944'. [ 421.047310][T18574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.254948][T18581] loop4: detected capacity change from 0 to 128 [ 421.321481][T18581] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 421.355508][T18588] loop1: detected capacity change from 0 to 1764 [ 421.381503][T18581] syz.4.4952: attempt to access beyond end of device [ 421.381503][T18581] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 421.445993][T18581] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 421.596344][ T5836] sysv_free_block: flc_count > flc_size [ 421.609367][ T5836] sysv_free_block: flc_count > flc_size [ 421.617869][ T5836] sysv_free_block: flc_count > flc_size [ 421.639405][ T5836] sysv_free_block: flc_count > flc_size [ 421.645021][ T5836] sysv_free_block: flc_count > flc_size [ 421.686706][T18597] IPv6: sit1: Disabled Multicast RS [ 421.715546][ T5836] sysv_free_block: flc_count > flc_size [ 421.851588][ T5836] sysv_free_block: flc_count > flc_size [ 421.869325][ T5836] sysv_free_block: flc_count > flc_size [ 421.875771][ T5836] sysv_free_block: flc_count > flc_size [ 421.935728][ T5836] sysv_free_block: flc_count > flc_size [ 421.969921][ T5836] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 421.985257][T18599] loop1: detected capacity change from 0 to 32768 [ 422.020599][T18599] ialloc: diAlloc returned -5! [ 422.051248][T18604] loop6: detected capacity change from 0 to 256 [ 422.748967][T18628] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4974'. [ 422.753794][T18630] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4975'. [ 422.779916][T18628] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 422.844916][T18632] loop0: detected capacity change from 0 to 1024 [ 422.939080][T18632] hfsplus: bad catalog entry type [ 423.409098][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4984'. [ 423.429734][T18647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4984'. [ 423.673671][T18612] loop5: detected capacity change from 0 to 32768 [ 423.877613][T18661] @ÿ: renamed from bond_slave_0 (while UP) [ 423.912081][T18612] jfs_strtoUCS: char2uni returned -22. [ 423.917596][T18612] charset = cp949, char = 0xd4 [ 423.930236][T18638] loop4: detected capacity change from 0 to 32768 [ 424.045110][T18638] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 424.577483][T18662] loop1: detected capacity change from 0 to 32768 [ 424.619305][ T5880] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 424.623203][T18662] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 424.633687][T18684] loop0: detected capacity change from 0 to 1024 [ 424.649892][T18684] EXT4-fs: Ignoring removed orlov option [ 424.655600][T18684] EXT4-fs: Ignoring removed orlov option [ 424.672156][T18638] XFS (loop4): Ending clean mount [ 424.688354][T18662] (syz.1.4991,18662,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 424.706332][T18662] (syz.1.4991,18662,0):ocfs2_prepare_dir_for_insert:4277 ERROR: status = -2 [ 424.715808][T18662] (syz.1.4991,18662,0):ocfs2_mknod:298 ERROR: status = -2 [ 424.723134][T18662] (syz.1.4991,18662,0):ocfs2_mknod:502 ERROR: status = -2 [ 424.730403][T18662] (syz.1.4991,18662,0):ocfs2_create:676 ERROR: status = -2 [ 424.801263][ T5880] usb 6-1: config 0 has an invalid interface number: 127 but max is 1 [ 424.817594][ T5880] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 424.840011][ T5880] usb 6-1: config 0 has no interface number 1 [ 424.847320][ T5880] usb 6-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 424.860784][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 424.871978][T18684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.880793][ T5880] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 424.895480][ T5836] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 424.914191][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.938406][T18684] EXT4-fs error (device loop0): ext4_xattr_set_entry:1668: inode #13: comm syz.0.4998: corrupted xattr entries [ 424.965213][ T5839] ocfs2: Unmounting device (7,1) on (node local) [ 424.971694][ T5880] usb 6-1: Product: syz [ 424.976266][ T5880] usb 6-1: Manufacturer: syz [ 424.981037][ T5880] usb 6-1: SerialNumber: syz [ 425.040188][ T5880] usb 6-1: config 0 descriptor?? [ 425.131525][ T5880] usb-storage 6-1:0.127: USB Mass Storage device detected [ 425.167941][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.250106][ T5880] usb-storage 