last executing test programs: 5.507133725s ago: executing program 1 (id=2307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f001400200000200100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 5.278053559s ago: executing program 4 (id=2308): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x15) 5.274867566s ago: executing program 1 (id=2318): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0xfffffffd, 0x1000, 0xfffffffd, 0xfffffffe}, 0x1c) 4.455108057s ago: executing program 1 (id=2315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) 3.671978272s ago: executing program 4 (id=2321): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40585414, &(0x7f0000000140)={0x4, 0xaf, 0x80}) 3.47171295s ago: executing program 1 (id=2323): syz_mount_image$nilfs2(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000001500)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRESDEC=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2401}) 3.030876559s ago: executing program 4 (id=2326): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x80800}) 2.956117529s ago: executing program 2 (id=2327): unshare(0x2000400) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) 2.773343345s ago: executing program 3 (id=2328): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r0 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 485.264515][ T9029] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 485.270597][ T9029] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 485.270597][ T9029] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 485.289871][ T9029] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 485.301795][ T9029] CUSE: DEVNAME unspecified [ 485.451289][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 485.471768][ T9032] loop4: detected capacity change from 0 to 2048 [ 485.609604][ T9032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.663599][ T44] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 485.847031][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.858574][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.868937][ T44] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 485.878460][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.972312][ T9042] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 485.980839][ T9042] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1363'. [ 486.050449][ T44] usb 4-1: config 0 descriptor?? [ 486.115401][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.243384][ T1536] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 486.443695][ T1536] usb 3-1: Using ep0 maxpacket: 8 [ 486.450290][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 486.484944][ T1536] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.496528][ T1536] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.507012][ T1536] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.514253][ T1536] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 486.523912][ T1536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.573267][ T44] razer 0003:1532:010E.0014: unknown main item tag 0x0 [ 486.580500][ T44] razer 0003:1532:010E.0014: unknown main item tag 0x0 [ 486.620255][ T1536] usb 3-1: config 0 descriptor?? [ 486.627539][ T44] razer 0003:1532:010E.0014: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 486.760455][ T44] usb 4-1: USB disconnect, device number 8 [ 486.982058][ T9052] loop1: detected capacity change from 0 to 256 [ 487.065327][ T9052] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 487.102425][ T1536] logitech 0003:046D:CA04.0015: unknown main item tag 0x0 [ 487.110167][ T1536] logitech 0003:046D:CA04.0015: unknown main item tag 0x0 [ 487.118047][ T1536] logitech 0003:046D:CA04.0015: unknown main item tag 0x0 [ 487.125790][ T1536] logitech 0003:046D:CA04.0015: unknown main item tag 0x0 [ 487.133428][ T1536] logitech 0003:046D:CA04.0015: unknown main item tag 0x0 [ 487.140881][ T1536] logitech 0003:046D:CA04.0015: unknown main item tag 0x0 [ 487.142810][ T9052] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 487.148477][ T1536] logitech 0003:046D:CA04.0015: unknown main item tag 0x0 [ 487.156642][ T1536] logitech 0003:046D:CA04.0015: hidraw0: USB HID v74.2b Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 487.158258][ T9052] exFAT-fs (loop1): error, failed to bmap (inode : ffff888121ee1430 iblock : 8, err : -5) [ 487.166080][ T1536] logitech 0003:046D:CA04.0015: no inputs found [ 487.186915][ T5887] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 487.253863][ T9052] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 487.341947][ T10] usb 3-1: USB disconnect, device number 9 [ 487.418425][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 487.469531][ T5887] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 487.484289][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.492583][ T5887] usb 1-1: Product: syz [ 487.498779][ T5887] usb 1-1: Manufacturer: syz [ 487.504199][ T5887] usb 1-1: SerialNumber: syz [ 487.541284][ T5887] usb 1-1: config 0 descriptor?? [ 487.558688][ T5887] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 488.171427][ T5887] gspca_ov534_9: reg_w failed -71 [ 488.688644][ T9075] loop2: detected capacity change from 0 to 1024 [ 488.917029][ T5887] gspca_ov534_9: Unknown sensor 0000 [ 488.919183][ T5887] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 488.968093][ T5887] usb 1-1: USB disconnect, device number 11 [ 489.148786][ T60] hfsplus: b-tree write err: -5, ino 4 [ 489.271840][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 491.137749][ T9116] loop4: detected capacity change from 0 to 128 [ 491.200709][ T9116] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 491.459256][ T5801] sysv_free_block: trying to free block not in datazone [ 491.492567][ T5801] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 491.889528][ T9126] syz.4.1403 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 492.113646][ T44] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 492.383783][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 492.415612][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.427102][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.437395][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 492.446999][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.564528][ T44] usb 2-1: config 0 descriptor?? [ 492.892955][ T9140] binder: 9139:9140 ioctl c018620c 20000300 returned -22 [ 493.108185][ T44] microsoft 0003:045E:009D.0016: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.1-1/input0 [ 493.126106][ T44] microsoft 0003:045E:009D.0016: no inputs found [ 493.132708][ T44] microsoft 0003:045E:009D.0016: could not initialize ff, continuing anyway [ 493.281756][ T5887] usb 2-1: USB disconnect, device number 12 [ 493.884202][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 494.043393][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 494.060565][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 494.072549][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 494.085988][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 494.095515][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.108971][ T10] usb 3-1: config 0 descriptor?? [ 494.460755][ T9160] vim2m vim2m.0: vidioc_s_fmt queue busy [ 494.631246][ T10] logitech-djreceiver 0003:046D:C71C.0017: item fetching failed at offset 0/3 [ 494.668952][ T10] logitech-djreceiver 0003:046D:C71C.0017: logi_dj_probe: parse failed [ 494.678648][ T10] logitech-djreceiver 0003:046D:C71C.0017: probe with driver logitech-djreceiver failed with error -22 [ 494.850300][ T10] usb 3-1: USB disconnect, device number 10 [ 495.680718][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 495.690075][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 495.992927][ T9175] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 496.000267][ T9175] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 496.008644][ T9175] vhci_hcd vhci_hcd.0: Device attached [ 496.119262][ T9181] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 496.122677][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1429'. [ 496.126004][ T9181] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 496.126541][ T9181] vhci_hcd vhci_hcd.0: Device attached [ 496.216084][ T10] vhci_hcd: vhci_device speed not set [ 496.303318][ T10] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 496.365341][ T9175] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 496.372167][ T9175] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 496.380609][ T9175] vhci_hcd vhci_hcd.0: Device attached [ 496.454181][ T9188] vhci_hcd: connection closed [ 496.455480][ T9182] vhci_hcd: connection closed [ 496.474158][ T9177] vhci_hcd: connection reset by peer [ 496.485684][ T4030] vhci_hcd: stop threads [ 496.494829][ T4030] vhci_hcd: release socket [ 496.499499][ T4030] vhci_hcd: disconnect device [ 496.586123][ T4030] vhci_hcd: stop threads [ 496.590700][ T4030] vhci_hcd: release socket [ 496.601169][ T4030] vhci_hcd: disconnect device [ 496.659845][ T4030] vhci_hcd: stop threads [ 496.664802][ T4030] vhci_hcd: release socket [ 496.669489][ T4030] vhci_hcd: disconnect device [ 