last executing test programs: 3m28.737064157s ago: executing program 4 (id=1016): r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 3m28.664610898s ago: executing program 4 (id=1019): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 3m28.34813191s ago: executing program 4 (id=1025): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001540)=@assoc_value={0x0, 0x581}, 0x8) 3m28.220886351s ago: executing program 4 (id=1029): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000280)={[{}, {@gid}, {@type={'type', 0x3d, "69759d7b"}}, {@nodecompose}, {@part={'part', 0x3d, 0x5}}, {@part}, {@gid}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp863'}}]}, 0x1, 0x6f8, &(0x7f0000002440)="$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") mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 3m28.030786272s ago: executing program 4 (id=1032): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000100)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x00\x00\x00\x00\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x17Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"\x01\x00\x00\x00\x01\x00\x00\x00\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xed\x01\x01\x00\x00\x00\x00\x00\x00\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3;\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a&Df8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x00\xff\x7f\x00') 3m27.483428426s ago: executing program 4 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e0ad42010c0002800500010000000000240002800c000280050001000000000014000180080001006401010108000200e00000020800074000000000100005800a00010051", @ANYBLOB="bf9df381b508"], 0x74}}, 0x0) 3m27.278922428s ago: executing program 32 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e0ad42010c0002800500010000000000240002800c000280050001000000000014000180080001006401010108000200e00000020800074000000000100005800a00010051", @ANYBLOB="bf9df381b508"], 0x74}}, 0x0) 2m40.312415163s ago: executing program 2 (id=1843): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600a400014003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2m40.145274154s ago: executing program 2 (id=1847): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0xffff) 2m40.012592955s ago: executing program 2 (id=1849): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='decodes '], 0xb) 2m39.916133866s ago: executing program 2 (id=1852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newsa={0xf8, 0x10, 0x101, 0x0, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x30}, [@tfcpad={0x8, 0x16, 0x7}]}, 0xf8}}, 0x0) 2m39.837240256s ago: executing program 2 (id=1854): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYBLOB="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", @ANYRES32], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m38.896227873s ago: executing program 2 (id=1874): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001fc0)={{0x12, 0x1, 0x0, 0x31, 0x94, 0xb0, 0x8, 0x499, 0x1055, 0x1a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9e, 0x40, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x1, 0x3, 0x82c}}}, 0x0) 2m23.891254943s ago: executing program 33 (id=1874): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001fc0)={{0x12, 0x1, 0x0, 0x31, 0x94, 0xb0, 0x8, 0x499, 0x1055, 0x1a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9e, 0x40, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x1, 0x3, 0x82c}}}, 0x0) 1.454231849s ago: executing program 1 (id=5093): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_nolock}, {@noinit_itable}, {@bsdgroups}, {@quota}, {@abort}]}, 0xfe, 0x585, &(0x7f0000001500)="$eJzs3d9rFNceAPDvbLLRGO81gsi99+ES8KEWcWOS/rDQB/tYWqnQvtuQrEGycSW7EZMK1Yf60pcihVIqlP4Bfe9Tkf4D/SssrSBFQluwD1tmM6ubZDfJxtWs2c8HRufMnJ0zZ2e+J+fsmWUD6Ftj6T+5iP9GxBdJxJGmfYOR7Rxby7f66MZMuiRRq334exJJtq2RP8n+H8kS/4mInz6LOJXbXG5leWV+ulQqLmbp8erC1fHK8srpywvTc8W54pXJqamzr09NvvXmG12r66sX/vz6g3vvnv38xOpX3z84eieJc3E429dcjy0d2HLvzebEWIxl70k+zm3IONHJib8Ekr0+AXZlIIvzfKRtwJEYyKIe2P8+jYha5x7v4jVAz0l2E//APtDoBzTG9jseB+8TD99ZGwBtrn+y9tlIHKyPjQ6tJutGRul4d7QL5adl/PDb3TvpEp18DgHwjG7eiogzg4Pt278N/q7t+NhndpBnYxnaP3hx7qX9nx+HIzbFf+5J/yda9H9GWsTubmwf/7kHa5NQTYa6UHAm7f+93bL/+6TI0YEs9a96ny+fXLpcKqZt278j4mTkD6TpreZzzq7eb9toNvf/0iUtv9EXzM7jweCGOafZ6er0s9S52cNbEf/bpv+btLj+6ftxYYdlHC/e/X+7fdvX//mqfRfxSsvr/3RGK9l6fnK8fj+MN+6Kzf64ffznduXvdf3T639o6/qPJs3ztZXOy/j24ONiu31jSTZp2uH9P5R8VG+ZGk3B9elqdXEiYih5v55et33y6Wsb6Ub+tP4nT7SO/63u/+GI+HiH9b997HbbrL1w/Wc7uv6dr9x/75Nv2pW/s/bvtfrayWzLTtq/tqcztH7Ls7x3AAAAAAAA0GtyQxGHI8kVsjn9w5HLFQprz3cci0O5UrlSPXWpvHRlNurflR2NfK4x0z3S9DzERPb6Rnoyez62kZ6KiKMR8eXAcD1dmCmXZve68gAAAAAAAAAAAAAAAAAAANAjRqL19/9Tvw7s9dkBz52f/Ib+tS7+D7TI0I1fegJ6kr//0L/EP/Qv8Q/9S/xD/xL/0L/EP/Qv8Q/9S/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAV104fz5daquPbsxExMG4trw0X752eraYny8sLM0UZsqLVwtz5fJcqViYKS9sd7xSuXx1YjKWro9Xi5XqeGV55eJCeelK9eLlhem54sVi/sVUCwAAAAAAAAAAAAAAAAAAAF4qleWV+elSqbjYmyv5Lh/wlx6p1z5aGeyN07CyWBmOLh5wfTvxV61W26s2CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+CQAA//87lDlV") rename(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 1.27394876s ago: executing program 0 (id=5096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000102010100000000000000000a0000003c0001800c00028005000100000000002c000180140003000000000000000000dd00000000000000130004"], 0x54}}, 0x0) 1.035790782s ago: executing program 3 (id=5099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) 940.366063ms ago: executing program 6 (id=5102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x4000080) 939.743753ms ago: executing program 0 (id=5112): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f8000400000000000000a000000000000000000080008000100000000ff", 0x24) 925.980413ms ago: executing program 3 (id=5103): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0xc004510e, 0xffffffffffffffff) 889.420013ms ago: executing program 1 (id=5105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="c3a88969eeddda9913392cd3633e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 817.694013ms ago: executing program 3 (id=5106): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 808.663303ms ago: executing program 6 (id=5107): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa70, 0x384, 0x1000, 0x0, 0x8, 0x0, {}, {0x3}, {0xf4ef}, {0x0, 0x0, 0x1000}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}) 756.614274ms ago: executing program 5 (id=5108): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010"], 0x48) 755.688814ms ago: executing program 0 (id=5109): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000035c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x802, 'syz1\x00', @default, 0x58, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 634.632545ms ago: executing program 3 (id=5110): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 609.347285ms ago: executing program 0 (id=5111): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 608.660105ms ago: executing program 1 (id=5122): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x16, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 584.662045ms ago: executing program 5 (id=5113): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 492.480796ms ago: executing program 3 (id=5114): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) 458.262086ms ago: executing program 5 (id=5115): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x2200) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) 388.262637ms ago: executing program 6 (id=5116): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, 0x0) 359.078947ms ago: executing program 3 (id=5117): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 358.397827ms ago: executing program 1 (id=5128): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000240)) 314.925947ms ago: executing program 6 (id=5118): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_nolock}, {@noinit_itable}, {@bsdgroups}, {@quota}, {@abort}]}, 0xfe, 0x585, &(0x7f0000001500)="$eJzs3d9rFNceAPDvbLLRGO81gsi99+ES8KEWcWOS/rDQB/tYWqnQvtuQrEGycSW7EZMK1Yf60pcihVIqlP4Bfe9Tkf4D/SssrSBFQluwD1tmM6ubZDfJxtWs2c8HRufMnJ0zZ2e+J+fsmWUD6Ftj6T+5iP9GxBdJxJGmfYOR7Rxby7f66MZMuiRRq334exJJtq2RP8n+H8kS/4mInz6LOJXbXG5leWV+ulQqLmbp8erC1fHK8srpywvTc8W54pXJqamzr09NvvXmG12r66sX/vz6g3vvnv38xOpX3z84eieJc3E429dcjy0d2HLvzebEWIxl70k+zm3IONHJib8Ekr0+AXZlIIvzfKRtwJEYyKIe2P8+jYha5x7v4jVAz0l2E//APtDoBzTG9jseB+8TD99ZGwBtrn+y9tlIHKyPjQ6tJutGRul4d7QL5adl/PDb3TvpEp18DgHwjG7eiogzg4Pt278N/q7t+NhndpBnYxnaP3hx7qX9nx+HIzbFf+5J/yda9H9GWsTubmwf/7kHa5NQTYa6UHAm7f+93bL/+6TI0YEs9a96ny+fXLpcKqZt278j4mTkD6TpreZzzq7eb9toNvf/0iUtv9EXzM7jweCGOafZ6er0s9S52cNbEf/bpv+btLj+6ftxYYdlHC/e/X+7fdvX//mqfRfxSsvr/3RGK9l6fnK8fj+MN+6Kzf64ffznduXvdf3T639o6/qPJs3ztZXOy/j24ONiu31jSTZp2uH9P5R8VG+ZGk3B9elqdXEiYih5v55et33y6Wsb6Ub+tP4nT7SO/63u/+GI+HiH9b997HbbrL1w/Wc7uv6dr9x/75Nv2pW/s/bvtfrayWzLTtq/tqcztH7Ls7x3AAAAAAAA0GtyQxGHI8kVsjn9w5HLFQprz3cci0O5UrlSPXWpvHRlNurflR2NfK4x0z3S9DzERPb6Rnoyez62kZ6KiKMR8eXAcD1dmCmXZve68gAAAAAAAAAAAAAAAAAAANAjRqL19/9Tvw7s9dkBz52f/Ib+tS7+D7TI0I1fegJ6kr//0L/EP/Qv8Q/9S/xD/xL/0L/EP/Qv8Q/9S/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAV104fz5daquPbsxExMG4trw0X752eraYny8sLM0UZsqLVwtz5fJcqViYKS9sd7xSuXx1YjKWro9Xi5XqeGV55eJCeelK9eLlhem54sVi/sVUCwAAAAAAAAAAAAAAAAAAAF4qleWV+elSqbjYmyv5Lh/wlx6p1z5aGeyN07CyWBmOLh5wfTvxV61W26s2CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+CQAA//87lDlV") rename(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 232.070018ms ago: executing program 5 (id=5119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x4000080) 231.847138ms ago: executing program 0 (id=5120): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000100)={[{@uid}, {@nls={'nls', 0x3d, 'maciceland'}}, {@uid}, {@nodecompose}]}, 0x1, 0x5cd, &(0x7f00000006c0)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) 231.755208ms ago: executing program 1 (id=5121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001240)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a00", @ANYRES32=r0], 0x84}}, 0x0) 186.485588ms ago: executing program 6 (id=5123): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1e, 0x1, 0x70bd26, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 135.435428ms ago: executing program 5 (id=5124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x95) 218.349µs ago: executing program 5 (id=5125): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acce0413a181003100000000010000000000000e000a000f000000028002002d", 0x2d}, {&(0x7f00000009c0)="d5", 0x1}], 0x2}, 0x20040044) 109.989µs ago: executing program 1 (id=5126): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 58.109µs ago: executing program 0 (id=5127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 6 (id=5129): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@null, 0x3, 'dvmrp1\x00'}) kernel console output (not intermixed with test programs): 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 205, changing to 11 [ 239.783936][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 57672, setting to 1024 [ 240.002520][ T4213] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 240.021781][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.046881][ T4213] usb 1-1: Product: syz [ 240.057792][T11855] loop3: detected capacity change from 0 to 512 [ 240.082328][ T4213] usb 1-1: Manufacturer: syz [ 240.088370][ T4213] usb 1-1: SerialNumber: syz [ 240.108527][ T4213] usb 1-1: config 0 descriptor?? [ 240.113943][ T1107] usb 7-1: 0:2 : does not exist [ 240.119212][ T1107] usb 7-1: unit 4 not found! [ 240.124149][T11855] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.164447][ T1107] usb 7-1: USB disconnect, device number 7 [ 240.194676][ T4213] pegasus_notetaker: probe of 1-1:0.0 failed with error -12 [ 240.272017][T11855] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.369083][T11849] loop5: detected capacity change from 0 to 32768 [ 240.391317][T11855] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3325: bg 0: block 251: padding at end of block bitmap is not set [ 240.426305][ T7061] usb 1-1: USB disconnect, device number 23 [ 240.432136][T11855] Quota error (device loop3): write_blk: dquota write failed [ 240.477694][T11849] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 240.485927][T11855] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 240.485973][T11855] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.3325: Failed to acquire dquot type 0 [ 240.529580][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.540345][T11855] syz.3.3325 (11855) used greatest stack depth: 17824 bytes left [ 240.597516][T11849] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 240.729480][ T6478] ocfs2: Unmounting device (7,5) on (node local) [ 240.815696][T11876] tmpfs: Bad value for 'mpol' [ 241.202404][ T7061] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 241.441888][T11904] Process accounting resumed [ 241.551144][T11912] netlink: 'syz.6.3350': attribute type 1 has an invalid length. [ 241.562505][ T7061] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.593666][ T7061] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.630583][ T7061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.639279][T11910] loop5: detected capacity change from 0 to 4096 [ 241.672842][T11880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 241.727249][T11910] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 241.824606][T11910] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 241.896859][T11910] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 241.937698][T11910] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 241.995312][T11910] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 242.040629][T11894] loop0: detected capacity change from 0 to 32768 [ 242.073205][T11910] ntfs: volume version 3.1. [ 242.084862][T11910] ntfs: (device loop5): load_and_init_quota(): Failed to find inode number for $Quota. [ 242.098614][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3358'. [ 242.098851][T11910] ntfs: (device loop5): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 242.188366][T11910] ntfs: (device loop5): ntfs_nlstoucs(): Name using character set cp932 contains characters that cannot be converted to Unicode. [ 242.392411][ T7061] Bluetooth: hci1: command 0x0406 tx timeout [ 242.402430][ T4213] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 242.534605][ T7063] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 242.571468][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 242.693941][ T4213] usb 7-1: Using ep0 maxpacket: 8 [ 242.743648][ T7057] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 242.782458][ T7063] usb 4-1: Using ep0 maxpacket: 8 [ 242.848635][T11957] netlink: 'syz.0.3373': attribute type 1 has an invalid length. [ 242.857818][ T4213] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 242.859012][T11957] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3373'. [ 242.872514][ T4213] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.890222][ T4213] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 242.900778][ T4213] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 242.911011][ T4213] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.924363][ T4213] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.933765][ T4213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.953273][ T7063] usb 4-1: unable to get BOS descriptor or descriptor too short [ 243.005662][ T4213] usbtmc 7-1:16.0: bulk endpoints not found [ 243.032776][ T7063] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 