last executing test programs: 10m59.277905484s ago: executing program 4 (id=4603): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0xffffffffffffffff, &(0x7f00000001c0)=0x4a) 10m58.915561972s ago: executing program 4 (id=4609): r0 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0xa, "f7"}], 0x18}, 0x0) 10m58.615477907s ago: executing program 4 (id=4613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x12, 0x0, &(0x7f0000000100)) 10m58.271338146s ago: executing program 4 (id=4617): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000050ff7f880009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 10m56.140219731s ago: executing program 4 (id=4641): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) 10m55.738714666s ago: executing program 4 (id=4645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="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"], 0x1874}}, 0x0) 10m39.436628947s ago: executing program 32 (id=4645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="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"], 0x1874}}, 0x0) 9m14.445189693s ago: executing program 6 (id=5746): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0xa, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 9m14.185875184s ago: executing program 6 (id=5749): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {@discard}, {@umask={'umask', 0x3d, 0x3}}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x8}}, {@fmask={'fmask', 0x3d, 0x4}}, {@keep_last_dots}, {}, {@dmask={'dmask', 0x3d, 0x4c3}}, {@errors_continue}]}, 0x3, 0x151d, &(0x7f0000002180)="$eJzs3AuYTlX7MPD7XmvtMSQ9TXIY1lr35kkOyyRJDklySJIkSXJKSJrklYTEkFPSkITkMCSHISSHiUnjfD4fk+SVJklyyilZ3zXFp97qe89/3/Wf+3dd+3rW/ex9r732vrfnWXubmW+7DK3ZuFa1hkQE/xb85SUJAGIBYCAAXAcAAQCUiysXl7U+p8Skf28n7D/rkdSrPQJ2NXH9szeuf/bG9c/euP7ZG9c/e+P6Z29c/+yN689YdrZ5esHrecm+Cz//z874+/9/kczSY79cW/rGrv9ECtc/e+P6/68V/CMbcf2zN65/9sb1z964/tlBjj9dw/XP3rj+jGVnV/v5My9Xd7na1x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsezhrL9CAcDl9tUeF2OMMcYYY4wxxv5zfI6rPQLGGGOMMcYYY4z99yEIkKAggBjIAbGQE3KBAIBrIQ9cBxG4HuLgBsgLN0I+yA8FoCDEQyEoDBoMWCAIoQgUhSjcBMXgZigOJaAklAIHpSEBboEycCuUhdugHNwO5eEOqAAVoRJUhjuhCtwFVeFuqAb3QHWoATWhFtwLteE+qAP3Q114AOrBg1AfHoIG8DA0hEegETwKjeExaAKPQ1NoBs2hBbT8l/Jfgh7wMvSEXpAEvaEPvAJ9oR/0hwEwEF6FQfAaDIbXIRmGwFB4A4bBmzAc3oIRMBJGwdswGt6BMTAWxsF4SIEJMBHehUnwHkyGKTAVpkEqTIcZ8D7MhFkwGz6AOfAhzIV5MB8WQBp8BAthEaTDx7AYPoEMWAJLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHbATdsFu+BT2wGewFz6HffDFP5l/5m/yuyIgoECBChXGYAzGYizmwlyYG3NjHsyDEYxgHMZhXsyL+TAfFsACGI/xWBgLo0GDhIRFsAhGMYrFsBgWx+JYEkuiQ4cJmIBl8FYsi2WxHJbD8lgeK2BFrIiVsTJWwSpYFatiNayG1bE61sSaeC/ei72xDtbBulgX62G9y4+nsCE2xEbYCBtjY2yCTbApNsXm2BxbYktsha2wNbbGttgW22E7bI/tMRETsQN2wI7YETthJ+yMnbELdsGu2A274Us5AF/Gl7EXVhe9sQ/2wb6YnKM/DsAB+CoOwtfwNXwdk3EIDsU38A18E4fjaRyBI3EUjsIq4h0cg2ORxHhMwRSciBNxEk7CyTgFp+A0TMXpOANn4EychbPwA5yDH+KHOA/n4QJMwzRciIswHdNxMZ7BDFyCS3EZLscVuBxX4WpchWtxHa7FDbgBN+Em3IJbcBtuwx24A3ehAsBP8TP8DJNxH+7D/bgfD+ABPIgHMRMz8RAewsN4GI/gETyKR/EYHscTeBxP4Sk8jWfwLJ7F83geL+AL8V832lViTTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEXpFX5BP5RAFRQMSLeFFYFBZGGEEijAEAERVRUUwUE8VFcVFSlBROOJEgEkQZUUaUFWVFOXG7KC/uEBVERdHGVRaVRRXR1lUVd4tqopqoLmqImqKWqCVqi9qijqgj6oq6op6oJ+qLh0QD0Rv74yMiqzKNxRBsIoZiU9FMyEufYK3EcGwt2oi24ikxEkdge9HKJYpnRQcxBjuKv4ix+LzoLMZjF/Gi6Cq6ie7iJdFDtHY9RS8xGXuLPmIa9hX9RH8xQMzEGuIDnJOzpnhdJIshYqh4QyzAN8Vw8ZYYIUaKUeJtMVq8I8aIsWKcGC9SxAQxUbwrJon3xGQxRUwV00SqmC5miPfFTDFLzBYfiDniQzFXzBPzxQKRJj4SC8UikS4+FovFJyJDLBFLxTKxXKwQK8UqsVqsEWvFOrFebBAbxSaxWWwRW8U2sV3sEDvFLrFbfCr2iM/EXvG52Ce+EPvFX8UB8aU4KL4SmeJrcUh8Iw6Lb8UR8Z04Kr4Xx8RxcUKcFKfED+K0OCPOinPivPhRXBA/iYvCC5AohZRSyUDGyBwyVuaUueQ1MrcMLp3d62WcvEHmlTfKfDK/LCALynhZSBaWWhppJclQFpFFZVTeJIvJm2VxWUKWlKWkk6VlgrxFlpG3yrLyNllO3i7LyztkBVlRVpKV5Z2yirxLQuSXfVSXNWRNWUveK2vL+2Qdeb+sKx+Q9eSDsr58SDaQD8uG8hHZSD4qG8vHZBP5uGwqm8nmsoVsKZ+QreSTsrVsI9vKp2Q7+bRsL5+RifJZ2UH6S5fI87KzfEF2kS/KrrKb7C5/khellz1lLwnQW/aRr8i+sp/sLwfIgfJVOUi+JgfL12WyHCKHyjfkMPmmHC7fkiPkSDlKvi1Hy3fkGDlWjpPjZYqcICfKd+Uk+Z6cLKfIqXKaTJXTZf9LPc2W8u/mv/sH+YN/3vsmuVlukVvlNrld7pA75S65W+6We+QeuVfulfvkPrlf7pcH5AF5UB6UmTJTHpKH5GF5WB6RR+RReVQek8flOXlSnpI/yNPyjDwjz8nz8ry8cOkcgEIllFRKBSpG5VCxKqfKpa5RudW1Ko+6TkXU9SpO3aDyqhtVPpVfFVAFVbwqpAorrYyyilSoiqiiKqpuwksXjCqpSimnSqsEdcs/k6+KqZtVcVXiN/mXx5f0J+NrqVqqVqqVaq1aq7aqrWqn2qn2qr1KVImqg+qgOqqOqpPqpDqrzqqL6qK6qq6qu+queqgeqqfqqZJUkuqjXlF9VT/VXw1QA9WrapAapAarwSpZJauhaqgapoap4Wq4GqFGqFFqlBqtRqsxaowap8apFJWiJqqJapKapCaryWqqmqpSVaqaoWaomWqmmq1mqzlqjpqr5qr5ar5KU2lqoVqo0lW6WqwWqwy1RC1Ry9QytUKtUKvUKrVGrVHr1Dq1QW1QGWqz2qy2qq1qu9qudqqdarfarfaoPWqv2qv2qX1qv9qvDqgD6qA6qDJVpjqkDqnD6rA6oo6oo+qoOqaOqRPqhDqlTqnT6rQ6q86q8+q8uqAuqIvqYta0LxCBCFSggpggJogNYoNcQa4gd5A7yBPkCSJBJIgL4oK8wY1BviB/UCAoGMQHhYLCgQ5MYANxqejR4KagWHBzUDwoEZQMSgUuKB0kBLcEZYJbg7LBbUG54PagfHBHUCGoGFQKKgd3BlWCu4Kqwd1BteCeoHpQI6gZ1AruDWoH9wV1gvuDusEDQb3gwaB+8FDQIHg4aBg8EjQKHg0aB48FTYLHg6ZBs6B50CJo+R/t3/vT+Z90PXUvnaR76z76Fd1X99P99QA9UL+qB+nX9GD9uk7WQ/RQ/YYept/Uw/VbeoQeqUfpt/Vo/Y4eo8fqcXq8TtET9ET9rp6k39OT9RQ9VU/TqXq6nqHf1zP1LD1bf6Dn6A/1XD1Pz9cLdJr+SC/Ui3S6/lgv1p/oDL1EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Ga9RW/V2/R2vUPv1Lv0bv2p3qM/03v153qf/kLv13/VB/SX+qD+Smfqr/Uh/Y0+rL/VR/R3+qj+Xh/Tx/UJfVKf0j/o0/qMPqvP6fP6R31B/6Qvap81uc/6ejfKKBNjYkysiTW5TC6T2+Q2eUweEzERE2fiTF6T1+Qz+UwBU8DEm3hT2BQ2WciQKWKKmKiJmmKmmCluipuSpqRxxpkEk2DKmDKmrClryplyprwpbyqYCqaSqWTuNHeau8xd5m5zt7nH3GNqmBqmlqllapvapo6pY+qauqaeqWfqm/qmgWlgGpqGppFpZBqbxqaJaWKamqamuWluWpqWppVpZVqb1qataWvamXamvWlvEk2i6WA6mI6mo+lkOpnOprPpYrqYrqar6W66mx6mh+lpepokk2T6mD6mr+lr+pv+ZqAZaAaZQWawGWySTbIZaoaaYWaYGW6GmxFmpBmVNVE175gxZqwZZ8abFJNiJpqJZpKZZCabyWaqmWpSTaqZYWaYmWammW1mmzlmjplr5pr5Zr5JM2lmoVlo0k26WWwWmwyTYZaapWa5WW5WmpVmtVlt1pq1Zj2sNxvNRrPZbDZbzVaz3Ww3O81Os9vsNnvMHrPX7DX7zD6z3+w3B8wBc9AcNJkm0xwyh8xhc9gcMUfMUXPUHDPHzAlzwpwyp8xpc9qcNWfNeZP/0velN7E2p81lr7G57bU2j73O/m1cwBa08baQLWy1zWfz/yY21tritoQtaUtZZ0vbBHvL7+IKtqKtZCvbO20Ve5et+ru4tr3P1rH327r2AVvL3vubuJ590Na3j9kGiAC2mW1kW9jG9jHbxD5um9pmtrltYdvZp217+4xNtM/aDva538UL7SK72q6xa+06u8d+Zs/ac/aw/daetz/anraXHWhftYPsa3awfd0m2yG/i0fZt+1o+44dY8facXb87+KpdppNtdPtDPu+nWln/S5Osx/ZOTbdzrXz7Hy74Oc4a0zp9mO72H5iM+wSu9Qus8vtCrvSrvq/Y11mN9iNdpPdbT+1W+02u93usDvtrp/jrOPYaz+3++wX9pD9xh6wX9qD9ojNtF//HGcd3xH7nT1qv7fH7