497.553405][ T9209] loop1: detected capacity change from 0 to 64 [ 498.388846][ T9208] loop4: detected capacity change from 0 to 8192 [ 498.584902][ T9224] sp0: Synchronizing with TNC [ 500.668809][ T9250] loop2: detected capacity change from 0 to 2048 [ 500.726546][ T9253] loop4: detected capacity change from 0 to 64 [ 501.564125][ T10] vhci_hcd: vhci_device speed not set [ 501.903338][ T1536] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 502.048610][ T9273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1466'. [ 502.059991][ T9272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1466'. [ 502.135172][ T1536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.147877][ T1536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.158245][ T1536] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 502.168253][ T1536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.318030][ T1536] usb 3-1: config 0 descriptor?? [ 502.333481][ T5887] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 502.596940][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 502.597182][ T5887] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 502.597349][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.605715][ T5887] usb 4-1: config 0 descriptor?? [ 502.769145][ T9280] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1469'. [ 502.782914][ T1536] hid-steam 0003:28DE:1142.0018: item fetching failed at offset 3/5 [ 502.796432][ T9281] loop4: detected capacity change from 0 to 64 [ 502.818322][ T1536] hid-steam 0003:28DE:1142.0018: steam_probe:parse of hid interface failed [ 502.818684][ T1536] hid-steam 0003:28DE:1142.0018: probe with driver hid-steam failed with error -22 [ 503.004108][ T1536] usb 3-1: USB disconnect, device number 11 [ 503.120957][ T5887] uclogic 0003:5543:0005.0019: collection stack underflow [ 503.121133][ T5887] uclogic 0003:5543:0005.0019: item 0 4 0 12 parsing failed [ 503.155088][ T5887] uclogic 0003:5543:0005.0019: parse failed [ 503.155575][ T5887] uclogic 0003:5543:0005.0019: probe with driver uclogic failed with error -22 [ 503.296546][ T1536] usb 4-1: USB disconnect, device number 9 [ 503.517554][ T9285] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1471'. [ 503.710233][ T9287] loop1: detected capacity change from 0 to 128 [ 503.758764][ T9287] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 504.094692][ T5787] sysv_free_block: trying to free block not in datazone [ 504.133498][ T5787] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 504.693768][ T5887] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 505.082052][ T5887] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 505.096483][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.106696][ T5887] usb 2-1: Product: syz [ 505.111367][ T5887] usb 2-1: Manufacturer: syz [ 505.116450][ T5887] usb 2-1: SerialNumber: syz [ 505.165895][ T5887] usb 2-1: config 0 descriptor?? [ 505.462714][ T5887] usb 2-1: USB disconnect, device number 13 [ 505.638942][ T9315] veth0_to_team: entered promiscuous mode [ 505.734316][ T9315] veth0_to_team: left promiscuous mode [ 505.978580][ T9319] loop4: detected capacity change from 0 to 512 [ 506.031649][ T9319] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1489: bad orphan inode 11 [ 506.163623][ T9319] ext4_test_bit(bit=10, block=4) = 1 [ 506.169182][ T9319] is_bad_inode(inode)=0 [ 506.173879][ T9319] NEXT_ORPHAN(inode)=2080374784 [ 506.178946][ T9319] max_ino=32 [ 506.182330][ T9319] i_nlink=0 [ 506.186156][ T9319] EXT4-fs (loop4): 1 truncate cleaned up [ 506.193854][ T9319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.291434][ T9319] cgroup: noprefix used incorrectly [ 506.604562][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.201845][ T9323] loop3: detected capacity change from 0 to 4096 [ 507.799527][ T9342] loop2: detected capacity change from 0 to 256 [ 508.022251][ T9342] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 508.212425][ T9323] ntfs3(loop3): failed to convert "0000" to iso8859-2 [ 508.289286][ T9323] ntfs3(loop3): failed to convert name for inode 1e. [ 508.332571][ T9344] loop1: detected capacity change from 0 to 512 [ 508.360829][ T9344] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 508.422711][ T9344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 508.506704][ T9344] System zones: 1-12 [ 508.627585][ T9344] EXT4-fs (loop1): 1 truncate cleaned up [ 508.635529][ T9344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.004951][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.053447][ T9371] loop3: detected capacity change from 0 to 128 [ 510.166287][ T9371] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 510.565789][ T9379] vim2m vim2m.0: vidioc_s_fmt queue busy [ 510.714609][ T5792] sysv_free_block: trying to free block not in datazone [ 510.769016][ T5792] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 514.253451][ T9425] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 514.260304][ T9425] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 514.268435][ T9425] vhci_hcd vhci_hcd.0: Device attached [ 514.338628][ T9434] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 514.345487][ T9434] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 514.353926][ T9434] vhci_hcd vhci_hcd.0: Device attached [ 514.443604][ T9429] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 514.450527][ T9429] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 514.459293][ T9429] vhci_hcd vhci_hcd.0: Device attached [ 514.474432][ T9435] vhci_hcd: connection closed [ 514.474649][ T9431] vhci_hcd: connection closed [ 514.481140][ T9426] vhci_hcd: connection closed [ 514.505892][ T3001] vhci_hcd: stop threads [ 514.519144][ T3001] vhci_hcd: release socket [ 514.525276][ T3001] vhci_hcd: disconnect device [ 514.573499][ T3001] vhci_hcd: stop threads [ 514.577981][ T3001] vhci_hcd: release socket [ 514.582691][ T3001] vhci_hcd: disconnect device [ 514.621486][ T5887] vhci_hcd: vhci_device speed not set [ 514.683977][ T5887] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 514.759292][ T3001] vhci_hcd: stop threads [ 514.763918][ T3001] vhci_hcd: release socket [ 514.768712][ T3001] vhci_hcd: disconnect device [ 516.017757][ T9459] loop2: detected capacity change from 0 to 1024 [ 516.191366][ T9466] loop1: detected capacity change from 0 to 256 [ 516.305223][ T9459] syz.2.1545: attempt to access beyond end of device [ 516.305223][ T9459] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 516.764248][ T3001] hfsplus: b-tree write err: -5, ino 8 [ 517.825104][ T9482] xt_CT: No such helper "netbios-ns" [ 518.187246][ T9492] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1559'. [ 518.289573][ T9488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1558'. [ 518.656216][ T9497] overlayfs: lower data-only dirs require metacopy support. [ 519.803752][ T5887] vhci_hcd: vhci_device speed not set [ 521.140043][ T9533] netdevsim netdevsim1 nr0: renamed from netdevsim0 (while UP) [ 521.186911][ T9533] net_ratelimit: 1990 callbacks suppressed [ 521.186993][ T9533] A link change request failed with some changes committed already. Interface nr0 may have been left with an inconsistent configuration, please check. [ 523.091632][ T9565] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 525.932163][ T9602] loop2: detected capacity change from 0 to 512 [ 526.054623][ T9602] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 526.062803][ T9602] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 526.127843][ T9602] System zones: 0-1, 15-15, 18-18, 34-34 [ 526.161888][ T9602] EXT4-fs (loop2): orphan cleanup on readonly fs [ 526.168891][ T9602] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 526.178820][ T9602] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 526.199213][ T9602] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 526.255036][ T9602] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1607: bad orphan inode 16 [ 526.318124][ T9602] ext4_test_bit(bit=15, block=18) = 1 [ 526.324075][ T9602] is_bad_inode(inode)=0 [ 526.328429][ T9602] NEXT_ORPHAN(inode)=0 [ 526.332683][ T9602] max_ino=32 [ 526.336314][ T9602] i_nlink=2 [ 526.341248][ T9602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 526.473272][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.477608][ T9602] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 526.480050][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.949038][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.024185][ T5840] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 528.072802][ T9631] netlink: del zone limit has 4 unknown bytes [ 528.119710][ T9629] futex_wake_op: syz.2.1619 tries to shift op by 144; fix this program [ 528.224565][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 528.269762][ T5840] usb 2-1: config 0 interface 0 has no altsetting 0 [ 528.277035][ T5840] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 528.286907][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.355493][ T5840] usb 2-1: config 0 descriptor?? [ 528.847407][ T5840] waltop 0003:172F:0037.001A: item fetching failed at offset 2/5 [ 528.870250][ T5840] waltop 0003:172F:0037.001A: probe