6-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 425.367339][T18680] loop5: detected capacity change from 0 to 1024 [ 425.376314][ T5880] usb-storage 6-1:0.0: USB Mass Storage device detected [ 425.470236][T18680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.601336][ T5880] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 425.784482][ T5880] usb 6-1: USB disconnect, device number 13 [ 425.979459][ T3965] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 426.123558][T18719] loop4: detected capacity change from 0 to 32768 [ 426.171369][ T3965] usb 2-1: not running at top speed; connect to a high speed hub [ 426.180929][ T3965] usb 2-1: config 157 has an invalid interface number: 24 but max is 0 [ 426.189461][ T3965] usb 2-1: config 157 has no interface number 0 [ 426.200781][ T3965] usb 2-1: config 157 interface 24 has no altsetting 0 [ 426.210456][ T3965] usb 2-1: New USB device found, idVendor=1b3d, idProduct=018c, bcdDevice=2e.ac [ 426.219822][ T3965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.221110][T18719] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.228531][ T3965] usb 2-1: Product: syz [ 426.240966][ T3965] usb 2-1: Manufacturer: syz [ 426.246069][ T3965] usb 2-1: SerialNumber: syz [ 426.262208][T11757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.475384][ T3965] ftdi_sio 2-1:157.24: FTDI USB Serial Device converter detected [ 426.478984][T18719] XFS (loop4): Ending clean mount [ 426.489497][ T3965] ftdi_sio ttyUSB0: unknown device type: 0x2eac [ 426.503137][T18725] loop0: detected capacity change from 0 to 40427 [ 426.533381][ T3965] usb 2-1: USB disconnect, device number 28 [ 426.537921][T18719] XFS (loop4): Quotacheck needed: Please wait. [ 426.558175][T18725] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 426.576854][ T3965] ftdi_sio 2-1:157.24: device disconnected [ 426.598884][T18725] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 426.646689][T18725] F2FS-fs (loop0): invalid crc value [ 426.667517][T18725] F2FS-fs (loop0): Found nat_bits in checkpoint [ 426.748317][T18719] XFS (loop4): Quotacheck: Done. [ 426.831053][T18725] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 426.838140][T18725] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 426.900688][ T5836] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.921662][T18725] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 426.962699][T18725] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 427.102547][T18725] F2FS-fs (loop0): f2fs_new_node_page: inconsistent nat entry, ino:4, nid:4, blkaddr:4098, ver:0, flag:0 [ 427.185242][ T29] audit: type=1326 audit(2000000289.179:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18761 comm="syz.5.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 427.208324][ T29] audit: type=1326 audit(2000000289.179:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18761 comm="syz.5.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 427.231100][ T29] audit: type=1326 audit(2000000289.179:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18761 comm="syz.5.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 427.253645][ T29] audit: type=1326 audit(2000000289.179:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18761 comm="syz.5.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9632f85d29 code=0x7ffc0000 [ 427.428254][T18772] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 427.755980][T18782] loop4: detected capacity change from 0 to 512 [ 428.036362][T18789] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5038'. [ 428.254535][T18794] loop1: detected capacity change from 0 to 64 [ 428.311011][T18782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.325174][T18782] ext4 filesystem being mounted at /1023/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.460217][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.489291][T17042] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 428.729252][T17042] usb 7-1: Using ep0 maxpacket: 32 [ 428.758258][T17042] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.792010][T17042] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.814452][T17042] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 428.824094][T17042] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 428.832534][T17042] usb 7-1: Product: syz [ 428.837563][T17042] usb 7-1: Manufacturer: syz [ 428.853548][T17042] hub 7-1:4.0: USB hub found [ 429.061252][T17042] hub 7-1:4.0: 