HF7wp60p+wP9rQ98/PxZx37SfuTvWi9BUICkqQooBjKQbGUk3LRNZSbrqU8dB1F6HqKoxsoL91I+Sg/FaCCFE+FqDBpMmSJKKQiVJSidBNdnqeXpFLkqDQl0C1Uhm6lsnQblaPbqTzdQRWoIlWiynQnVaG7qCrdTdXoHqpONagm1aJ7qTbdR3XofqpLD1A9epDq00PUgB6mhvQINaJHqTE9Rk3ocWpKzag5taCW9AS1oiepNbWhtvQUtaOnqT09Q4n0LHWg56gj/YU60fPUmV6gLvQidaVu1J1eoh70MvWkXpREvakPvUJ9qR/1pwE0kF6lQfQaDabXKZmG0FB6g4bRmzSc3qIRNJJG0ds0mt6hMTSWxtF4SqEJNJHepUn0Hk2mKTSVplEqTacZ9D7NpFk0mz6gOfQhzaV5NJ8WUBp9RAtpEaXTx7SYPqEMWkJLaRktpxW0klbRalpDa2kdracNtJE20WbaQltpG22nHbSTdtFu+pT20Ge0lz6nffQF7ae/0gH6kg7SV5RJX9Mh+oYO07d0hL7zveh7OkbH6QSdpFP0A52mM3SWztF5+pEu0E90kTxBiKEIZajCIIwJc4SxYc4wV3hNmDu8NswTXhdGwuvDuPCGMG94Y5gvzB8WCAuG8WGhsHCoQxPakMIwLBIWDaPhTWGx8OaweFgiLBmWCl1YOkwIbwnLhLeGZcPbwnLh7WH58I6wQlgxfOyByuGdYZXwrrBqeHdYLbwnrB7WCGuGtcJ7w9rhfWGd8P6wbvhAWDZ8MKwfPhQ2CB8OG4aPhI3CR8PG4WNhk/DxsGnYLGwetghbhk+ErcInw9Zhm7Bt+FTYLnw6bB8+EyaGz4Ydwud+Xv/goj9fnxT2DvuEr4SvhN7fL+dHF0TToh9FF0YXRdOjH0cXRz+JZkSXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0W9r5UDHDrhpFMucDEuh4t1OV0ud43L7a51edx1LuKud3HuBpfX3ejyufyugCvo4l0hV9hpZ5x15EJXxBV1UXeTK+ZudsVdCVfSlXLOlXYJroVr6Vq6Vu5J19q1cW3dU+4p97R72j3jnnHPug7uOdfR/cV1cs+7zu4F94J70XV13Vx395Lr4Sbk+eXfZJLr4/q4vq6v6+/6u4FuoBvkBrnBbrBLdsluqBvqhrlhbrgb7ka4EW6UG+VGu9FujBvjxrlxLsWluIluopvkJrnJbrKb6qa6VJfqZrgZbqab6arM+mUvc91cN9/Nd2kuzS10WXPGdLfYLXYZLsMtdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O91ut9vt8df90qnb5/a7/e6AO+AOuq9cpvvaHXLfuMPuW3fEfeeOuu/dMXfcnXAn3Sn3gzvtzriz7pw77350F9xP7qLzLiUyITIx8m5kUuS9yOTIlMjUyLRIamR6ZEbk/cjMyKzI7MgHkTmRDyNzI/Mi8yMLImmRjyILI4si6ZGPI4sjn0QyIksiSyPLIssjKyLeF9oa+iK+qI/6m3wxf7Mv7kv4kr6Ud760T/C3+DL+Vl/W3+bL+dt9eX+Hr+Ar+kr+cd/UN/PNfQvf0j/hW/knfWvfxrf1T/l2/mnf3j/jE/2zvoN/znf0f/Gd/PO+s3/Bd/Ev+q6+m+/uX/I9/Mu+p+/lk3xv38e/4vv6fr6/H+AH+lf9IP+aH+xf98l+iB/q3/DD/Jt+uH/Lj/Aj/aiYt/3oy7fIMN6n+Al+on/XT/Lv+cl+ip/qp/lUP93P8O/7mX6Wn+0/8HP8h36un+fn+wU+zX/kF/pFPt1/7Bf7T3yGX3L5obJf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf57X6H3+l3+d3+U7/Hf+b3+s/9Pv+F3+//6g/4L/1B/5XP9F/7Q/4bf9h/64/47/xR/70/5o/7E/6kP+V/8Kf9GX/Wn/Pn/Y/+gv/JX+TfWWOMMcYY+4dMuNIUf7S+9x+8J361cR8AuHZbwcxfr8+aUa7P90u7n4hvFwGAZ3t1eeTyUr16UlLSpW0zJARF5wFc/p+gLDFwJV4CbeFpSIQ2UOYPx99PdDtPf6f/6O0AuX6VEwtX4sv95/yT89NPPPHUqIXlw7Nx/4/+5wEUL3olJ6uvy/ESaKuyXttA2T/pP3+rvzP+nF+mALT+VU5uuBJfOT8J8CQ8B4m/2ZIxxhhjjDHGGPtFP1Gp0+X7z8s/8flH9+fx6kpODrgS/737c8YYY4wxxhhjjF19z3fr/swTiYltOv3zjar/UtY/3rg8xP/iLrjxq4b3AJffUQDwb3Z4FQq35X9kX8mXrsu/XbX8nA/gX+758tX+/8OV8HPjqnwcMcYYY4wxxv6Lrkz6f/u+uloDYowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGsqH/iT8ndrWPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/k8AAAD//0SwBgw=") mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 9m13.635096692s ago: executing program 6 (id=5755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003840)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x2b8, 0x182, 0x0, 0x0, 0x290, 0x3a8, 0x3a8, 0x290, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {0x0, 0xe0ffff00000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "83f0a574725c23587dcfbd695650fe91ad9f7783f34f23315a573f167f755eaff4d665d219fa653cdfd7ee1092b07e243bd3e81b17fa1a6a18d79ae45b76f817515ec14cdf53d785cfe1d638f578cf51801a954830bfb97c4595e7b07b7147a846d1a230f2e1053fd68b5c45f2847c271539bdbd0f149a701a72fc1f87ab788a", 0xff}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 9m13.171026965s ago: executing program 6 (id=5761): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f00000024c0)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {}, {@errors_continue}, {}, {@sys_tz}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee01}}, {@gid}], [{@appraise}]}, 0x9, 0x1505, &(0x7f0000000180)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 9m12.643030662s ago: executing program 6 (id=5767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a81000000000400000000020000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a310000000020000000000a01020000000000000000000000000900010073797a31000000002c000000020a01"], 0xb4}}, 0x0) 9m11.849142755s ago: executing program 6 (id=5774): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e00fd260c"], 0x7) 9m11.27600663s ago: executing program 33 (id=5774): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e00fd260c"], 0x7) 6m42.842272364s ago: executing program 7 (id=7335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m42.548942248s ago: executing program 7 (id=7340): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) 6m42.136966611s ago: executing program 7 (id=7346): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$rfkill(r0, 0x0, 0x0) 6m41.715387432s ago: executing program 7 (id=7350): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x400044, &(0x7f0000000040)={[{@creator={'creator', 0x3d, "e8b6d9ad"}}, {}, {@nobarrier}, {@part={'part', 0x3d, 0x1000}}, {@gid}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp865'}}]}, 0x1, 0x632, &(0x7f0000000140)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 6m41.09757822s ago: executing program 7 (id=7356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000100000000000000a20000000000a01020000000000000000050000000900010073797a300000000030000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000004000c0014000000020a090100000000000000000000000014000000110001"], 0x8c}}, 0x0) 6m40.467361948s ago: executing program 7 (id=7363): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6m40.107679526s ago: executing program 34 (id=7363): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m2.427394434s ago: executing program 2 (id=10287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feffffff0000000002000000850000003600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 2m1.861299604s ago: executing program 2 (id=10293): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000240)=0x38000002, 0x4) 2m1.563136543s ago: executing program 2 (id=10297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 2m1.255349358s ago: executing program 2 (id=10302): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@discard}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@umask={'umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x7c}}, {@dmask={'dmask', 0x3d, 0xc08}}, {@fmask={'fmask', 0x3d, 0x3c}}, {@allow_utime={'allow_utime', 0x3d, 