with driver waltop failed with error -22 [ 529.042278][ T1536] usb 2-1: USB disconnect, device number 14 [ 529.267962][ T9639] loop2: detected capacity change from 0 to 256 [ 529.944702][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 530.255779][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1629'. [ 531.135455][ T9658] loop2: detected capacity change from 0 to 4096 [ 531.708066][ T9658] ntfs3(loop2): failed to convert "0000" to iso8859-2 [ 531.758471][ T9658] ntfs3(loop2): failed to convert name for inode 1e. [ 531.991825][ T9673] team0: Device veth0_macvtap failed to register rx_handler [ 532.714573][ T9684] syz.4.1643 uses obsolete (PF_INET,SOCK_PACKET) [ 532.849880][ T9688] loop1: detected capacity change from 0 to 128 [ 532.871024][ T9688] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 533.814841][ T9697] Bluetooth: MGMT ver 1.23 [ 534.455686][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 535.405888][ T9721] loop4: detected capacity change from 0 to 2048 [ 535.549322][ T9721] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 535.677905][ T9721] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0x9b != 0xd4 [ 535.741520][ T9719] loop3: detected capacity change from 0 to 2048 [ 535.793290][ T9721] UDF-fs: unknown compression code (0) [ 535.839556][ T9719] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 535.960160][ T9719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.623594][ T5792] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 120777) has inode size 28 different from extent length 512. Filesystem need not be standards compliant. [ 536.846308][ T9742] netdevsim netdevsim0 nr0: renamed from netdevsim0 (while UP) [ 536.903936][ T9742] A link change request failed with some changes committed already. Interface nr0 may have been left with an inconsistent configuration, please check. [ 537.395385][ T9752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1674'. [ 537.404967][ T9752] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 537.413250][ T9752] netlink: 'syz.1.1674': attribute type 2 has an invalid length. [ 537.421198][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 538.635095][ T9764] loop1: detected capacity change from 0 to 4096 [ 538.685757][ T9764] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 539.301752][ T5840] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 539.514384][ T5840] usb 5-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 539.524040][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.546691][ T5840] usb 5-1: config 0 descriptor?? [ 539.566054][ T5840] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 540.244000][ T5840] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 540.252360][ T5840] pac7311 5-1:0.0: probe with driver pac7311 failed with error -71 [ 540.329244][ T5840] usb 5-1: USB disconnect, device number 14 [ 540.937554][ T5840] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 541.100335][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.112120][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.122527][ T5840] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 541.132001][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.214733][ T5840] usb 3-1: config 0 descriptor?? [ 541.448593][ T9809] netlink: del zone limit has 4 unknown bytes [ 541.748621][ T5840] wacom 0003:056A:030C.001B: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.2-1/input0 [ 541.760923][ T9812] netlink: 'syz.3.1701': attribute type 4 has an invalid length. [ 541.874782][ T9812] netlink: 'syz.3.1701': attribute type 4 has an invalid length. [ 541.911793][ T44] usb 3-1: USB disconnect, device number 12 [ 542.430674][ T9822] loop4: detected capacity change from 0 to 512 [ 542.725937][ T9822] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 542.734836][ T9822] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 542.763625][ T9822] System zones: 0-1, 15-15, 18-18, 34-34 [ 542.770751][ T9822] EXT4-fs (loop4): orphan cleanup on readonly fs [ 542.781272][ T9822] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 542.792428][ T9822] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 542.808843][ T9822] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 542.870893][ T9822] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1706: bad orphan inode 16 [ 542.894163][ T9822] ext4_test_bit(bit=15, block=18) = 1 [ 542.899896][ T9822] is_bad_inode(inode)=0 [ 542.904579][ T9822] NEXT_ORPHAN(inode)=0 [ 542.908847][ T9822] max_ino=32 [ 542.912238][ T9822] i_nlink=2 [ 542.917365][ T9822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 542.966920][ T9822] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 543.014175][ T44] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 543.125024][ T1536] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 543.140685][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.173653][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 543.210563][ T44] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.237829][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 543.248474][ T44] usb 2-1: New USB device strings: Mfr=10, Product=131, SerialNumber=0 [ 543.257203][ T44] usb 2-1: Product: syz [ 543.261618][ T44] usb 2-1: Manufacturer: syz [ 543.296230][ T1536] usb 3-1: Using ep0 maxpacket: 8 [ 543.306192][ T44] hub 2-1:4.0: bad descriptor, ignoring hub [ 543.312569][ T44] hub 2-1:4.0: probe with driver hub failed with error -5 [ 543.330637][ T44] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 543.403885][ T1536] usb 3-1: unable to get BOS descriptor or descriptor too short [ 543.425406][ T1536] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 543.433439][ T1536] usb 3-1: can't read configurations, error -71 [ 543.719291][ T9841] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 543.726150][ T9841] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 543.734856][ T9841] vhci_hcd vhci_hcd.0: Device attached [ 543.769098][ T9844] vhci_hcd: connection closed [ 543.772274][ T4315] vhci_hcd: stop threads [ 543.782195][ T4315] vhci_hcd: release socket [ 543.786997][ T4315] vhci_hcd: disconnect device [ 543.814224][ T5840] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 544.259107][ T9854] loop2: detected capacity change from 0 to 256 [ 544.444331][ T5887] usb 2-1: USB disconnect, device number 15 [ 544.461887][ T9854] FAT-fs (loop2): Directory bread(block 64) failed [ 544.469192][ T9854] FAT-fs (loop2): Directory bread(block 65) failed [ 544.476487][ T9854] FAT-fs (loop2): Directory bread(block 66) failed [ 544.483580][ T9854] FAT-fs (loop2): Directory bread(block 67) failed [ 544.490532][ T9854] FAT-fs (loop2): Directory bread(block 68) failed [ 544.497708][ T9854] FAT-fs (loop2): Directory bread(block 69) failed [ 544.504852][ T9854] FAT-fs (loop2): Directory bread(block 70) failed [ 544.511795][ T9854] FAT-fs (loop2): Directory bread(block 71) failed [ 544.524614][ T9854] FAT-fs (loop2): Directory bread(block 72) failed [ 544.531456][ T9854] FAT-fs (loop2): Directory bread(block 73) failed [ 545.598620][ T9876] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1727'. [ 545.867317][ T9877] futex_wake_op: syz.1.1725 tries to shift op by 144; fix this program [ 546.755396][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 546.891584][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1740'. [ 547.710644][ T9913] loop2: detected capacity change from 0 to 512 [ 547.874791][ T9917] loop1: detected capacity change from 0 to 1024 [ 548.195195][ T9913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.212087][ T9913] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 548.226344][ T3654] hfsplus: b-tree write err: -5, ino 4 [ 548.361403][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.873267][ T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 548.957230][ T9946] RDS: rds_bind could not find a transport for 25e4:b78e:40a3:d3f4:e1b6:dbbb:1f41:4849, load rds_tcp or rds_rdma? [ 549.044702][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 549.080351][ T44] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 549.090027][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 549.098706][ T44] usb 4-1: Product: syz [ 549.103198][ T44] usb 4-1: Manufacturer: syz [ 549.108033][ T44] usb 4-1: SerialNumber: syz [ 549.196671][ T44] usb 4-1: config 0 descriptor?? [ 549.232046][ T44] gspca_main: sq905-2.14.0 probing 2770:9120 [ 549.397479][ T9954] loop2: detected capacity change from 0 to 256 [ 549.465215][ T9954] exfat: Deprecated parameter 'utf8' [ 549.471620][ T9954] exfat: Deprecated parameter 'namecase' [ 549.477987][ T9954] exfat: Deprecated parameter 'utf8' [ 549.733638][ T9954] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xce600a6f, utbl_chksum : 0xe619d30d) [ 549.882176][ T44] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 549.890343][ T44] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 549.949640][ T44] usb 4-1: USB disconnect, device number 10 [ 550.389640][ T9970] loop1: detected capacity change from 0 to 2048 [ 550.489441][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 550.498822][ T9974] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1763'. [ 