last executing test programs: 3.786845012s ago: executing program 1 (id=6691): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000580)="1700ffeb03d68c5ee17688a20d4000000300ecff3f0200000324000a000000009afc5ad9485bbb6a880180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff0601a1003901000000000000ea0080000000b43b1bb88000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3ce3e5c83f1ba2129ce01bf17a6e000000000000000000000f0ebc9a6f4d9b62f54ae20", 0xb8) 3.470868897s ago: executing program 1 (id=6696): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 3.173191118s ago: executing program 1 (id=6700): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000040), 0x4001, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0xffffffff}}]}}) 2.740687347s ago: executing program 1 (id=6708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x3e, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 2.35915235s ago: executing program 0 (id=6713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) 2.326794585s ago: executing program 3 (id=6714): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000240)={0xa, 0x4e20, 0x40, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}, 0x41) 2.311192869s ago: executing program 1 (id=6715): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='quota,iocharset=cp437,noquota,errors=continue,discard=0x00000\x00\x00000000004,errors=continue,quota,discard,grpquota,\x00'], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) 2.129906054s ago: executing program 0 (id=6717): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x401, 0x101040) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000300)={0x40000000, 0x6, "5ebdb9637dde5ba6d0be658cff753e605686f2c65b38db3ae7db4f24f7fe37f3", 0x7ff, 0x3, 0x7, 0x6b41e13c, 0x2eed, 0x17, 0xfff, 0xa21, [0x3ff, 0x6, 0x9]}) 2.094412877s ago: executing program 3 (id=6718): r0 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x4b, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 2.012503345s ago: executing program 5 (id=6719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="e4e647c9d9b8e9a2f2ab30da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.959106002s ago: executing program 2 (id=6720): r0 = socket(0x22, 0x2, 0x24) recvfrom(r0, 0x0, 0x0, 0x10001, 0x0, 0x0) 1.839447027s ago: executing program 3 (id=6721): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {}, {@errors_remount}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpid}, {@norecovery}]}, 0x0, 0x45f, &(0x7f0000001940)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000240)={0x404142ffc, 0x6, 0x4, 0xb}) 1.784898248s ago: executing program 0 (id=6722): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x1e8, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 1.755409611s ago: executing program 4 (id=6723): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={'\x00', 0x4, 0x5, 0x2, 0x8, 0x30, "0000000000850200120fa4c62f00", "000200", '\x00', "64bdac32", ["e866ec050080000400900007", "3549ffffffffffffff010800", "03000000000000006a9cc1f0"]}) 1.746446212s ago: executing program 2 (id=6724): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x20001) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f00000001c0)) 1.563973534s ago: executing program 0 (id=6725): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000001c0)=0xdb17, 0x4) 1.467060228s ago: executing program 4 (id=6726): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) 1.432174413s ago: executing program 5 (id=6727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) 1.314867159s ago: executing program 2 (id=6728): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)={[{@dmode={'dmode', 0x3d, 0xb1}}, {@utf8}, {@overriderock}, {@check_relaxed}, {}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@session={'session', 0x3d, 0x38}}, {@nocompress}, {@map_off}, {}, {@overriderock}, {@mode={'mode', 0x3d, 0x1000}}, {@nojoliet}, {}, {@cruft}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$eJzs3c1vXFdfB/DvHduJH/chydOGUqK2nqQkdVvj2A5NiLooiT1JXPyCbEdqxKIpjYOiGAotSG2F1FRCrFqBBGIBu4oVq0rdUBaoGwQ7umKBhPovVKzCyujOjO2xPeNxjGO76edjzcx9+d1zfnfuy/HM3JkTflxWjm8YW1mp33Y5fvMf9yFjDrGrk99/+dUX5e2zBzmSnrxe/FPSn6Sa9CZ5LumbmJyfm+lS0P3kdpJvkyLJ0TQed+R2ir/Mz9fHv03x92W9HR3Zacl0s8JP2kHvfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBgVE5Ojo2PFkUzN3ny72pBUt5iYnJ8rsrKydc7qMg3f1Hv9Lr7pWm9SlLf096929f3cyfXZzyapnsnzjbHn6x2Spz+fPPXsiTee6a2sLt8pm/+Xozsv9sOPP7n/7vLy0gdt5xbFHmZ1yDT2keu12amFuamZK9dr1amFuerlixdHz9+4tlC9NjVdW7i1sFibqU7M164szs1XhyZeqY5dvnyhWhu5NXdz9vrkyHRtdeKlXx8fHb1YfWvkd2pX5hfmZs+/NbIwcWNqenpq9no9ppxdxlwqd8TfnlqsLtauzFSrd+8tL13YlFlPNu2/ZdBYt/Upg8a7BY2Pjo+PjY2Pj33W7D17bcLF1y+/fml0tHd0k2yJeEw7LYfLzzpv5r0/icMuVRrtfzKdqczmZt5Ote3fRCYzn7nMdJjftNr+nz1f27batLT/zVa+t2X+qfLuTF5sjvZ3aP875LJ/fx/m43yS+3k3y1nOUj448Iz29+96apnNVBYyl6nM5Ep9SrU5pZrLuZiLGc07uZHBLKQ31zKV6dSykFtZyGJq9T1qIvOp5UoWM5f5VDOUibySasZyOZdzIdXUMpJbmcvNzOZ6JnOlXsrd3Ks/7xe2yXEtaGwnQePbBG1pzB+5/a9t/ueEJ1Bl2638GM7isDsrzfb/SPfQoYn9SAgAAADYc7/67zl28ul/+++kyAv1z+WvTU3XRg86LQAAAGAP1S/Xe7586CuHXkjh9T8AAAA8aYr6d+yKJAMZbAytfhPKmwAAAADwhKh//v9iisH1CV7/AwAAwBOm+2/sd40ohld//rd6p/F4pxnRGCsGrk1N10Ym5qbfGMu5+q8M1L9psKW0nqToq3/94NWcbkSdHmg8DqyXWNbZX0aNjbwxlldzprkiQy+VDy8NtYkcb0S+3Ih8uTWyJxsiL5SRAPCkO7NNe7zT9v/VDDcihk/Vm/zeUxva4J56yzqqZQWAw2Ktj53/bXZp1qb9b0a82Kn9/41tXv+XEU/n7mDjkoKRvJf3s5w7GU7zioPBdqWu9kbQuAxhuMu7AQPNSxa+u1TJ8Jb3A/rX1rU1dinjGW77jkBLucVqDhcacT2PZxsAwH47s207vNb+927X/g9v//q/pc11SSEAHAZrPdg/6sDgzoMPeh0BgI200gAAAAAAAAAAAAAAAAAAAAAAAAAAALD3dvQD/v9xLlleXkp221lAm4Hv/vWff6ljzOdPJf2PkuH2A5XsTc6Hf6AnyUHV/mYeealyGx+Wp87AxoEDPjEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwL4qkp930SnI0yWiS8/uf1ePz4KAT2CvV3S1WPMzDfJRje50OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBPXfP3/ytpPD7VmJTeSnI2ye0kv3vQOT6K/i7zH+5THofPH9TvW37/v5L0ZaVIb2Ozp+ibmJyfmyl3heJoOf/7L7/6orx1LPLT1YGtvSqUBZQ1bOhcollDy5S+jUv9or7UwOTSh/f/5P0/qk5ere+YVxevTU/OXJ//rfXAZ4uvG10gtHaDsJrvn539l79qmXykWfnX5Zq2t7nea/V6J7fW+yvtlu5Q7w7cW14aL2tarL29+Kd/WGmd9XROJy8NJUMba/r98tahptObn8+Nih+KvyiO5W9zu779y2ejWCnKTXS8vv4/u3tveWnkvfeX76zl9Om9j1oKOJHBJHc2HmVdchqsn0/aqu91lb6y1tF6UHl3skt522opcWz9ed2wDr+o7zIDj7QO1c7rUNfleW9mdGFzRivlQfLXf/xMzm27pY+2KfFclxrbKn4o/qu4kf/Mn7f0/1Ept//ZtD062xRRj2zZU1rnbTi8KmfX13y8dcY7m8vseFTyGHye38tvrm3/Ssv5v7mtOhw3a+ejN1smdjhuVg+tbY6Llhq3HBdN3Y6LrUfqPxzf0qKsqx9GJze1SM2zT6dlmnmebER1yPOX81rSe+qRziivdTmjdFt+t8f/3xVD+Z880P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+BVJT7vpleRskhNJjpfj1WRlc8yDXdRXGSh2k+ae2U3OPz5FxxUtHuZhPsqx/c4IAAAAAAAAgMfj6uT3X371RXmrfx7fk1+rNOdUk94kJ4q/6ZuYnJ+b6VJQX3J79SP9/vYhHSbndnn38/Xxb8ux57rUd7CXDwDAj9r/BQAA//+CGm1g") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x8840) 1.199177896s ago: executing program 3 (id=6729): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62c42) ioctl$SG_BLKSECTGET(r0, 0x1267, 0xfffffffffffffffc) 1.199015443s ago: executing program 4 (id=6730): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 1.198886225s ago: executing program 0 (id=6731): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'virt_wifi0\x00', @random="0600"}) 1.132801393s ago: executing program 5 (id=6732): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 1.07947322s ago: executing program 0 (id=6733): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f000000c880)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c6e6f696e746567726974792c696f636861727365743d69736f383835392d322c6572726f72733d636f6e74696e75652c696f636861727365743d63703737352c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f71756f74612c696e746567726974792c6572726f72733d636f6e74696e75652c67727071756f74612c00488a61b1f1a67ed1325e9524aee3528e7fb582d3166c82acd1559bb0"], 0x24, 0x628f, &(0x7f00000065c0)="$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") chdir(&(0x7f0000000040)='./file0\x00') 868.291654ms ago: executing program 4 (id=6734): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) 867.440603ms ago: executing program 2 (id=6735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {0x3, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 743.184045ms ago: executing program 5 (id=6736): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x40047452, 0x0) 724.839804ms ago: executing program 3 (id=6737): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x68}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa68"], 0x28}, 0x40c0) 522.548323ms ago: executing program 2 (id=6738): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x188, 0x194, 0x194, 0x188, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x74020000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0xf, {0x2}}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4, 0x3}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x5, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 475.187278ms ago: executing program 4 (id=6739): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_tid_address(0x0) 470.003855ms ago: executing program 5 (id=6740): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 407.784025ms ago: executing program 1 (id=6741): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES16=0x0], 0x1, 0x1a1, &(0x7f00000003c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) 351.1175ms ago: executing program 3 (id=6742): syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x4018400, &(0x7f0000000000)=ANY=[], 0x1, 0xf94, &(0x7f00000011c0)="$eJzs3UFsHNX5APA3a6/txE68Bv4Q4E9IoRWBgh2SSE17CgL1iLj0DgoJjTAUNfRAFEjoAVEJUSTEqeJAxYVSKSAVCVSpQj21PbXqrSfUC5WqVArqoUVKXMV+s9592cmux96Ztff3kz4/v5nZ+b7Z9a5nZmffBmBsNVZ/Hj26Lwvhnc/efuzlp7NPrk27u73EgdWfWey1QgjNjn6WrO+LOOHK5XMnerVZOLz6M++Hxy+1bzsbQrgQDoTPQyt8uLT81QfvPnrw49dmbn3z7LOvDGnz29LtAACAnejin5b/dv8//vjgwtcX9x8P0+3p+f55K/Zn437/obijnO8vN0J3P+uITlPJchMxGslyE8lyk0meyYJ8zWQ9zYLlpvrkm+iY1ms7AQAAYDvKj2tbIWssdvUbjcXFteP+a76Yn8oWnz+9fOpMTYUCAAAApf37/OpFt0OK+SGuWwghxDaJtYvLbrhMx1VW9dcrxPjFHs8/IaqIhufZlkRmn6F0rMxXfcYBAAAAGHfpeGHXubC1I3W119YaLP+lRxq9bw9boOq//xvnn6k5fw9jnv/9V73iAABQ3k7dm8y3K9+PzscxSMcRnEhut9H9/0aynskN1lk0ruB2GW+wqM70fh1VRfVv9HGsS6Pgjk7HwxxVRfd/Ok7nqCqqf7riOsoqqr/HmZ+RVFT/rorrKKuo/t0V11FWUf2zFddRVlH9cxXXUVZR/XsqrqOsovr3VlxHWUX1b5fLaovqb1VcR1lF9S9UXEdZRfXfVHEdZRXVf3PFdZTVWX/nrvQtNdRSh7tim98P+wuWm+1xTLddjvEAAABg3P13qOP/CSFGL+LVDbXXMabRbP/erL0WURQzY/8caYxADWLIMTkCNQghhKg6ztd7+gEAAAAYAfnnAvJPva9E+fyJPvMnO+fPrC+Qz2/2uf1Un/nTfeZfb7t8MhQAAAC2zm9fP3X7W9n6eHebHQ8vHzdqV/jkaigxjlE6HuFG82923LPN5t8u45YBAAAwXrLvf371gcfee3Hh64v7j3cc/V69fG71rf98HNDJeG7g09jPrwuYS/pZfgx9vDtPo2C59PzAnqL1PbHJDQUAAIAxNhcP+Vshayx2HHe3QqOxuLh+PL4vNLNTp5dPHor9/PtZ/jDfnL42/eGqCwcAAAAGtn683/v4P/8e331hKlt8/vTyqTNr/bn29Gaj87zA/Pr0rPO8QCuZfrhg+pHYz7+/84fzu1anL5740fLTW73xAAAAMCbOvHT22aeWl0/+2C9+8cuO+iXb1LO77lcmAABgq3355dvNnxyZ+93a5//Xx7+7Gn85EPutOLbfn+P0/DqB/HMA131e/8nuPPNFy73QvVwrWW4ixnRS90zHekLHqP757RaK8rW61zNVkG82yTeX5EvHKZhMls96jCUYeoxPmC83n0xPx2GcTHJkSf57euQCAACA3NKLz72wdOalsw+dfu6pZ04+c/L5I4ePfffYsUMPf+fhpdXr+pc6r+4HAAAAtqP1i37rrgQAAAAAAAAAAAAAAAAAAADGVxXfRlb3NgIAAMC4+9f5EMIFIQoi/4LBuusQoxwr0/XXsLMjjOjz8PWP6q9h+8aukX1cNxkzUztzu4TojCl/42LjMV37a2O/47666xOVxMpK+k3zAAAAAMN15fK5E53tdS5kW5qvvbbWWnM15s3buYf+unAt8sUuPdJ9vmT3llbDuKv671/+Uc0/3XP++69ubf6ZsP7aFwZ6/Wt0r+B46Cx0V68cjR7T7lv61b52/hDCHZMD5k+3/4nBtjN1MMl/X7hh/j357VbeS/I/2dXrtak93Z/k333j/MXb/8KgGbs9EPPvi/2D9w6av3sT8wc/346efwA9fDvZ/qfDoPmT7W8NmDDxYMwPAOOo/d985Xy9hWyxfC8h35+ejf18e+PuZkivftjo/n8jWc/kpivvXm++H3Rb7M+06+jOm9tA/asp8vtlLrZ7StaZ2i5XlRTVv1WP47AV1d+suI6yiuqfqriOsorq7330PnqK6p+puI6yiuof9Di0bkX1b5fzykX1z1ZcR1lF9c9VXEdZRfVv9P94XYrq31txHWUV1T9fcR1lFdVf8rRa5YrqX6i4jrKK6r+p4jrKKqr/5orrKKuo/lsqrqMud8a26Hg4P/6cj/PyfivpT/e4Lwd+MwQAAAAYqn+O5Ph/HWcOaq9FCCGE2IqYGsI6s/Ur3oZdf7Pu+0+UDWO0ikHjPytr6q5DCDG8WFmp7dQDI2C4n2YGYFR5/R9vXY//947XVwi18Pwfbx5/biR/Jz5L+rmJPvMn+8xv9pk/lcxP/16n+8y/OVnvSn5eM7qlz/z/i1tQNH9vn9vf1mf+6iBEHR+6SOff3uf2d/SZf2ef+QAAAIyHW2Pr+BAAAAB2rpd//ekbv7nvycsLX1/cfzxMXTfu/KHYn47vrb8e++m497lmfM//p7H/y9j+PrZ/T5Z3/QkAAAAMX/49Md7/BwAAgJ0r/55Sx/8AAACwcy3E1vE/AAAA7Fw3xdbxPwAAAOxg2UzvybHNzwvcE9tBx/UDAEbf/8f2rtjuj+3dsf1GbPP9gHtj+82K6gMAts4vfvCzY29l6+P9H0nmX4nT8/Y6F9bOFGSN7pH8d8V2d2y/NWA96fcBDJo/t3fAPMPKP7/J/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAztFY/Xn06L4shHc+e/uxn0+98Zdr0+5uL3Fg9WcWe60QQrN9u3zuev+juOCVy+dOdLZXY5uFwyELWXt6ePxSO9NsCOFCOBA+D63w4dLyVx+8++jBj1+bufXNs8++MsS7oGv7AAAAYCf6XwAAAP//n6IW9Q==") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 82.189801ms ago: executing program 4 (id=6743): timer_create(0x2, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, &(0x7f0000000700)) 22.621657ms ago: executing program 2 (id=6744): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000002000000080002"], 0x1c}}, 0x0) 0s ago: executing program 5 (id=6745): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x2, 0x6, 0x101, 0x0, 0xfffffe23, 0x2, 0x0}) kernel console output (not intermixed with test programs): recover 1th superblock, ret: 0 [ 795.296049][T18679] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 795.437850][T18745] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5291'. [ 795.974773][T18758] loop0: detected capacity change from 0 to 4096 [ 796.062627][T18765] overlayfs: workdir and upperdir must be separate subtrees [ 796.071632][T18766] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 796.160300][T18758] syz.0.5298: attempt to access beyond end of device [ 796.160300][T18758] loop0: rw=0, sector=1207959736, nr_sectors = 8 limit=4096 [ 796.246228][T18758] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 796.657562][T18780] loop2: detected capacity change from 0 to 1024 [ 796.664970][T18780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 796.705812][T18780] EXT4-fs (loop2): stripe (2834) is not aligned with cluster size (16), stripe is disabled [ 796.768154][T18780] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0102] [ 796.787124][T18780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 796.957841][T18780] EXT4-fs error (device loop2): __ext4_remount:6748: comm syz.2.5309: Abort forced by user [ 797.013105][T18780] EXT4-fs (loop2): Remounting filesystem read-only [ 797.040059][T18780] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 797.130727][T18796] loop1: detected capacity change from 0 to 1024 [ 797.169270][T18796] EXT4-fs: Ignoring removed orlov option [ 797.205066][T18796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 797.256236][T18796] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 797.256408][ T6055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.275268][T18796] System zones: 0-1, 3-36 [ 797.343103][T18796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.399693][T18798] loop4: detected capacity change from 0 to 4096 [ 797.525471][T18810] netlink: 'syz.0.5320': attribute type 32 has an invalid length. [ 797.603509][T18798] ntfs3(loop4): ino=5, "/" indx_read [ 797.623894][ T6066] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.651076][T18798] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 797.946349][T18819] loop1: detected capacity change from 0 to 8 [ 797.974311][T18819] Page size > filesystem block size (11). This is currently not supported! [ 798.702323][T18839] loop0: detected capacity change from 0 to 2048 [ 798.726827][T18803] loop5: detected capacity change from 0 to 32768 [ 798.753143][T18839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 798.967346][T18847] xt_hashlimit: max too large, truncated to 1048576 [ 799.231948][ T30] audit: type=1326 audit(785.697:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.4.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 799.256532][T18856] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 799.331556][ T30] audit: type=1326 audit(785.697:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.4.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 799.459827][ T30] audit: type=1326 audit(785.734:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.4.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 799.560908][ T30] audit: type=1326 audit(785.734:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.4.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 799.682606][ T30] audit: type=1326 audit(785.734:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.4.