2 ports detected [ 429.248118][T18829] loop4: detected capacity change from 0 to 512 [ 429.262715][T18829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 429.267563][T17042] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 429.301571][T17042] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 429.358339][T18829] EXT4-fs (loop4): 1 truncate cleaned up [ 429.360379][T17042] usb 7-1: USB disconnect, device number 7 [ 429.365367][T18829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.569450][T18843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5059'. [ 429.578458][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5059'. [ 429.601776][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.602921][T18843] netlink: 'syz.0.5059': attribute type 2 has an invalid length. [ 429.615124][T18845] loop1: detected capacity change from 0 to 128 [ 429.653636][T18845] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 429.667577][T18845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.669486][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 429.839298][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 429.859633][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.890143][T18849] loop4: detected capacity change from 0 to 2048 [ 429.898966][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.948393][T18849] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 429.952371][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 429.978044][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.999946][ T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 430.009042][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.028339][ T9] usb 6-1: config 0 descriptor?? [ 430.053250][ T9] hso 6-1:0.0: Can't find BULK IN endpoint [ 430.229308][T17042] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 430.277839][T18861] loop4: detected capacity change from 0 to 256 [ 430.330902][ T9] usb 6-1: USB disconnect, device number 14 [ 430.339396][ T5879] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 430.353637][T18861] FAT-fs (loop4): Directory bread(block 64) failed [ 430.370377][T18861] FAT-fs (loop4): Directory bread(block 65) failed [ 430.377528][T18861] FAT-fs (loop4): Directory bread(block 66) failed [ 430.393912][T17042] usb 7-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 430.404154][T17042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.408155][T18861] FAT-fs (loop4): Directory bread(block 67) failed [ 430.415729][T17042] usb 7-1: Product: syz [ 430.423359][T17042] usb 7-1: Manufacturer: syz [ 430.429654][T18861] FAT-fs (loop4): Directory bread(block 68) failed [ 430.435782][T17042] usb 7-1: SerialNumber: syz [ 430.441671][T18861] FAT-fs (loop4): Directory bread(block 69) failed [ 430.456374][T18861] FAT-fs (loop4): Directory bread(block 70) failed [ 430.456917][T17042] usb 7-1: config 0 descriptor?? [ 430.469489][T18861] FAT-fs (loop4): Directory bread(block 71) failed [ 430.484730][T17042] hub 7-1:0.0: bad descriptor, ignoring hub [ 430.489342][T18861] FAT-fs (loop4): Directory bread(block 72) failed [ 430.497241][T18861] FAT-fs (loop4): Directory bread(block 73) failed [ 430.500649][ T5879] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 430.513172][T17042] hub 7-1:0.0: probe with driver hub failed with error -5 [ 430.520699][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.530142][T17042] f81232 7-1:0.0: f81534a converter detected [ 430.549960][ T5879] usb 2-1: config 0 descriptor?? [ 430.608417][T18854] loop0: detected capacity change from 0 to 32768 [ 430.697124][T17042] usb 7-1: f81534a converter now attached to ttyUSB0 [ 430.786762][ T5879] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 431.001891][ T29] audit: type=1326 audit(2000000293.129:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.0.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc2385d29 code=0x7ffc0000 [ 431.020013][T17042] usb 7-1: USB disconnect, device number 8 [ 431.040889][ T3965] usb 2-1: USB disconnect, device number 29 [ 431.054969][ T29] audit: type=1326 audit(2000000293.179:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.0.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcbc2385d29 code=0x7ffc0000 [ 431.069012][T17042] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 431.111203][T17042] f81232 7-1:0.0: device disconnected [ 431.157838][ T29] audit: type=1326 audit(2000000293.179:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.0.