0x34}}, {@sys_tz}]}, 0x1, 0x1524, &(0x7f0000005340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m0.610017798s ago: executing program 2 (id=10310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c0001800600060088a80000100004"], 0x34}}, 0x0) 1m59.767481369s ago: executing program 2 (id=10321): r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, 0x0) 1m59.269654539s ago: executing program 35 (id=10321): r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, 0x0) 3.867397032s ago: executing program 3 (id=11536): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000048c0)={0x2020}, 0x2020) 3.543586399s ago: executing program 3 (id=11541): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 3.35008507s ago: executing program 0 (id=11544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}, {0x0, 0x1}, {}, 0x0, 0x2, 0xa, 0x1, 0x4, 0x6f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x4e21}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.144661235s ago: executing program 3 (id=11546): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f00000001c0)={0x0, 'syz1\x00'}) 2.951304185s ago: executing program 0 (id=11548): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') 2.785277012s ago: executing program 3 (id=11551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 2.562457544s ago: executing program 0 (id=11553): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), 0x4) 2.487166753s ago: executing program 3 (id=11555): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) 2.239588841s ago: executing program 0 (id=11557): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2.180956275s ago: executing program 1 (id=11559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}}, 0x4800) 1.992411181s ago: executing program 0 (id=11561): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0) 1.913409032s ago: executing program 9 (id=11562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000002}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 1.822592114s ago: executing program 1 (id=11563): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x4}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.723575606s ago: executing program 5 (id=11564): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000001600190f00003fffffffda0602000000ffe80001dd0000040d001800ea1101650005000000", 0x29}], 0x1) 1.723319897s ago: executing program 8 (id=11565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14020000100001000000000800000000e00000010000000000000000000000007f000001000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000040000000000000004000000000000000d000000000000000a000000000000000000000000000000000000000004000000000000020001060000000000000000200017000100000027bd70002abd700027bd70002abd70009202000001000000010103006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013048a4b7bfe"], 0x214}}, 0x20000000) 1.705612516s ago: executing program 0 (id=11566): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@space_cache}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x33, 0x74, 0x38, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.550356077s ago: executing program 1 (id=11567): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x6, 0x40401) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 1.539875908s ago: executing program 9 (id=11568): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203"], 0x80}}, 0x0) 1.425008445s ago: executing program 8 (id=11569): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020400090b00000000000000000000000400030000000080adffffffffffffff05000000000000000000000000000000020001000000000000000002fffffffb030005e300"], 0x58}}, 0x0) 1.390170473s ago: executing program 5 (id=11570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) 1.171534721s ago: executing program 9 (id=11571): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000240)=0x7, 0x4) 1.171292604s ago: executing program 1 (id=11572): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7, {0x1, 0xda5, 0x8, 0x3fdfa3ba}}) 1.098839161s ago: executing program 5 (id=11573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x5, 0x4) 1.05273086s ago: executing program 8 (id=11574): r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r0, 0x6a, 0x16, 0x0, 0x0) 845.442317ms ago: executing program 1 (id=11575): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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") mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ocfs2_dlmfs\x00', 0x1008440, 0x0) 844.978129ms ago: executing program 9 (id=11576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 731.092217ms ago: executing program 8 (id=11577): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x63, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe3c}}, 0x20) 730.547851ms ago: executing program 5 (id=11578): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000e00)) 359.660153ms ago: executing program 5 (id=11579): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r0, &(0x7f0000000040)='./mnt\x00', r0, &(0x7f00000000c0)='./mnt\x00', 0x1) 358.620682ms ago: executing program 9 (id=11580): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0xffffffffffffffff, 0x0) 304.193181ms ago: executing program 8 (id=11581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) 127.563756ms ago: executing program 1 (id=11582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) 72.108034ms ago: executing program 3 (id=11583): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) 38.638706ms ago: executing program 9 (id=11584): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000025c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="f2f7", 0x2}], 0x1, &(0x7f00000001c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x7, 0x20b, 0x2, 0xff, 0x9f4, 0x9, 0x7}}], 0x30, 0x20000000}], 0x1, 0x0) 17.60376ms ago: executing program 8 (id=11585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x80}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x20050800) 0s ago: executing program 5 (id=11586): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpgid(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): hout journal. Quota mode: writeback. [ 1241.725326][ T1472] nftables ruleset with unbound chain [ 1241.735954][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.057808][ T1491] loop3: detected capacity change from 0 to 8 [ 1242.115174][ T1491] SQUASHFS error: Unable to read directory block [629:26] [ 1243.533927][ T1548] loop0: detected capacity change from 0 to 8192 [ 1243.600724][T13875] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1243.633013][ T1548] loop0: p1 < > p2 < > p3 [ 1243.648585][ T1574] cgroup: Need name or subsystem set [ 1243.654788][ T1548] loop0: p3 start 55115776 is beyond EOD, truncated [ 1243.781157][T13875] usb 2-1: Using ep0 maxpacket: 32 [ 1243.823249][T13875] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 1243.853775][T13875] usb 2-1: config 0 has no interface number 0 [ 1243.885736][T13875] usb 2-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 1243.916809][T13875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.942971][T13875] usb 2-1: Product: syz [ 1243.947274][T13875] usb 2-1: Manufacturer: syz [ 1243.993836][T13875] usb 2-1: SerialNumber: syz [ 1244.014969][T13875] usb 2-1: config 0 descriptor?? [ 1244.067373][T13875] spcp8x5 2-1:0.191: SPCP8x5 converter detected [ 1244.093547][T13875] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 1244.319810][T13875] usb 2-1: USB disconnect, device number 9 [ 1244.376925][T13875] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1244.441428][T13875] spcp8x5 2-1:0.191: device disconnected [ 1244.540178][ T1628] loop2: detected capacity change from 0 to 256 [ 1244.577105][ T1628] FAT-fs (loop2): Directory bread(block 1285) failed [ 1244.604508][ T1628] FAT-fs (loop2): Directory bread(block 1285) failed [ 1244.654910][ T1628] FAT-fs (loop2): Directory bread(block 1285) failed [ 1244.697872][ T1628] FAT-fs (loop2): Directory bread(block 1285) failed [ 1245.218867][ T1657] loop2: detected capacity change from 0 to 1764 [ 1245.641163][T23234] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1245.824762][T23234] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1245.865100][T23234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.912969][T23234] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1245.952750][T23234] usb 4-1: config 1 has no interface number 1 [ 1245.969969][T23234] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1246.014447][T23234] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1246.099049][T23234] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1246.133868][T23234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.165063][T23234] usb 4-1: Product: syz [ 1246.187935][T23234] usb 4-1: Manufacturer: syz [ 1246.208071][T23234] usb 4-1: SerialNumber: syz [ 1246.394124][ T1719] loop2: detected capacity change from 0 to 2048 [ 1246.445077][ T1719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1246.487168][T23234] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1246.522009][T23234] usb 4-1: MIDIStreaming interface descriptor not found [ 1246.735506][T23234] usb 4-1: USB disconnect, device number 14 [ 1246.909539][ T1764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9847'. [ 1247.107141][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1247.389258][ T1787] : entered promiscuous mode [ 1248.983242][ T1875] netlink: 284 bytes leftover after parsing attributes in process `syz.8.9878'. [ 1249.391702][ T1894] loop8: detected capacity change from 0 to 64 [ 1249.515351][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.522091][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.535691][T17735] sl0: compressed packet ignored [ 1249.563201][ T1894] hfs: keylen 94 too large [ 1250.391853][ T1876] loop2: detected capacity change from 0 to 32768 [ 1250.598277][ T1927] ALSA: mixer_oss: invalid OSS volume '' [ 1250.740308][ T1885] loop5: detected capacity change from 0 to 32768 [ 1250.836120][ T1896] loop3: detected capacity change from 0 to 32768 [ 1250.887061][ T1896] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9885 (1896) [ 1250.931160][ T1885] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1251.010183][ T1896] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1251.040262][ T1896] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1251.044318][ T1956] netlink: 'syz.1.9898': attribute type 10 has an invalid length. [ 1251.049618][ T1896] BTRFS info (device loop3): disk space caching is enabled [ 1251.049654][ T1896] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1251.119235][ T1956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9898'. [ 1251.172653][ T1956] team0: entered promiscuous mode [ 1251.194225][ T1956] team0: entered allmulticast mode [ 1251.238111][ T1956] bridge0: port 2(team0) entered blocking state [ 1251.268872][ T1885] XFS (loop5): Ending clean mount [ 1251.275385][ T1956] bridge0: port 2(team0) entered disabled state [ 1251.350348][ T1885] XFS (loop5): Quotacheck needed: Please wait. [ 1251.397975][ T1896] BTRFS info (device loop3): rebuilding free space tree [ 1251.528177][ T1896] BTRFS info (device loop3): disabling free space tree [ 1251.554118][ T1896] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1251.600758][ T1896] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1251.773964][ T1885] XFS (loop5): Quotacheck: Done. [ 1252.020208][ T2004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1252.044906][ T2005] netlink: 2 bytes leftover after parsing attributes in process `syz.8.9905'. [ 1252.090848][ T2005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.112687][ T5936] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1252.125723][ T2005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.166384][ T2005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.177871][ T2005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.191875][ T2005] batadv_slave_1: entered promiscuous mode [ 1252.261985][ T5950] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1252.565267][ T2024] loop2: detected capacity change from 0 to 1024 [ 1252.769850][ T2024] hfsplus: xattr search failed [ 1253.207517][ T2054] cgroup: name respecified [ 1253.647389][ T2078] loop3: detected capacity change from 0 to 1024 [ 1254.012401][ T2095] loop8: detected