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 800.094945][T18845] loop1: detected capacity change from 0 to 32768 [ 800.188291][T18845] ERROR: (device loop1): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 800.188291][T18845] [ 800.250662][ T6176] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 800.279354][T18845] ERROR: (device loop1): remounting filesystem as read-only [ 800.311606][T18845] ERROR: (device loop1): txAbort: [ 800.311606][T18845] [ 800.446735][ T6176] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 800.488352][ T6176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.517608][ T6176] usb 4-1: Product: syz [ 800.521823][ T6176] usb 4-1: Manufacturer: syz [ 800.526439][ T6176] usb 4-1: SerialNumber: syz [ 800.533430][ T6066] ERROR: (device loop1): xtTruncate: xt_getpage: xtree page corrupt [ 800.533430][ T6066] [ 800.596385][ T6176] usb 4-1: config 0 descriptor?? [ 800.637770][ T6176] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 800.669305][ T6176] usb 4-1: Detected FT2232HP [ 800.822379][ T6176] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 800.841143][ T6176] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 800.873817][ T6176] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 800.923964][ T6176] usb 4-1: USB disconnect, device number 30 [ 800.959630][ T6176] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 801.010547][ T6176] ftdi_sio 4-1:0.0: device disconnected [ 801.786328][T18921] loop0: detected capacity change from 0 to 1024 [ 801.906483][T18921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.948673][T18902] loop2: detected capacity change from 0 to 32768 [ 801.966270][T18902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5367 (18902) [ 801.999400][T18902] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 802.079321][T18902] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 802.092874][T18891] loop4: detected capacity change from 0 to 32768 [ 802.249009][ T6053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.439531][T18902] BTRFS info (device loop2): enabling ssd optimizations [ 802.496790][T18902] BTRFS info (device loop2): turning on async discard [ 802.509582][T18902] BTRFS info (device loop2): enabling free space tree [ 802.539019][ T5821] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 802.635703][T18955] netlink: 'syz.4.5384': attribute type 11 has an invalid length. [ 802.646611][T18957] TCP: TCP_TX_DELAY enabled [ 802.665269][T18955] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5384'. [ 802.709747][T18959] loop5: detected capacity change from 0 to 256 [ 802.720532][T18902] BTRFS error: failed to open device for path ð§û*`NN«g &÷ë—S©‡šFÿOèorÖ’}AÛ‹Ž1ŒœCßO_à§ç0Ul•±'B• ØY®g·¯ãC„ Ä'âPlvÞ¸%a Ò’Ùß—_2üX‡-?,T½ö̇©†°WGEwL¸‡C^ÿT®ÕQ±1T#ïuü>oª¤ZÅÆ£Pf )Ë«‡ÛI9» [ 802.720532][T18902] ìdÞ;áZŽÉ”þ¦“+kí»ãRÊO¦_æÖQ¥N?Ñ_[.ð¥ËDû†W&tܨÉB.ÍsÏ×ó‹ Ò5Ê‘Ä Fs²r¢ì Œm8¹ò:W›”Æü¡ˆŸj´¾U3Ò»ÁÔŒsýçÚ1X„íîm£PæÑÐ [ 802.720532][T18902] þËÑL}é VÝ{™Vç}ÍR$¹ì]&fɽ̼÷$ÏÞ iУÿñæQÍn7‹^ÓÒcK©QT︺kÎÉr6 with flags 0x1: -36 [ 802.728579][T18959] exfat: Deprecated parameter 'utf8' [ 802.763502][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.797234][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 802.837408][T18959] exfat: Deprecated parameter 'utf8' [ 802.841454][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 802.870650][T18959] exfat: Deprecated parameter 'utf8' [ 802.874976][ T5821] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 802.913303][ T5821] usb 4-1: config 7 has no interface number 0 [ 802.929977][T18959] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 802.942443][ T5821] usb 4-1: config 7 interface 187 has no altsetting 0 [ 802.960038][ T5821] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 802.984464][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.041619][ T5821] usb 4-1: Product: syz [ 803.055787][T18965] netlink: 'syz.4.5389': attribute type 10 has an invalid length. [ 803.063108][ T5821] usb 4-1: Manufacturer: syz [ 803.064001][ T6055] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 803.090014][ T5821] usb 4-1: SerialNumber: syz [ 803.116765][T18967] loop1: detected capacity change from 0 to 256 [ 803.134698][T18965] macvlan0: entered promiscuous mode [ 803.191504][T18965] macvlan0: entered allmulticast mode [ 803.227120][T18967] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 803.260179][T18965] veth1_vlan: entered allmulticast mode [ 803.311154][T18965] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 803.368938][ T5821] usb 4-1: Limiting number of CPorts to U8_MAX [ 803.425200][ T5821] usb 4-1: Not enough endpoints found in device, aborting! [ 803.485577][T18969] loop0: detected capacity change from 0 to 1024 [ 803.534312][T18969] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 803.598692][T18969] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 803.633989][ T6149] usb 4-1: USB disconnect, device number 31 [ 803.702124][T18969] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 803.724355][T18969] EXT4-fs (loop0): orphan cleanup on readonly fs [ 803.824370][T18969] EXT4-fs error (device loop0): ext4_read_inode_bitmap:166: comm syz.0.5404: Inode bitmap for bg 0 marked uninitialized [ 803.904628][T18969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 803.970766][T18980] loop2: detected capacity change from 0 to 2048 [ 804.046733][T18980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.114140][ T6053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.227101][T18980] EXT4-fs error (device loop2): __ext4_new_inode:1072: comm syz.2.5391: reserved inode found cleared - inode=1 [ 804.535212][ T6055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.315492][T19026] loop1: detected capacity change from 0 to 512 [ 805.375627][T19026] EXT4-fs: Ignoring removed orlov option [ 805.422035][T19026] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 805.459318][T19026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 805.479830][T19026] EXT4-fs error (device loop1): ext4_iget_extra_inode:5070: inode #15: comm syz.1.5416: corrupted in-inode xattr: e_value size too large [ 805.502484][T19026] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.5416: couldn't read orphan inode 15 (err -117) [ 805.518362][T19026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.592640][ T6066] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.835601][T19042] loop1: detected capacity change from 0 to 256 [ 805.888280][T19046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5426'. [ 805.929201][T19042] FAT-fs (loop1): Directory bread(block 64) failed [ 805.951863][T19046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5426'. [ 805.962702][T19042] FAT-fs (loop1): Directory bread(block 65) failed [ 805.969329][T19042] FAT-fs (loop1): Directory bread(block 66) failed [ 806.036360][T19042] FAT-fs (loop1): Directory bread(block 67) failed [ 806.043022][T19042] FAT-fs (loop1): Directory bread(block 68) failed [ 806.115016][T19042] FAT-fs (loop1): Directory bread(block 69) failed [ 806.123683][T19042] FAT-fs (loop1): Directory bread(block 70) failed [ 806.130246][T19042] FAT-fs (loop1): Directory bread(block 71) failed [ 806.198682][T19042] FAT-fs (loop1): Directory bread(block 72) failed [ 806.205254][T19042] FAT-fs (loop1): Directory bread(block 73) failed [ 806.415741][T19057] netlink: 'syz.0.5432': attribute type 10 has an invalid length. [ 806.487287][T19057] macvlan0: entered promiscuous mode [ 806.499247][T19057] macvlan0: entered allmulticast mode [ 806.531467][T19020] loop3: detected capacity change from 0 to 32768 [ 806.540366][T19057] veth1_vlan: entered allmulticast mode [ 806.574621][T19057] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 806.697406][T19020] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 806.773222][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5435'. [ 806.779461][T19020] XFS (loop3): Ending clean mount [ 807.025519][ T6057] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 807.181852][T19084] geneve2: entered promiscuous mode [ 807.342989][T19092] netlink: 'syz.4.5447': attribute type 29 has an invalid length. [ 807.373726][T19092] netlink: 'syz.4.5447': attribute type 3 has an invalid length. [ 807.416688][T19092] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5447'. [ 807.780141][T19102] netlink: 'syz.5.5452': attribute type 10 has an invalid length. [ 807.829729][T19102] macvlan0: entered promiscuous mode [ 807.845154][T19108] loop1: detected capacity change from 0 to 16 [ 807.848498][T19102] macvlan0: entered allmulticast mode [ 807.889990][T19102] veth1_vlan: entered allmulticast mode [ 807.891198][T19108] erofs (device loop1): mounted with root inode @ nid 36. [ 807.918473][T19102] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 808.347287][T19122] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5461'. [ 808.389968][T19122] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5461'. [ 808.775353][ T30] audit: type=1326 audit(794.626:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 808.860156][ T30] audit: type=1326 audit(794.626:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 808.988827][ T30] audit: type=1326 audit(794.654:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 809.070104][ T30] audit: type=1326 audit(794.654:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 809.167256][ T30] audit: type=1326 audit(794.654:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.4.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 809.255079][T19151] netlink: 'syz.1.5474': attribute type 10 has an invalid length. [ 809.321720][T19151] macvlan0: entered promiscuous mode [ 809.327276][T19151] macvlan0: entered allmulticast mode [ 809.363981][T19151] veth1_vlan: entered allmulticast mode [ 809.395428][T19151] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 809.640667][T19162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5481'. [ 809.703698][T19158] loop4: detected capacity change from 0 to 4096 [ 809.756932][T19165] netlink: 'syz.2.5482': attribute type 33 has an invalid length. [ 809.799960][T19165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5482'. [ 809.810536][T19167] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 809.879171][T19158] syz.4.5479: attempt to access beyond end of device [ 809.879171][T19158] loop4: rw=0, sector=1207959736, nr_sectors = 8 limit=4096 [ 809.962404][T19158] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 809.976968][T19169] loop0: detected capacity change from 0 to 64 [ 810.283813][T19173] loop2: detected capacity change from 0 to 1024 [ 810.292364][T19144] loop5: detected capacity change from 0 to 32768 [ 810.320707][T19173] EXT4-fs: Ignoring removed orlov option [ 810.357638][T19173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 810.370535][T19175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5486'. [ 810.411104][T19175] netlink: 31 bytes leftover after parsing attributes in process `syz.4.5486'. [ 810.414672][T19173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 810.420151][T19175] netlink: 'syz.4.5486': attribute type 3 has an invalid length. [ 810.437301][T19175] netlink: 'syz.4.5486': attribute type 2 has an invalid length. [ 810.445375][T19175] netlink: 31 bytes leftover after parsing attributes in process `syz.4.5486'. [ 810.504029][T19173] System zones: 0-1, 3-36 [ 810.574060][T19173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.589580][T19180] ip6erspan0: entered allmulticast mode [ 810.873975][T19185] netlink: 'syz.5.5490': attribute type 10 has an invalid length. [ 810.913392][T19185] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 810.923590][T19185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 811.003010][T19160] loop3: detected capacity change from 0 to 32768 [ 811.076794][ T6055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.168883][T19160] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 811.379345][T19202] netlink: 'syz.0.5496': attribute type 2 has an invalid length. [ 811.448290][T19202] netlink: 'syz.0.5496': attribute type 8 has an invalid length. [ 811.449348][T19160] XFS (loop3): Ending clean mount [ 811.482777][T19160] XFS (loop3): Quotacheck needed: Please wait. [ 811.501947][T19202] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5496'. [ 811.514283][T19205] x_tables: ip_tables: osf match: only valid for protocol 6 [ 811.622411][T19160] XFS (loop3): Quotacheck: Done. [ 811.844542][T19210] delete_channel: no stack [ 811.894592][ T6057] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 811.982568][T19217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5502'. [ 812.189229][T19221] loop1: detected capacity change from 0 to 64 [ 812.243303][T19221] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 812.334898][T19221] MINIX-fs: bad superblock or unable to read bitmaps [ 813.076940][T19215] loop5: detected capacity change from 0 to 32768 [ 813.112851][T19215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5503 (19215) [ 813.168068][ T30] audit: type=1326 audit(798.721:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.4.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 813.253481][T19215] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 813.277958][ T30] audit: type=1326 audit(798.768:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.4.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 813.281365][T19215] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 813.384976][ T30] audit: type=1326 audit(798.768:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.4.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 813.561619][ T30] audit: type=1326 audit(798.787:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.4.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 813.631755][ T30] audit: type=1326 audit(798.787:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.4.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 813.816713][T19215] BTRFS info (device loop5): enabling ssd optimizations [ 813.872359][T19215] BTRFS info (device loop5): turning on async discard [ 813.908287][T19215] BTRFS info (device loop5): enabling free space tree [ 814.079055][T19215] BTRFS error: failed to open device for path ð§û*`NN«g &÷ë—S©‡šFÿOèorÖ’}AÛ‹Ž1ŒœCßO_à§ç0Ul•±'B• ØY®g·¯ãC„ Ä'âPlvÞ¸%a Ò’Ùß—_2üX‡-?,T½ö̇©†°WGEwL¸‡C^ÿT®ÕQ±1T#ïuü>oª¤ZÅÆ£Pf )Ë«‡ÛI9» [ 814.079055][T19215] ìdÞ;áZŽÉ”þ¦“+kí»ãRÊO¦_æÖQ¥N?Ñ_[.ð¥ËDû†W&tܨÉB.ÍsÏ×ó‹ Ò5Ê‘Ä Fs²r¢ì Œm8¹ò:W›”Æü¡ˆŸj´¾U3Ò»ÁÔŒsýçÚ1X„íîm£PæÑÐ [ 814.079055][T19215] þËÑL}é VÝ{™Vç}ÍR$¹ì]&fɽ̼÷$ÏÞ iУÿñæQÍn7‹^ÓÒcK©QT︺kÎÉr6 with flags 0x1: -36 [ 814.209090][T19291] loop4: detected capacity change from 0 to 256 [ 814.344247][ T6059] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 814.865901][T19309] libceph: resolve '00' (ret=-3): failed [ 815.247968][T19321] loop3: detected capacity change from 0 to 256 [ 815.299904][T19326] warning: `syz.5.5535' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 815.336962][T19321] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd6e00b17, utbl_chksum : 0xe619d30d) [ 815.394090][T19328] loop0: detected capacity change from 0 to 64 [ 815.450725][T19321] exFAT-fs (loop3): valid_size(4096) is greater than size(0) [ 815.473003][T19328] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 815.519306][T19328] MINIX-fs: bad superblock or unable to read bitmaps [ 815.536523][T19331] netlink: 'syz.2.5551': attribute type 10 has an invalid length. [ 815.576773][T19331] macvlan0: entered promiscuous mode [ 815.598337][T19331] macvlan0: entered allmulticast mode [ 815.638248][T19331] veth1_vlan: entered allmulticast mode [ 815.669383][T19331] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 815.845122][T19336] xt_cgroup: invalid path, errno=-2 [ 816.468174][T19359] netlink: 'syz.5.5565': attribute type 7 has an invalid length. [ 816.486097][T19325] loop1: detected capacity change from 0 to 32768 [ 816.519088][T19325] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5548 (19325) [ 816.620746][T19362] loop2: detected capacity change from 0 to 256 [ 816.635896][T19325] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 816.662921][T19325] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 816.689558][T19362] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd6e00b17, utbl_chksum : 0xe619d30d) [ 816.712518][T19364] loop3: detected capacity change from 0 to 16 [ 816.714767][T19366] x_tables: unsorted entry at hook 2 [ 816.743659][T19362] exFAT-fs (loop2): valid_size(4096) is greater than size(0) [ 816.811506][T19364] erofs (device loop3): mounted with root inode @ nid 36. [ 816.966362][T19325] BTRFS info (device loop1): enabling ssd optimizations [ 817.017727][T19325] BTRFS info (device loop1): turning on async discard [ 817.052325][T19325] BTRFS info (device loop1): enabling free space tree [ 817.234505][T19325] BTRFS error: failed to open device for path ð§û*`NN«g &÷ë—S©‡šFÿOèorÖ’}AÛ‹Ž1ŒœCßO_à§ç0Ul•±'B• ØY®g·¯ãC„ Ä'âPlvÞ¸%a Ò’Ùß—_2üX‡-?,T½ö̇©†°WGEwL¸‡C^ÿT®ÕQ±1T#ïuü>oª¤ZÅÆ£Pf )Ë«‡ÛI9» [ 817.234505][T19325] ìdÞ;áZŽÉ”þ¦“+kí»ãRÊO¦_æÖQ¥N?