550.627287][ T9970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.189355][ T9984] nftables ruleset with unbound set [ 551.456436][ T29] audit: type=1326 audit(1736891110.976:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.2.1769" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51579 code=0x0 [ 551.471380][ T9990] loop4: detected capacity change from 0 to 1024 [ 551.536661][ T9991] loop3: detected capacity change from 0 to 128 [ 551.576899][ T9990] EXT4-fs: Ignoring removed orlov option [ 551.634523][ T9990] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 551.651905][ T9991] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 551.656685][ T9995] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 551.702818][ T9991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.745323][ T9990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.142850][T10005] loop3: detected capacity change from 0 to 8 [ 552.215355][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.380649][T10005] SQUASHFS error: Unable to read directory block [2c0:35] [ 553.669507][T10028] loop3: detected capacity change from 0 to 2048 [ 553.708584][T10034] loop1: detected capacity change from 0 to 512 [ 553.786148][T10036] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 553.865442][T10028] NILFS (loop3): error -2 truncating bmap (ino=16) [ 554.114716][T10034] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1786: bg 0: block 248: padding at end of block bitmap is not set [ 554.204252][T10034] Quota error (device loop1): write_blk: dquota write failed [ 554.212256][T10034] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 554.222869][T10034] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1786: Failed to acquire dquot type 1 [ 554.381871][T10034] EXT4-fs (loop1): 1 truncate cleaned up [ 554.390556][T10034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.406756][T10034] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 554.452246][T10036] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 554.467629][T10036] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 554.524514][T10036] Remounting filesystem read-only [ 554.633744][ T5792] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 554.690500][T10034] syz.1.1786 (10034) used greatest stack depth: 3824 bytes left [ 555.027306][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.155695][T10058] loop2: detected capacity change from 0 to 256 [ 555.322361][T10052] loop4: detected capacity change from 0 to 4096 [ 555.349853][T10052] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 555.446865][T10058] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 556.030382][T10070] team0: Device veth0_macvtap failed to register rx_handler [ 556.588635][T10072] loop1: detected capacity change from 0 to 4096 [ 556.656232][T10072] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 556.968648][T10072] ntfs3(loop1): failed to convert "c46c" to macceltic [ 558.771571][T10112] loop1: detected capacity change from 0 to 8192 [ 558.871409][T10116] team0: Device veth0_macvtap failed to register rx_handler [ 559.026329][T10119] netlink: 'syz.0.1818': attribute type 4 has an invalid length. [ 559.107960][T10122] loop4: detected capacity change from 0 to 256 [ 559.111382][T10119] netlink: 'syz.0.1818': attribute type 4 has an invalid length. [ 559.765889][T10122] FAT-fs (loop4): Directory bread(block 64) failed [ 559.777246][T10122] FAT-fs (loop4): Directory bread(block 65) failed [ 559.785539][T10122] FAT-fs (loop4): Directory bread(block 66) failed [ 559.792490][T10122] FAT-fs (loop4): Directory bread(block 67) failed [ 559.799578][T10122] FAT-fs (loop4): Directory bread(block 68) failed [ 559.806516][T10122] FAT-fs (loop4): Directory bread(block 69) failed [ 559.813711][T10122] FAT-fs (loop4): Directory bread(block 70) failed [ 559.820507][T10122] FAT-fs (loop4): Directory bread(block 71) failed [ 559.827571][T10122] FAT-fs (loop4): Directory bread(block 72) failed [ 559.834560][T10122] FAT-fs (loop4): Directory bread(block 73) failed [ 559.959221][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 560.026396][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 560.831987][T10150] 9pnet_rdma: rdma_create_trans (10150): problem binding to privport: 13 [ 560.922083][ T29] audit: type=1326 audit(1736891120.446:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.0.1833" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x0 [ 561.250735][T10160] program syz.4.1835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.325379][T10163] loop1: detected capacity change from 0 to 256 [ 561.503402][T10165] loop4: detected capacity change from 0 to 512 [ 561.538315][T10165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 561.590232][T10165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 561.600434][T10165] System zones: 1-12 [ 561.662227][T10163] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 561.723634][T10165] EXT4-fs (loop4): 1 truncate cleaned up [ 561.736210][T10165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.013996][T10175] loop3: detected capacity change from 0 to 256 [ 562.348950][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.420629][T10175] FAT-fs (loop3): Directory bread(block 64) failed [ 562.430575][T10175] FAT-fs (loop3): Directory bread(block 65) failed [ 562.443476][T10175] FAT-fs (loop3): Directory bread(block 66) failed [ 562.452061][T10175] FAT-fs (loop3): Directory bread(block 67) failed [ 562.461854][T10175] FAT-fs (loop3): Directory bread(block 68) failed [ 562.468995][T10175] FAT-fs (loop3): Directory bread(block 69) failed [ 562.476261][T10175] FAT-fs (loop3): Directory bread(block 70) failed [ 562.485858][T10175] FAT-fs (loop3): Directory bread(block 71) failed [ 562.492799][T10175] FAT-fs (loop3): Directory bread(block 72) failed [ 562.499744][T10175] FAT-fs (loop3): Directory bread(block 73) failed [ 563.197849][T10195] loop4: detected capacity change from 0 to 2048 [ 563.343483][ T5840] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 563.433877][T10208] loop2: detected capacity change from 0 to 256 [ 563.582363][ T5840] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 563.592039][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.600701][ T5840] usb 4-1: Product: syz [ 563.608028][ T5840] usb 4-1: Manufacturer: syz [ 563.612895][ T5840] usb 4-1: SerialNumber: syz [ 563.698795][ T5840] usb 4-1: config 0 descriptor?? [ 564.149688][T10225] Illegal XDP return value 65535 on prog (id 94) dev N/A, expect packet loss! [ 564.200792][ T5887] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 564.449137][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 564.493350][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.504869][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.521193][ T5887] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 564.530915][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.560019][ T5840] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 564.571126][ T5840] asix 4-1:0.0: probe with driver asix failed with error -71 [ 564.637447][ T5840] usb 4-1: USB disconnect, device number 11 [ 564.649434][ T5887] usb 5-1: config 0 descriptor?? [ 565.169314][ T5887] wacom 0003:056A:0331.001C: hidraw0: USB HID v0.02 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 565.334061][ T44] usb 5-1: USB disconnect, device number 15 [ 565.784356][ T1536] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 565.961984][T10271] veth0_to_team: entered promiscuous mode [ 565.980615][ T1536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.992231][ T1536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.003474][ T1536] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 566.012835][ T1536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.031346][T10271] veth0_to_team: left promiscuous mode [ 566.126635][ T1536] usb 4-1: config 0 descriptor?? [ 566.647479][ T1536] wacom 0003:056A:030C.001D: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.3-1/input0 [ 566.728366][T10284] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1867'. [ 566.744932][T10284] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 566.815390][ T5887] usb 4-1: USB disconnect, device number 12 [ 567.272663][T10308] loop2: detected capacity change from 0 to 512 [ 567.346007][T10308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 567.402202][T10308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 567.414745][T10308] System zones: 1-12 [ 567.508598][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 567.518058][T10311] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1870'. [ 567.547096][T10308] EXT4-fs (loop2): 1 truncate cleaned up [ 567.559093][T10308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.819271][T10320] loop3: detected capacity change from 0 to 128 [ 567.885411][T10320] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 567.923836][T10320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 568.005405][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.132933][T10324] loop1: detected capacity change from 0 to 256 [ 568.644303][T10337] loop3: detected capacity change from 0 to 512 [ 