capacity change from 0 to 256 [ 1254.066820][ T35] hfsplus: b-tree write err: -5, ino 8 [ 1254.108815][ T2095] exfat: Deprecated parameter 'utf8' [ 1254.182067][ T2095] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 1254.261376][ T2107] loop1: detected capacity change from 0 to 128 [ 1254.283603][ T2109] netlink: 'syz.2.9930': attribute type 1 has an invalid length. [ 1254.292576][ T2111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9929'. [ 1254.322159][ T2109] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.9930'. [ 1254.337203][ T2107] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 1254.486700][ T2107] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1254.708551][ T2107] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.9928: No space for directory leaf checksum. Please run e2fsck -D. [ 1254.803136][ T2107] EXT4-fs error (device loop1): __ext4_find_entry:1650: inode #2: comm syz.1.9928: checksumming directory block 0 [ 1254.879684][ T2137] netlink: 'syz.2.9932': attribute type 2 has an invalid length. [ 1255.262226][ T5933] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1256.821863][ T2226] loop1: detected capacity change from 0 to 64 [ 1256.865342][ T2224] kernel profiling enabled (shift: 9) [ 1256.944983][ T2230] netlink: 'syz.3.9960': attribute type 7 has an invalid length. [ 1256.945598][ T2148] loop0: detected capacity change from 0 to 32768 [ 1257.007491][ T2148] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9937 (2148) [ 1257.073977][ T2148] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1257.093903][ T2237] xt_socket: unknown flags 0x8 [ 1257.124794][ T2148] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1257.185547][ T2148] BTRFS info (device loop0): using free-space-tree [ 1257.372027][ T2258] netlink: 'syz.3.9965': attribute type 32 has an invalid length. [ 1257.380577][ T2258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9965'. [ 1257.389658][ T2258] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1257.754456][ T2308] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 0, id = 0 [ 1257.952029][ T5937] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1259.325520][ T2379] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1259.605705][ T2382] loop5: detected capacity change from 0 to 4096 [ 1260.336468][ T2441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1261.377838][ T6140] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1261.534823][ T2516] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1261.601067][ T6140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1261.631290][ T6140] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1261.677039][ T6140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1261.714975][ T6140] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1261.748825][ T6140] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1261.779811][ T6140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.816071][ T6140] usb 4-1: Product: syz [ 1261.833531][ T6140] usb 4-1: Manufacturer: syz [ 1261.858912][ T6140] usb 4-1: SerialNumber: syz [ 1261.875563][ T6140] usb 4-1: config 0 descriptor?? [ 1261.912743][ T6140] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1261.954790][ T6140] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1262.000852][ T6140] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1262.198194][ T6140] usb 4-1: USB disconnect, device number 15 [ 1262.307894][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1262.403718][ T2472] loop5: detected capacity change from 0 to 32768 [ 1262.497194][ T2568] loop8: detected capacity change from 0 to 764 [ 1262.517414][ T2568] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1262.533286][ T46] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1262.564519][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.578392][ T46] usb 2-1: Product: syz [ 1262.582606][ T46] usb 2-1: Manufacturer: syz [ 1262.611038][ T46] usb 2-1: SerialNumber: syz [ 1262.644892][ T46] usb 2-1: config 0 descriptor?? [ 1262.667406][ T46] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1262.741528][ T2566] loop2: detected capacity change from 0 to 4096 [ 1262.785807][ T2566] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1263.114398][ T46] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1263.144125][ T46] sq905c 2-1:0.0: Reading version command failed [ 1263.188661][ T46] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1263.227767][ T46] usb 2-1: USB disconnect, device number 10 [ 1264.000633][ T2651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10040'. [ 1264.684922][ T2688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1264.685760][ T2686] JFS: discard option not supported on device [ 1264.732875][ T2686] Mount JFS Failure: -22 [ 1264.759272][ T2686] jfs_mount failed w/return code = -22 [ 1264.975531][ T2708] openvswitch: netlink: Message has 4 unknown bytes. [ 1265.032756][ T2708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1265.326012][ T2719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10060'. [ 1265.408196][ T2719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10060'. [ 1265.441480][ T2639] loop3: detected capacity change from 0 to 32768 [ 1265.485093][ T2639] XFS: ikeep mount option is deprecated. [ 1265.517520][ T2639] XFS: noikeep mount option is deprecated. [ 1265.643425][ T2639] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1265.772902][ T2639] XFS (loop3): Ending clean mount [ 1265.780637][ T2639] XFS (loop3): Quotacheck needed: Please wait. [ 1265.899848][ T2639] XFS (loop3): Quotacheck: Done. [ 1265.921350][T13875] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1266.088400][ T5936] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1266.117500][T13875] usb 1-1: Using ep0 maxpacket: 8 [ 1266.190185][T13875] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 1266.198438][T13875] usb 1-1: config 11 has no interface number 0 [ 1266.274242][T13875] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 25, changing to 8 [ 1266.321012][T13875] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 50090, setting to 1024 [ 1266.351049][T13875] usb 1-1: config 11 interface 