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc2385d29 code=0x7ffc0000 [ 431.193916][ T29] audit: type=1326 audit(2000000293.179:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18868 comm="syz.0.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc2385d29 code=0x7ffc0000 [ 431.615591][T18887] netlink: 'syz.5.5082': attribute type 11 has an invalid length. [ 431.781146][T18896] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 431.788373][T18896] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 431.850141][T18896] vhci_hcd vhci_hcd.0: Device attached [ 431.946594][T18900] vhci_hcd vhci_hcd.0: port 0 already used [ 432.058803][T18901] vhci_hcd: connection closed [ 432.074805][ T11] vhci_hcd: stop threads [ 432.097770][ T11] vhci_hcd: release socket [ 432.141810][ T11] vhci_hcd: disconnect device [ 432.473711][T18935] loop1: detected capacity change from 0 to 2048 [ 432.520895][T18935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.730240][T17042] usb usb42-port1: attempt power cycle [ 432.991260][T18950] xt_CT: No such helper "netbios-ns" [ 433.115286][T18920] loop0: detected capacity change from 0 to 32768 [ 433.208007][T18920] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 433.217493][T18920] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 433.235090][T18920] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 433.246052][ T3965] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 433.252933][ T3965] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 433.330926][ T3965] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 77ms [ 433.338482][ T3965] gfs2: fsid=syz:syz.0: jid=0: Done [ 433.384633][T18920] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 433.481203][T17042] usb usb42-port1: unable to enumerate USB device [ 434.019637][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 434.129617][T19001] loop5: detected capacity change from 0 to 512 [ 434.156537][T19001] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 434.165578][T19001] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 434.181981][T19001] EXT4-fs (loop5): 1 truncate cleaned up [ 434.214694][T19001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.239460][ T9] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 434.247679][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.296027][ T9] usb 2-1: config 0 has no interface number 0 [ 434.337767][ T9] usb 2-1: too many endpoints for config 0 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 434.373033][ T9] usb 2-1: config 0 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 434.411009][ T9] usb 2-1: config 0 interface 108 has no altsetting 0 [ 434.429024][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 434.496416][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.540350][ T9] usb 2-1: config 0 descriptor?? [ 434.549282][ T5880] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 434.580255][T18999] loop4: detected capacity change from 0 to 32768 [ 434.600068][T18999] (syz.4.5131,18999,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 434.654871][T18999] (syz.4.5131,18999,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 434.698783][T18999] JBD2: Ignoring recovery information on journal [ 434.864346][T19005] loop6: detected capacity change from 0 to 32768 [ 434.872967][ T9] usb 2-1: string descriptor 0 read error: -71 [ 434.892781][ T9] usb 2-1: USB disconnect, device number 30 [ 434.895830][T18999] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 434.900323][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 434.965119][ T5880] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 434.976585][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.008298][ T5880] usb 6-1: Product: syz [ 435.018429][ T5880] usb 6-1: Manufacturer: syz [ 435.030011][ T5880] usb 6-1: SerialNumber: syz [ 435.043363][ T5880] usb 6-1: config 0 descriptor?? [ 435.069682][T18999] ocfs2: Unmounting device (7,4) on (node local) [ 435.267742][ T5880] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 435.311379][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5138'. [ 435.401940][ T5880] usb 6-1: USB disconnect, device number 15 [ 435.698428][T19034] loop4: detected capacity change from 0 to 8 [ 435.781627][T19034] SQUASHFS error: zlib decompression failed, data probably corrupt [ 435.808682][T19034] SQUASHFS error: Failed to read block 0x13e: -5 [ 