243.068754][ T7063] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 243.090329][ T7063] usb 4-1: config 1 interface 0 has no altsetting 0 [ 243.122509][ T7057] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 243.203762][T11967] device veth5 entered promiscuous mode [ 243.241055][ T7061] usb 7-1: USB disconnect, device number 8 [ 243.292705][ T7057] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 243.309823][ T7057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.319226][ T7057] usb 6-1: Product: syz [ 243.330952][ T7057] usb 6-1: Manufacturer: syz [ 243.333827][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3380'. [ 243.337829][ T7057] usb 6-1: SerialNumber: syz [ 243.346197][T11971] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 243.360128][ T7063] usb 4-1: string descriptor 0 read error: -22 [ 243.375492][ T7057] usb 6-1: config 0 descriptor?? [ 243.380723][ T7063] usb 4-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 243.390309][ T7063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.395035][ T4213] usb 2-1: USB disconnect, device number 23 [ 243.422737][T11931] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 243.441891][ T7057] debugfs: Directory 'card3' with parent 'sound' already present! [ 243.599794][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3382'. [ 243.609010][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3382'. [ 243.624726][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3382'. [ 243.658511][ T7057] snd-usb-audio: probe of 6-1:0.0 failed with error -2 [ 243.715044][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.876804][T11991] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 243.894639][ T4213] usb 6-1: USB disconnect, device number 14 [ 243.897398][ T7063] appletouch 4-1:1.0: Failed to request geyser raw mode [ 243.923556][ T7063] appletouch: probe of 4-1:1.0 failed with error -5 [ 243.949779][ T7063] usb 4-1: USB disconnect, device number 19 [ 244.155406][T12003] hsr0: VLAN not yet supported [ 244.205504][T12005] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3393'. [ 244.375772][T12015] x_tables: unsorted underflow at hook 3 [ 244.869342][T12039] loop0: detected capacity change from 0 to 4096 [ 244.946478][T12039] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 245.180159][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3418'. [ 245.334227][T12059] loop0: detected capacity change from 0 to 128 [ 245.476347][T12063] device veth3 entered promiscuous mode [ 245.871262][T12041] loop5: detected capacity change from 0 to 32768 [ 245.924248][T12045] loop1: detected capacity change from 0 to 32768 [ 245.974196][T12079] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3429'. [ 246.070282][T12045] XFS (loop1): Mounting V5 Filesystem [ 246.109374][T12041] XFS (loop5): Mounting V5 Filesystem [ 246.285552][T12045] XFS (loop1): Ending clean mount [ 246.385758][T12116] loop3: detected capacity change from 0 to 16 [ 246.447483][T12041] XFS (loop5): Ending clean mount [ 246.466840][ T4167] XFS (loop1): Unmounting Filesystem [ 246.477657][T12116] erofs: (device loop3): mounted with root inode @ nid 36. [ 246.518294][T12041] XFS (loop5): Quotacheck needed: Please wait. [ 246.531636][T12116] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 246.621709][T12116] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 246.677009][T12041] XFS (loop5): Quotacheck: Done. [ 246.789326][ T6478] XFS (loop5): Unmounting Filesystem [ 247.151433][T12129] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.395445][T12118] loop0: detected capacity change from 0 to 32768 [ 247.504382][T12118] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.3440 (12118) [ 247.589881][T12118] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 247.627383][T12118] BTRFS info (device loop0): enabling ssd optimizations [ 247.662754][T12118] BTRFS info (device loop0): turning off barriers [ 247.669375][T12118] BTRFS info (device loop0): use no compression [ 247.707565][T12155] Cannot find del_set index 0 as target [ 247.722703][T12118] BTRFS info (device loop0): using free space tree [ 247.762678][T12118] BTRFS info (device loop0): has skinny extents [ 247.881196][T12166] loop1: detected capacity change from 0 to 764 [ 248.003473][T12166] Symlink component flag not implemented [ 248.029334][T12166] Symlink component flag not implemented (101) [ 248.035309][T12171] loop5: detected capacity change from 0 to 4096 [ 248.135045][T12171] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 248.158340][T12171] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 248.194925][T12178] loop3: detected capacity change from 0 to 4096 [ 248.379964][ T154] ntfs3: loop5: ntfs3_write_inode r=5 failed, -22. [ 248.398148][T12178] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 248.430273][ T6478] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 249.162725][T12236] sctp: [Deprecated]: syz.6.3482 (pid 12236) Use of int in max_burst socket option. [ 249.162725][T12236] Use struct sctp_assoc_value instead [ 249.226498][T12238] loop3: detected capacity change from 0 to 764 [ 249.300523][T12238] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 249.355431][T12238] Symlink component flag not implemented [ 249.382479][T12238] Symlink component flag not implemented [ 249.388684][T12238] Symlink component flag not implemented (128) [ 249.428249][T12238] Symlink component flag not implemented (122) [ 249.531672][T12253] loop1: detected capacity change from 0 to 1024 [ 249.564308][T12256] netlink: 'syz.6.3491': attribute type 1 has an invalid length. [ 249.612277][T12256] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3491'. [ 249.641905][T12256] block nbd0: not configured, cannot reconfigure [ 249.647537][T12260] loop3: detected capacity change from 0 to 8 [ 250.182044][T12280] loop3: detected capacity change from 0 to 4096 [ 250.224855][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3506'. [ 250.260233][T12280] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 250.487401][T12250] loop0: detected capacity change from 0 to 32768 [ 250.655899][T12292] loop1: detected capacity change from 0 to 2048 [ 250.789728][T12292] EXT4-fs (loop1): Ignoring removed oldalloc option [ 250.812273][T12292] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.990762][T12292] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,nodioread_nolock,norecovery,nodioread_nolock,dioread_nolock,nombcache,abort,init_itable,oldalloc,,errors=continue. Quota mode: none. [ 251.374458][T12322] loop1: detected capacity change from 0 to 64 [ 251.572059][T12332] loop0: detected capacity change from 0 to 164 [ 251.751787][T12340] netlink: 'syz.1.3528': attribute type 4 has an invalid length. [ 251.834267][ T7062] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 252.111906][T12360] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3540'. [ 252.181821][T12364] loop3: detected capacity change from 0 to 8 [ 252.192370][ T2303] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 252.217273][ T7062] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 252.254325][ T7062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.268642][T12366] loop1: detected capacity change from 0 to 16 [ 252.297399][ T7062] usb 6-1: config 0 descriptor?? [ 252.350887][T12366] erofs: (device loop1): mounted with root inode @ nid 36. [ 252.354987][ T7062] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 252.449153][T12366] attempt to access beyond end of device [ 252.449153][T12366] loop1: rw=0, want=15300821032, limit=16 [ 252.464650][ T2303] usb 1-1: Using ep0 maxpacket: 16 [ 252.521909][T12366] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -18 in[3072, 1024] out[4459] [ 252.612373][ T2303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.627562][ T2303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.802334][ T7062] gspca_cpia1: usb_control_msg 03, error -71 [ 252.832528][ T7062] gspca_cpia1: usb_control_msg 01, error -71 [ 252.839074][ T7062] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 252.872098][ T7062] usb 6-1: USB disconnect, device number 15 [ 252.882765][ T2303] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.899334][T12390] netlink: 'syz.3.3556': attribute type 15 has an invalid length. [ 252.922216][ T2303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.930276][ T2303] usb 1-1: Product: syz [ 252.951493][ T2303] usb 1-1: Manufacturer: syz [ 252.995024][ T2303] usb 1-1: SerialNumber: syz [ 253.016005][T12395] netlink: 'syz.6.3557': attribute type 20 has an invalid length. [ 253.123863][T12399] loop1: detected capacity change from 0 to 128 [ 253.140097][T12400] netlink: 'syz.6.3560': attribute type 9 has an invalid length. [ 253.323261][T12410] x_tables: unsorted underflow at hook 1 [ 253.392556][ T2303] usb 1-1: 0:134 : does not exist [ 253.430957][ T2303] usb 1-1: USB disconnect, device number 24 [ 253.662386][T12422] loop3: detected capacity change from 0 to 4096 [ 253.683626][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.685110][T12432] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3576'. [ 253.750759][T12422] __ntfs_error: 1 callbacks suppressed [ 253.750779][T12422] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 253.799114][T12422] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 253.821105][T12438] netlink: 'syz.1.3579': attribute type 2 has an invalid length. [ 253.853449][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3579'. [ 253.904023][T12422] ntfs: volume version 3.1. [ 253.932277][T12422] ntfs: (device loop3): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 253.956423][T12422] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 253.975163][T12422] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 254.047374][T12422] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 254.193876][T12422] ntfs: (device loop3): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 254.282413][T12422] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 254.356094][T12459] delete_channel: no stack [ 254.838586][T12483] loop5: detected capacity change from 0 to 512 [ 254.907552][T12483] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 254.951534][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'. [ 255.010845][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'. [ 255.206107][T12496] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.352814][T12502] loop0: detected capacity change from 0 to 256 [ 255.382407][ T7061] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 255.413657][T12506] netlink: 'syz.3.3612': attribute type 10 has an invalid length. [ 255.462580][T12506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3612'. [ 255.467412][T12502] FAT-fs (loop0): Directory bread(block 64) failed [ 255.504529][T12506] bridge0: port 3(macvlan1) entered blocking state [ 255.509463][T12502] FAT-fs (loop0): Directory bread(block 65) failed [ 255.525757][T12502] FAT-fs (loop0): Directory bread(block 66) failed [ 255.546083][T12506] bridge0: port 3(macvlan1) entered disabled state [ 255.548799][T12502] FAT-fs (loop0): Directory bread(block 67) failed [ 255.571096][T12506] device macvlan1 entered promiscuous mode [ 255.588855][T12502] FAT-fs (loop0): Directory bread(block 68) failed [ 255.590184][T12466] loop1: detected capacity change from 0 to 40427 [ 255.609421][T12502] FAT-fs (loop0): Directory bread(block 69) failed [ 255.629274][T12502] FAT-fs (loop0): Directory bread(block 70) failed [ 255.638761][T12502] FAT-fs (loop0): Directory bread(block 71) failed [ 255.646334][T12502] FAT-fs (loop0): Directory bread(block 72) failed [ 255.659277][T12502] FAT-fs (loop0): Directory bread(block 73) failed [ 255.669621][T12466] F2FS-fs (loop1): invalid crc value [ 255.686372][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.692915][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.711139][T12466] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 255.762781][ T7061] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.792387][ T7061] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 60258, setting to 1024 [ 255.851436][ T7061] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 255.892717][ T7061] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.901915][ T7061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.953257][T12466] F2FS-fs (loop1): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 255.966868][T12483] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 255.976106][ T150] block nbd3: Attempted send on invalid socket [ 255.988830][ T150] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.002480][T12519] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 2, size 4096) [ 256.002862][T12466] F2FS-fs (loop1): Failed to read root inode [ 256.046147][ T7061] usb 6-1: invalid MIDI out EP 0 [ 256.074222][ T150] block nbd3: Attempted send on invalid socket [ 256.080663][ T150] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.093503][T12519] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 16, size 4096) [ 256.095927][ T7061] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 256.122431][T12519] REISERFS warning (device nbd3): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd3 [ 256.229383][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.332085][ T4389] usb 6-1: USB disconnect, device number 16 [ 256.501040][T12532] netlink: 'syz.6.3624': attribute type 13 has an invalid length. [ 256.619337][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3626'. [ 257.042268][ T7062] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 257.133533][T12560] tc_dump_action: action bad kind [ 257.232844][T12565] netlink: 'syz.1.3639': attribute type 32 has an invalid length. [ 257.387978][T12572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3644'. [ 257.422733][ T7062] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.452328][ T7062] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.461612][ T7062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.542864][T12539] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 257.556406][T12582] xt_TCPMSS: Only works on TCP SYN packets [ 258.155157][T12608] loop5: detected capacity change from 0 to 1764 [ 258.396582][T12618] loop1: detected capacity change from 0 to 128 [ 258.423703][T12621] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 258.503944][T12618] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 258.527616][T12627] overlayfs: missing 'workdir' [ 258.547999][T12618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.712494][ T4389] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 258.984251][ T7062] usb 4-1: USB disconnect, device number 20 [ 259.035547][T12645] cgroup: Invalid name [ 259.072473][ T4389] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.091935][ T4389] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.106910][ T4389] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.186625][T12649] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 259.292612][ T4389] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.301883][ T4389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.335003][ T4389] usb 1-1: Product: syz [ 259.362720][ T4389] usb 1-1: Manufacturer: syz [ 259.368265][ T4389] usb 1-1: SerialNumber: syz [ 259.423583][ T4389] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 259.434917][T12658] xt_NFQUEUE: number of total queues is 0 [ 259.445892][ T4389] cdc_ncm 1-1:1.0: bind() failure [ 259.655488][ T7061] usb 1-1: USB disconnect, device