95 has no altsetting 0 [ 1266.393150][T13875] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1266.423003][T13875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.474701][T13875] usb 1-1: Product: syz [ 1266.502903][T13875] usb 1-1: Manufacturer: syz [ 1266.529212][T13875] usb 1-1: SerialNumber: syz [ 1266.753511][ T2743] loop8: detected capacity change from 0 to 32768 [ 1266.807733][ T2729] loop1: detected capacity change from 0 to 32768 [ 1266.848150][ T2729] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10061 (2729) [ 1266.868961][T13875] usbtouchscreen 1-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 1266.896485][ T2743] (syz.8.10064,2743,0):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=300, inode=77, rec_len=142, name_len=17 [ 1266.990108][T13875] usb 1-1: USB disconnect, device number 20 [ 1267.022974][ T2743] (syz.8.10064,2743,1):ocfs2_init_local_system_inodes:495 ERROR: status=-22, sysfile=12, slot=0 [ 1267.042793][ T2743] (syz.8.10064,2743,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22 [ 1267.102617][ T2743] (syz.8.10064,2743,1):ocfs2_mount_volume:1758 ERROR: status = -22 [ 1267.108463][ T2729] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1267.152620][ T2743] (syz.8.10064,2743,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1267.175055][ T2729] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1267.231091][ T2729] BTRFS info (device loop1): using free-space-tree [ 1267.836571][ T5933] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1269.394382][ T2907] loop1: detected capacity change from 0 to 2048 [ 1269.507959][ T2907] NILFS (loop1): invalid segment: Magic number mismatch [ 1269.524010][ T2907] NILFS (loop1): trying rollback from an earlier position [ 1269.628538][ T2907] NILFS (loop1): recovery complete [ 1269.655487][ T2918] netlink: 'syz.8.10101': attribute type 1 has an invalid length. [ 1269.677444][ T2920] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1269.982108][ T2870] loop0: detected capacity change from 0 to 32768 [ 1270.034284][ T2870] XFS: noikeep mount option is deprecated. [ 1270.118945][ T2870] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1270.289724][ T2948] loop5: detected capacity change from 0 to 512 [ 1270.306722][ T2950] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1270.339357][ T2882] loop3: detected capacity change from 0 to 32768 [ 1270.415710][ T2882] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1270.417247][ T2948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.450719][ T2948] ext4 filesystem being mounted at /1634/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.505169][ T2946] loop2: detected capacity change from 0 to 4096 [ 1270.559939][ T2882] XFS (loop3): Ending clean mount [ 1270.571816][ T2946] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1270.590752][ T2870] XFS (loop0): Ending clean mount [ 1270.594800][ T2882] XFS (loop3): Quotacheck needed: Please wait. [ 1270.616695][ T2870] XFS (loop0): Quotacheck needed: Please wait. [ 1270.695507][ T2882] XFS (loop3): Quotacheck: Done. [ 1270.716791][ T2946] ntfs3(loop2): ino=19, mi_enum_attr [ 1270.729190][ T5950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.752752][ T2946] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1270.780536][ T2870] XFS (loop0): Quotacheck: Done. [ 1270.826570][ T2946] ntfs3(loop2): failed to convert "c46c" to cp737 [ 1270.869121][ T2946] ntfs3(loop2): ino=20, mi_enum_attr [ 1271.013363][ T5936] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1271.094971][ T2987] netlink: 'syz.5.10112': attribute type 11 has an invalid length. [ 1271.157878][ T5937] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1271.836782][ T3023] loop5: detected capacity change from 0 to 136 [ 1272.050896][ T5950] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 1272.070886][ T5950] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 1272.175378][ T3040] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1274.169387][ T3122] tipc: Can't bind to reserved service type 0 [ 1274.435841][ T3133] loop3: detected capacity change from 0 to 8 [ 1274.478259][ T3133] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1274.571163][ T3133] cramfs: bad data blocksize 4294967270 [ 1274.618863][ T3133] cramfs: Error -3 while decompressing! [ 1274.651212][ T3133] cramfs: ffffffff9a98a702(26)->ffff8880695ea000(4096) [ 1274.703519][ T3133] cramfs: bad data blocksize 3221485902 [ 1274.765680][ T3133] cramfs: bad data blocksize 4294967270 [ 1274.772518][ T29] audit: type=1800 audit(2000000623.612:221): pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10155" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 1274.832051][ T3084] loop0: detected capacity change from 0 to 32768 [ 1274.848477][ T3148] SET target dimension over the limit! [ 1274.976580][ T3149] loop2: detected capacity change from 0 to 2048 [ 1275.033763][ T3149] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1275.041713][ T3084] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1275.097277][ T3167] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1275.181737][ T3084] OCFS2: ERROR (device loop0): __ocfs2_find_path: Owner 65 has empty extent list at depth 312 [ 1275.233175][ T3084] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1275.282924][ T3084] OCFS2: File system is now read-only. [ 1275.329079][ T3084] (syz.0.10117,3084,1):ocfs2_find_leaf:1940 ERROR: status = -30 [ 1275.382013][ T3084] (syz.0.10117,3084,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1275.468088][ T3084] (syz.0.10117,3084,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 1275.500264][ T3084] (syz.0.10117,3084,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 1275.509003][ T3084] (syz.0.10117,3084,0):ocfs2_read_virt_blocks:997 ERROR: status = -30 [ 1275.562568][ T3084] (syz.0.10117,3084,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 1275.594104][ T3084] (syz.0.10117,3084,0):ocfs2_find_dir_space_el:3503 ERROR: status = -5 [ 1275.624460][ T3084] (syz.0.10117,3084,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5 [ 1275.671174][ T3084] (syz.0.10117,3084,0):ocfs2_mknod:298 ERROR: status = -5 [ 1275.714351][ T3084] (syz.0.10117,3084,0):ocfs2_mknod:502 ERROR: status = -5 [ 1275.824648][ T3198] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10170'. [ 1275.834752][ T3198] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10170'. [ 1275.928618][ T5937] ocfs2: Unmounting device (7,0) on (node local) [ 1276.152266][ T3211] loop2: detected capacity change from 0 to 128 [ 1276.236295][ T3216] loop3: detected capacity change from 0 to 64 [ 1276.244908][ T3211] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1276.271156][ T3211] FAT-fs (loop2): Filesystem has been set read-only [ 1277.332265][ T3266] netlink: 'syz.0.10192': attribute type 10 has an invalid length. [ 1277.423162][ T3268] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1277.435056][ T29] audit: type=1326 audit(2000000626.100:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.8.