435.818867][T19034] SQUASHFS error: Unable to read metadata cache entry [13c] [ 435.845044][T11757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.847528][T19034] SQUASHFS error: Unable to read directory block [13c:26] [ 436.124057][T19047] loop1: detected capacity change from 0 to 64 [ 436.201786][T19047] MINIX-fs: deleted inode referenced: 5 [ 436.239135][T19047] MINIX-fs: deleted inode referenced: 5 [ 436.504759][T19062] loop0: detected capacity change from 0 to 512 [ 436.530009][T19062] EXT4-fs: Ignoring removed i_version option [ 436.536069][T19062] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.625838][T19062] EXT4-fs error (device loop0): ext4_orphan_get:1389: comm syz.0.5159: inode #13: comm syz.0.5159: iget: illegal inode # [ 436.708536][T19062] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.5159: couldn't read orphan inode 13 (err -117) [ 436.772864][T19062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.885585][T19067] loop5: detected capacity change from 0 to 1024 [ 436.909145][T19066] loop1: detected capacity change from 0 to 4096 [ 436.923005][T19058] loop4: detected capacity change from 0 to 32768 [ 436.935439][T19062] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.5159: resize_inode disabled but reserved GDT blocks non-zero [ 436.968894][T19058] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 436.977998][T19058] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 436.992519][T19058] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 436.999935][T19066] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 437.013579][ T3965] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 437.020776][ T3965] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 437.024552][T19039] loop6: detected capacity change from 0 to 32768 [ 437.075908][ T3965] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 55ms [ 437.094751][ T3965] gfs2: fsid=syz:syz.0: jid=0: Done [ 437.100937][T19058] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 437.263895][T19039] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 437.285094][T19039] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 437.293311][T19039] bcachefs (loop6): Version upgrade required: [ 437.293311][T19039] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 437.293311][T19039] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors [ 437.293311][T19039] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 437.313438][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.369979][T19039] bcachefs (loop6): dropping and reconstructing all alloc info [ 437.413603][T19039] bcachefs (loop6): accounting_read... done [ 437.469143][T19039] bcachefs (loop6): alloc_read... done [ 437.476649][T19039] bcachefs (loop6): stripes_read... done [ 437.525190][T19066] ntfs3(loop1): failed to convert "c46c" to cp860 [ 437.530232][T19039] bcachefs (loop6): snapshots_read... done [ 437.636877][T19082] can: request_module (can-proto-3) failed. [ 437.665032][T19039] bcachefs (loop6): done starting filesystem [ 437.815303][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5169'. [ 437.824970][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5169'. [ 437.935432][T17055] bcachefs (loop6): shutting down [ 437.943290][T19099] loop0: detected capacity change from 0 to 2048 [ 438.009467][T19099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.039562][T19099] ext4 filesystem being mounted at /1075/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.047853][T17055] bcachefs (loop6): shutdown complete [ 438.119322][T17042] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 438.187584][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.276576][T17042] usb 6-1: config 7 interface 0 has no altsetting 0 [ 438.286719][T17042] usb 6-1: string descriptor 0 read error: -22 [ 438.293443][T17042] usb 6-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 438.319395][T17042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.349792][T17042] usb 6-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 438.362396][T17042] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 438.373375][T17042] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 438.388501][T17042] usb 6-1: media controller created [ 438.422387][T17042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.589274][T17042] usb 6-1: USB disconnect, device number 16 [ 438.940299][T19135] netlink: 'syz.0.5185': attribute type 7 has an invalid