Ñ_[.ð¥ËDû†W&tܨÉB.ÍsÏ×ó‹ Ò5Ê‘Ä Fs²r¢ì Œm8¹ò:W›”Æü¡ˆŸj´¾U3Ò»ÁÔŒsýçÚ1X„íîm£PæÑÐ [ 817.234505][T19325] þËÑL}é VÝ{™Vç}ÍR$¹ì]&fɽ̼÷$ÏÞ iУÿñæQÍn7‹^ÓÒcK©QT︺kÎÉr6 with flags 0x1: -36 [ 817.466379][ T6066] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 818.348818][T19422] loop5: detected capacity change from 0 to 512 [ 818.356176][T19422] EXT4-fs: Ignoring removed bh option [ 818.371916][T19426] loop2: detected capacity change from 0 to 128 [ 818.390277][ T9632] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 818.402032][T19422] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 818.454282][T19426] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 818.466346][T19422] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 818.516710][T19426] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 818.539198][T19422] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 818.569911][T19426] FAT-fs (loop2): Filesystem has been set read-only [ 818.612655][T19422] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 818.618572][ T9632] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 818.639713][T19426] syz.2.5587: attempt to access beyond end of device [ 818.639713][T19426] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 818.639875][ T9632] usb 2-1: config 0 has no interface number 0 [ 818.671184][T19422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.672898][T19431] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 818.726036][ T9632] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 818.726471][T19426] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 818.751550][ T9632] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 818.763264][T19431] SET target dimension over the limit! [ 818.820508][ T9632] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 818.830691][T19426] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 818.843836][T19422] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 818.862924][ T9632] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 818.879709][T19426] syz.2.5587: attempt to access beyond end of device [ 818.879709][T19426] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 818.895548][ T9632] usb 2-1: Product: syz [ 818.907517][ T9632] usb 2-1: SerialNumber: syz [ 818.945913][ T9632] usb 2-1: config 0 descriptor?? [ 818.956419][T19436] loop0: detected capacity change from 0 to 64 [ 818.963331][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 818.963353][ T30] audit: type=1800 audit(804.135:47): pid=19426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5587" name="file2" dev="loop2" ino=1048719 res=0 errno=0 [ 819.065052][ T6059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.075695][ T9632] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input54 [ 819.437157][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.446746][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.454472][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.462132][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.469681][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.477039][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.484483][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.491844][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.499122][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.512544][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 819.519967][ T9632] usb 2-1: USB disconnect, device number 119 [ 819.526547][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 819.657484][T19450] netlink: 'syz.4.5599': attribute type 2 has an invalid length. [ 819.670144][T19450] netlink: 'syz.4.5599': attribute type 1 has an invalid length. [ 819.701372][ T9632] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 819.813709][T19454] netlink: 'syz.3.5601': attribute type 1 has an invalid length. [ 819.829017][T19448] loop2: detected capacity change from 0 to 4096 [ 819.847687][T19454] netlink: 'syz.3.5601': attribute type 2 has an invalid length. [ 820.056027][T19448] ntfs3(loop2): ino=5, "/" indx_read [ 820.609888][T19476] loop5: detected capacity change from 0 to 256 [ 820.735425][T19476] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 820.805694][T19476] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 820.852888][T19476] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 820.903420][ T30] audit: type=1800 audit(805.958:48): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5612" name="file1" dev="loop5" ino=1048720 res=0 errno=0 [ 820.977559][T19488] netlink: 45 bytes leftover after parsing attributes in process `syz.4.5618'. [ 821.140031][ T9632] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 821.347398][ T9632] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 4 [ 821.374476][ T9632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 821.421079][ T9632] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 821.465556][ T9632] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 821.498400][ T9632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.536066][ T9632] usb 3-1: Product: syz [ 821.555113][ T9632] usb 3-1: Manufacturer: syz [ 821.560039][ T9632] usb 3-1: SerialNumber: syz [ 821.603608][ T9632] usb 3-1: config 0 descriptor?? [ 821.627494][T19485] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 821.680213][ T9632] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 821.713988][ T9632] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 821.869212][T19520] loop1: detected capacity change from 0 to 256 [ 821.943154][T19524] loop3: detected capacity change from 0 to 128 [ 821.969083][T19524] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 822.003249][ T9632] usb 3-1: USB disconnect, device number 14 [ 822.020122][T19520] FAT-fs (loop1): Directory bread(block 64) failed [ 822.036764][T19520] FAT-fs (loop1): Directory bread(block 65) failed [ 822.044802][T19526] kAFS: unparsable volume name [ 822.048871][ T9632] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 822.065896][T19524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 822.080675][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 822.081312][T19520] FAT-fs (loop1): Directory bread(block 66) failed [ 822.111991][ T9632] ti_usb_3410_5052 3-1:0.0: device disconnected [ 822.144767][T19520] FAT-fs (loop1): Directory bread(block 67) failed [ 822.217291][T19520] FAT-fs (loop1): Directory bread(block 68) failed [ 822.229200][T19520] FAT-fs (loop1): Directory bread(block 69) failed [ 822.259701][T19520] FAT-fs (loop1): Directory bread(block 70) failed [ 822.266616][T19520] FAT-fs (loop1): Directory bread(block 71) failed [ 822.282303][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 822.282372][T19520] FAT-fs (loop1): Directory bread(block 72) failed [ 822.306287][T19520] FAT-fs (loop1): Directory bread(block 73) failed [ 822.320660][ T10] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 822.355762][ T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 822.386106][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.425161][ T10] usb 5-1: config 0 has no interface number 0 [ 822.444967][ T10] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 822.464125][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.482995][ T10] usb 5-1: Product: syz [ 822.491463][ T10] usb 5-1: Manufacturer: syz [ 822.517589][ T10] usb 5-1: SerialNumber: syz [ 822.541897][ T10] usb 5-1: config 0 descriptor?? [ 822.833313][ T10] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 822.866014][ T10] uvcvideo 5-1:0.105: No valid video chain found. [ 822.962838][T19546] loop0: detected capacity change from 0 to 16 [ 822.992243][T19546] erofs (device loop0): mounted with root inode @ nid 36. [ 823.108835][ T6176] usb 5-1: USB disconnect, device number 33 [ 823.484176][T19559] loop5: detected capacity change from 0 to 1024 [ 823.528753][T19559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 823.546584][T19564] netlink: 'syz.0.5651': attribute type 39 has an invalid length. [ 823.600347][T19559] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 823.610340][T19559] System zones: 0-1, 3-36 [ 823.634209][T19559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.806646][ T6059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.094849][T19580] loop2: detected capacity change from 0 to 65 [ 824.132321][T19580] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 824.428064][T19586] loop5: detected capacity change from 0 to 64 [ 824.564454][T19594] loop2: detected capacity change from 0 to 16 [ 824.591073][T19591] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5666'. [ 824.635876][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5666'. [ 824.688228][T19594] erofs (device loop2): mounted with root inode @ nid 36. [ 824.695718][T19591] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5666'. [ 824.721278][T19591] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5666'. [ 824.774333][T19591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5666'. [ 825.080465][T19600] loop5: detected capacity change from 0 to 4096 [ 825.119771][T19600] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 825.196093][T19600] ntfs3(loop5): ino=19, mi_enum_attr [ 825.223487][T19600] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 825.298358][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 825.314977][T19600] ntfs3(loop5): failed to convert "c46c" to cp437 [ 825.343379][T19613] loop3: detected capacity change from 0 to 65 [ 825.351373][T19600] ntfs3(loop5): ino=20, mi_enum_attr [ 825.362606][T19614] netlink: 'syz.0.5676': attribute type 4 has an invalid length. [ 825.408818][T19613] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 825.523139][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 825.571651][ T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 825.604660][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.630000][ T10] usb 5-1: Product: syz [ 825.634189][ T10] usb 5-1: Manufacturer: syz [ 825.672688][ T10] usb 5-1: SerialNumber: syz [ 825.699392][ T10] usb 5-1: config 0 descriptor?? [ 825.889870][T19627] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5684'. [ 826.179970][ T10] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 826.205986][ T10] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 826.294856][ T10] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 826.324755][ T10] usb 5-1: USB disconnect, device number 34 [ 826.859237][T19628] loop0: detected capacity change from 0 to 32768 [ 826.909282][T19628] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 826.962666][T19658] loop2: detected capacity change from 0 to 512 [ 827.020949][T19639] loop1: detected capacity change from 0 to 32768 [ 827.083869][T19628] XFS (loop0): Ending clean mount [ 827.092071][T19639] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5689 (19639) [ 827.125222][T19628] XFS (loop0): Quotacheck needed: Please wait. [ 827.133712][T19658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 827.182840][T19639] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 827.231781][T19628] XFS (loop0): Quotacheck: Done. [ 827.242159][T19658] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 827.252822][T19639] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 827.274447][T19658] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 827.292872][T19658] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.5697: Failed to acquire dquot type 0 [ 827.531716][ T6053] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 827.541170][T19639] BTRFS info (device loop1): enabling ssd optimizations [ 827.565746][T19639] BTRFS info (device loop1): turning on async discard [ 827.572530][T19639] BTRFS info (device loop1): enabling free space tree [ 827.692793][ T6055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 827.847909][ T6066] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 828.303717][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 828.496289][ T9632] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 828.507525][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.547340][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 828.596529][ T10] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 828.624525][ T6176] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 828.624555][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.660084][ T10] usb 3-1: Product: syz [ 828.673796][ T10] usb 3-1: Manufacturer: syz [ 828.683658][ T9632] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 828.689264][ T10] usb 3-1: SerialNumber: syz [ 828.708775][ T10] usb 3-1: config 0 descriptor?? [ 828.710876][ T9632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.726752][ T9632] usb 2-1: Product: syz [ 828.730976][ T9632] usb 2-1: Manufacturer: syz [ 828.736997][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 828.737477][ T9632] usb 2-1: SerialNumber: syz [ 828.762261][ T9632] usb 2-1: config 0 descriptor?? [ 828.774327][ T5821] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 828.783081][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 828.817543][ T6176] usb 4-1: Using ep0 maxpacket: 32 [ 828.825542][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 828.833382][ T6176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 828.852051][ T6061] Bluetooth: hci6: urb ffff88803393ba00 submission failed (2) [ 828.871436][ T10] usb 3-1: media controller created [ 828.881357][ T6176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 828.919237][ T6176] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 828.924583][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 828.945388][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 828.991588][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.011509][ T6176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 829.044151][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 829.067795][ T6176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 829.101484][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 829.115251][T19721] loop0: detected capacity change from 0 to 1024 [ 829.129499][T19721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 829.145330][ T6176] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 829.161930][T12294] usb 2-1: USB disconnect, device number 120 [ 829.168101][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 829.175731][ T10] DVB: Unable to find symbol tda10046_attach() [ 829.182071][ T6176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.216557][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 829.223460][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 829.241280][ T6176] usb 4-1: Product: syz [ 829.246049][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 829.252342][ T6176] usb 4-1: Manufacturer: syz [ 829.283127][T19721] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 829.291779][ T6176] usb 4-1: SerialNumber: syz [ 829.298759][T19721] System zones: 0-1, 3-36 [ 829.308430][ T5821] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 829.316803][T19721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.331361][ T6176] usb 4-1: config 0 descriptor?? [ 829.337015][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 829.351399][T19708] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 829.365830][ T5821] usb 5-1: Product: syz [ 829.377178][ T6176] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55 [ 829.389986][ T5821] usb 5-1: Manufacturer: syz [ 829.401100][ T5821] usb 5-1: SerialNumber: syz [ 829.426964][ T5821] usb 5-1: config 0 descriptor?? [ 829.447808][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 829.498535][ T10] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 829.526489][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 829.565133][ T10] usb 3-1: USB disconnect, device number 15 [ 829.577453][ T6479] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 829.693291][T19729] loop5: detected capacity change from 0 to 512 [ 829.706062][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 829.717170][ T5821] radio-si470x 5-1:0.0: DeviceID=0xa58a ChipID=0xcee5 [ 829.720684][ T6053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.774667][T19729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.800132][T19708] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 829.849218][T19729] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.5720: corrupted xattr block 33: invalid ea_ino [ 829.899923][T19729] EXT4-fs (loop5): Remounting filesystem read-only [ 829.906850][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 829.922543][ T10] usb 4-1: USB disconnect, device number 32 [ 829.922585][ C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 829.953690][ T5821] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 829.963710][ T5821] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 829.972831][ T5821] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 829.996721][ T5821] usb 5-1: USB disconnect, device number 35 [ 830.094613][ T6059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.399373][ T30] audit: type=1326 audit(814.831:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19742 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96678f749 code=0x7ffc0000 [ 830.485483][ T30] audit: type=1326 audit(814.841:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19742 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fd96678f749 code=0x7ffc0000 [ 830.558228][ T30] audit: type=1326 audit(814.841:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19742 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96678f749 code=0x7ffc0000 [ 830.688147][ T30] audit: type=1326 audit(814.841:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19742 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96678f749 code=0x7ffc0000 [ 831.014175][T19763] loop5: detected capacity change from 0 to 64 [ 831.177765][T19769] loop0: detected capacity change from 0 to 512 [ 831.364180][T19769] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.5739: bad orphan inode 13 [ 831.407897][T19769] ext4_test_bit(bit=12, block=4) = 1 [ 831.435793][T19769] is_bad_inode(inode)=0 [ 831.478215][T19769] NEXT_ORPHAN(inode)=0 [ 831.524033][T19769] max_ino=32 [ 831.527275][T19769] i_nlink=1 [ 831.567869][T19769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.694380][T19769] EXT4-fs warning (device loop0): dx_probe:812: inode #2: comm syz.0.5739: Hash code is SIPHASH, but hash not in dirent [ 831.773064][T19769] EXT4-fs warning (device loop0): dx_probe:933: inode #2: comm syz.0.5739: Corrupt directory, running e2fsck is recommended [ 831.827520][T19769] EXT4-fs warning (device loop0): dx_probe:812: inode #2: comm syz.0.5739: Hash code is SIPHASH, but hash not in dirent [ 831.906549][T19769] EXT4-fs warning (device loop0): dx_probe:933: inode #2: comm syz.0.5739: Corrupt directory, running e2fsck is recommended [ 832.087408][T19759] loop1: detected capacity change from 0 to 32768 [ 832.125113][T19759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5734 (19759) [ 832.137244][ T6053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.220028][T19759] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 832.251627][T19759] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 832.283520][T19797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5753'. [ 832.292512][T19797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5753'. [ 832.556180][T19759] BTRFS info (device loop1): enabling ssd optimizations [ 832.576406][T19759] BTRFS info (device loop1): turning on async discard [ 832.576442][T19759] BTRFS info (device loop1): enabling free space tree [ 832.659245][T19824] loop3: detected capacity change from 0 to 256 [ 832.668702][T19827] loop4: detected capacity change from 0 to 512 [ 832.691145][T19824] exfat: Deprecated parameter 'namecase' [ 832.736432][T19824] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 832.789920][T19827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 832.836627][ T6066] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 833.004792][T19827] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 833.050402][T19827] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 833.091018][T19827] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.5756: Failed to acquire dquot type 0 [ 833.290604][ T6065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 833.666904][T19852] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 833.817765][T19854] loop2: detected capacity change from 0 to 1764 [ 833.996499][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 834.002864][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.116356][T19864] loop3: detected capacity change from 0 to 128 [ 834.167053][T19864] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 834.420341][ T30] audit: type=1326 audit(818.590:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19872 comm="syz.0.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 834.558045][ T30] audit: type=1326 audit(818.600:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19872 comm="syz.0.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 834.558125][ T30] audit: type=1326 audit(818.600:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19872 comm="syz.0.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 834.558195][ T30] audit: type=1326 audit(818.600:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19872 comm="syz.0.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 834.558266][ T30] audit: type=1326 audit(818.600:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19872 comm="syz.0.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 834.668012][T19880] loop3: detected capacity change from 0 to 256 [ 834.669529][T19880] exfat: Deprecated parameter 'utf8' [ 834.685036][T19880] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 834.752471][T19884] loop0: detected capacity change from 0 to 512 [ 834.800448][T19884] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 834.892344][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.899143][T19884] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 835.054038][ T30] audit: type=1326 audit(819.179:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19890 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 835.085590][T19884] EXT4-fs (loop0): 1 truncate cleaned up [ 835.124671][T19884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.170234][ T30] audit: type=1326 audit(819.189:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19890 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 835.230351][T19894] loop3: detected capacity change from 0 to 256 [ 835.241162][ T30] audit: type=1326 audit(819.189:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19890 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 835.357236][T19894] FAT-fs (loop3): Directory bread(block 64) failed [ 835.391226][T19894] FAT-fs (loop3): Directory bread(block 65) failed [ 835.422443][T19894] FAT-fs (loop3): Directory bread(block 66) failed [ 835.470477][T19894] FAT-fs (loop3): Directory bread(block 67) failed [ 835.477340][T19894] FAT-fs (loop3): Directory bread(block 68) failed [ 835.529768][ T6053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.556008][T19894] FAT-fs (loop3): Directory bread(block 69) failed [ 835.562633][T19894] FAT-fs (loop3): Directory bread(block 70) failed [ 835.640842][T19894] FAT-fs (loop3): Directory bread(block 71) failed [ 835.647463][T19894] FAT-fs (loop3): Directory bread(block 72) failed [ 835.696241][T19894] FAT-fs (loop3): Directory bread(block 73) failed [ 835.729238][T19911] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5800'. [ 836.073233][T19918] loop0: detected capacity change from 0 to 256 [ 836.100326][T19917] loop2: detected capacity change from 0 to 1024 [ 836.109654][T19918] exfat: Deprecated parameter 'utf8' [ 836.151639][T19917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 836.190808][T19918] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 836.257223][T19917] process 'syz.2.5802' launched './file2' with NULL argv: empty string added [ 836.608660][T19932] loop4: detected capacity change from 0 to 512 [ 836.669934][T19932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 836.738501][T19932] EXT4-fs (loop4): 1 truncate cleaned up [ 836.768923][T19932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.977511][T12294] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 837.052083][ T6065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.089658][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5816'. [ 837.124516][T19950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5815'. [ 837.156006][T12294] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 837.194139][T12294] usb 1-1: config 0 has no interface number 0 [ 837.235609][T12294] usb 1-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 837.266624][T12294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.296425][T12294] usb 1-1: Product: syz [ 837.309072][T12294] usb 1-1: Manufacturer: syz [ 837.330459][T12294] usb 1-1: SerialNumber: syz [ 837.373009][T12294] usb 1-1: config 0 descriptor?? [ 837.407697][T12294] qmi_wwan 1-1:0.172: bogus CDC Union: master=0, slave=0 [ 837.487073][T19958] loop5: detected capacity change from 0 to 16 [ 837.538361][T19958] erofs (device loop5): mounted with root inode @ nid 36. [ 837.662546][T12294] qmi_wwan 1-1:0.172: probe with driver qmi_wwan failed with error -22 [ 837.916134][ T10] usb 1-1: USB disconnect, device number 31 [ 837.987914][T19969] kAFS: unable to lookup cell '(' [ 838.284558][T19940] loop2: detected capacity change from 0 to 40427 [ 838.316226][T19940] F2FS-fs (loop2): invalid crc value [ 838.386523][T19977] loop1: detected capacity change from 0 to 2048 [ 838.394306][T19982] netlink: 'syz.5.5831': attribute type 1 has an invalid length. [ 838.464897][T19983] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 838.546581][T19977] NILFS (loop1): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 838.632515][T19977] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 838.639691][T19940] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 838.711023][T19977] Remounting filesystem read-only [ 838.719890][T19940] F2FS-fs (loop2): Start checkpoint disabled! [ 838.758804][T19977] NILFS (loop1): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 838.772778][T19940] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 838.802061][T19940] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 838.824586][T19977] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 838.876455][T19940] syz.2.5812: attempt to access beyond end of device [ 838.876455][T19940] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 838.884749][T19977] NILFS (loop1): error -5 truncating bmap (ino=16) [ 839.112831][ T6465] kworker/u8:18: attempt to access beyond end of device [ 839.112831][ T6465] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 839.137168][ T6066] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 839.163322][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 839.163370][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 839.163397][ T6465] Workqueue: writeback wb_workfn (flush-7:2) [ 839.163468][ T6465] Call Trace: [ 839.163481][ T6465] [ 839.163496][ T6465] dump_stack_lvl+0x16c/0x1f0 [ 839.163546][ T6465] f2fs_handle_critical_error+0x624/0x9f0 [ 839.163601][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.163648][ T6465] ? f2fs_build_fault_attr+0x53/0x1f0 [ 839.163707][ T6465] f2fs_write_end_io+0x958/0xcf0 [ 839.163767][ T6465] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 839.163828][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.163884][ T6465] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 839.163938][ T6465] bio_endio+0x6e6/0x830 [ 839.164004][ T6465] submit_bio_noacct+0x306/0x1f40 [ 839.164065][ T6465] __submit_merged_bio+0x33c/0x710 [ 839.164126][ T6465] __submit_merged_write_cond+0x319/0x3f0 [ 839.164194][ T6465] f2fs_write_cache_pages+0x2075/0x2570 [ 839.164285][ T6465] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 839.164353][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.164400][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.164445][ T6465] ? find_held_lock+0x2b/0x80 [ 839.164483][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.164534][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.164579][ T6465] ? do_raw_spin_unlock+0x172/0x230 [ 839.164653][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.164704][ T6465] ? f2fs_available_free_memory+0x279/0xa30 [ 839.164821][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.164875][ T6465] f2fs_write_data_pages+0x4ad/0xd90 [ 839.164947][ T6465] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 839.165027][ T6465] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 839.165093][ T6465] do_writepages+0x27a/0x600 [ 839.165158][ T6465] ? __pfx_do_writepages+0x10/0x10 [ 839.165219][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.165264][ T6465] ? reacquire_held_locks+0xcd/0x1f0 [ 839.165320][ T6465] __writeback_single_inode+0x168/0x14a0 [ 839.165380][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.165424][ T6465] ? do_raw_spin_lock+0x12c/0x2b0 [ 839.165477][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.165529][ T6465] ? __pfx___writeback_single_inode+0x10/0x10 [ 839.165593][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.165646][ T6465] writeback_sb_inodes+0x795/0x1de0 [ 839.165733][ T6465] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 839.165791][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.165837][ T6465] ? find_held_lock+0x2b/0x80 [ 839.165936][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.165987][ T6465] ? rcu_is_watching+0x12/0xc0 [ 839.166026][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.166071][ T6465] ? queue_io+0x3f6/0x4f0 [ 839.166130][ T6465] wb_writeback+0x419/0xae0 [ 839.166199][ T6465] ? __pfx_wb_writeback+0x10/0x10 [ 839.166255][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.166312][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.166358][ T6465] ? mark_held_locks+0x49/0x80 [ 839.166414][ T6465] wb_workfn+0x14d/0xbb0 [ 839.166479][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.166524][ T6465] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 839.166573][ T6465] ? __pfx_wb_workfn+0x10/0x10 [ 839.166638][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.166694][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.166745][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.166790][ T6465] ? rcu_is_watching+0x12/0xc0 [ 839.166837][ T6465] process_one_work+0x9ba/0x1b20 [ 839.166908][ T6465] ? __pfx_process_one_work+0x10/0x10 [ 839.166961][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.167018][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.167064][ T6465] ? assign_work+0x1a0/0x250 [ 839.167117][ T6465] worker_thread+0x6c8/0xf10 [ 839.167180][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.167228][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.167273][ T6465] ? __kthread_parkme+0x19e/0x250 [ 839.167310][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.167359][ T6465] ? __pfx_worker_thread+0x10/0x10 [ 839.167411][ T6465] kthread+0x3c5/0x780 [ 839.167459][ T6465] ? __pfx_kthread+0x10/0x10 [ 839.167509][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.167554][ T6465] ? rcu_is_watching+0x12/0xc0 [ 839.167594][ T6465] ? __pfx_kthread+0x10/0x10 [ 839.167643][ T6465] ret_from_fork+0x855/0xa50 [ 839.167689][ T6465] ? __pfx_ret_from_fork+0x10/0x10 [ 839.167731][ T6465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.167777][ T6465] ? __switch_to+0x7af/0x10d0 [ 839.167824][ T6465] ? __pfx_kthread+0x10/0x10 [ 839.167874][ T6465] ret_from_fork_asm+0x1a/0x30 [ 839.167954][ T6465] [ 839.169482][ T6465] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 839.231449][T19994] loop5: detected capacity change from 0 to 4096 [ 839.762931][T20003] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 840.425046][T19992] loop4: detected capacity change from 0 to 32768 [ 840.531369][T19992] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5835 (19992) [ 840.579607][T20022] PKCS8: Unsupported PKCS#8 version [ 840.655512][T19992] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 840.705796][T19992] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 840.821598][T20037] netlink: 'syz.3.5851': attribute type 39 has an invalid length. [ 840.892062][ T977] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 840.957086][T19992] BTRFS info (device loop4): enabling ssd optimizations [ 840.966954][T19992] BTRFS info (device loop4): turning on async discard [ 840.973741][T19992] BTRFS info (device loop4): enabling free space tree [ 841.102543][ T977] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 841.138609][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.154236][ T977] usb 6-1: Product: syz [ 841.181927][ T977] usb 6-1: Manufacturer: syz [ 841.200516][ T977] usb 6-1: SerialNumber: syz [ 841.237426][ T6065] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 841.248856][ T977] usb 6-1: config 0 descriptor?? [ 841.326717][ T6061] Bluetooth: hci6: urb ffff88803186cf00 submission failed (2) [ 841.512640][T20058] dlm: no locking on control device [ 841.638378][ T5821] usb 6-1: USB disconnect, device number 21 [ 842.178075][T20081] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5869'. [ 842.217695][T20081] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5869'. [ 842.252587][T20079] tc_dump_action: action bad kind [ 842.322790][T20085] loop3: detected capacity change from 0 to 1024 [ 842.358300][T20085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 842.417375][T20085] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 842.497985][T20085] System zones: 0-1, 3-36 [ 842.571955][T20085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.586087][T20093] loop4: detected capacity change from 0 to 256 [ 842.750963][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5877'. [ 842.801496][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5877'. [ 842.843972][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.006727][T20104] sit0: entered promiscuous mode [ 843.053778][T20104] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5882'. [ 843.879575][T20133] loop2: detected capacity change from 0 to 1024 [ 843.987153][T20133] hfsplus: can't free extent: start 134, count 1 [ 844.442076][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5907'. [ 844.991981][T20173] loop3: detected capacity change from 0 to 1024 [ 845.272131][ T1112] hfsplus: b-tree write err: -5, ino 8 [ 845.358029][T20137] loop5: detected capacity change from 0 to 32768 [ 845.495719][T20191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.535772][T20194] loop3: detected capacity change from 0 to 128 [ 845.575313][T20137] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 845.628470][T20194] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 845.694426][T20137] XFS (loop5): Ending clean mount [ 845.698285][T20137] XFS (loop5): Quotacheck needed: Please wait. [ 845.762815][T20194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 845.805317][T20137] XFS (loop5): Quotacheck: Done. [ 846.068656][T20209] netlink: 'syz.0.5929': attribute type 2 has an invalid length. [ 846.087352][ T6059] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 846.378621][ T977] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 846.581893][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.600246][ T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 846.643979][ T977] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 846.704542][ T977] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 846.733556][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.741566][ T977] usb 3-1: Product: syz [ 846.789817][ T977] usb 3-1: Manufacturer: syz [ 846.794443][ T977] usb 3-1: SerialNumber: syz [ 846.859821][ T977] usb 3-1: config 0 descriptor?? [ 846.916420][ T977] uvcvideo 3-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 846.923692][ T977] uvcvideo 3-1:0.0: No valid video chain found. [ 846.956903][T20235] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5942'. [ 847.131887][T12294] usb 3-1: USB disconnect, device number 16 [ 847.523035][T20257] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 847.761183][T20264] cgroup: release_agent respecified [ 848.455516][T20247] loop4: detected capacity change from 0 to 32768 [ 848.500230][T20247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5948 (20247) [ 848.557609][T20247] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 848.574956][T20288] loop3: detected capacity change from 0 to 1024 [ 848.615446][T20247] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 848.709739][T20295] loop5: detected capacity change from 0 to 1024 [ 848.737941][T20288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.846769][T20295] hfsplus: can't free extent: start 134, count 1 [ 848.856184][T20247] BTRFS info (device loop4): enabling ssd optimizations [ 848.856222][T20247] BTRFS info (device loop4): turning on async discard [ 848.856253][T20247] BTRFS info (device loop4): enabling free space tree [ 849.060909][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.069936][ T6065] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 849.441029][T20271] loop1: detected capacity change from 0 to 32768 [ 849.558445][T20271] XFS (loop1): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 849.750571][ T6066] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 850.090215][T20350] loop3: detected capacity change from 0 to 64 [ 851.623081][T20340] loop2: detected capacity change from 0 to 32768 [ 851.677873][T20340] find_entry called with index >= next_index [ 851.708358][T20340] find_entry called with index >= next_index [ 851.739721][T20340] find_entry called with index >= next_index [ 851.772100][T20386] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6004'. [ 851.827504][T20348] loop5: detected capacity change from 0 to 40427 [ 851.897977][T20348] F2FS-fs (loop5): build fault injection rate: 25 [ 851.948169][T20348] F2FS-fs (loop5): build fault injection type: 0x7698c [ 852.002216][T20348] F2FS-fs (loop5): invalid crc value [ 852.056852][T20348] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_build_segment_manager+0x4b50/0xa3a0 [ 852.128541][T20348] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x207/0xfe0 [ 852.515933][T20348] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 852.579979][T20348] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 852.739582][T20348] F2FS-fs (loop5): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0x1e2/0x240 [ 852.953266][T20415] 9p: Unknown access argument o: -22 [ 852.963001][ T6059] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x608/0x29d0 [ 852.981153][T12294] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 852.985214][ T6059] F2FS-fs (loop5): invalid blkaddr: 513, type: 10, run fsck to fix. [ 853.159321][T12294] usb 1-1: Using ep0 maxpacket: 16 [ 853.161544][T12294] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 853.161649][T12294] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 853.161690][T12294] usb 1-1: config 1 has no interface number 1 [ 853.161763][T12294] usb 1-1: config 1 interface 105 altsetting 2 has an endpoint descriptor with address 0x24, changing to 0x4 [ 853.161812][T12294] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 853.161859][T12294] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.161911][T12294] usb 1-1: config 1 interface 105 has no altsetting 0 [ 853.164665][T12294] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 853.164711][T12294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.164750][T12294] usb 1-1: Product: syz [ 853.164778][T12294] usb 1-1: Manufacturer: syz [ 853.164808][T12294] usb 1-1: SerialNumber: syz [ 853.180407][T20409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 853.399995][T20429] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 853.443822][T12294] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 853.642550][T20433] xt_ecn: cannot match TCP bits for non-tcp packets [ 853.671194][T12294] usb 1-1: USB disconnect, device number 32 [ 853.820420][T20440] netlink: 'syz.1.6030': attribute type 10 has an invalid length. [ 853.983503][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6031'. [ 854.325045][T20454] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 854.378307][T20456] loop4: detected capacity change from 0 to 1024 [ 854.473702][T20456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.515760][T20463] loop0: detected capacity change from 0 to 256 [ 854.542146][T20463] exfat: Deprecated parameter 'namecase' [ 854.604752][T20463] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011fc0, chksum : 0xea22d69b, utbl_chksum : 0xe619d30d) [ 854.696220][T20463] fuse: Bad value for 'fd' [ 854.699522][T20469] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 854.708350][T20469] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 854.779168][T20469] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 854.802214][ T6065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.840302][T20469] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 854.848033][T20469] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 854.905752][T20469] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 854.920982][T20469] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 854.988956][T20469] netlink: 'syz.5.6042': attribute type 1 has an invalid length. [ 855.512380][T20495] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6055'. [ 855.512468][T20495] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 855.654342][T20501] loop3: detected capacity change from 0 to 16 [ 855.696240][T20501] erofs (device loop3): mounted with root inode @ nid 36. [ 855.742435][T20501] erofs (device loop3): corrupted dir block 0 @ nid 36 [ 855.932745][T20507] loop4: detected capacity change from 0 to 164 [ 856.072843][T20517] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 856.292551][T20520] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 856.319623][ C1] sd 0:0:1:0: [sda] tag#3101 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 856.330080][ C1] sd 0:0:1:0: [sda] tag#3101 CDB: Read(6) 08 00 00 00 02 00 00 00 06 00 00 00 [ 857.137451][T20551] loop4: detected capacity change from 0 to 256 [ 857.571255][T20564] loop4: detected capacity change from 0 to 1764 [ 857.661113][T20572] loop5: detected capacity change from 0 to 1024 [ 857.685180][T20572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 857.795691][T20572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.849499][T20578] loop3: detected capacity change from 0 to 1024 [ 857.858317][T20581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6097'. [ 858.014219][ T6059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.151810][T20590] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6102'. [ 858.199903][T20584] loop4: detected capacity change from 0 to 4096 [ 858.238690][T20584] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 858.316539][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6103'. [ 858.348136][T20584] ntfs3(loop4): ino=19, mi_enum_attr [ 858.353443][T20584] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 858.421387][T20598] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6104'. [ 858.510619][T20584] ntfs3(loop4): failed to convert "c46c" to euc-jp [ 858.578290][T20584] ntfs3(loop4): ino=20, mi_enum_attr [ 858.899571][T20611] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6112'. [ 859.080487][T20614] loop2: detected capacity change from 0 to 2048 [ 859.146522][T20614] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 859.335681][T20620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 860.058879][T20643] loop0: detected capacity change from 0 to 4096 [ 860.162719][T20643] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 860.248264][T20656] loop4: detected capacity change from 0 to 64 [ 860.329065][T20658] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 860.446142][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6134'. [ 860.561338][ T6053] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22. [ 860.752875][ T977] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 860.977486][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 860.991248][ T977] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 861.028821][ T977] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 861.063023][ T977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 861.080776][T20682] loop1: detected capacity change from 0 to 16 [ 861.099138][ T977] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 861.120138][T20682] erofs (device loop1): mounted with root inode @ nid 36. [ 861.130558][ T977] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 861.153854][ T977] usb 4-1: Product: syz [ 861.158050][ T977] usb 4-1: Manufacturer: syz [ 861.202497][ T977] usb 4-1: SerialNumber: syz [ 861.235151][ T977] usb 4-1: config 0 descriptor?? [ 861.466609][ T977] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 861.507775][ T977] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 861.562555][ T977] usb 4-1: USB disconnect, device number 33 [ 861.567047][T20698] loop4: detected capacity change from 0 to 256 [ 861.580338][T20692] loop5: detected capacity change from 0 to 2048 [ 861.591714][T20698] exfat: Deprecated parameter 'namecase' [ 861.624040][T20698] exfat: Deprecated parameter 'namecase' [ 861.637036][T20698] exfat: Deprecated parameter 'namecase' [ 861.670659][T20698] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 861.691627][T20692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.771658][T20698] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 861.969162][ T6059] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.149050][T20710] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 862.343541][T20718] Cannot find set identified by id 0 to match [ 862.577437][T20726] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.6165'. [ 862.630080][T20729] loop2: detected capacity change from 0 to 16 [ 862.655175][T20729] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 863.288640][ T6176] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 863.449993][T20750] loop4: detected capacity change from 0 to 16 [ 863.475230][T20750] erofs (device loop4): mounted with root inode @ nid 36. [ 863.490863][ T6176] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 863.499953][ T6176] usb 4-1: config 1 has no interface number 0 [ 863.534478][ T6176] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 863.567705][ T6176] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 863.577546][T20748] loop2: detected capacity change from 0 