number 25 [ 259.703565][T12637] loop5: detected capacity change from 0 to 32768 [ 259.767671][T12637] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.3676 (12637) [ 259.825504][T12637] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 259.842264][ T4389] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 259.846289][T12637] BTRFS info (device loop5): force zlib compression, level 3 [ 259.880914][T12637] BTRFS info (device loop5): force clearing of disk cache [ 259.888274][T12637] BTRFS info (device loop5): setting nodatasum [ 259.896131][T12637] BTRFS info (device loop5): use zlib compression, level 3 [ 259.910862][T12637] BTRFS info (device loop5): allowing degraded mounts [ 259.939688][T12637] BTRFS info (device loop5): enabling disk space caching [ 259.952354][ T7062] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 259.965790][T12637] BTRFS info (device loop5): disk space caching is enabled [ 259.983133][T12637] BTRFS info (device loop5): has skinny extents [ 260.005336][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 260.102297][ T4389] usb 7-1: Using ep0 maxpacket: 16 [ 260.206193][T12704] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3700'. [ 260.215877][ T7062] usb 2-1: Using ep0 maxpacket: 8 [ 260.223223][T12637] BTRFS info (device loop5): enabling ssd optimizations [ 260.243305][T12637] BTRFS info (device loop5): clearing free space tree [ 260.250177][T12637] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 260.309870][T12637] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 260.333431][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 260.344086][ T7062] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 260.382539][ T4389] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 260.391995][ T4389] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.409940][ T7062] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.427405][ T7062] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 260.436726][ T4389] usb 7-1: Product: syz [ 260.440936][ T4389] usb 7-1: Manufacturer: syz [ 260.452312][ T7062] usb 2-1: config 1 has no interface number 0 [ 260.462349][ T4389] usb 7-1: SerialNumber: syz [ 260.474865][ T7062] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.487269][ T4389] r8152-cfgselector 7-1: config 0 descriptor?? [ 260.502500][ T7062] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.682514][ T7062] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.691814][ T7062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.722335][ T7062] usb 2-1: Product: syz [ 260.751051][ T7062] usb 2-1: Manufacturer: syz [ 260.770571][ T7062] usb 2-1: SerialNumber: syz [ 260.822472][T12721] loop3: detected capacity change from 0 to 1024 [ 260.828237][T12723] loop0: detected capacity change from 0 to 2048 [ 260.833805][ T7062] cdc_wdm 2-1:1.128: skipping garbage [ 260.856828][ T7062] cdc_wdm 2-1:1.128: cdc-wdm0: USB WDM device [ 260.872565][ T7062] cdc_wdm 2-1:1.128: Unknown control protocol [ 260.944267][T12723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.983279][ T4389] r8152-cfgselector 7-1: Unknown version 0x0000 [ 260.989771][ T4389] r8152-cfgselector 7-1: bad CDC descriptors [ 261.074426][ T4389] r8152-cfgselector 7-1: Unknown version 0x0000 [ 261.125831][ T4389] r8152-cfgselector 7-1: USB disconnect, device number 9 [ 261.205656][ T7061] usb 2-1: USB disconnect, device number 24 [ 261.219422][T12733] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 261.316253][T12733] device bond2 entered promiscuous mode [ 261.791421][T12761] loop0: detected capacity change from 0 to 2048 [ 261.885219][T12761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.104015][T12731] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 262.235519][T12781] netlink: set zone limit has 8 unknown bytes [ 262.283177][T12783] xt_ecn: cannot match TCP bits for non-tcp packets [ 262.388916][T12731] usb 2-1: Using ep0 maxpacket: 8 [ 262.514636][T12794] loop0: detected capacity change from 0 to 256 [ 262.529888][T12731] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 262.544980][T12731] usb 2-1: config 1 has no interface number 1 [ 262.551413][T12731] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 262.597775][T12758] loop3: detected capacity change from 0 to 32768 [ 262.669291][T12794] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 262.742485][T12731] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.751993][T12731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.760739][T12731] usb 2-1: Product: syz [ 262.765976][T12731] usb 2-1: Manufacturer: syz [ 262.770701][T12731] usb 2-1: SerialNumber: syz [ 262.785733][T12758] XFS (loop3): Mounting V5 Filesystem [ 262.989854][T12809] xt_ecn: cannot match TCP bits for non-tcp packets [ 263.063140][T12758] XFS (loop3): Ending clean mount [ 263.087745][T12758] XFS (loop3): Quotacheck needed: Please wait. [ 263.153626][T12731] usb 2-1: found format II with max.bitrate = 196, frame size=4096 [ 263.162642][T12816] loop0: detected capacity change from 0 to 512 [ 263.182112][T12731] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 263.198410][T12758] XFS (loop3): Quotacheck: Done. [ 263.219452][T12816] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 263.278882][T12731] usb 2-1: USB disconnect, device number 25 [ 263.314895][T12816] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3747: invalid indirect mapped block 8 (level 2) [ 263.413084][ T4175] XFS (loop3): Unmounting Filesystem [ 263.458809][T12816] EXT4-fs (loop0): 1 truncate cleaned up [ 263.508495][T12825] loop5: detected capacity change from 0 to 2048 [ 263.517880][T12816] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,noauto_da_alloc,nomblk_io_submit,auto_da_alloc=0x0000000000000002,nouid32,barrier=0x0000000000000009,noauto_da_alloc,,errors=continue. Quota mode: none. [ 263.576472][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.617152][T12825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.622295][T12821] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 263.930002][T12840] nfs4: Bad value for 'source' [ 263.955945][T12843] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 263.959239][T12844] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 264.640062][T12885] loop1: detected capacity change from 0 to 64 [ 264.769223][T12894] loop5: detected capacity change from 0 to 2048 [ 264.782130][T12885] minix_free_block (loop1:21): bit already cleared [ 264.867624][T12894] EXT4-fs (loop5): Ignoring removed nobh option [ 264.895417][T12894] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 264.912703][T12894] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 264.912703][T12894] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 264.912703][T12894] [ 265.030456][T12894] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,i_version,nobh,delalloc,minixdf,nomblk_io_submit,nouser_xattr,inode_readahead_blks=0x0000000008000000,grpjquota=,bsddf,,errors=continue. Quota mode: none. [ 265.309140][T12930] loop3: detected capacity change from 0 to 128 [ 265.359653][T12934] device gre0 entered promiscuous mode [ 265.409939][T12930] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 265.444374][T12930] sysv_free_block: flc_count > flc_size [ 265.450176][T12930] sysv_free_block: flc_count > flc_size [ 265.466599][T12930] sysv_free_block: flc_count > flc_size [ 265.485564][T12930] sysv_free_block: flc_count > flc_size [ 265.515429][T12930] sysv_free_block: flc_count > flc_size [ 265.535746][T12930] sysv_free_block: flc_count > flc_size [ 265.556058][T12930] sysv_free_block: flc_count > flc_size [ 265.573009][T12930] sysv_free_block: flc_count > flc_size [ 265.615540][T12930] sysv_free_block: flc_count > flc_size [ 265.621444][T12930] sysv_free_block: flc_count > flc_size [ 265.714979][T12930] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 265.868125][T12957] netlink: 'syz.1.3812': attribute type 1 has an invalid length. [ 265.943523][T12957] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3812'. [ 266.323616][T12729] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 266.334398][T12981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3825'. [ 266.361063][T12981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3825'. [ 266.391647][T12981] netlink: 'syz.1.3825': attribute type 4 has an invalid length. [ 266.568530][T12991] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3829'. [ 266.593871][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3829'. [ 266.622340][T12729] usb 6-1: Using ep0 maxpacket: 16 [ 266.632546][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3829'. [ 266.679527][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3829'. [ 266.752493][T12729] usb 6-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 266.775027][T13002] netlink: 'syz.3.3835': attribute type 1 has an invalid length. [ 266.780254][T12729] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.859999][T13006] xt_hashlimit: max too large, truncated to 1048576 [ 266.932540][T12729] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 266.953704][T12729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.003425][T12729] usb 6-1: SerialNumber: syz [ 267.109563][T12729] usb 6-1: 0:2 : does not exist [ 267.147128][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 267.219836][T13028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3847'. [ 267.314872][ T7047] usb 6-1: USB disconnect, device number 17 [ 267.792251][T13055] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3861'. [ 267.802429][T12731] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 268.207224][T12731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.263170][T12731] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.286236][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.449781][T13085] loop5: detected capacity change from 0 to 256 [ 268.493400][T12731] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.512346][T12731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.526143][T12731] usb 4-1: Product: syz [ 268.544966][T12731] usb 4-1: Manufacturer: syz [ 268.560125][T13085] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84977, utbl_chksum : 0xe619d30d) [ 268.582859][T12731] usb 4-1: SerialNumber: syz [ 268.756522][T13101] netlink: 'syz.1.3884': attribute type 2 has an invalid length. [ 268.942623][T13115] tmpfs: Bad value for 'mpol' [ 269.099339][T13125] openvswitch: netlink: Message has 8 unknown bytes. [ 269.126069][T12731] usb 4-1: cannot find UAC_HEADER [ 269.139839][T13125] openvswitch: netlink: Actions may not be safe on all matching packets [ 269.174026][T12731] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 269.175622][T13120] loop0: detected capacity change from 0 to 4096 [ 269.202787][T12731] usb 4-1: USB disconnect, device number 21 [ 269.280042][T13120] ntfs3: Bad value for 'gid' [ 269.302718][T13135] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.435597][T13120] loop0: detected capacity change from 0 to 128 [ 269.780303][T13165] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.284548][T13209] netlink: 'syz.6.3936': attribute type 4 has an invalid length. [ 270.287634][T13207] loop3: detected capacity change from 0 to 164 [ 270.360092][T13207] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 271.206668][T13269] __nla_validate_parse: 7 callbacks suppressed [ 271.206689][T13269] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3968'. [ 271.331238][T13280] syz.5.3972 (13280): /proc/13279/oom_adj is deprecated, please use /proc/13279/oom_score_adj instead. [ 271.378477][T13283] loop1: detected capacity change from 0 to 256 [ 271.496791][T13283] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 271.709696][T13297] loop5: detected capacity change from 0 to 4096 [ 271.812889][T13297] EXT4-fs (loop5): Ignoring removed orlov option [ 271.837929][T13297] EXT4-fs (loop5): Test dummy encryption mode enabled [ 271.843085][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3986'. [ 271.872439][T12731] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 271.898850][T13297] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,noauto_da_alloc,nolazytime,orlov,data_err=abort,test_dummy_encryption,nobarrier,quota,max_batch_time=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 271.998250][T13291] infiniband syz1: set active [ 272.020568][T13291] infiniband syz1: added veth0_vlan [ 272.038839][T13317] Sensor A: ================= START STATUS ================= [ 272.110506][T13317] Sensor A: Test Pattern: 75% Colorbar [ 272.128250][T13297] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz.5.3979: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 272.152604][T13317] Sensor A: Show Information: All [ 272.157705][T13317] Sensor A: Vertical Flip: false [ 272.161217][T13297] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz.5.3979: directory missing '..' [ 272.172839][T13317] Sensor A: Horizontal Flip: false [ 272.177872][T13320] loop1: detected capacity change from 0 to 16 [ 272.180131][T13317] Sensor A: Brightness: 128 [ 272.192083][T13317] Sensor A: Contrast: 128 [ 272.197291][T13317] Sensor A: Hue: 0 [ 272.201293][T13317] Sensor A: Saturation: 128 [ 272.206346][T13317] Sensor A: ================== END STATUS ================== [ 272.215395][T13291] RDS/IB: syz1: added [ 272.222036][T13291] smc: adding ib device syz1 with port count 1 [ 272.244137][T13291] smc: ib device syz1 port 1 has pnetid [ 272.244338][T13320] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 272.508395][T12731] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 272.520841][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.557285][T12731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.585963][T12731] usb 1-1: Product: syz [ 272.608297][T12731] usb 1-1: Manufacturer: syz [ 272.655265][T12731] usb 1-1: SerialNumber: syz [ 272.743397][T12731] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 273.422319][T12731] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 273.472314][ T7061] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 273.669015][T13361] loop5: detected capacity change from 0 to 512 [ 273.809284][T13361] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4008: bg 0: block 205: padding at end of block bitmap is not set [ 273.870891][T12730] usb 1-1: USB disconnect, device number 26 [ 273.902308][T13361] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 273.934614][T13361] EXT4-fs (loop5): 1 orphan inode deleted [ 273.940504][T13361] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.971124][T13361] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.999423][T12729] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 274.004107][ T7061] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.037202][ T7061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.049886][ T7061] usb 2-1: Product: syz [ 274.065961][ T7061] usb 2-1: Manufacturer: syz [ 274.070824][ T7061] usb 2-1: SerialNumber: syz [ 274.133392][ T7061] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 274.262324][T12729] usb 7-1: Using ep0 maxpacket: 16 [ 274.411115][T12729] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 274.429142][T12729] usb 7-1: config 0 has no interface number 0 [ 274.442964][T12729] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 274.462220][T12729] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 274.472931][T12731] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 274.480096][T12731] ath9k_htc: Failed to initialize the device [ 