length. [ 438.959400][T19135] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5185'. [ 439.106248][T19117] loop1: detected capacity change from 0 to 32768 [ 439.118926][T19140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5186'. [ 439.290976][T19117] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 439.433815][T19158] loop4: detected capacity change from 0 to 64 [ 439.613453][T19117] XFS (loop1): Ending clean mount [ 439.642612][T19117] XFS (loop1): Quotacheck needed: Please wait. [ 439.764750][T19117] XFS (loop1): Quotacheck: Done. [ 439.806579][ T5839] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 440.227089][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.427126][T19164] loop5: detected capacity change from 0 to 32768 [ 440.689032][T19180] loop1: detected capacity change from 0 to 16 [ 440.707162][T19180] erofs (device loop1): mounted with root inode @ nid 36. [ 440.811151][T19166] loop4: detected capacity change from 0 to 40427 [ 440.853760][T19166] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 440.880658][T19166] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 440.912913][T19166] F2FS-fs (loop4): invalid crc value [ 440.989014][T19166] F2FS-fs (loop4): Found nat_bits in checkpoint [ 441.122182][T19166] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 441.139249][T19166] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 441.209340][T17042] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 441.214748][T19195] loop5: detected capacity change from 0 to 512 [ 441.296456][T19195] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 441.317670][T19195] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 441.359389][T17042] usb 2-1: Using ep0 maxpacket: 32 [ 441.373243][T19195] System zones: 0-2, 18-18, 34-35 [ 441.466084][T19191] loop6: detected capacity change from 0 to 32768 [ 441.496003][T17042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.510491][T17042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.510595][T19195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 441.520358][T17042] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 441.542812][T17042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.553875][T17042] usb 2-1: config 0 descriptor?? [ 441.561540][T17042] hub 2-1:0.0: USB hub found [ 441.565495][T19191] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 441.565495][T19191] [ 441.592790][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5208'. [ 441.613960][T19195] EXT4-fs (loop5): shut down requested (0) [ 441.660833][T19191] ERROR: (device loop6): remounting filesystem as read-only [ 441.668206][T19191] xtLookup: xtSearch returned -5 [ 441.668971][T19201] netlink: 'syz.4.5210': attribute type 2 has an invalid length. [ 441.677312][T19191] ERROR: (device loop6): xtTruncate: XT_GETPAGE: xtree page corrupt [ 441.677312][T19191] [ 441.691274][T11757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.694860][T19201] netlink: 'syz.4.5210': attribute type 8 has an invalid length. [ 441.741671][T19201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5210'. [ 441.770569][T17042] hub 2-1:0.0: 1 port detected [ 441.966659][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5211'. [ 441.977293][T17042] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 441.984382][T17042] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 442.002710][T17042] usbhid 2-1:0.0: can't add hid device: -71 [ 442.008823][T17042] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 442.043359][T19207] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 442.068433][T17042] usb 2-1: USB disconnect, device number 31 [ 442.088315][T19209] loop4: detected capacity change from 0 to 512 [ 442.110733][T19209] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 442.129454][T19209] EXT4-fs (loop4): 1 truncate cleaned up [ 442.135997][T19209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.190093][T19209] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.472741][T19224] netlink: 'syz.6.5219': attribute type 10 has an invalid length. [ 442.601982][T19227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.770336][T19235] netlink: 'syz.1.5225': attribute type 5 has an invalid length. [ 442.946880][T19245] loop0: detected capacity change from 0 to 256 [ 443.038683][T19245] FAT-fs (loop0): Directory bread(block 64) failed [ 443.105587][T19245] FAT-fs (loop0): Directory bread(block 65) failed [ 