to 4096 [ 863.619007][ T6176] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.679680][ T6176] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 863.701986][ T6176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.715261][T20748] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 863.739821][ T6176] usb 4-1: Product: syz [ 863.762230][ T6176] usb 4-1: Manufacturer: syz [ 863.780214][ T6176] usb 4-1: SerialNumber: syz [ 863.812257][T20738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 863.848400][T20724] loop0: detected capacity change from 0 to 32768 [ 863.900406][T20730] loop1: detected capacity change from 0 to 32768 [ 863.935911][T20730] BTRFS warning: excessive commit interval 2147483648, use with care [ 863.945110][T20730] btrfs: Deprecated parameter 'usebackuproot' [ 863.951774][T20730] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 863.961521][T20754] netlink: 'syz.4.6179': attribute type 21 has an invalid length. [ 863.972978][T20730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6166 (20730) [ 864.001817][T20724] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 864.006757][T20754] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6179'. [ 864.027151][ T6055] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 864.065768][T20738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 864.069210][T20730] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 864.110827][T20724] XFS (loop0): Ending clean mount [ 864.121329][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6179'. [ 864.174511][T20730] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 864.189201][T20766] loop2: detected capacity change from 0 to 256 [ 864.220525][ T6053] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 864.253658][T20766] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 864.313861][ T6176] usb 4-1: Incompatible driver and firmware versions [ 864.344281][ T6176] usb 4-1: USB disconnect, device number 34 [ 864.518018][ T2982] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 864.678213][T20730] BTRFS error (device loop1): failed to load root extent [ 864.736228][T20730] BTRFS warning (device loop1): try to load backup roots slot 1 [ 864.761050][ T3553] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 864.881244][T20730] BTRFS warning (device loop1): couldn't read tree root [ 864.888255][T20730] BTRFS warning (device loop1): try to load backup roots slot 2 [ 864.967150][ T3553] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 865.010433][T20790] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6185'. [ 865.019703][T20730] BTRFS warning (device loop1): couldn't read tree root [ 865.055375][T20730] BTRFS warning (device loop1): try to load backup roots slot 3 [ 865.195544][T20730] BTRFS info (device loop1): rebuilding free space tree [ 865.280224][T20730] BTRFS info (device loop1): checking UUID tree [ 865.332255][T20730] BTRFS info (device loop1): enabling ssd optimizations [ 865.339248][T20730] BTRFS info (device loop1): using spread ssd allocation scheme [ 865.405358][T20730] BTRFS info (device loop1): turning off barriers [ 865.460368][T20730] BTRFS info (device loop1): turning on flush-on-commit [ 865.467374][T20730] BTRFS info (device loop1): turning on async discard [ 865.565708][T20730] BTRFS info (device loop1): enabling free space tree [ 865.575002][T20730] BTRFS info (device loop1): force clearing of disk cache [ 865.606100][T20730] BTRFS info (device loop1): enabling auto defrag [ 865.634960][T20809] netlink: 'syz.5.6194': attribute type 1 has an invalid length. [ 865.640521][T20730] BTRFS info (device loop1): trying to use backup root at mount time [ 866.053725][ T6066] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 866.099298][T20822] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6201'. [ 866.292222][T20824] loop4: detected capacity change from 0 to 512 [ 866.378537][T20824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 866.402035][T20824] EXT4-fs (loop4): 1 truncate cleaned up [ 866.411959][T20824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.566203][T20824] EXT4-fs error (device loop4): ext4_generic_delete_entry:2667: inode #2: block 13: comm syz.4.6202: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 866.654234][T20824] EXT4-fs (loop4): Remounting filesystem read-only [ 866.710091][T20824] EXT4-fs warning (device loop4): ext4_rename_delete:3729: inode #2: comm syz.4.6202: Deleting old file: nlink 4, error=-117 [ 866.848272][T20843] loop3: detected capacity change from 0 to 128 [ 866.876779][T20843] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 866.946735][T20843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 866.989483][T20846] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.6212'. [ 866.998634][T20846] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 867.013265][ T6065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.657235][T20870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6222'. [ 868.333107][T20885] loop4: detected capacity change from 0 to 4096 [ 868.427357][T20895] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6236'. [ 868.462553][T20895] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6236'. [ 868.496184][T20895] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6236'. [ 868.750747][T20904] loop1: detected capacity change from 0 to 1024 [ 868.773769][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6242'. [ 868.861854][ T6176] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 868.982975][T20908] veth3: entered promiscuous mode [ 869.045091][ T6176] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 869.071833][ T6176] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 869.112956][ T6176] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 869.180716][ T6176] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 869.220245][ T6176] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 869.280468][ T6176] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.306249][ T6176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 869.351857][ T6176] usb 6-1: SerialNumber: syz [ 869.833265][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6256'. [ 869.876053][T20936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6256'. [ 870.264985][ T6176] usb 6-1: USB disconnect, device number 22 [ 870.648266][T20960] loop2: detected capacity change from 0 to 1024 [ 870.648437][T20922] loop0: detected capacity change from 0 to 32768 [ 870.688902][T20960] hfsplus: Filesystem is marked locked, mounting read-only. [ 870.798470][T20922] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 870.836072][T20960] hfsplus: filesystem is marked locked, leaving read-only. [ 870.925701][T20971] loop4: detected capacity change from 0 to 2048 [ 870.976116][T20922] XFS (loop0): Ending clean mount [ 870.988001][T20971] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.015256][T20922] XFS (loop0): Quotacheck needed: Please wait. [ 871.060519][T20922] XFS (loop0): Quotacheck: Done. [ 871.081539][T20922] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 871.523010][ T9632] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 871.615811][T20990] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6279'. [ 871.680309][T20992] loop2: detected capacity change from 0 to 1024 [ 871.726503][ T9632] usb 6-1: Using ep0 maxpacket: 16 [ 871.738263][ T9632] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.791655][ T9632] usb 6-1: config 0 interface 0 has no altsetting 0 [ 871.840401][ T9632] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 871.918649][ T9632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.926727][ T9632] usb 6-1: Product: syz [ 871.964726][ T9632] usb 6-1: Manufacturer: syz [ 871.973096][ T9632] usb 6-1: SerialNumber: syz [ 871.989831][ T9632] usb 6-1: config 0 descriptor?? [ 872.616179][ T10] usb 6-1: USB disconnect, device number 23 [ 873.115723][T21034] xt_CONNSECMARK: invalid mode: 66 [ 873.290854][T21005] loop2: detected capacity change from 0 to 32768 [ 873.329274][T21040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 873.404747][T21005] JBD2: Ignoring recovery information on journal [ 873.517147][T21005] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 873.535569][T21046] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6306'. [ 873.583513][T21048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6307'. [ 873.619435][ T9632] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 873.812144][ T9632] usb 1-1: Using ep0 maxpacket: 16 [ 873.839126][ T9632] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 873.883483][ T9632] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 873.955224][ T9632] usb 1-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=88.56 [ 873.981538][ T9632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.010968][T21061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6313'. [ 874.018812][ T9632] usb 1-1: Product: syz [ 874.031872][ T9632] usb 1-1: Manufacturer: syz [ 874.046982][ T9632] usb 1-1: SerialNumber: syz [ 874.111557][ T6055] ocfs2: Unmounting device (7,2) on (node local) [ 874.268976][T21065] netlink: 'syz.3.6316': attribute type 9 has an invalid length. [ 874.346917][ T9632] ums-cypress 1-1:2.0: USB Mass Storage device detected [ 874.391178][T21069] loop4: detected capacity change from 0 to 256 [ 874.470363][T21069] FAT-fs (loop4): Directory bread(block 64) failed [ 874.536141][T21069] FAT-fs (loop4): Directory bread(block 65) failed [ 874.549948][ T9632] usb 1-1: USB disconnect, device number 33 [ 874.605013][T21069] FAT-fs (loop4): Directory bread(block 66) failed [ 874.611599][T21069] FAT-fs (loop4): Directory bread(block 67) failed [ 874.669759][T21069] FAT-fs (loop4): Directory bread(block 68) failed [ 874.676346][T21069] FAT-fs (loop4): Directory bread(block 69) failed [ 874.711499][T21069] FAT-fs (loop4): Directory bread(block 70) failed [ 874.738298][T21069] FAT-fs (loop4): Directory bread(block 71) failed [ 874.754629][T21078] netlink: zone id is out of range [ 874.760072][T21069] FAT-fs (loop4): Directory bread(block 72) failed [ 874.766853][T21078] netlink: zone id is out of range [ 874.768382][T21073] loop1: detected capacity change from 0 to 4096 [ 874.772187][T21069] FAT-fs (loop4): Directory bread(block 73) failed [ 874.785466][T21078] netlink: zone id is out of range [ 874.790596][T21078] netlink: zone id is out of range [ 874.805314][T21078] netlink: zone id is out of range [ 874.820489][T21078] netlink: zone id is out of range [ 874.844406][T21078] netlink: zone id is out of range [ 874.871006][T21078] netlink: zone id is out of range [ 874.888079][T21078] netlink: zone id is out of range [ 874.920090][T21078] netlink: zone id is out of range [ 874.964342][T21081] netlink: 'syz.5.6322': attribute type 1 has an invalid length. [ 874.980100][T21079] loop2: detected capacity change from 0 to 4096 [ 875.020837][T21079] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 875.179338][T21079] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 875.234132][T21079] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 875.319661][T21085] loop0: detected capacity change from 0 to 1024 [ 875.397293][T21085] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 875.489782][T21085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.694641][ T743] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 875.734852][ T6055] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 875.780045][ T6055] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 875.806631][ T6055] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 875.837819][ T743] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 875.852137][ T6053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.225204][T21111] loop4: detected capacity change from 0 to 512 [ 876.330801][T21111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.427685][T21111] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 876.501152][T21116] loop5: detected capacity change from 0 to 4096 [ 876.523147][T21116] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 876.623488][ T6065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.774728][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 876.950066][T21134] netlink: 'syz.1.6346': attribute type 6 has an invalid length. [ 877.000675][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 877.032913][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 877.069022][ T10] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 877.124433][ T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=88.56 [ 877.157842][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.190227][ T10] usb 3-1: Product: syz [ 877.205187][ T10] usb 3-1: Manufacturer: syz [ 877.209814][ T10] usb 3-1: SerialNumber: syz [ 877.446192][T21152] tmpfs: Bad value for 'mpol' [ 877.559738][ T10] ums-cypress 3-1:2.0: USB Mass Storage device detected [ 877.674202][ T10] usb 3-1: USB disconnect, device number 17 [ 877.748939][T21162] misc userio: No port type given on /dev/userio [ 877.826316][T21166] netlink: 'syz.0.6361': attribute type 12 has an invalid length. [ 878.041832][ T977] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 878.054822][T21173] loop3: detected capacity change from 0 to 1024 [ 878.079101][T21173] hfsplus: Filesystem is marked locked, mounting read-only. [ 878.136446][T21173] hfsplus: invalid catalog entry type in lookup [ 878.218206][T21176] PM: Enabling pm_trace changes system date and time during resume. [ 878.218206][T21176] PM: Correct system time has to be restored manually after resume. [ 878.229560][ T977] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 878.269358][ T977] usb 5-1: config 0 has no interface number 0 [ 878.289492][ T977] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 878.349797][ T977] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 878.390367][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.411115][ T977] usb 5-1: Product: syz [ 878.441112][ T977] usb 5-1: Manufacturer: syz [ 878.460618][ T977] usb 5-1: SerialNumber: syz [ 878.478090][ T977] usb 5-1: config 0 descriptor?? [ 878.509639][ T977] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 878.831238][ C0] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 879.047197][T12294] usb 5-1: USB disconnect, device number 36 [ 879.074646][T12294] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 879.248473][T21205] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 879.533669][ T6176] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 879.659093][T21188] loop1: detected capacity change from 0 to 32768 [ 879.731792][ T6176] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 879.747644][ T977] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 879.756081][ T6176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.765414][T21188] JBD2: Ignoring recovery information on journal [ 879.780841][ T6176] usb 1-1: Product: syz [ 879.785021][ T6176] usb 1-1: Manufacturer: syz [ 879.789697][ T6176] usb 1-1: SerialNumber: syz [ 879.802209][ T6176] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 879.871324][T21226] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6387'. [ 879.874710][T12294] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 879.918601][T21188] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 879.985447][ T977] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 880.026672][ T977] usb 6-1: config 1 has no interface number 0 [ 880.043703][ T977] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 880.117080][ T977] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 880.154231][ T977] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.182702][ T977] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 880.202857][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.228786][ T977] usb 6-1: Product: syz [ 880.232961][ T977] usb 6-1: Manufacturer: syz [ 880.264043][ T977] usb 6-1: SerialNumber: syz [ 880.274957][T21233] loop4: detected capacity change from 0 to 512 [ 880.296414][T21215] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 880.328279][ T6066] ocfs2: Unmounting device (7,1) on (node local) [ 880.361718][T21233] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 880.465464][ T10] usb 1-1: USB disconnect, device number 34 [ 880.565401][T21215] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 880.832250][ T977] usb 6-1: Incompatible driver and firmware versions [ 880.876307][ T977] usb 6-1: USB disconnect, device number 24 [ 880.945336][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6398'. [ 880.991560][T21245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6398'. [ 881.021326][T12294] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 881.046308][T12294] ath9k_htc: Failed to initialize the device [ 881.076201][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 881.319735][ T9632] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 881.511593][ T9632] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 881.548475][ T9632] usb 5-1: config 5 has no interface number 0 [ 881.581736][ T9632] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 881.627716][ T9632] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 881.672626][ T9632] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 881.715492][ T9632] usb 5-1: config 5 interface 123 has no altsetting 0 [ 881.750658][ T9632] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 881.790364][ T9632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.800970][ T9632] usb 5-1: Product: syz [ 881.805152][ T9632] usb 5-1: Manufacturer: syz [ 881.809757][ T9632] usb 5-1: SerialNumber: syz [ 882.028436][T21283] loop3: detected capacity change from 0 to 16 [ 882.077880][T21283] erofs (device loop3): unidentified incompatible feature 600, please upgrade kernel [ 882.154535][ T9632] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 882.187495][ T9632] usb 5-1: USB disconnect, device number 37 [ 882.683179][T21295] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 882.757461][T21298] loop1: detected capacity change from 0 to 2048 [ 882.758988][T21271] loop0: detected capacity change from 0 to 32768 [ 882.824210][T21271] JBD2: Ignoring recovery information on journal [ 882.860255][T21298] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 882.956544][T21298] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 882.968516][T21298] UDF-fs: Scanning with blocksize 512 failed [ 883.019362][T21298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.075590][T21271] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 883.669078][ T6053] ocfs2: Unmounting device (7,0) on (node local) [ 884.489386][T21344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6444'. [ 884.543430][T21346] CIFS: iocharset name too long [ 884.573137][T21348] netlink: 'syz.4.6446': attribute type 10 has an invalid length. [ 884.606335][T21348] hsr0: entered promiscuous mode [ 884.668219][T21348] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 884.753842][T21348] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 884.817281][T21348] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 885.457986][T21379] ksmbd: Unknown IPC event: 1, ignore. [ 885.881898][T21393] netlink: 'syz.1.6467': attribute type 10 has an invalid length. [ 885.919411][T21393] hsr0: entered promiscuous mode [ 885.951337][T21393] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 886.006983][T21393] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 886.047513][T21393] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 886.657755][T21421] xt_hashlimit: size too large, truncated to 1048576 [ 886.683076][T21421] xt_hashlimit: max too large, truncated to 1048576 [ 886.924252][ T977] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 887.108126][ T977] usb 6-1: config 0 has an invalid interface number: 3 but max is 2 [ 887.148615][ T977] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 887.175252][ T977] usb 6-1: config 0 has no interface number 1 [ 887.193566][ T977] usb 6-1: config 0 has no interface number 2 [ 887.213652][ T977] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 887.244469][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.302498][ T977] usb 6-1: config 0 descriptor?? [ 887.382568][T21439] loop4: detected capacity change from 0 to 4096 [ 887.510498][T21439] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 887.541423][ T977] usb 6-1: Could not set interface, error -71 [ 887.553625][T21439] ntfs3(loop4): Failed to load $Extend (-22). [ 887.558593][T21453] loop1: detected capacity change from 0 to 128 [ 887.570786][T21439] ntfs3(loop4): Failed to initialize $Extend. [ 887.585808][T21454] netlink: 'syz.3.6495': attribute type 6 has an invalid length. [ 887.594346][ T977] usb 6-1: USB disconnect, device number 25 [ 888.020069][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 888.020096][ T30] audit: type=1326 audit(868.716:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.1.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd360d8f749 code=0x7ffc0000 [ 888.148678][ T30] audit: type=1326 audit(868.744:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.1.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd360d8f749 code=0x7ffc0000 [ 888.268765][ T30] audit: type=1326 audit(868.762:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.1.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fd360d8f749 code=0x7ffc0000 [ 888.374355][ T30] audit: type=1326 audit(868.762:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.1.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd360d8f749 code=0x7ffc0000 [ 888.465733][ T30] audit: type=1326 audit(868.762:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.1.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd360d8f749 code=0x7ffc0000 [ 888.704517][T21480] net_ratelimit: 2 callbacks suppressed [ 888.704545][T21480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.090365][T21494] loop4: detected capacity change from 0 to 128 [ 889.115832][T21496] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6515'. [ 889.131218][T21494] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 889.191674][T21496] bond_slave_0: entered promiscuous mode [ 889.197828][T21496] bond_slave_1: entered promiscuous mode [ 889.382846][T21459] loop3: detected capacity change from 0 to 32768 [ 889.474858][T21459] [ 889.474858][T21459] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 889.474858][T21459] [ 889.561121][T21459] [ 889.561121][T21459] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 889.561121][T21459] [ 889.611973][T21459] [ 889.611973][T21459] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 889.611973][T21459] [ 889.629241][ T30] audit: type=1326 audit(870.212:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21504 comm="syz.0.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 889.705567][ T111] [ 889.705567][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 889.705567][ T111] [ 889.769075][ T30] audit: type=1326 audit(870.240:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21504 comm="syz.0.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 889.815185][ T6057] [ 889.815185][ T6057] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 889.815185][ T6057] [ 889.837166][ T30] audit: type=1326 audit(870.240:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21504 comm="syz.0.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 889.880781][ T6057] [ 889.880781][ T6057] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 889.880781][ T6057] [ 889.983962][ T30] audit: type=1326 audit(870.249:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21504 comm="syz.0.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 890.088521][ T30] audit: type=1326 audit(870.249:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21504 comm="syz.0.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac5b8f749 code=0x7ffc0000 [ 890.431372][T21525] loop4: detected capacity change from 0 to 128 [ 890.463235][T21525] EXT4-fs: Ignoring removed orlov option [ 890.592479][T21525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 890.628786][T21490] loop2: detected capacity change from 0 to 32768 [ 890.640805][T21525] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:104: comm syz.4.6531: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 890.777022][T21490] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 890.909649][T21490] (syz.2.6514,21490,1):ocfs2_symlink:2080 ERROR: status = -2 [ 891.327041][ T6065] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 891.349873][ T6055] (syz-executor,6055,0):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode. [ 891.472380][ T6055] ocfs2: Unmounting device (7,2) on (node local) [ 891.885368][T21560] netlink: 'syz.1.6544': attribute type 1 has an invalid length. [ 892.597866][T21587] netlink: 'syz.2.6557': attribute type 64 has an invalid length. [ 892.637620][T21587] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6557'. [ 892.890862][T21597] loop5: detected capacity change from 0 to 164 [ 892.939404][T21597] ISOFS: unable to read i-node block [ 892.959911][T21597] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 893.116889][ T6061] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 893.428881][T21613] netlink: 'syz.4.6570': attribute type 10 has an invalid length. [ 893.475096][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 893.475122][ T30] audit: type=1326 audit(873.811:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21614 comm="syz.3.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283ab8f749 code=0x7ffc0000 [ 893.491126][ T9632] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 893.526210][T21613] team0: Cannot enslave team device to itself [ 893.548259][ T30] audit: type=1326 audit(873.821:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21614 comm="syz.3.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f283ab8f749 code=0x7ffc0000 [ 893.570932][ T30] audit: type=1326 audit(873.821:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21614 comm="syz.3.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283ab8f749 code=0x7ffc0000 [ 893.617448][ T30] audit: type=1326 audit(873.821:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21614 comm="syz.3.6571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283ab8f749 code=0x7ffc0000 [ 893.695029][ T9632] usb 1-1: Using ep0 maxpacket: 16 [ 893.702587][ T9632] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 893.712130][ T9632] usb 1-1: config 0 has no interface number 0 [ 893.726178][ T9632] usb 1-1: config 0 interface 237 has no altsetting 0 [ 893.742345][T21617] loop2: detected capacity change from 0 to 4096 [ 893.773166][ T9632] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 893.798455][ T9632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.818674][ T9632] usb 1-1: Product: syz [ 893.836637][ T9632] usb 1-1: Manufacturer: syz [ 893.844578][ T9632] usb 1-1: SerialNumber: syz [ 893.855857][T21624] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 893.882666][ T9632] usb 1-1: config 0 descriptor?? [ 893.914021][ T9632] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 found [ 894.139685][ T9632] snd_usb_podhd 1-1:0.237: cannot get proper max packet size [ 894.156563][ T9632] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 now disconnected [ 894.179256][ T9632] snd_usb_podhd 1-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 894.490782][ T9632] usb 1-1: USB disconnect, device number 35 [ 894.929452][T21646] loop2: detected capacity change from 0 to 4096 [ 894.991638][T21646] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 895.097828][T21646] ntfs3(loop2): ino=1a, mi_enum_attr [ 895.103199][T21646] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 895.159996][T21646] ntfs3(loop2): ino=1a, mi_enum_attr [ 895.165357][T21646] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 895.179276][T21655] loop4: detected capacity change from 0 to 16 [ 895.222207][T21655] erofs (device loop4): mounted with root inode @ nid 36. [ 895.294429][T21655] erofs (device loop4): inconsistent algorithmtype 1 for nid 89 [ 895.354237][T21655] erofs (device loop4): readahead error at folio 1 @ nid 89 [ 895.408804][T21655] erofs (device loop4): inconsistent algorithmtype 1 for nid 89 [ 895.440981][T21655] erofs (device loop4): inconsistent algorithmtype 1 for nid 89 [ 895.490934][T21655] erofs (device loop4): read error -117 @ 1 of nid 89 [ 895.534028][ T30] audit: type=1800 audit(875.747:84): pid=21655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6591" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 895.954604][T21674] loop4: detected capacity change from 0 to 512 [ 896.069838][T21674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.348834][T21683] bond2 (unregistering): Released all slaves [ 896.371502][ T6065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.493894][T21689] loop0: detected capacity change from 0 to 4096 [ 896.588670][T21693] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 896.649340][T21689] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 896.742511][T21689] Remounting filesystem read-only [ 896.801803][ T30] audit: type=1326 audit(876.925:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21696 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96678f749 code=0x7ffc0000 [ 896.891927][ T30] audit: type=1326 audit(876.925:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21696 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96678f749 code=0x7ffc0000 [ 896.973072][T21665] loop5: detected capacity change from 0 to 32768 [ 897.020720][ T30] audit: type=1326 audit(876.972:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21696 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd96678f749 code=0x7ffc0000 [ 897.103735][T21665] JBD2: Ignoring recovery information on journal [ 897.170028][ T30] audit: type=1326 audit(876.972:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21696 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96678f749 code=0x7ffc0000 [ 897.325315][T21665] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 897.325826][ T30] audit: type=1326 audit(876.972:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21696 comm="syz.2.