568.720230][T10337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.076787][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.163943][ T1536] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 569.339260][ T1536] usb 2-1: Using ep0 maxpacket: 8 [ 569.375255][ T1536] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.386830][ T1536] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.397134][ T1536] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.413584][ T5887] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 569.413657][ T1536] usb 2-1: config 0 interface 0 has no altsetting 0 [ 569.413838][ T1536] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 569.439085][ T1536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.606845][ T1536] usb 2-1: config 0 descriptor?? [ 569.616055][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 569.632403][ T5887] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.647738][ T5887] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.657992][ T5887] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 569.671346][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 569.681037][ T5887] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 569.690619][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.779499][ T5887] usb 3-1: config 0 descriptor?? [ 570.095078][ T1536] hid_mf 0003:0079:1846.001E: unbalanced collection at end of report description [ 570.127963][ T1536] hid_mf 0003:0079:1846.001E: HID parse failed. [ 570.135412][ T1536] hid_mf 0003:0079:1846.001E: probe with driver hid_mf failed with error -22 [ 570.342348][ T1536] usb 2-1: USB disconnect, device number 16 [ 570.389935][ T5887] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.001F/input/input34 [ 570.522374][ T5887] kye 0003:0458:5010.001F: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 570.597621][ T5887] usb 3-1: USB disconnect, device number 15 [ 570.993499][T10419] loop3: detected capacity change from 0 to 256 [ 571.086935][T10423] loop1: detected capacity change from 0 to 512 [ 571.218332][T10419] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 571.281038][T10423] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1897: invalid block [ 571.341450][T10423] EXT4-fs (loop1): Remounting filesystem read-only [ 571.354578][T10423] EXT4-fs (loop1): 2 truncates cleaned up [ 571.362194][T10423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.576272][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.773892][ T29] audit: type=1326 audit(1736891131.266:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10433 comm="syz.0.1899" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7579 code=0x0 [ 571.970245][T10440] loop1: detected capacity change from 0 to 512 [ 572.006030][T10440] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 572.080157][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 572.388140][T10450] loop2: detected capacity change from 0 to 1024 [ 572.497392][T10452] loop3: detected capacity change from 0 to 64 [ 573.377346][T10466] loop2: detected capacity change from 0 to 1024 [ 573.662860][T10466] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 573.723268][T10475] loop1: detected capacity change from 0 to 512 [ 573.825264][T10475] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 573.836688][T10475] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 573.847274][T10475] EXT4-fs (loop1): group descriptors corrupted! [ 573.965331][T10476] loop3: detected capacity change from 0 to 1024 [ 573.978774][T10476] EXT4-fs: Ignoring removed nobh option [ 573.987624][T10476] EXT4-fs: Ignoring removed bh option [ 573.996878][T10466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.011463][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1913'. [ 574.216348][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.249532][T10476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.669522][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.275854][T10510] veth1_macvtap: left promiscuous mode [ 575.281616][T10510] macsec0: entered promiscuous mode [ 575.359949][T10515] veth1_macvtap: entered promiscuous mode [ 575.369068][T10515] macsec0: left promiscuous mode [ 575.809933][T10543] loop1: detected capacity change from 0 to 512 [ 575.905352][T10543] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 576.216835][T10543] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1931: iget: bad extended attribute block 19 [ 576.289797][T10543] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1931: couldn't read orphan inode 15 (err -117) [ 576.354861][T10543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.730426][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.742782][T10559] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 577.226565][T10567] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1938'. [ 577.424419][T10573] usb usb9: usbfs: process 10573 (syz.3.1942) did not claim interface 4 before use [ 577.427788][T10572] loop2: detected capacity change from 0 to 128 [ 578.074057][T10582] loop4: detected capacity change from 0 to 64 [ 579.106392][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1956'. [ 579.375501][T10607] loop2: detected capacity change from 0 to 1024 [ 579.549022][T10613] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1958'. [ 579.558487][T10613] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 580.547462][T10631] loop4: detected capacity change from 0 to 128 [ 580.602695][T10631] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 580.628553][T10632] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 580.746989][ T5801] sysv_free_block: flc_count > flc_size [ 580.747051][ T5801] sysv_free_block: flc_count > flc_size [ 580.747098][ T5801] sysv_free_block: flc_count > flc_size [ 580.747143][ T5801] sysv_free_block: flc_count > flc_size [ 580.747224][ T5801] sysv_free_block: flc_count > flc_size [ 580.747270][ T5801] sysv_free_block: flc_count > flc_size [ 580.747313][ T5801] sysv_free_block: flc_count > flc_size [ 580.747358][ T5801] sysv_free_block: flc_count > flc_size [ 580.747401][ T5801] sysv_free_block: flc_count > flc_size [ 580.747445][ T5801] sysv_free_block: flc_count > flc_size [ 580.748355][ T5801] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 581.214195][T10643] loop1: detected capacity change from 0 to 2048 [ 581.271660][T10641] loop4: detected capacity change from 0 to 256 [ 581.274246][T10641] exfat: Deprecated parameter 'namecase' [ 581.274413][T10641] exfat: Deprecated parameter 'utf8' [ 581.274631][T10641] exfat: Deprecated parameter 'utf8' [ 581.361879][T10640] loop3: detected capacity change from 0 to 2048 [ 581.454939][T10641] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4a8cc721, utbl_chksum : 0xe619d30d) [ 581.489854][T10640] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 581.839051][T10647] loop2: detected capacity change from 0 to 4096 [ 582.019921][T10656] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 583.296345][ T5887] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 583.460884][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.471826][ T5887] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 583.484338][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.504924][ T5887] usb 3-1: config 0 descriptor?? [ 584.335176][ T5887] lg-g15 0003:046D:C222.0020: unbalanced delimiter at end of report description [ 584.390539][ T5887] lg-g15 0003:046D:C222.0020: probe with driver lg-g15 failed with error -22 [ 584.470121][T10697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 584.477764][T10697] IPv6: NLM_F_CREATE should be set when creating new route [ 584.485586][T10697] IPv6: NLM_F_CREATE should be set when creating new route [ 584.531001][ T1536] usb 3-1: USB disconnect, device number 16 [ 585.057508][ T5887] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 585.250000][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 585.351448][ T5887] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.362000][ T5887] usb 5-1: config 0 has no interface number 0 [ 585.457804][ T5887] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 585.470540][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.482598][ T5887] usb 5-1: Product: syz [ 585.488263][ T5887] usb 5-1: Manufacturer: syz [ 585.496123][ T5887] usb 5-1: SerialNumber: syz [ 585.522033][ T5887] usb 5-1: config 0 descriptor?? [ 585.551013][ T5887] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 586.250519][ T5887] gspca_spca1528: reg_w err -71 [ 586.281043][ T5887] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 586.339106][ T5887] usb 5-1: USB disconnect, device number 16 [ 587.598538][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 587.608493][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 587.640971][ T5887] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 587.843340][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 587.881145][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 587.915778][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.926383][ T5887] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 