443.116604][T19245] FAT-fs (loop0): Directory bread(block 66) failed [ 443.125248][T19245] FAT-fs (loop0): Directory bread(block 67) failed [ 443.133172][T19245] FAT-fs (loop0): Directory bread(block 68) failed [ 443.173238][T19245] FAT-fs (loop0): Directory bread(block 69) failed [ 443.199721][T19245] FAT-fs (loop0): Directory bread(block 70) failed [ 443.237874][T19245] FAT-fs (loop0): Directory bread(block 71) failed [ 443.264244][T19260] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 443.340091][T19245] FAT-fs (loop0): Directory bread(block 72) failed [ 443.346682][T19245] FAT-fs (loop0): Directory bread(block 73) failed [ 444.807551][T19333] loop4: detected capacity change from 0 to 128 [ 444.852082][T19333] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 444.895778][T19333] syz.4.5273: attempt to access beyond end of device [ 444.895778][T19333] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 444.958996][T19333] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 444.987054][T19333] ================================================================== [ 444.995164][T19333] BUG: KASAN: use-after-free in sysv_new_inode+0xfc7/0x1160 [ 445.002481][T19333] Read of size 2 at addr ffff8880586b51ce by task syz.4.5273/19333 [ 445.010465][T19333] [ 445.012800][T19333] CPU: 0 UID: 0 PID: 19333 Comm: syz.4.5273 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 445.012841][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 445.012851][T19333] Call Trace: [ 445.012857][T19333] [ 445.012863][T19333] dump_stack_lvl+0x241/0x360 [ 445.012884][T19333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.012900][T19333] ? __pfx__printk+0x10/0x10 [ 445.012920][T19333] ? _printk+0xd5/0x120 [ 445.012939][T19333] ? __virt_addr_valid+0x183/0x530 [ 445.012957][T19333] ? __virt_addr_valid+0x183/0x530 [ 445.012976][T19333] print_report+0x169/0x550 [ 445.012994][T19333] ? __virt_addr_valid+0x183/0x530 [ 445.013011][T19333] ? __virt_addr_valid+0x183/0x530 [ 445.013028][T19333] ? __virt_addr_valid+0x45f/0x530 [ 445.013045][T19333] ? __phys_addr+0xba/0x170 [ 445.013063][T19333] ? sysv_new_inode+0xfc7/0x1160 [ 445.013078][T19333] kasan_report+0x143/0x180 [ 445.013097][T19333] ? sysv_new_inode+0xfc7/0x1160 [ 445.013114][T19333] sysv_new_inode+0xfc7/0x1160 [ 445.013130][T19333] ? tomoyo_path_number_perm+0x206/0x860 [ 445.013148][T19333] ? __pfx_sysv_new_inode+0x10/0x10 [ 445.013174][T19333] ? generic_permission+0x356/0x680 [ 445.013192][T19333] sysv_mknod+0x4e/0xe0 [ 445.013215][T19333] vfs_mknod+0x36d/0x3b0 [ 445.013233][T19333] do_mknodat+0x3ec/0x5b0 [ 445.013249][T19333] ? __pfx_do_mknodat+0x10/0x10 [ 445.013264][T19333] ? getname_flags+0x1e3/0x540 [ 445.013280][T19333] __x64_sys_mknod+0x8c/0xa0 [ 445.013297][T19333] do_syscall_64+0xf3/0x230 [ 445.013312][T19333] ? clear_bhb_loop+0x35/0x90 [ 445.013331][T19333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.013348][T19333] RIP: 0033:0x7f811e185d29 [ 445.013366][T19333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.013380][T19333] RSP: 002b:00007f811f072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 445.013396][T19333] RAX: ffffffffffffffda RBX: 00007f811e375fa0 RCX: 00007f811e185d29 [ 445.013407][T19333] RDX: 0000000000000000 RSI: 000000000000c000 RDI: 0000000020000040 [ 445.013416][T19333] RBP: 00007f811e201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 445.013425][T19333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.013434][T19333] R13: 0000000000000000 R14: 00007f811e375fa0 R15: 00007ffd06180818 [ 445.013449][T19333] [ 445.013455][T19333] [ 445.246874][T19333] The buggy address belongs to the physical page: [ 445.253314][T19333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7fcbc256f pfn:0x586b5 [ 445.262760][T19333] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 445.269865][T19333] page_type: f0(buddy) [ 445.273924][T19333] raw: 00fff00000000000 ffffea000126f508 ffffea0001568088 0000000000000000 [ 445.282503][T19333] raw: 00000007fcbc256f 0000000000000000 00000000f0000000 0000000000000000 [ 445.291072][T19333] page dumped because: kasan: bad access detected [ 445.297473][T19333] page_owner tracks the page as freed [ 445.302825][T19333] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 19328, tgid 19328 (syz.0.5274), ts 444779644067, free_ts 444894360280 [ 445.321670][T19333] post_alloc_hook+0x1f4/0x240 [ 445.326436][T19333] get_page_from_freelist+0x365c/0x37a0 [ 