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96678f749 code=0x7ffc0000 [ 897.485730][ T6149] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 897.652578][ T6059] ocfs2: Unmounting device (7,5) on (node local) [ 897.675606][ T6149] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 897.723454][ T6149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.780782][ T6149] usb 1-1: config 0 descriptor?? [ 897.789676][ T6149] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 897.811778][ T9632] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 898.004382][ T9632] usb 4-1: Using ep0 maxpacket: 32 [ 898.025914][ T9632] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 898.057303][ T9632] usb 4-1: config 0 has no interface number 0 [ 898.078766][ T9632] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 898.111175][ T9632] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 898.143435][ T9632] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 898.174020][ T9632] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 898.239625][ T9632] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 898.255520][ T6149] gp8psk: usb in 128 operation failed. [ 898.267197][ T6149] gp8psk: usb in 137 operation failed. [ 898.282228][ T6149] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 898.282316][ T9632] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 898.292597][ T6149] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 898.354216][ T9632] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 898.378594][ T9632] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 898.381993][ T6149] usb 1-1: USB disconnect, device number 36 [ 898.420975][ T9632] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.483088][ T9632] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 898.514076][ T9632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.534395][ T9632] usb 4-1: Product: syz [ 898.538990][ T9632] usb 4-1: Manufacturer: syz [ 898.543795][ T9632] usb 4-1: SerialNumber: syz [ 898.552223][ T9632] usb 4-1: config 0 descriptor?? [ 898.558342][T21713] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 898.581924][T21713] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 898.592519][ T5821] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 898.604759][ T9632] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 898.620145][ T9632] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 898.654209][ T9632] scsi host1: microtekX6 [ 898.730751][T21690] loop1: detected capacity change from 0 to 32768 [ 898.753279][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 898.758356][T21690] (syz.1.6604,21690,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 898.761049][ T5821] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 898.797767][T21690] (syz.1.6604,21690,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 898.832918][T21737] loop2: detected capacity change from 0 to 256 [ 898.872248][ T5821] usb 6-1: config 0 has no interface number 0 [ 898.873839][T21737] exfat: Deprecated parameter 'utf8' [ 898.923850][T21737] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 898.948885][ T5821] usb 6-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 898.998145][T21690] JBD2: Ignoring recovery information on journal [ 899.029940][ T5821] usb 6-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 899.084568][ T5821] usb 6-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 899.097673][ T9632] usb 4-1: USB disconnect, device number 35 [ 899.136320][ T5821] usb 6-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 899.172193][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.205889][ T5821] usb 6-1: Product: syz [ 899.210110][ T5821] usb 6-1: Manufacturer: syz [ 899.242378][ T5821] usb 6-1: SerialNumber: syz [ 899.288106][ T5821] usb 6-1: config 0 descriptor?? [ 899.301355][T21727] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 899.350744][T21727] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 899.369037][T21690] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 899.412283][ T5821] usb-storage 6-1:0.216: USB Mass Storage device detected [ 899.440228][T21749] comedi comedi0: pcl816: I/O port conflict (0x6,16) [ 899.491889][ T5821] scsi host2: usb-storage 6-1:0.216 [ 899.681499][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 899.687908][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 899.784145][ T6066] ocfs2: Unmounting device (7,1) on (node local) [ 900.128346][T21768] loop0: detected capacity change from 0 to 256 [ 900.263303][T21768] FAT-fs (loop0): Directory bread(block 64) failed [ 900.332263][T21768] FAT-fs (loop0): Directory bread(block 65) failed [ 900.357582][T21768] FAT-fs (loop0): Directory bread(block 66) failed [ 900.378257][T21768] FAT-fs (loop0): Directory bread(block 67) failed [ 900.400094][T21768] FAT-fs (loop0): Directory bread(block 68) failed [ 900.406671][T21768] FAT-fs (loop0): Directory bread(block 69) failed [ 900.443952][T21768] FAT-fs (loop0): Directory bread(block 70) failed [ 900.483167][T21768] FAT-fs (loop0): Directory bread(block 71) failed [ 900.521942][T21768] FAT-fs (loop0): Directory bread(block 72) failed [ 900.560526][T21768] FAT-fs (loop0): Directory bread(block 73) failed [ 900.817986][T21752] usb 6-1: reset high-speed USB device number 26 using dummy_hcd [ 901.504673][T21809] netlink: 'syz.3.6660': attribute type 1 has an invalid length. [ 901.876312][ T5821] usb 6-1: USB disconnect, device number 26 [ 902.675667][T21844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6677'. [ 903.021439][T21855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.047471][T21858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6684'. [ 903.084912][ T6149] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 903.289586][ T6149] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 903.320173][ T6149] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 903.353567][ T6149] usb 4-1: config 220 has no interface number 2 [ 903.398150][ T6149] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 903.438985][ T6149] usb 4-1: config 220 interface 0 has no altsetting 0 [ 903.445824][ T6149] usb 4-1: config 220 interface 76 has no altsetting 0 [ 903.495478][ T6149] usb 4-1: config 220 interface 1 has no altsetting 0 [ 903.538941][ T6149] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 903.572984][ T6149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.607217][ T6149] usb 4-1: Product: syz [ 903.625923][ T6149] usb 4-1: Manufacturer: syz [ 903.645131][ T6149] usb 4-1: SerialNumber: syz [ 903.656388][T21879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6695'. [ 903.683552][T21879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6695'. [ 903.905432][ T6149] usb 4-1: selecting invalid altsetting 0 [ 903.958043][ T6149] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 904.004261][ T6149] uvcvideo 4-1:220.0: No valid video chain found. [ 904.036123][ T6149] usb 4-1: selecting invalid altsetting 0 [ 904.068735][ T6149] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 904.110216][ T6149] usb 4-1: USB disconnect, device number 36 [ 904.445201][T21905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6708'. [ 904.480746][T21905] netlink: 46 bytes leftover after parsing attributes in process `syz.1.6708'. [ 904.527660][T21905] netlink: 46 bytes leftover after parsing attributes in process `syz.1.6708'. [ 904.600848][T21911] netlink: 'syz.5.6711': attribute type 27 has an invalid length. [ 904.600881][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6711'. [ 905.181135][T21928] delete_channel: no stack [ 905.417889][T21932] loop3: detected capacity change from 0 to 512 [ 905.455586][T21932] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 905.487775][T21932] EXT4-fs error (device loop3): ext4_iget_extra_inode:5070: inode #15: comm syz.3.6721: corrupted in-inode xattr: e_value out of bounds [ 905.587856][T21932] EXT4-fs (loop3): Remounting filesystem read-only [ 905.642644][T21932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.836958][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.934426][T21949] loop2: detected capacity change from 0 to 1764 [ 906.058940][ T30] audit: type=1326 audit(885.583:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21955 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6198f749 code=0x7ffc0000 [ 906.160983][ T30] audit: type=1326 audit(885.620:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21955 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f0a6198f749 code=0x7ffc0000 [ 906.261023][ T30] audit: type=1326 audit(885.620:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21955 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6198f749 code=0x7ffc0000 [ 906.380980][ T30] audit: type=1326 audit(885.620:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21955 comm="syz.5.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6198f749 code=0x7ffc0000 [ 906.423651][T21922] loop1: detected capacity change from 0 to 32768 [ 906.647279][ T1112] read_mapping_page failed! [ 906.688917][ T1112] ERROR: (device loop1): txAbort: [ 906.688917][ T1112] [ 906.702159][ T30] audit: type=1326 audit(886.163:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.4.6739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 906.725315][ T1112] jfs_write_inode: jfs_commit_inode failed! [ 906.738730][ T30] audit: type=1326 audit(886.163:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.4.6739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 906.802761][T21973] Cannot find set identified by id 3 to match [ 906.826910][ T30] audit: type=1326 audit(886.275:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.4.6739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 906.924452][ T30] audit: type=1326 audit(886.284:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.4.6739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 906.990721][T21977] loop1: detected capacity change from 0 to 16 [ 907.030929][ T30] audit: type=1326 audit(886.284:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.4.6739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a0b8f749 code=0x7ffc0000 [ 907.053415][T21977] erofs (device loop1): mounted with root inode @ nid 36. [ 907.121614][T21975] loop3: detected capacity change from 0 to 4096 [ 907.129479][T21977] syz.1.6741: attempt to access beyond end of device [ 907.129479][T21977] loop1: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 907.200458][T21977] syz.1.6741: attempt to access beyond end of device [ 907.200458][T21977] loop1: rw=524288, sector=40, nr_sectors = 64 limit=16 [ 907.216569][T21982] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 907.228672][T21982] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 907.237116][T21982] CPU: 1 UID: 0 PID: 21982 Comm: syz.2.6744 Not tainted syzkaller #0 PREEMPT(full) [ 907.246519][T21982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 907.256595][T21982] RIP: 0010:handshake_complete+0x31/0x390 [ 907.262346][T21982] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 d4 39 6f f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 5c 23 0e 00 48 b8 00 [ 907.272806][T21977] syz.1.6741: attempt to access beyond end of device [ 907.272806][T21977] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 907.281976][T21982] RSP: 0018:ffffc9000b3e74f8 EFLAGS: 00010216 [ 907.282009][T21982] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c259000 [ 907.282033][T21982] RDX: 0000000000000005 RSI: ffffffff8b4e74dc RDI: 0000000000000028 [ 907.282056][T21982] RBP: ffffc9000b3e75c0 R08: 0000000000000000 R09: ffffed1004f619b0 [ 907.282081][T21982] R10: ffff888027b0cd83 R11: 0000000000000001 R12: 00000000fffffffb [ 907.332889][T21982] R13: 0000000000000000 R14: ffff888056e0c000 R15: ffff8880281a8000 [ 907.340883][T21982] FS: 00007fd9675636c0(0000) GS:ffff888124aa1000(0000) knlGS:0000000000000000 [ 907.349835][T21982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 907.356427][T21982] CR2: 0000200000000000 CR3: 0000000031ede000 CR4: 0000000000350ef0 [ 907.364408][T21982] Call Trace: [ 907.367680][T21982] [ 907.370610][T21982] handshake_nl_accept_doit+0x2dc/0x910 [ 907.376195][T21982] genl_family_rcv_msg_doit+0x209/0x2f0 [ 907.381769][T21982] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 907.387853][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.393501][T21982] ? genl_get_cmd+0x194/0x580 [ 907.398196][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.403874][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.409533][T21982] ? security_capable+0x7e/0x260 [ 907.414484][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.420140][T21982] genl_rcv_msg+0x55c/0x800 [ 907.424676][T21982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 907.429732][T21982] ? __pfx_handshake_nl_accept_doit+0x10/0x10 [ 907.435838][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.441494][T21982] netlink_rcv_skb+0x158/0x420 [ 907.446283][T21982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 907.451338][T21982] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 907.456652][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.462305][T21982] ? netlink_deliver_tap+0x1ae/0xd30 [ 907.467613][T21982] genl_rcv+0x28/0x40 [ 907.471617][T21982] netlink_unicast+0x5aa/0x870 [ 907.476401][T21982] ? __pfx_netlink_unicast+0x10/0x10 [ 907.481712][T21982] netlink_sendmsg+0x8c8/0xdd0 [ 907.486494][T21982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.491796][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.497441][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.503088][T21982] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 907.509202][T21982] ____sys_sendmsg+0xa5d/0xc30 [ 907.513980][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.519623][T21982] ? copy_msghdr_from_user+0x10a/0x160 [ 907.525089][T21982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.530400][T21982] ? __pfx_futex_wake_mark+0x10/0x10 [ 907.535724][T21982] ___sys_sendmsg+0x134/0x1d0 [ 907.540411][T21982] ? find_held_lock+0x2b/0x80 [ 907.545104][T21982] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.550322][T21982] ? __lock_acquire+0x433/0x22f0 [ 907.555288][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.560970][T21982] __sys_sendmsg+0x16d/0x220 [ 907.565575][T21982] ? __pfx___sys_sendmsg+0x10/0x10 [ 907.570701][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.576347][T21982] ? srso_alias_return_thunk+0x5/0xfbef5 [ 907.582008][T21982] do_syscall_64+0xcd/0xf80 [ 907.586528][T21982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.592424][T21982] RIP: 0033:0x7fd96678f749 [ 907.596836][T21982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.616453][T21982] RSP: 002b:00007fd967563038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.624883][T21982] RAX: ffffffffffffffda RBX: 00007fd9669e5fa0 RCX: 00007fd96678f749 [ 907.632860][T21982] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 907.640842][T21982] RBP: 00007fd966813f91 R08: 0000000000000000 R09: 0000000000000000 [ 907.648824][T21982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.656806][T21982] R13: 00007fd9669e6038 R14: 00007fd9669e5fa0 R15: 00007fffb8f14348 [ 907.664824][T21982] [ 907.667842][T21982] Modules linked in: [ 907.673093][T21982] ---[ end trace 0000000000000000 ]--- [ 907.706178][T21982] RIP: 0010:handshake_complete+0x31/0x390 [ 907.724961][T21956] loop0: detected capacity change from 0 to 32768 [ 907.740535][T21987] vivid-007: ================= START STATUS ================= [ 907.748336][T21987] vivid-007: Generate PTS: true [ 907.753223][T21987] vivid-007: Generate SCR: true [ 907.759074][T21987] tpg source WxH: 320x240 (Y'CbCr) [ 907.764213][T21987] tpg field: 1 [ 907.768319][T21987] tpg crop: (0,0)/320x240 [ 907.774278][T21982] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 d4 39 6f f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 5c 23 0e 00 48 b8 00 [ 907.777850][T21987] tpg compose: (0,0)/320x240 [ 907.794473][T21982] RSP: 0018:ffffc9000b3e74f8 EFLAGS: 00010216 [ 907.798791][ T30] audit: type=1800 audit(887.088:99): pid=21977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6741" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 907.798989][T21982] [ 907.805402][T21987] tpg colorspace: 8 [ 907.829402][T21988] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.840930][T21982] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c259000 [ 907.851416][T21982] RDX: 0000000000000005 RSI: ffffffff8b4e74dc RDI: 0000000000000028 [ 907.864475][T21975] syz.3.6742: attempt to access beyond end of device [ 907.864475][T21975] loop3: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 907.868173][T21982] RBP: ffffc9000b3e75c0 R08: 0000000000000000 R09: ffffed1004f619b0 [ 907.889740][T21987] tpg transfer function: 0/0 [ 907.894343][T21987] tpg Y'CbCr encoding: 0/0 [ 907.897314][T21975] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 907.898876][T21987] tpg quantization: 0/0 [ 907.913284][T21987] tpg RGB range: 0/2 [ 907.917190][T21987] vivid-007: ================== END STATUS ================== [ 907.924951][T21982] R10: ffff888027b0cd83 R11: 0000000000000001 R12: 00000000fffffffb [ 907.924983][T21982] R13: 0000000000000000 R14: ffff888056e0c000 R15: ffff8880281a8000 [ 907.925054][T21982] FS: 00007fd9675636c0(0000) GS:ffff8881249a1000(0000) knlGS:0000000000000000 [ 907.925091][T21982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 908.079625][T21982] CR2: 00007fc0d997b000 CR3: 0000000031ede000 CR4: 0000000000350ef0 [ 908.087671][T21982] Kernel panic - not syncing: Fatal exception [ 908.094025][T21982] Kernel Offset: disabled [ 908.098344][T21982] Rebooting in 86400 seconds..