274.512534][T12730] usb 1-1: ath9k_htc: USB layer deinitialized [ 274.672798][ T4216] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 274.712725][T12729] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 274.722424][ T7061] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.745098][T12729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.755149][T12729] usb 7-1: Product: syz [ 274.765219][T12729] usb 7-1: Manufacturer: syz [ 274.769854][T12729] usb 7-1: SerialNumber: syz [ 274.786197][T12729] usb 7-1: config 0 descriptor?? [ 274.822755][T13363] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 274.829962][T13363] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 274.982639][ C1] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 274.992863][ T4216] usb 6-1: Using ep0 maxpacket: 32 [ 275.112461][T12729] asix: probe of 7-1:0.251 failed with error -71 [ 275.130221][T12729] usb 7-1: USB disconnect, device number 10 [ 275.177426][T12730] usb 2-1: USB disconnect, device number 26 [ 275.315205][ T4216] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 275.332215][ T4216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.340343][ T4216] usb 6-1: Product: syz [ 275.352212][ T4216] usb 6-1: Manufacturer: syz [ 275.356958][ T4216] usb 6-1: SerialNumber: syz [ 275.383774][ T4216] usb 6-1: config 0 descriptor?? [ 275.652381][ T4216] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 275.661201][ T4216] eb 9a 47 80 9b f8 7a f0 [ 275.682230][ T4216] snd-usb-6fire: probe of 6-1:0.0 failed with error -5 [ 275.727258][T13396] (unnamed net_device) (uninitialized): option lacp_active: invalid value (6) [ 275.752416][ T7061] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 275.759927][ T7061] ath9k_htc: Failed to initialize the device [ 275.786764][T12730] usb 2-1: ath9k_htc: USB layer deinitialized [ 275.878852][ T4216] usb 6-1: USB disconnect, device number 18 [ 276.015038][T13408] loop1: detected capacity change from 0 to 256 [ 276.109400][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.139636][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.183900][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.212330][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.241249][T13422] loop0: detected capacity change from 0 to 8 [ 276.251634][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.291454][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.301246][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.311204][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.325325][T13422] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 276.340994][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.350464][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.369636][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.378660][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.420483][T13422] cramfs: Error -3 while decompressing! [ 276.436376][T13422] cramfs: ffffffff96bc2268(26)->ffff888054b69000(4096) [ 276.440023][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.464720][T13422] cramfs: Error -5 while decompressing! [ 276.490153][T13422] cramfs: ffffffff96bc2282(26)->ffff888053704000(4096) [ 276.501859][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.524300][T13422] cramfs: Error -3 while decompressing! [ 276.538714][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.551658][T13422] cramfs: ffffffff96bc229c(16)->ffff8880562c8000(4096) [ 276.570404][T13434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4043'. [ 276.575667][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.584196][T13422] cramfs: Error -3 while decompressing! [ 276.607654][T13422] cramfs: ffffffff96bc2268(26)->ffff888054b69000(4096) [ 276.666089][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.716177][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.745395][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.768105][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.851288][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 276.887817][T13449] loop3: detected capacity change from 0 to 512 [ 276.925229][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4052'. [ 276.929923][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 277.013422][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 277.022118][T13408] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 277.062643][T13449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 277.062747][T13449] System zones: 1-12 [ 277.065589][T13449] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4050: invalid indirect mapped block 8 (level 2) [ 277.066646][T13449] EXT4-fs (loop3): 1 truncate cleaned up [ 277.066673][T13449] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.075741][ T26] audit: type=1800 audit(1742354838.585:15): pid=13408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4031" name="file2" dev="loop1" ino=1048629 res=0 errno=0 [ 277.358333][T13474] netlink: 'syz.1.4062': attribute type 3 has an invalid length. [ 277.400591][T13464] loop0: detected capacity change from 0 to 4096 [ 277.480262][T13474] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.4062'. [ 277.806678][T13492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.814234][T13492] IPv6: NLM_F_CREATE should be set when creating new route [ 277.821558][T13492] IPv6: NLM_F_CREATE should be set when creating new route [ 277.882536][ T7047] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 277.970813][T13498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4074'. [ 278.009476][T13497] device netdevsim0 entered promiscuous mode [ 278.041842][T13497] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 278.412472][ T7047] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 278.421814][ T7047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.430452][T13520] openvswitch: netlink: Actions may not be safe on all matching packets [ 278.454553][ T7047] usb 6-1: Product: syz [ 278.482556][ T7047] usb 6-1: Manufacturer: syz [ 278.491415][ T7047] usb 6-1: SerialNumber: syz [ 278.530384][ T7047] usb 6-1: config 0 descriptor?? [ 278.597187][ T7047] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 278.632580][ T7047] pctv452e: pctv452e_power_ctrl: 1 [ 278.632580][ T7047] [ 278.644944][T13534] loop1: detected capacity change from 0 to 128 [ 278.659728][ T7047] usb 6-1: selecting invalid altsetting 3 [ 278.675785][ T7047] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 278.675785][ T7047] [ 278.703109][ T7047] dvb-usb: bulk message failed: -22 (5/0) [ 278.727633][ T7047] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 278.779903][T13534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.808488][T13534] ext4 filesystem being mounted at /822/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.844117][ T7047] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 278.926683][ T7047] usb 6-1: USB disconnect, device number 19 [ 278.966554][T13543] netlink: 'syz.0.4097': attribute type 8 has an invalid length. [ 279.056432][T13547] netlink: 'syz.6.4099': attribute type 1 has an invalid length. [ 279.088514][T13547] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4099'. [ 279.223788][T13557] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 279.570544][T13579] tmpfs: Bad value for 'mpol' [ 280.115273][T13625] xt_TCPMSS: Only works on TCP SYN packets [ 280.191693][T13628] ax25_connect(): syz.0.4137 uses autobind, please contact jreuter@yaina.de [ 280.574282][T13657] kAFS: No cell specified [ 280.666808][T13659] IPv6: NLM_F_REPLACE set, but no existing node found! [ 280.682775][ T26] audit: type=1326 audit(1742354842.195:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.5.4154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23fa8c2169 code=0x0 [ 280.807763][T13668] autofs4:pid:13668:autofs_fill_super: called with bogus options [ 280.972243][T12730] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 281.012571][T13681] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 281.031598][T13681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.242504][T12730] usb 1-1: Using ep0 maxpacket: 8 [ 281.412691][T12730] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 281.458417][ T7047] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 281.606482][T13704] netlink: del zone limit has 4 unknown bytes [ 281.613076][T12730] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 281.628103][T12730] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 281.652297][T12730] usb 1-1: Product: syz [ 281.656538][T12730] usb 1-1: Manufacturer: syz [ 281.680247][T12730] usb 1-1: SerialNumber: syz [ 281.694245][T13706] xt_CONNSECMARK: invalid mode: 0 [ 281.852532][ T7047] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 281.860754][ T7047] usb 2-1: config 0 has no interface number 0 [ 281.891009][ T7047] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 170, setting to 64 [ 281.962519][T12730] usb 1-1: Invalid connection information received from device [ 282.042666][ T7047] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 282.091710][ T7047] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 282.142258][ T7047] usb 2-1: Manufacturer: syz [ 282.146910][ T7047] usb 2-1: SerialNumber: syz [ 282.183731][ T7047] usb 2-1: config 0 descriptor?? [ 282.190879][T12730] usb 1-1: USB disconnect, device number 27 [ 282.202687][T13689] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 282.326350][T13738] loop5: detected capacity change from 0 to 512 [ 282.432553][ T7047] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 282.446612][T13738] EXT4-fs (loop5): Ignoring removed orlov option [ 282.458249][ T7047] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 282.491372][ T7047] usb 2-1: USB disconnect, device number 27 [ 282.511471][T13738] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 282.541755][T13738] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 282.566267][T13738] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.4190: Corrupt directory, running e2fsck is recommended [ 282.621252][T13738] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 282.630641][T13738] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.4190: corrupted in-inode xattr [ 282.652831][T13738] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.4190: couldn't read orphan inode 15 (err -117) [ 282.673925][T13738] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,data_err=abort,grpjquota=.sb=0x0000000000000001,init_itable,jqfmt=vfsold,stripe=0x0000000000010000,,,errors=continue. Quota mode: writeback. [ 282.966444][T13751] xt_TCPMSS: Only works on TCP SYN packets [ 283.108233][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4199'. [ 283.215342][T13762] ax25_connect(): syz.6.4200 uses autobind, please contact jreuter@yaina.de [ 283.236911][T13766] loop0: detected capacity change from 0 to 512 [ 283.325044][T13766] EXT4-fs (loop0): Ignoring removed orlov option [ 283.398439][T13766] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 283.482967][T13766] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 283.493972][T13766] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4203: Corrupt directory, running e2fsck is recommended [ 283.596972][T13766] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 283.644579][T13766] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.4203: corrupted in-inode xattr [ 283.690376][T13783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4209'. [ 283.718970][T13766] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.4203: couldn't read orphan inode 15 (err -117) [ 283.768562][T13766] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,data_err=abort,grpjquota=.sb=0x0000000000000001,init_itable,jqfmt=vfsold,stripe=0x0000000000010000,,,errors=continue. Quota mode: writeback. [ 283.843256][T13789] loop3: detected capacity change from 0 to 16 [ 283.876688][T13789] erofs: (device loop3): mounted with root inode @ nid 36. [ 284.056233][T13804] autofs4:pid:13804:autofs_fill_super: called with bogus options [ 284.242086][T13816] loop0: detected capacity change from 0 to 1024 [ 284.472407][T13826] loop3: detected capacity change from 0 to 2048 [ 284.531303][T13826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.790377][T13840] netlink: del zone limit has 4 unknown bytes [ 284.824465][T13845] loop0: detected capacity change from 0 to 64 [ 284.928508][T13845] minix_free_block (loop0:21): bit already cleared [ 285.025256][T13852] xt_CONNSECMARK: invalid mode: 0 [ 285.029837][T13846] loop5: detected capacity change from 0 to 4096 [ 285.265490][T13864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4251'. [ 285.371998][T13872] loop1: detected capacity change from 0 to 512 [ 285.438519][T13872] EXT4-fs (loop1): Ignoring removed orlov option [ 285.481088][T13872] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 285.538010][T13882] netlink: 'syz.6.4260': attribute type 8 has an invalid length. [ 285.573705][T13872] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 285.584308][T13872] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4252: Corrupt directory, running e2fsck is recommended [ 285.635942][T13872] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 285.652697][T13872] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.4252: corrupted in-inode xattr [ 285.685478][T13872] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.4252: couldn't read orphan inode 15 (err -117) [ 285.724568][T13872] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,data_err=abort,grpjquota=.sb=0x0000000000000001,init_itable,jqfmt=vfsold,stripe=0x0000000000010000,,,errors=continue. Quota mode: writeback. [ 285.895521][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4265'. [ 285.942376][T12730] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 286.065140][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4266'. [ 286.079592][T13899] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 286.106669][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4266'. [ 286.118780][T13898] netlink: 'syz.0.4266': attribute type 4 has an invalid length. [ 286.226184][T12730] usb 4-1: Using ep0 maxpacket: 8 [ 286.255878][T13907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4271'. [ 286.290096][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4273'. [ 286.313275][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4271'. [ 286.325072][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4271'. [ 286.382614][T12730] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 286.394306][T12730] usb 4-1: config 1 has no interface number 1 [ 286.415421][T12730] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 286.632750][T12730] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.662206][T12730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.670291][T12730] usb 4-1: Product: syz [ 286.704027][T12730] usb 4-1: Manufacturer: syz [ 286.708989][T12730] usb 4-1: SerialNumber: syz [ 286.733879][T13930] netlink: 'syz.6.4283': attribute type 2 has an invalid length. [ 287.079363][T13957] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.122625][T12730] usb 4-1: found format II with max.bitrate = 196, frame size=4096 [ 287.140852][T12730] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 287.205274][T12730] usb 4-1: USB disconnect, device number 22 [ 287.540412][T13983] loop1: detected capacity change from 0 to 4096 [ 287.664091][T13999] netlink: 'syz.3.4325': attribute type 4 has an invalid length. [ 288.441064][T14051] __nla_validate_parse: 9 