587.939423][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.957468][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.964451][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.181081][ T5887] usb 2-1: config 0 descriptor?? [ 588.891728][ T5887] usb 2-1: USB disconnect, device number 17 [ 590.956120][T10784] qrtr: Invalid version 0 [ 594.055586][T10847] loop1: detected capacity change from 0 to 512 [ 594.085068][T10847] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 594.094343][T10847] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 594.104087][T10847] EXT4-fs (loop1): blocks per group (64) and clusters per group (32768) inconsistent [ 594.831828][T10849] loop2: detected capacity change from 0 to 2048 [ 594.913453][T10849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.392352][T10873] raw_sendmsg: syz.0.2034 forgot to set AF_INET. Fix it! [ 598.612596][T10790] syz.4.2008 (10790): drop_caches: 1 [ 599.067572][T10877] loop1: detected capacity change from 0 to 1024 [ 599.219075][ T29] audit: type=1800 audit(1736891158.746:33): pid=10877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2036" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 599.271129][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 600.531271][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 601.295049][T10910] loop2: detected capacity change from 0 to 4096 [ 601.309300][T10910] ntfs3(loop2): It is recommened to use chkdsk. [ 601.323579][T10910] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 601.332088][T10910] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 601.341534][T10910] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 601.354110][T10910] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 601.362347][T10910] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 601.372256][T10910] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 601.381445][T10910] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 601.390466][T10910] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 601.398827][T10910] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 603.044093][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.051956][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.060727][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.069212][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.077452][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.097210][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.105827][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.113881][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.121704][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.129752][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.137772][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.145794][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.153740][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.161562][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.169590][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.177510][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.185558][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.199295][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.210675][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.218736][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.228972][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.236913][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.246047][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.253981][ T1536] hid-generic 0000:0000:10000.0022: unknown main item tag 0x0 [ 603.309544][T10950] loop3: detected capacity change from 0 to 2048 [ 603.419094][T10950] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 603.489767][T10955] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 603.607717][T10956] loop1: detected capacity change from 0 to 1024 [ 603.687955][ T1536] hid-generic 0000:0000:10000.0022: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 603.701795][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2069'. [ 603.719845][T10958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2069'. [ 603.829023][T10956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.991813][T10972] loop3: detected capacity change from 0 to 64 [ 604.306578][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.440254][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2074'. [ 604.779045][T10987] loop3: detected capacity change from 0 to 1024 [ 605.840803][T11011] loop4: detected capacity change from 0 to 2048 [ 606.078144][T11016] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 606.218547][ T29] audit: type=1326 audit(1736891165.686:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.3.2088" exe="/root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf7f5f579 code=0x0 [ 606.362268][T11011] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 606.424099][T11011] Remounting filesystem read-only [ 607.394066][ T29] audit: type=1326 audit(1736891166.926:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11037 comm="syz.1.2097" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fdf579 code=0x7ffc0000 [ 608.094948][T11045] loop3: detected capacity change from 0 to 4096 [ 608.180114][T11054] loop2: detected capacity change from 0 to 1024 [ 608.227231][T11058] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 608.260022][T11054] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 608.271083][T11054] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 608.281372][T11054] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 608.424526][T11054] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: inode #5: comm syz.2.2104: unexpected bad inode w/o EXT4_IGET_BAD [ 608.501209][T11054] EXT4-fs (loop2): no journal found [ 608.510415][T11054] EXT4-fs (loop2): can't get journal size [ 608.579289][T11054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 609.229455][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.705478][T11071] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 609.740402][T11065] loop3: detected capacity change from 0 to 4096 [ 609.962922][T11076] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 610.073491][T11065] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 610.275845][T11065] Remounting filesystem read-only [ 610.472851][T11061] syz.1.2106 (11061): drop_caches: 2 [ 611.343451][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2118'. [ 611.515321][T11098] loop2: detected capacity change from 0 to 4096 [ 611.800725][T11098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.110344][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.551146][T11116] loop1: detected capacity change from 0 to 2048 [ 612.572061][T11116] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 612.640550][T11116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 612.710238][T11116] tmpfs: Bad value for 'mpol' [ 613.513531][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 613.981738][T11140] loop4: detected capacity change from 0 to 64 [ 615.125307][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 615.844270][ T1536] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 616.003338][ T1536] usb 3-1: Using ep0 maxpacket: 8 [ 616.026738][ T1536] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 616.037594][ T1536] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 616.046951][ T1536] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.247795][ T1536] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.257696][ T1536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.266359][ T1536] usb 3-1: Product: syz [ 616.270762][ T1536] usb 3-1: Manufacturer: syz [ 616.275822][ T1536] usb 3-1: SerialNumber: syz [ 616.360698][ T1536] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 616.368579][ T1536] cdc_ncm 3-1:1.0: bind() failure [ 616.537052][ T1536] usb 3-1: USB disconnect, device number 17 [ 617.157529][T11153] loop4: detected capacity change from 0 to 40427 [ 617.290690][T11153] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 617.359083][T11207] loop3: detected capacity change from 0 to 64 [ 617.371882][T11153] F2FS-fs (loop4): invalid crc value [ 617.392544][T11153] F2FS-fs (loop4): Found nat_bits in checkpoint [ 617.745990][T11153] F2FS-fs (loop4): Start checkpoint disabled! [ 619.466800][T11241] loop1: detected capacity change from 0 to 256 [ 619.485208][T11241] exfat: Deprecated parameter 'namecase' [ 619.950189][T11246] loop3: detected capacity change from 0 to 2048 [ 619.951247][T11241] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 620.311498][T11246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.518415][T11259] loop4: detected capacity change from 0 to 512 [ 620.538814][T11259] EXT4-fs: Ignoring removed oldalloc option [ 620.566289][T11259] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2174: Parent and EA inode have the same ino 15 [ 620.594315][T11259] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.2174: Parent and EA inode have the same ino 15 [ 620.683759][T11259] EXT4-fs (loop4): 1 orphan inode deleted [ 620.691400][T11259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.765899][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.060624][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.176403][T11270] loop3: detected capacity change from 0 to 2048 [ 621.198546][T11270] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 621.358388][T11270] syz.3.2177: attempt to access beyond end of device [ 621.358388][T11270] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 621.359980][T11278] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 621.878825][ T44] IPVS: starting estimator thread 0... [ 621.964001][T11285] IPVS: using max 288 ests per chain, 14400 per kthread [ 622.593202][ T44] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 622.714804][T11297] loop3: detected capacity change from 0 to 4096 [ 622.734288][T11297] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 622.775840][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 622.818351][ T44] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 622.828252][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.836786][ T44] usb 5-1: Product: syz [ 622.841202][ T44] usb 5-1: Manufacturer: syz [ 622.846949][ T44] usb 5-1: SerialNumber: syz [ 622.915723][ T44] usb 5-1: config 0 descriptor?? [ 622.931095][ T44] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 623.017688][T11297] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 623.347504][ T44] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 623.356700][ T44] visor 5-1:0.0: probe with driver visor failed with error -5 [ 623.422382][ T5792] ntfs3(loop3): ino=1a, ntfs_sync_fs failed, -22. [ 623.430520][ T5792] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 623.433841][T11311] loop2: detected capacity change from 0 to 64 [ 623.588227][ T44] usb 5-1: USB disconnect, device number 17 [ 623.993188][T11326] loop1: detected capacity change from 0 to 4096 [ 624.097949][T11329] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 624.850657][T11332] loop2: detected capacity change from 0 to 8192 [ 626.352895][ T5887] IPVS: starting estimator thread 0... [ 626.363879][T11368] loop1: detected capacity change from 0 to 512 [ 626.418345][T11368] EXT4-fs: Ignoring removed bh option [ 626.447042][T11371] IPVS: using max 240 ests per chain, 12000 per kthread [ 626.724443][T11377] tipc: Enabling not permitted [ 626.730244][T11377] tipc: Enabling of bearer rejected, failed to enable media [ 627.016016][T11368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.029357][T11368] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.432827][T11367] loop2: detected capacity change from 0 to 32768 [ 627.570923][T11367] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 627.750996][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.308075][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 628.465372][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.474229][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.514479][ T29] audit: type=1326 audit(1736891188.016:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11402 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 628.537074][ T29] audit: type=1326 audit(1736891188.016:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11402 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 628.559577][ T29] audit: type=1326 audit(1736891188.036:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11402 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 628.582287][ T29] audit: type=1326 audit(1736891188.036:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11402 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 628.606636][ T29] audit: type=1326 audit(1736891188.066:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11402 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 628.642035][ T29] audit: type=1326 audit(1736891188.166:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11402 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 628.664690][ T29] audit: type=1326 audit(1736891188.166:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11402 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 628.689690][ T29] audit: type=1326 audit(1736891188.166:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11402 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 629.478238][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.603542][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.770906][T11417] loop1: detected capacity change from 0 to 8 [ 629.959569][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 630.081446][T11399] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.092442][T11399] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.102213][T11399] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.111552][T11399] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.513668][T11411] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 630.680530][T11411] usb 2-1: Using ep0 maxpacket: 16 [ 630.718155][T11411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.729947][T11411] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 630.741047][T11411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.805719][T11411] usb 2-1: config 0 descriptor?? [ 631.010597][T11436] loop3: detected capacity change from 0 to 512 [ 631.078991][T11436] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 631.087072][T11436] UDF-fs: Scanning with blocksize 512 failed [ 631.131855][T11436] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 631.142731][T11436] UDF-fs: Scanning with blocksize 1024 failed [ 631.185714][T11436] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 631.193997][T11436] UDF-fs: Scanning with blocksize 2048 failed [ 631.214199][T11436] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 631.296711][T11411] kye 0003:0458:5016.0023: control desc unexpectedly large [ 631.313357][T11436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 631.363247][T11411] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0023/input/input35 [ 631.508832][T11411] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0023/input/input36 [ 631.673949][T11411] kye 0003:0458:5016.0023: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 631.720677][T11411] usb 2-1: USB disconnect, device number 18 [ 632.095817][T11479] loop4: detected capacity change from 0 to 24 [ 632.112236][T11480] loop3: detected capacity change from 0 to 8 [ 632.874789][T11499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2243'. [ 633.492159][T11509] loop4: detected capacity change from 0 to 512 [ 633.540770][T11509] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 633.581640][T11509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 633.591440][T11509] System zones: 1-12 [ 633.608389][T11509] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2248: corrupted in-inode xattr: e_value size too large [ 633.714021][T11509] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2248: couldn't read orphan inode 15 (err -117) [ 633.801916][T11509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.278047][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.505439][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2253'. [ 635.030998][T11534] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 635.045751][T11534] overlayfs: missing 'lowerdir' [ 635.181207][T11539] program syz.4.2260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.192632][T11535] loop2: detected capacity change from 0 to 1024 [ 635.601661][ T4030] hfsplus: b-tree write err: -5, ino 4 [ 636.385548][T11558] loop1: detected capacity change from 0 to 1024 [ 637.656431][ T5887] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 637.656623][T11586] loop2: detected capacity change from 0 to 256 [ 637.823981][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 637.841023][ T5887] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.849703][ T5887] usb 4-1: config 0 has no interface number 0 [ 637.885225][ T5887] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 637.897767][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.908277][ T5887] usb 4-1: Product: syz [ 637.912699][ T5887] usb 4-1: Manufacturer: syz [ 637.918238][ T5887] usb 4-1: SerialNumber: syz [ 637.972328][T11586] FAT-fs (loop2): Directory bread(block 64) failed [ 637.979438][T11586] FAT-fs (loop2): Directory bread(block 65) failed [ 637.986790][T11586] FAT-fs (loop2): Directory bread(block 66) failed [ 637.993808][T11586] FAT-fs (loop2): Directory bread(block 67) failed [ 638.000758][T11586] FAT-fs (loop2): Directory bread(block 68) failed [ 638.010443][T11586] FAT-fs (loop2): Directory bread(block 69) failed [ 638.017390][ T5887] usb 4-1: config 0 descriptor?? [ 638.023571][T11586] FAT-fs (loop2): Directory bread(block 70) failed [ 638.030378][T11586] FAT-fs (loop2): Directory bread(block 71) failed [ 638.037525][T11586] FAT-fs (loop2): Directory bread(block 72) failed [ 638.044487][T11586] FAT-fs (loop2): Directory bread(block 73) failed [ 638.310824][T11594] netlink: 'syz.1.2281': attribute type 3 has an invalid length. [ 638.438262][ T5887] usb 4-1: selecting invalid altsetting 1 [ 638.446746][ T5887] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 638.455816][ T5887] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 638.465963][ T5887] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 638.500386][ T5887] usb 4-1: USB disconnect, device number 13 [ 639.092252][T11614] loop4: detected capacity change from 0 to 1024 [ 639.647724][T11624] tipc: Invalid UDP bearer configuration [ 639.648036][T11624] tipc: Enabling of bearer rejected, failed to enable media [ 639.962211][T11629] tipc: Enabling not permitted [ 639.969135][T11629] tipc: Enabling of bearer rejected, failed to enable media [ 640.539626][T11630] loop4: detected capacity change from 0 to 4096 [ 640.549296][T11620] syz.0.2287 (11620): drop_caches: 2 [ 640.679262][T11635] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 641.274748][ T29] audit: type=1326 audit(1736891200.806:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 641.338310][T11641] loop3: detected capacity change from 0 to 2048 [ 641.384757][T11641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 641.466148][T11647] tmpfs: Bad value for 'nr_inodes' [ 641.558847][T11641] [syz.3.2296/11641] FS: loop3 File: /blkio.bfq.io_service_bytes would truncate fibmap result [ 641.783513][ T29] audit: type=1326 audit(1736891201.256:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 641.808106][ T29] audit: type=1326 audit(1736891201.256:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 641.831162][ T29] audit: type=1326 audit(1736891201.266:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 641.839665][T11654] loop4: detected capacity change from 0 to 256 [ 641.862316][T11654] exfat: Deprecated parameter 'utf8' [ 641.941368][T11654] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5183de56, utbl_chksum : 0xe619d30d) [ 643.178120][T11685] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2314'. [ 643.308652][T11677] syz.4.2308 (11677): drop_caches: 2 [ 643.325033][T11687] program syz.0.2316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.390656][T11702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2322'. [ 644.400241][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 644.671434][T11706] loop1: detected capacity change from 0 to 2048 [ 644.709936][T11706] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 644.780984][T11710] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 645.629608][T11724] syz.2.2331 (11724): drop_caches: 2 [ 645.817424][T11730] program syz.3.2333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 646.186022][ T5887] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 646.366368][ T5887] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.377847][ T5887] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.388185][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 646.398144][ T5887] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 646.409626][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.439424][ T5887] usb 2-1: config 0 descriptor?? [ 646.854361][ T5840] kernel write not supported for file /input/event0 (pid: 5840 comm: kworker/0:3) [ 646.985462][ T5887] elecom 0003:056E:010C.0024: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 647.190129][ T5887] usb 2-1: USB disconnect, device number 19 [ 647.284819][T11768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 647.676754][T11781] loop3: detected capacity change from 0 to 128 [ 647.718191][T11783] ===================================================== [ 647.726342][T11783] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x971/0xb90 [ 647.736651][T11783] ieee802154_hdr_push+0x971/0xb90 [ 647.742564][T11783] ieee802154_header_create+0x9bc/0xc70 [ 647.751141][T11783] dgram_sendmsg+0xd5a/0x15a0 [ 647.756206][T11783] ieee802154_sock_sendmsg+0x96/0xd0 [ 647.761731][T11783] __sock_sendmsg+0x30f/0x380 [ 647.767320][T11783] ____sys_sendmsg+0x877/0xb60 [ 647.772308][T11783] ___sys_sendmsg+0x28d/0x3c0 [ 647.780060][T11783] __sys_sendmsg+0x1b6/0x300 [ 647.785057][T11783] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 647.790755][T11783] ia32_sys_call+0x2685/0x4180 [ 647.796498][T11783] __do_fast_syscall_32+0xb0/0x110 [ 647.801816][T11783] do_fast_syscall_32+0x38/0x80 [ 647.809706][T11783] do_SYSENTER_32+0x1f/0x30 [ 647.814603][T11783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.821208][T11783] [ 647.823874][T11783] Local variable hdr created at: [ 647.828931][T11783] ieee802154_header_create+0x4e/0xc70 [ 647.837447][T11783] dgram_sendmsg+0xd5a/0x15a0 [ 647.844883][T11783] [ 647.847925][T11783] CPU: 0 UID: 0 PID: 11783 Comm: syz.2.2348 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 647.859060][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 647.872184][T11783] ===================================================== [ 647.879429][T11783] Disabling lock debugging due to kernel taint [ 647.886541][T11783] Kernel panic - not syncing: kmsan.panic set ... [ 647.893121][T11783] CPU: 0 UID: 0 PID: 11783 Comm: syz.2.2348 Tainted: G B 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 647.905598][T11783] Tainted: [B]=BAD_PAGE [ 647.909869][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 647.920119][T11783] Call Trace: [ 647.923532][T11783] [ 647.926584][T11783] dump_stack_lvl+0x216/0x2d0 [ 647.931495][T11783] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 647.937519][T11783] dump_stack+0x1e/0x24 [ 647.941907][T11783] panic+0x4e2/0xcf0 [ 647.946032][T11783] ? kmsan_get_metadata+0x111/0x1c0 [ 647.951458][T11783] kmsan_report+0x2c7/0x2d0 [ 647.956181][T11783] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 647.962417][T11783] ? __msan_warning+0x95/0x120 [ 647.967425][T11783] ? ieee802154_hdr_push+0x971/0xb90 [ 647.972942][T11783] ? ieee802154_header_create+0x9bc/0xc70 [ 647.978888][T11783] ? dgram_sendmsg+0xd5a/0x15a0 [ 647.983951][T11783] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 647.989641][T11783] ? __sock_sendmsg+0x30f/0x380 [ 647.994738][T11783] ? ____sys_sendmsg+0x877/0xb60 [ 647.999896][T11783] ? ___sys_sendmsg+0x28d/0x3c0 [ 648.004954][T11783] ? __sys_sendmsg+0x1b6/0x300 [ 648.009937][T11783] ? __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 648.015804][T11783] ? ia32_sys_call+0x2685/0x4180 [ 648.020942][T11783] ? __do_fast_syscall_32+0xb0/0x110 [ 648.026436][T11783] ? do_fast_syscall_32+0x38/0x80 [ 648.031651][T11783] ? do_SYSENTER_32+0x1f/0x30 [ 648.036526][T11783] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.043400][T11783] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.050182][T11783] ? __sock_sendmsg+0x30f/0x380 [ 648.055290][T11783] ? ____sys_sendmsg+0x877/0xb60 [ 648.060456][T11783] ? kmsan_get_metadata+0x13e/0x1c0 [ 648.065856][T11783] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 648.071882][T11783] ? ieee802154_hdr_push+0x4c/0xb90 [ 648.077350][T11783] ? filter_irq_stacks+0x60/0x1a0 [ 648.082618][T11783] ? stack_depot_save_flags+0x2c/0x750 [ 648.088326][T11783] ? kmsan_get_metadata+0x13e/0x1c0 [ 648.093732][T11783] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 648.100325][T11783] ? kmsan_get_metadata+0x13e/0x1c0 [ 648.105733][T11783] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 648.111762][T11783] __msan_warning+0x95/0x120 [ 648.116598][T11783] ieee802154_hdr_push+0x971/0xb90 [ 648.121967][T11783] ? __msan_memcpy+0x108/0x1c0 [ 648.126976][T11783] ieee802154_header_create+0x9bc/0xc70 [ 648.132775][T11783] ? __pfx_ieee802154_header_create+0x10/0x10 [ 648.139081][T11783] dgram_sendmsg+0xd5a/0x15a0 [ 648.144009][T11783] ? __pfx_dgram_sendmsg+0x10/0x10 [ 648.149345][T11783] ieee802154_sock_sendmsg+0x96/0xd0 [ 648.154875][T11783] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 648.161103][T11783] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 648.167341][T11783] __sock_sendmsg+0x30f/0x380 [ 648.172350][T11783] ____sys_sendmsg+0x877/0xb60 [ 648.177368][T11783] ___sys_sendmsg+0x28d/0x3c0 [ 648.182274][T11783] ? kmsan_get_metadata+0x13e/0x1c0 [ 648.187668][T11783] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 648.193675][T11783] ? __rcu_read_unlock+0x7b/0xe0 [ 648.198834][T11783] ? __fget_files+0x42b/0x500 [ 648.203694][T11783] ? kmsan_get_metadata+0x13e/0x1c0 [ 648.209066][T11783] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 648.215231][T11783] __sys_sendmsg+0x1b6/0x300 [ 648.220042][T11783] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 648.225737][T11783] ia32_sys_call+0x2685/0x4180 [ 648.230704][T11783] __do_fast_syscall_32+0xb0/0x110 [ 648.236003][T11783] ? irqentry_exit+0x16/0x60 [ 648.240757][T11783] do_fast_syscall_32+0x38/0x80 [ 648.245784][T11783] do_SYSENTER_32+0x1f/0x30 [ 648.250467][T11783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.257058][T11783] RIP: 0023:0xf7f51579 [ 648.261276][T11783] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 648.281089][T11783] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 648.289695][T11783] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200018c0 [ 648.297820][T11783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.305932][T11783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.314045][T11783] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 648.322159][T11783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.330311][T11783] [ 648.333725][T11783] Kernel Offset: disabled [ 648.338119][T11783] Rebooting in 86400 seconds..