445.331979][T19333] __alloc_frozen_pages_noprof+0x292/0x710 [ 445.337781][T19333] alloc_pages_mpol+0x30e/0x550 [ 445.342629][T19333] vma_alloc_folio_noprof+0x12b/0x260 [ 445.347997][T19333] folio_prealloc+0x2e/0x170 [ 445.352581][T19333] do_wp_page+0x1253/0x49b0 [ 445.357074][T19333] handle_pte_fault+0xfa5/0x5ee0 [ 445.362004][T19333] handle_mm_fault+0x11f5/0x1d50 [ 445.366930][T19333] exc_page_fault+0x459/0x8b0 [ 445.371608][T19333] asm_exc_page_fault+0x26/0x30 [ 445.376451][T19333] page last free pid 19328 tgid 19328 stack trace: [ 445.382937][T19333] free_unref_folios+0xe40/0x18b0 [ 445.387956][T19333] folios_put_refs+0x76c/0x860 [ 445.392712][T19333] free_pages_and_swap_cache+0x5c8/0x690 [ 445.398337][T19333] tlb_flush_mmu+0x3a3/0x680 [ 445.402921][T19333] tlb_finish_mmu+0xd4/0x200 [ 445.407506][T19333] exit_mmap+0x52f/0xd50 [ 445.411738][T19333] __mmput+0x115/0x420 [ 445.415792][T19333] exit_mm+0x220/0x310 [ 445.419853][T19333] do_exit+0x9b2/0x28e0 [ 445.424002][T19333] do_group_exit+0x207/0x2c0 [ 445.428583][T19333] __x64_sys_exit_group+0x3f/0x40 [ 445.433603][T19333] x64_sys_call+0x26a8/0x26b0 [ 445.438269][T19333] do_syscall_64+0xf3/0x230 [ 445.442765][T19333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.448651][T19333] [ 445.450961][T19333] Memory state around the buggy address: [ 445.456575][T19333] ffff8880586b5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 445.464624][T19333] ffff8880586b5100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 445.472674][T19333] >ffff8880586b5180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 445.480721][T19333] ^ [ 445.487122][T19333] ffff8880586b5200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 445.495171][T19333] ffff8880586b5280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 445.503236][T19333] ================================================================== [ 445.632560][T19333] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 445.639791][T19333] CPU: 0 UID: 0 PID: 19333 Comm: syz.4.5273 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 445.650035][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 445.660092][T19333] Call Trace: [ 445.663377][T19333] [ 445.666312][T19333] dump_stack_lvl+0x241/0x360 [ 445.671004][T19333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.676207][T19333] ? __pfx__printk+0x10/0x10 [ 445.680810][T19333] ? preempt_schedule+0xe1/0xf0 [ 445.685682][T19333] ? vscnprintf+0x5d/0x90 [ 445.690028][T19333] panic+0x349/0x880 [ 445.693925][T19333] ? check_panic_on_warn+0x21/0xb0 [ 445.699029][T19333] ? __pfx_panic+0x10/0x10 [ 445.703442][T19333] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 445.709416][T19333] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 445.715736][T19333] ? print_report+0x502/0x550 [ 445.720427][T19333] check_panic_on_warn+0x86/0xb0 [ 445.725372][T19333] ? sysv_new_inode+0xfc7/0x1160 [ 445.730301][T19333] end_report+0x77/0x160 [ 445.734538][T19333] kasan_report+0x154/0x180 [ 445.739035][T19333] ? sysv_new_inode+0xfc7/0x1160 [ 445.743970][T19333] sysv_new_inode+0xfc7/0x1160 [ 445.748733][T19333] ? tomoyo_path_number_perm+0x206/0x860 [ 445.754368][T19333] ? __pfx_sysv_new_inode+0x10/0x10 [ 445.759574][T19333] ? generic_permission+0x356/0x680 [ 445.764768][T19333] sysv_mknod+0x4e/0xe0 [ 445.768916][T19333] vfs_mknod+0x36d/0x3b0 [ 445.773156][T19333] do_mknodat+0x3ec/0x5b0 [ 445.777488][T19333] ? __pfx_do_mknodat+0x10/0x10 [ 445.782332][T19333] ? getname_flags+0x1e3/0x540 [ 445.787090][T19333] __x64_sys_mknod+0x8c/0xa0 [ 445.791679][T19333] do_syscall_64+0xf3/0x230 [ 445.796185][T19333] ? clear_bhb_loop+0x35/0x90 [ 445.800858][T19333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.806744][T19333] RIP: 0033:0x7f811e185d29 [ 445.811246][T19333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.830843][T19333] RSP: 002b:00007f811f072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 445.839255][T19333] RAX: ffffffffffffffda RBX: 00007f811e375fa0 RCX: 00007f811e185d29 [ 445.847229][T19333] RDX: 0000000000000000 RSI: 000000000000c000 RDI: 0000000020000040 [ 445.855197][T19333] RBP: 00007f811e201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 445.863164][T19333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.871125][T19333] R13: 0000000000000000 R14: 00007f811e375fa0 R15: 00007ffd06180818 [ 445.879095][T19333] [ 445.882253][T19333] Kernel Offset: disabled [ 445.886575][T19333] Rebooting in 86400 seconds..