callbacks suppressed [ 288.441083][T14051] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4343'. [ 288.491152][T14051] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4343'. [ 288.518948][T14051] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4343'. [ 288.781200][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4368'. [ 289.012959][T14093] loop5: detected capacity change from 0 to 256 [ 289.052401][T12730] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 289.104803][T14093] FAT-fs (loop5): Directory bread(block 64) failed [ 289.131356][T14093] FAT-fs (loop5): Directory bread(block 65) failed [ 289.148876][T14093] FAT-fs (loop5): Directory bread(block 66) failed [ 289.158948][T14093] FAT-fs (loop5): Directory bread(block 67) failed [ 289.177991][T14093] FAT-fs (loop5): Directory bread(block 68) failed [ 289.187806][T14093] FAT-fs (loop5): Directory bread(block 69) failed [ 289.220766][T14093] FAT-fs (loop5): Directory bread(block 70) failed [ 289.252328][T14093] FAT-fs (loop5): Directory bread(block 71) failed [ 289.258996][T14093] FAT-fs (loop5): Directory bread(block 72) failed [ 289.283966][T14093] FAT-fs (loop5): Directory bread(block 73) failed [ 289.492403][T12730] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.517721][T12730] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 289.547122][T12730] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.562061][T14121] loop5: detected capacity change from 0 to 128 [ 289.637339][T14125] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4382'. [ 289.646568][ T6478] sysv_free_block: flc_count > flc_size [ 289.662769][ T6478] sysv_free_block: flc_count > flc_size [ 289.672991][ T6478] sysv_free_block: flc_count > flc_size [ 289.686381][ T6478] sysv_free_block: flc_count > flc_size [ 289.702195][ T6478] sysv_free_block: flc_count > flc_size [ 289.712480][ T6478] sysv_free_block: flc_count > flc_size [ 289.735503][ T6478] sysv_free_block: flc_count > flc_size [ 289.742625][T12730] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.767130][T12730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.792284][ T6478] sysv_free_block: flc_count > flc_size [ 289.798023][ T6478] sysv_free_block: flc_count > flc_size [ 289.804283][T12730] usb 4-1: Product: syz [ 289.818881][T12730] usb 4-1: Manufacturer: syz [ 289.823888][ T6478] sysv_free_block: flc_count > flc_size [ 289.832477][T12730] usb 4-1: SerialNumber: syz [ 289.841756][ T6478] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 289.887920][T14137] loop0: detected capacity change from 0 to 64 [ 289.900087][T12730] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 289.924613][T12730] cdc_ncm 4-1:1.0: bind() failure [ 290.147672][ T1107] usb 4-1: USB disconnect, device number 23 [ 290.565424][T14182] loop5: detected capacity change from 0 to 16 [ 290.673108][T14182] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 290.756069][T14193] loop3: detected capacity change from 0 to 512 [ 290.774880][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.842440][T14193] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 290.916228][T14200] Sensor A: ================= START STATUS ================= [ 290.929371][T14201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4417'. [ 290.933470][T14200] Sensor A: Test Pattern: 75% Colorbar [ 290.965759][T14200] Sensor A: Show Information: All [ 290.971224][T14200] Sensor A: Vertical Flip: false [ 291.007837][T14200] Sensor A: Horizontal Flip: false [ 291.032483][T14200] Sensor A: Brightness: 128 [ 291.044914][T14200] Sensor A: Contrast: 128 [ 291.064922][T14200] Sensor A: Hue: 0 [ 291.068746][T14200] Sensor A: Saturation: 128 [ 291.095784][T14200] Sensor A: ================== END STATUS ================== [ 291.242650][T14215] loop5: detected capacity change from 0 to 64 [ 291.302386][ T4216] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 291.431260][T14184] loop1: detected capacity change from 0 to 32768 [ 291.477397][T14184] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.4410 (14184) [ 291.575529][T14184] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 291.601777][T14184] BTRFS info (device loop1): force zlib compression, level 3 [ 291.613818][T14184] BTRFS info (device loop1): force clearing of disk cache [ 291.621146][T14184] BTRFS info (device loop1): setting nodatasum [ 291.627459][T14184] BTRFS info (device loop1): use zlib compression, level 3 [ 291.635724][T14184] BTRFS info (device loop1): allowing degraded mounts [ 291.642592][T14184] BTRFS info (device loop1): enabling disk space caching [ 291.649819][T14184] BTRFS info (device loop1): disk space caching is enabled [ 291.657483][T14184] BTRFS info (device loop1): has skinny extents [ 291.754848][ T4216] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.769705][ T4216] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 60258, setting to 1024 [ 291.781274][ T4216] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 291.791914][ T4216] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 291.801444][ T4216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.837681][T14193] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 291.901182][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4434'. [ 291.913796][ T4216] usb 4-1: invalid MIDI out EP 0 [ 291.937349][T14184] BTRFS info (device loop1): enabling ssd optimizations [ 291.966069][T14184] BTRFS info (device loop1): clearing free space tree [ 291.978036][ T4216] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 291.982453][T14184] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 292.022299][ T1107] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 292.028592][T14184] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.188957][ T4389] usb 4-1: USB disconnect, device number 24 [ 292.282345][T12729] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 292.534131][ T8615] udevd[8615]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.642721][ T1107] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 292.672636][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.689452][ T1107] usb 7-1: Product: syz [ 292.714241][ T1107] usb 7-1: Manufacturer: syz [ 292.752261][ T1107] usb 7-1: SerialNumber: syz [ 292.813474][ T1107] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 292.910975][T12729] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 292.932577][T12729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.941363][T12729] usb 1-1: Product: syz [ 292.964676][T12729] usb 1-1: Manufacturer: syz [ 293.012237][T12729] usb 1-1: SerialNumber: syz [ 293.113308][T12729] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 293.286790][T14288] rdma_rxe: rxe_register_device failed with error -23 [ 293.340170][T14288] rdma_rxe: failed to add veth0_vlan [ 293.612457][ T1107] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 293.646079][T14303] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.4454' sets config #5 [ 293.765395][T14313] netlink: 'syz.5.4459': attribute type 3 has an invalid length. [ 293.789431][T14313] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4459'. [ 293.872406][T12729] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 294.089103][ T4389] usb 7-1: USB disconnect, device number 11 [ 294.102367][ C0] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 294.305181][ T7047] usb 1-1: USB disconnect, device number 28 [ 294.462116][T14349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4477'. [ 294.500066][T14349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4477'. [ 294.586768][T14357] loop5: detected capacity change from 0 to 512 [ 294.658942][T14357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 294.674371][T14357] System zones: 1-12 [ 294.691300][T14357] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4481: invalid indirect mapped block 8 (level 2) [ 294.709397][T14357] EXT4-fs (loop5): 1 truncate cleaned up [ 294.716101][ T1107] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 294.722533][T14357] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 294.723253][ T1107] ath9k_htc: Failed to initialize the device [ 294.740260][ T4389] usb 7-1: ath9k_htc: USB layer deinitialized [ 294.952524][T12729] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 294.959579][T12729] ath9k_htc: Failed to initialize the device [ 294.999684][ T7047] usb 1-1: ath9k_htc: USB layer deinitialized [ 295.241395][T14392] loop3: detected capacity change from 0 to 256 [ 295.332316][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.340952][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.371747][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.396797][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.442423][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.471585][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.512473][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.539061][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.567706][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.592422][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.613904][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.648004][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.679257][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.710996][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.732328][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.751718][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.792418][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.801072][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.840685][T14429] loop5: detected capacity change from 0 to 764 [ 295.842311][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.858519][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4526'. [ 295.861206][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.878778][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.902333][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.921323][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.941620][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 295.952324][ T1107] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 295.952655][T14429] Symlink component flag not implemented [ 295.972993][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.011563][T14429] Symlink component flag not implemented [ 296.018014][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.034543][T14429] Symlink component flag not implemented (129) [ 296.040747][T14429] Symlink component flag not implemented (6) [ 296.069583][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.093577][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.138350][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.189571][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.201447][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.212310][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 296.212835][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.226657][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.272284][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.292747][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.311616][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.346806][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.362668][ T1107] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 296.371340][ T1107] usb 1-1: config 0 has no interface number 0 [ 296.373660][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.387929][ T1107] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 296.423903][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.426989][ T1107] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 296.456021][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.481998][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.498721][T14455] netlink: 'syz.5.4528': attribute type 1 has an invalid length. [ 296.507537][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.529637][T14455] netlink: 'syz.5.4528': attribute type 2 has an invalid length. [ 296.557432][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.573888][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.619787][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.654277][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.662485][ T1107] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 296.684117][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.702295][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.708244][ T1107] usb 1-1: Product: syz [ 296.731266][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.747646][ T1107] usb 1-1: Manufacturer: syz [ 296.768383][ T1107] usb 1-1: SerialNumber: syz [ 296.780205][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.787599][ T1107] usb 1-1: config 0 descriptor?? [ 296.800436][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.832727][T14421] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 296.848478][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.870409][T14421] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 296.901324][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.931190][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 296.958485][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.011988][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.041455][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.073509][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.094144][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.130734][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.142630][ T1107] asix: probe of 1-1:0.251 failed with error -71 [ 297.150171][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.175802][ T1107] usb 1-1: USB disconnect, device number 29 [ 297.242457][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.268298][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.363484][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.372089][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.422468][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.455167][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4547'. [ 297.468646][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.501842][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.533363][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.585406][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.611077][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.648374][T14501] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.4551' sets config #5 [ 297.662376][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.670940][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.712942][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.721681][T14392] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 297.730764][ T26] audit: type=1800 audit(1742354859.245:17): pid=14392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4497" name="file2" dev="loop3" ino=1048630 res=0 errno=0 [ 297.866548][T12729] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 297.897428][T14513] loop0: detected capacity change from 0 to 256 [ 298.166772][T14530] loop5: detected capacity change from 0 to 256 [ 298.250882][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.289779][T12729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.300600][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.323094][T12729] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.348969][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.378462][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.418036][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.447367][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.465995][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.490509][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.502530][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.511257][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.531889][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.544492][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.580282][T12729] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.599477][T12729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.602976][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.612051][T12729] usb 2-1: Product: syz [ 298.620705][T12729] usb 2-1: Manufacturer: syz [ 298.626109][T12729] usb 2-1: SerialNumber: syz [ 298.641449][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.650616][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.661903][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.685415][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.722087][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.742439][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.781388][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.836587][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.870010][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.893412][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.913052][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.941312][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.957776][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 298.975006][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.017101][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.035027][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.044180][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.077764][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.092453][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.111350][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.132423][T12729] usb 2-1: cannot find UAC_HEADER [ 299.138991][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.173180][T14574] delete_channel: no stack [ 299.185973][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.205558][T12729] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 299.228158][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.245560][T12729] usb 2-1: USB disconnect, device number 28 [ 299.277931][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.337964][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.360530][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.377927][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.405902][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.462385][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.489209][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.512698][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.521369][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.541822][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.571569][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.622513][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.631085][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.696286][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.727161][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.772275][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.781054][T14602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4601'. [ 299.815018][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.856612][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.880926][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.916253][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.953517][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 299.996998][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.021538][T14613] libceph: resolve '0..' (ret=-3): failed [ 300.027491][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.065742][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.079232][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.091164][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.101110][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.110014][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.119139][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.131459][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.148092][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.159407][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.168641][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.177736][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.200751][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.222377][T12729] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 300.237082][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.253197][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.261986][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.274168][T14530] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.292462][ T26] audit: type=1800 audit(1742354861.805:18): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4565" name="file2" dev="loop5" ino=1048632 res=0 errno=0 [ 300.512283][T12729] usb 2-1: Using ep0 maxpacket: 8 [ 300.652731][T12729] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 300.671473][T12729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.734589][T12729] usb 2-1: config 0 descriptor?? [ 300.828535][T14653] loop0: detected capacity change from 0 to 256 [ 300.912920][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.959032][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 300.992013][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.002520][T12729] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 301.013281][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.022564][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.037821][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.052024][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.060860][ T7047] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 301.069084][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.077871][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.086919][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.095710][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.107625][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.119167][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.132535][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.151599][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.161064][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.176532][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.191672][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.210895][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.219922][T12729] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 301.240190][T12729] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 301.251750][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.262357][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.281934][T12729] asix: probe of 2-1:0.0 failed with error -71 [ 301.298886][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.310736][T12729] usb 2-1: USB disconnect, device number 29 [ 301.324695][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.355582][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.372075][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.399121][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.417122][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.422711][ T7047] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 301.442626][ T7047] usb 7-1: config 0 has no interface number 0 [ 301.453112][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.463367][ T7047] usb 7-1: config 0 interface 51 has no altsetting 0 [ 301.492040][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.508392][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.527868][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.539746][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.562519][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.571395][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.601233][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.624941][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.639470][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.652588][ T7047] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=d9.7a [ 301.661738][ T7047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.697449][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.702845][ T7047] usb 7-1: Product: syz [ 301.722258][ T7047] usb 7-1: Manufacturer: syz [ 301.726976][ T7047] usb 7-1: SerialNumber: syz [ 301.746549][ T7047] usb 7-1: config 0 descriptor?? [ 301.765183][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.786027][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.794588][ T7047] gspca_main: mars-2.14.0 probing 093a:050f [ 301.807160][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.836286][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.853727][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.868769][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.879240][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.898051][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.931177][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.960281][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.990825][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 301.994269][ T7047] usb 7-1: USB disconnect, device number 12 [ 302.041152][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.108964][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.137591][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.175712][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.202488][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.239988][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.271189][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.290532][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.331330][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.356415][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.388955][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.391758][T14714] netlink: 'syz.1.4656': attribute type 32 has an invalid length. [ 302.410740][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.437535][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.457736][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.514688][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.562191][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.570848][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.614529][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.652342][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.706356][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.752399][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.761144][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.765215][T14733] binder: 14731:14733 unknown command 0 [ 302.794150][T14734] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 302.807953][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.822428][T14733] binder: 14731:14733 ioctl c0306201 400000000000 returned -22 [ 302.851091][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.892524][T14653] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 302.901261][ T26] audit: type=1800 audit(1742354864.405:19): pid=14653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4626" name="file2" dev="loop0" ino=1048633 res=0 errno=0 [ 303.101897][T14748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.327532][T14764] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4678'. [ 303.383723][T14768] bpf: Bad value for 'mode' [ 303.402596][ T7047] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 303.420907][T14764] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4678'. [ 303.472702][T14764] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4678'. [ 303.492521][ T1107] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 303.628594][T14779] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 303.652256][ T7047] usb 4-1: Using ep0 maxpacket: 16 [ 303.782532][ T7047] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 303.819923][ T7047] usb 4-1: config 0 has no interface number 0 [ 303.832946][T12730] Bluetooth: hci6: command 0x0406 tx timeout [ 303.846826][ T7047] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 303.877553][ T7047] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 303.940867][ T7047] usb 4-1: config 0 interface 41 has no altsetting 0 [ 303.942427][ T1107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.989545][ T1107] usb 6-1: config 0 interface 0 has no altsetting 0 [ 304.122527][ T7047] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 304.148324][ T26] audit: type=1326 audit(1742354865.655:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.4703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2939334169 code=0x0 [ 304.182775][ T7047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.190978][ T7047] usb 4-1: Product: syz [ 304.195461][ T7047] usb 4-1: Manufacturer: syz [ 304.200082][ T7047] usb 4-1: SerialNumber: syz [ 304.205792][ T1107] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 304.217001][ T7047] usb 4-1: config 0 descriptor?? [ 304.230786][ T150] block nbd6: Attempted send on invalid socket [ 304.232847][T14753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 304.237165][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 304.252460][T14753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 304.257334][T14806] XFS (nbd6): SB validate failed with error -5. [ 304.275830][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.292315][ T1107] usb 6-1: Product: syz [ 304.296520][ T1107] usb 6-1: Manufacturer: syz [ 304.301161][ T1107] usb 6-1: SerialNumber: syz [ 304.332977][ T1107] usb 6-1: config 0 descriptor?? [ 304.384448][ T1107] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 304.395266][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.427692][ T1107] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 304.437056][ T1107] usb 6-1: media controller created [ 304.458653][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.501762][T14753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 304.534434][T14753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 304.561976][ T1107] DVB: Unable to find symbol tda10046_attach() [ 304.571791][ T1107] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 304.596306][ T1107] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 304.607173][T14827] loop0: detected capacity change from 0 to 256 [ 304.632685][ T1107] dvb_usb_m920x: probe of 6-1:0.0 failed with error -71 [ 304.652519][T12729] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 304.680308][ T1107] usb 6-1: USB disconnect, device number 20 [ 304.686227][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4710'. [ 304.700431][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.732944][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.741980][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.751504][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.763791][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.773369][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.784482][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.805475][T14831] netlink: 'syz.6.4711': attribute type 32 has an invalid length. [ 304.813803][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.813835][ T7047] Error reading MAC address [ 304.832545][ T7047] sr9700: probe of 4-1:0.41 failed with error -71 [ 304.838321][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.851984][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.863119][ T7047] usb 4-1: USB disconnect, device number 25 [ 304.867720][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.887996][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.899341][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.908406][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.918049][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.938332][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.948298][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.961848][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.970932][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.972506][T14833] device gretap0 entered promiscuous mode [ 304.981156][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 304.994752][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.003825][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.013334][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.021966][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.032651][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.050242][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.059939][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.072087][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.081169][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.090053][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.098669][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.107611][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.116221][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.125071][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.133711][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.142696][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.151245][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.159892][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.168770][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.179799][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.188650][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.197639][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.206307][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.215210][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.224593][T12729] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 305.243434][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.263830][T12729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.271867][T12729] usb 2-1: Product: syz [ 305.281401][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.285971][T14835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.290366][T12729] usb 2-1: Manufacturer: syz [ 305.302106][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.310704][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.319385][T12729] usb 2-1: SerialNumber: syz [ 305.336143][T14835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.373307][T14835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.393213][T12729] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 305.413198][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.421841][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.485415][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.531359][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.552398][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.588502][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.628077][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.664225][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.709679][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.741067][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.750564][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.760992][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.780281][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.813625][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.870695][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.889997][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.910807][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.962062][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 305.983405][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 306.014007][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 306.045729][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 306.085296][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 306.102247][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 306.121086][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 306.130281][T12729] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.164146][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 306.192199][T14827] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 306.222519][ T26] audit: type=1800 audit(1742354867.735:21): pid=14827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4709" name="file2" dev="loop0" ino=1048634 res=0 errno=0 [ 306.391025][T14876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.548667][ T4216] usb 2-1: USB disconnect, device number 30 [ 306.867081][T14895] netlink: 'syz.0.4743': attribute type 3 has an invalid length. [ 306.910168][T14895] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4743'. [ 307.182429][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4749'. [ 307.202645][T12729] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 307.238709][T14915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.246400][T12729] ath9k_htc: Failed to initialize the device [ 307.262770][ T4216] usb 2-1: ath9k_htc: USB layer deinitialized [ 307.291238][T14915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.292706][T14919] netlink: 'syz.5.4754': attribute type 29 has an invalid length. [ 307.308244][T14915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.359983][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4754'. [ 307.378978][T14919] netlink: 'syz.5.4754': attribute type 29 has an invalid length. [ 307.397935][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4754'. [ 307.944915][ T1091] block nbd5: Attempted send on invalid socket [ 307.951177][ T1091] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 307.962612][T14943] XFS (nbd5): SB validate failed with error -5. [ 308.205889][T14935] loop1: detected capacity change from 0 to 32768 [ 308.434064][T14957] loop3: detected capacity change from 0 to 256 [ 308.461518][T14935] XFS (loop1): Mounting V5 Filesystem [ 308.609982][T14957] FAT-fs (loop3): Directory bread(block 64) failed [ 308.630360][T14957] FAT-fs (loop3): Directory bread(block 65) failed [ 308.646078][T14935] XFS (loop1): Ending clean mount [ 308.651986][T14957] FAT-fs (loop3): Directory bread(block 66) failed [ 308.666151][T14935] XFS (loop1): Quotacheck needed: Please wait. [ 308.673873][T14957] FAT-fs (loop3): Directory bread(block 67) failed [ 308.680591][T14957] FAT-fs (loop3): Directory bread(block 68) failed [ 308.742089][T14957] FAT-fs (loop3): Directory bread(block 69) failed [ 308.749188][T14957] FAT-fs (loop3): Directory bread(block 70) failed [ 308.775876][T14957] FAT-fs (loop3): Directory bread(block 71) failed [ 308.814514][T14957] FAT-fs (loop3): Directory bread(block 72) failed [ 308.862313][T14957] FAT-fs (loop3): Directory bread(block 73) failed [ 308.905080][T14935] XFS (loop1): Quotacheck: Done. [ 309.073772][ T4167] XFS (loop1): Unmounting Filesystem [ 309.546789][T15005] xt_hashlimit: max too large, truncated to 1048576 [ 309.557462][T15008] loop0: detected capacity change from 0 to 256 [ 309.640318][T15005] xt_hashlimit: overflow, rate too high: 0 [ 309.683122][T15008] exfat: Deprecated parameter 'utf8' [ 309.741360][T15008] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 310.148350][T14990] loop5: detected capacity change from 0 to 32768 [ 310.195307][T15027] xt_addrtype: ipv6 does not support BROADCAST matching [ 310.196404][T15019] infiniband syz1: set active [ 310.397344][T14990] XFS (loop5): Mounting V5 Filesystem [ 310.599663][T15051] loop3: detected capacity change from 0 to 64 [ 310.631028][T14990] XFS (loop5): Ending clean mount [ 310.644469][T14990] XFS (loop5): Quotacheck needed: Please wait. [ 310.772414][T15053] netlink: 'syz.0.4811': attribute type 1 has an invalid length. [ 310.785797][T14990] XFS (loop5): Quotacheck: Done. [ 310.812872][T15053] netlink: 'syz.0.4811': attribute type 2 has an invalid length. [ 310.835049][T15053] netlink: 'syz.0.4811': attribute type 1 has an invalid length. [ 310.853847][ T6478] XFS (loop5): Unmounting Filesystem [ 311.121214][T15065] cgroup: none used incorrectly [ 311.462391][ T7047] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 311.499720][T15075] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 311.544949][T15079] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.565677][T15079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.589841][T15079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.622528][T15079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.647510][T15079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.653403][T15083] netlink: 'syz.3.4824': attribute type 3 has an invalid length. [ 311.683171][T15079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.717451][ T7047] usb 1-1: Using ep0 maxpacket: 16 [ 311.842964][ T7047] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 311.862271][ T7047] usb 1-1: config 0 has no interface number 0 [ 311.868463][ T7047] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 311.926261][ T7047] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 312.041640][T15103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4836'. [ 312.082531][ T7047] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 312.116710][ T7047] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 312.121212][T15111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4839'. [ 312.137045][ T7047] usb 1-1: Manufacturer: syz [ 312.147195][ T7047] usb 1-1: SerialNumber: syz [ 312.165266][ T7047] usb 1-1: config 0 descriptor?? [ 312.192585][T15111] openvswitch: netlink: EtherType 0 is less than min 600 [ 312.213776][T15068] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 312.283372][T15118] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4844'. [ 312.418792][T15127] rdma_rxe: rxe_register_device failed with error -23 [ 312.443972][T15127] rdma_rxe: failed to add vcan0 [ 312.452645][ T7047] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 312.459705][ T7047] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 312.506683][ T7047] usb 1-1: USB disconnect, device number 30 [ 312.954608][ T4389] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 313.224486][T15170] loop1: detected capacity change from 0 to 1024 [ 313.287485][T15170] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 313.492467][ T4389] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.509484][ T4389] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.551835][ T4389] usb 7-1: Product: syz [ 313.566873][T15190] loop0: detected capacity change from 0 to 256 [ 313.587611][ T4389] usb 7-1: Manufacturer: syz [ 313.601762][T15186] loop5: detected capacity change from 0 to 4096 [ 313.613553][ T4389] usb 7-1: SerialNumber: syz [ 313.653387][T15186] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 313.664561][ T4389] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.731049][T15186] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 313.811370][T15186] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 313.832346][T15186] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 313.879277][T15186] ntfs: (device loop5): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 313.928497][T15186] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 314.006422][T15203] loop0: detected capacity change from 0 to 764 [ 314.015785][T15186] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 314.070203][T15186] ntfs: volume version 3.1. [ 314.095993][T15186] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 314.115946][T15203] Symlink component flag not implemented [ 314.142636][T15186] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 314.150842][T15203] Symlink component flag not implemented [ 314.187341][T15203] Symlink component flag not implemented (129) [ 314.207689][T15186] ntfs: (device loop5): ntfs_lookup(): Found stale reference to inode 0x40 (reference sequence number = 0x1, inode sequence number = 0x901), returning -EIO. Run chkdsk. [ 314.214587][T15203] Symlink component flag not implemented (6) [ 314.291085][T15217] netlink: 'syz.3.4890': attribute type 21 has an invalid length. [ 314.322494][ T4389] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.340998][T15217] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4890'. [ 314.612450][ C1] usb 7-1: ath9k_htc: over RX MAX_PKT_NUM [ 314.808558][ T9692] usb 7-1: USB disconnect, device number 13 [ 314.924186][T15249] netlink: 'syz.3.4908': attribute type 1 has an invalid length. [ 315.180797][T15258] loop3: detected capacity change from 0 to 4096 [ 315.281615][T15258] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 315.357779][ T4389] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 315.363330][T15258] ntfs3: loop3: ino=5, "/" directory corrupted [ 315.370888][T15258] ntfs3: loop3: ino=5, "/" directory corrupted [ 315.372910][ T4389] ath9k_htc: Failed to initialize the device [ 315.404910][ T9692] usb 7-1: ath9k_htc: USB layer deinitialized [ 315.881813][T15301] netlink: 'syz.5.4934': attribute type 21 has an invalid length. [ 315.889371][T15294] loop3: detected capacity change from 0 to 4096 [ 315.952631][T15301] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4934'. [ 316.027174][T15294] ntfs: volume version 3.1. [ 316.201996][T15324] xt_hashlimit: size too large, truncated to 1048576 [ 316.250838][T15324] xt_hashlimit: overflow, try lower: 0/0 [ 316.562295][ T1107] Bluetooth: hci6: command 0x0405 tx timeout [ 316.716778][T15361] tc_dump_action: action bad kind [ 316.745603][ T1107] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 316.865029][T15369] netlink: 'syz.0.4967': attribute type 10 has an invalid length. [ 316.907008][T15369] device hsr0 entered promiscuous mode [ 316.974570][T15369] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 316.996676][T15369] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 317.008248][T15369] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 317.021141][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 317.068639][T15369] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 317.115628][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.121997][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.122682][T15379] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 317.222683][T12729] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 317.322399][T15389] netlink: 'syz.0.4977': attribute type 13 has an invalid length. [ 317.354149][ T1107] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 317.381476][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.416592][ T1107] usb 4-1: Product: syz [ 317.420803][ T1107] usb 4-1: Manufacturer: syz [ 317.452279][ T1107] usb 4-1: SerialNumber: syz [ 317.473124][ T1107] usb 4-1: config 0 descriptor?? [ 317.532238][ T1107] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 317.622842][T15406] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4985'. [ 317.710061][T15408] loop0: detected capacity change from 0 to 1024 [ 317.797493][T15408] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.849557][T12729] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 317.867576][T12729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.876096][T12729] usb 7-1: Product: syz [ 317.880285][T12729] usb 7-1: Manufacturer: syz [ 317.885171][T12729] usb 7-1: SerialNumber: syz [ 317.900364][T12729] usb 7-1: config 0 descriptor?? [ 317.922605][T15408] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,bsdgroups,quota,abort,,errors=continue. Quota mode: writeback. [ 317.972346][ T1107] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 317.980110][ T1107] visor: probe of 4-1:0.0 failed with error -71 [ 317.991925][T15408] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 623: comm syz.0.4987: Attempting to read directory block (623) that is past i_size (638464) [ 318.007068][ T1107] usb 4-1: USB disconnect, device number 26 [ 318.134103][T15403] loop5: detected capacity change from 0 to 32768 [ 318.156084][T12729] mos7840 7-1:0.0: required endpoints missing [ 318.337840][T15403] XFS (loop5): Mounting V5 Filesystem [ 318.365355][ T9692] usb 7-1: USB disconnect, device number 14 [ 318.420428][T15446] netlink: 'syz.1.4999': attribute type 10 has an invalid length. [ 318.547525][T15403] XFS (loop5): Ending clean mount [ 318.568369][T15403] XFS (loop5): Quotacheck needed: Please wait. [ 318.576627][T15446] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.592618][T15450] loop3: detected capacity change from 0 to 8 [ 318.606034][T15446] device team0 entered promiscuous mode [ 318.615810][T15446] device team_slave_0 entered promiscuous mode [ 318.629194][T15446] device team_slave_1 entered promiscuous mode [ 318.640046][T15446] bond0: (slave team0): Enslaving as an active interface with an up link [ 318.653666][T15450] SQUASHFS error: zlib decompression failed, data probably corrupt [ 318.682338][T15450] SQUASHFS error: Failed to read block 0x4e8: -5 [ 318.706474][T15403] XFS (loop5): Quotacheck: Done. [ 318.711135][T15450] SQUASHFS error: zlib decompression failed, data probably corrupt [ 318.729928][T15450] SQUASHFS error: Failed to read block 0x4ee: -5 [ 318.744477][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 318.744494][ T26] audit: type=1800 audit(1742354880.255:23): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5001" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 318.791863][ T6478] XFS (loop5): Unmounting Filesystem [ 319.012282][T15467] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 319.211257][T15478] ipt_CLUSTERIP: bad local_nodes[2] 0 [ 319.569730][T15498] loop1: detected capacity change from 0 to 164 [ 319.683842][T15498] Unable to read rock-ridge attributes [ 320.120874][T15541] xt_hashlimit: size too large, truncated to 1048576 [ 320.138665][T15541] xt_hashlimit: overflow, try lower: 0/0 [ 320.393642][T12729] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 320.984091][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5066'. [ 321.002602][T12729] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 321.044204][T12729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.052583][T15585] netlink: 'syz.3.5066': attribute type 1 has an invalid length. [ 321.064781][T15582] loop1: detected capacity change from 0 to 4096 [ 321.082058][T12729] usb 6-1: Product: syz [ 321.109176][T15582] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 321.120314][T12729] usb 6-1: Manufacturer: syz [ 321.139034][T12729] usb 6-1: SerialNumber: syz [ 321.203645][T12729] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 321.224295][T15582] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 321.270448][T15582] ntfs3: loop1: Failed to load $Extend. [ 321.562733][T15565] loop0: detected capacity change from 0 to 32768 [ 321.629193][T15565] ea_get: invalid extended attribute [ 321.692326][T15604] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.914385][T12729] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 322.172496][ C0] usb 6-1: ath9k_htc: over RX MAX_PKT_NUM [ 322.325375][T15621] loop3: detected capacity change from 0 to 4096 [ 322.365020][ T1107] usb 6-1: USB disconnect, device number 21 [ 322.432299][T15621] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 322.515025][T15621] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 322.531921][T15621] ntfs3: loop3: Failed to load $Extend. [ 322.702861][T15640] loop1: detected capacity change from 0 to 1024 [ 322.747654][T15643] netlink: 'syz.3.5092': attribute type 10 has an invalid length. [ 322.750871][T15640] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 322.819552][T15643] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.853930][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5096'. [ 322.859499][T15640] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,bsdgroups,quota,abort,,errors=continue. Quota mode: writeback. [ 322.872887][T15643] bond0: (slave team0): Enslaving as an active interface with an up link [ 322.962248][T12729] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 322.969329][T12729] ath9k_htc: Failed to initialize the device [ 322.994464][T15640] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.5093: Attempting to read directory block (623) that is past i_size (638464) [ 323.021620][T15655] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5099'. [ 323.032849][ T1107] usb 6-1: ath9k_htc: USB layer deinitialized [ 323.549124][T15683] binder: 15680:15683 unknown command 0 [ 323.559875][T15682] netlink: 'syz.0.5111': attribute type 10 has an invalid length. [ 323.578103][T15683] binder: 15680:15683 ioctl c0306201 400000000000 returned -22 [ 323.632986][T15682] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.675160][T15682] bond0: (slave team0): Enslaving as an active interface with an up link [ 323.869661][T15701] loop0: detected capacity change from 0 to 1024 [ 323.916694][T15704] netlink: 'syz.6.5123': attribute type 1 has an invalid length. [ 323.925355][T15706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5121'. [ 323.950359][T15704] netlink: 'syz.6.5123': attribute type 3 has an invalid length. [ 323.960644][T15704] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5123'. [ 324.002272][ T9692] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 324.106164][T15710] netlink: 'syz.5.5125': attribute type 10 has an invalid length. [ 324.155824][T15710] device hsr0 entered promiscuous mode [ 324.171660][ T27] INFO: task syz-executor:4174 blocked for more than 143 seconds. [ 324.191696][ T27] Not tainted 5.15.179-syzkaller #0 [ 324.200547][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.207058][T15710] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 324.217147][ T27] task:syz-executor state:D stack:20504 pid: 4174 ppid: 1 flags:0x00004004 [ 324.250540][ T9692] usb 4-1: Using ep0 maxpacket: 8 [ 324.257837][ T27] Call Trace: [ 324.263778][T15710] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 324.269653][ T27] [ 324.281469][ T27] __schedule+0x12c4/0x45b0 [ 324.285042][T15710] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 324.291893][ T27] ? release_firmware_map_entry+0x190/0x190 [ 324.299072][T15710] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 324.312612][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 324.343299][ T27] ? print_irqtrace_events+0x210/0x210 [ 324.348976][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 324.362037][ T27] schedule+0x11b/0x1f0 [ 324.366869][ T27] io_schedule+0x88/0x100 [ 324.371246][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 324.383935][ T9692] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 324.399156][ T27] ? xas_find+0x979/0xaa0 [ 324.404088][ T9692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.412670][ T27] ? wait_on_page_bit+0x50/0x50 [ 324.417653][ T27] ? rcu_lock_release+0x20/0x20 [ 324.424998][ T9692] usb 4-1: config 0 descriptor?? [ 324.430135][ T27] truncate_inode_pages_range+0xc17/0x1290 [ 324.436461][ T27] ? invalidate_inode_page+0x370/0x370 [ 324.442099][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 324.448926][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 324.454511][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 324.466598][ T27] evict+0x53c/0x930 [ 324.470549][ T27] ? proc_nr_inodes+0x330/0x330 [ 324.481859][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 324.487763][ T27] evict_inodes+0x668/0x700 [ 324.494065][ T27] ? clear_inode+0x150/0x150 [ 324.498709][ T27] ? sync_filesystem+0x103/0x220 [ 324.504144][ T27] generic_shutdown_super+0x94/0x310 [ 324.509487][ T27] kill_block_super+0x7a/0xe0 [ 324.514259][ T27] deactivate_locked_super+0xa0/0x110 [ 324.519651][ T27] cleanup_mnt+0x44e/0x500 [ 324.524204][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 324.529463][ T27] task_work_run+0x129/0x1a0 [ 324.534180][ T27] exit_to_user_mode_loop+0x106/0x130 [ 324.539664][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 324.545354][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 324.551000][ T27] do_syscall_64+0x47/0xb0 [ 324.556680][ T27] ? clear_bhb_loop+0x15/0x70 [ 324.561523][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 324.567649][ T27] RIP: 0033:0x7f3b69292497 [ 324.572429][ T27] RSP: 002b:00007fff05b117f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 324.581018][ T27] RAX: 0000000000000000 RBX: 00007f3b6931208c RCX: 00007f3b69292497 [ 324.589105][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff05b118b0 [ 324.597294][ T27] RBP: 00007fff05b118b0 R08: 0000000000000000 R09: 0000000000000000 [ 324.606813][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff05b12940 [ 324.615216][ T27] R13: 00007f3b6931208c R14: 00000000000284ec R15: 00007fff05b12980 [ 324.623338][ T27] [ 324.626657][ T27] [ 324.626657][ T27] Showing all locks held in the system: [ 324.635058][ T27] 4 locks held by kworker/u4:0/9: [ 324.640209][ T27] #0: ffff8880b8e3a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 324.650452][ T27] #1: ffff8880b8e27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x53d/0x810 [ 324.662019][ T27] #2: ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 324.671473][ T27] #3: ffffffff96c9f300 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x63/0x4e0 [ 324.682641][ T9692] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 324.692413][ T27] 1 lock held by khungtaskd/27: [ 324.697364][ T27] #0: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 324.707001][ T27] 1 lock held by klogd/3535: [ 324.711644][ T27] #0: ffff8880b8e3a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 324.723651][ T27] 2 locks held by getty/3926: [ 324.728539][ T27] #0: ffff88814cc13098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 324.738667][ T27] #1: ffffc90002cd62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 324.749067][ T27] 1 lock held by syz-executor/4174: [ 324.754635][ T27] #0: ffff88807d9aa0e0 (&type->s_umount_key#67){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 324.765020][ T27] 4 locks held by udevd/4185: [ 324.769718][ T27] #0: ffff8880575f5c30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 324.778816][ T27] #1: ffff88802549cc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x50/0x3b0 [ 324.788227][ T27] #2: ffff88807b5c40f0 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x6f/0x3b0 [ 324.798058][ T27] #3: ffff888078325220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17e/0x340 [ 324.807199][ T27] 5 locks held by kworker/1:19/9692: [ 324.812581][ T27] #0: ffff888141bc8938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 324.823480][ T27] #1: ffffc9000349fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 324.835898][ T27] #2: ffff88814808b220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0 [ 324.844969][ T27] #3: ffff888078325220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 324.854336][ T27] #4: ffff8880633931a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 324.863993][ T27] [ 324.866331][ T27] ============================================= [ 324.866331][ T27] [ 324.875591][ T27] NMI backtrace for cpu 1 [ 324.879949][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 324.887932][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.898019][ T27] Call Trace: [ 324.901311][ T27] [ 324.904255][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 324.909001][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 324.914682][ T27] ? panic+0x860/0x860 [ 324.918778][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 324.923923][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 324.928877][ T27] ? __wake_up_klogd+0xd5/0x100 [ 324.933737][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 324.939914][ T27] ? _printk+0xd1/0x120 [ 324.944087][ T27] ? panic+0x860/0x860 [ 324.948157][ T27] ? __wake_up_klogd+0xcc/0x100 [ 324.953020][ T27] ? panic+0x860/0x860 [ 324.957091][ T27] ? __rcu_read_unlock+0x92/0x100 [ 324.962114][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 324.968216][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 324.974360][ T27] watchdog+0xe72/0xeb0 [ 324.978640][ T27] kthread+0x3f6/0x4f0 [ 324.982720][ T27] ? hungtask_pm_notify+0x50/0x50 [ 324.987768][ T27] ? kthread_blkcg+0xd0/0xd0 [ 324.992415][ T27] ret_from_fork+0x1f/0x30 [ 324.996881][ T27] [ 324.999952][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.006235][ T27] Sending NMI from CPU 1 to CPUs 0: [ 325.011510][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 325.012609][ T9692] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 325.029697][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 325.031730][ T9692] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 325.038177][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 325.038204][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.038217][ T27] Call Trace: [ 325.038225][ T27] [ 325.038234][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 325.038266][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 325.049256][ T9692] asix: probe of 4-1:0.0 failed with error -71 [ 325.056482][ T27] ? panic+0x860/0x860 [ 325.056522][ T27] panic+0x318/0x860 [ 325.056543][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 325.071887][ T9692] usb 4-1: USB disconnect, device number 27 [ 325.072820][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 325.072853][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 325.072877][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 325.072906][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 325.132426][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 325.138585][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 325.144757][ T27] watchdog+0xeb0/0xeb0 [ 325.148924][ T27] kthread+0x3f6/0x4f0 [ 325.153008][ T27] ? hungtask_pm_notify+0x50/0x50 [ 325.158042][ T27] ? kthread_blkcg+0xd0/0xd0 [ 325.162650][ T27] ret_from_fork+0x1f/0x30 [ 325.167075][ T27] [ 325.170413][ T27] Kernel Offset: disabled [ 325.182917][ T27] Rebooting in 86400 seconds..