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1277.491501][ T29] audit: type=1326 audit(2000000626.100:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.8.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1277.515693][ T29] audit: type=1326 audit(2000000626.138:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.8.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1277.538432][ T29] audit: type=1326 audit(2000000626.138:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.8.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1277.574368][ T29] audit: type=1326 audit(2000000626.138:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.8.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1278.339345][ T3311] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10209'. [ 1278.582498][ T3322] netlink: 'syz.3.10212': attribute type 1 has an invalid length. [ 1278.610845][ T3322] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10212'. [ 1278.782084][T23234] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1278.911451][ T3341] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1278.997612][T23234] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1279.005795][T23234] usb 1-1: config 0 has no interface number 0 [ 1279.061160][T23234] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1279.098429][T23234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.126244][T23234] usb 1-1: Product: syz [ 1279.130509][T23234] usb 1-1: Manufacturer: syz [ 1279.156270][T23234] usb 1-1: SerialNumber: syz [ 1279.173102][T23234] usb 1-1: config 0 descriptor?? [ 1279.222278][ T3357] netlink: 'syz.2.10223': attribute type 12 has an invalid length. [ 1279.241393][ T3357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10223'. [ 1279.423500][T23234] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1279.457002][T23234] usb 1-1: No streaming interface found for terminal 6. [ 1279.499006][T23234] usb 1-1: USB disconnect, device number 21 [ 1279.519430][ T3366] loop1: detected capacity change from 0 to 1764 [ 1279.743462][ T3394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10229'. [ 1280.183424][ T3411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10234'. [ 1280.220781][ T3414] (unnamed net_device) (uninitialized): down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms [ 1280.268985][ T3414] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 1280.340212][ T3419] loop0: detected capacity change from 0 to 2048 [ 1280.420622][ T3419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1280.660112][ T3435] loop5: detected capacity change from 0 to 256 [ 1280.740316][ T3435] exfat: Deprecated parameter 'utf8' [ 1280.781772][ T3435] exfat: Deprecated parameter 'utf8' [ 1280.846742][ T3435] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1281.266775][ T3396] loop8: detected capacity change from 0 to 32768 [ 1281.422892][ T3396] JBD2: Ignoring recovery information on journal [ 1281.621790][ T3396] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1281.712425][ T3479] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1281.775932][ T3479] bond0: (slave lo): Error: Device can not be enslaved while up [ 1282.023166][T23960] ocfs2: Unmounting device (7,8) on (node local) [ 1282.171281][T23236] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1282.370681][T23236] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1282.396608][T23236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.450083][T23236] usb 2-1: config 0 descriptor?? [ 1282.647958][ T3521] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10267'. [ 1282.716388][ T3521] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10267'. [ 1282.910655][T23236] ath6kl: Failed to submit usb control message: -71 [ 1282.917381][T23236] ath6kl: unable to send the bmi data to the device: -71 [ 1282.952579][T23236] ath6kl: Unable to send get target info: -71 [ 1282.981544][T23236] ath6kl: Failed to init ath6kl core: -71 [ 1283.036175][T23236] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1283.119374][T23236] usb 2-1: USB disconnect, device number 11 [ 1283.365118][ T3504] loop3: detected capacity change from 0 to 32768 [ 1283.383994][ T3504] XFS: attr2 mount option is deprecated. [ 1283.474490][ T3504] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 1283.558518][ T3568] loop2: detected capacity change from 0 to 256 [ 1283.582985][ T3504] XFS (loop3): Quotacheck needed: Please wait. [ 1283.685033][ T3575] loop0: detected capacity change from 0 to 1024 [ 1283.748746][ T3504] XFS (loop3): Quotacheck: Done. [ 1283.871089][ T3504] XFS (loop3): syz.3.10260 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 1284.154222][ T5936] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1285.195939][ T3642] loop8: detected capacity change from 0 to 16 [ 1285.235999][ T3642] erofs (device loop8): mounted with root inode @ nid 36. [ 1285.260137][ T3647] loop3: detected capacity change from 0 to 256 [ 1285.283156][ T3642] erofs (device loop8): per-inode big pcluster without sb feature for nid 36 [ 1285.323255][ T3642] erofs (device loop8): per-inode big pcluster without sb feature for nid 36 [ 1285.371322][ T3642] erofs (device loop8): read error -117 @ 123 of nid 36 [ 1285.570995][ T3657] loop2: detected capacity change from 0 to 256 [ 1285.685740][ T3657] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1285.723301][ T3671] loop5: detected capacity change from 0 to 1024 [ 1285.878422][ T3677] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10307'. [ 1285.974323][ T3677] netlink: 43 bytes leftover after parsing attributes in process `syz.3.10307'. [ 1286.030536][ T3677] netlink: 'syz.3.10307': attribute type 6 has an invalid length. [ 1286.084173][ T3677] netlink: 'syz.3.10307': attribute type 5 has an invalid length. [ 1286.092424][ T3677] netlink: 43 bytes leftover after parsing attributes in process `syz.3.10307'. [ 1286.400080][ T3698] loop8: detected capacity change from 0 to 2048 [ 1286.565526][ T3698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1287.051282][ T3729] netlink: 'syz.3.10322': attribute type 32 has an invalid length. [ 1287.267183][T24003] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.527095][ T3745] openvswitch: netlink: Multiple metadata blocks provided [ 1287.689493][T24003] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.766211][ T3752] loop3: detected capacity change from 0 to 64 [ 1287.966734][ T3758] netlink: 'syz.8.10332': attribute type 2 has an invalid length. [ 1287.974648][ T3758] netlink: 'syz.8.10332': attribute type 1 has an invalid length. [ 1288.070276][T24003] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.369782][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1288.388452][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1288.397979][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1288.425625][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1288.435986][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1288.443453][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1288.454121][T24003] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.475910][ T3777] loop1: detected capacity change from 0 to 256 [ 1288.738888][ T3744] loop5: detected capacity change from 0 to 32768 [ 1288.942388][ T3744] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1289.062441][ T3744] OCFS2: ERROR (device loop5): ocfs2_validate_dx_root: Dir Index Root # 28549323745621536 has bad signature  [ 1289.104862][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10342'. [ 1289.145881][ T3744] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1289.156840][ T3744] OCFS2: File system is now read-only. [ 1289.162402][ T3744] (syz.5.10329,3744,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 1289.493665][ T5950] ocfs2: Unmounting device (7,5) on (node local) [ 1290.461440][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1290.625623][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10359'. [ 1290.638030][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 1290.652785][ T5915] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=98.5e [ 1290.668913][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.703384][ T5915] usb 6-1: Product: syz [ 1290.712459][ T5915] usb 6-1: Manufacturer: syz [ 1290.726280][ T5915] usb 6-1: SerialNumber: syz [ 1290.735827][ T54] Bluetooth: hci3: command tx timeout [ 1290.788190][ T5915] usb 6-1: config 0 descriptor?? [ 1290.984855][ T3879] loop0: detected capacity change from 0 to 512 [ 1290.992414][T24003] team0: Port device geneve0 removed [ 1291.072705][ T3879] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #15: comm syz.0.10361: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 1291.131226][ T5915] usb 6-1: USB disconnect, device number 2 [ 1291.196698][ T3879] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.10361: couldn't read orphan inode 15 (err -117) [ 1291.232488][ T3879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1291.255561][ T3879] ext4 filesystem being mounted at /1755/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1291.280550][ T3871] loop8: detected capacity change from 0 to 32768 [ 1291.300850][ T3871] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.10360 (3871) [ 1291.305453][ T3879] EXT4-fs error (device loop0): ext4_add_entry:2444: inode #2: comm syz.0.10361: Directory hole found for htree leaf block 0 [ 1291.317012][ T3863] loop1: detected capacity change from 0 to 32768 [ 1291.363314][ T3871] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1291.383942][ T3871] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 1291.401298][ T3871] BTRFS info (device loop8): using free-space-tree [ 1291.538062][ T5937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.018260][T23960] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1292.147476][ T3924] loop1: detected capacity change from 0 to 64 [ 1292.580299][T24003] bond0 (unregistering): Released all slaves [ 1292.643333][T24003] bond1 (unregistering): Released all slaves [ 1292.683489][ T3945] netlink: 'syz.8.10366': attribute type 39 has an invalid length. [ 1292.812229][ T3771] wlan0 speed is unknown, defaulting to 1000 [ 1292.846890][ T3771] vcan0 speed is unknown, defaulting to 1000 [ 1292.979644][ T54] Bluetooth: hci3: command tx timeout [ 1293.276851][ T3963] loop3: detected capacity change from 0 to 1024 [ 1293.344867][ T3963] hfsplus: keylen 65060 too large [ 1293.610411][ T3982] loop0: detected capacity change from 0 to 256 [ 1293.657185][ T3982] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1294.155539][ T4056] loop5: detected capacity change from 0 to 1024 [ 1294.224785][ T4056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.323664][ T3771] chnl_net:caif_netlink_parms(): no params data found [ 1294.480691][ T5950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.523590][ T3954] loop1: detected capacity change from 0 to 32768 [ 1294.558826][ T3954] XFS: noikeep mount option is deprecated. [ 1294.702987][ T3954] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1294.726256][ T4141] loop0: detected capacity change from 0 to 512 [ 1294.775669][ T4149] loop5: detected capacity change from 0 to 64 [ 1294.788470][ T4141] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.10384: bg 0: block 5: invalid block bitmap [ 1294.925953][ T4141] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1295.002083][ T4141] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.10384: invalid indirect mapped block 3 (level 2) [ 1295.075599][ T3954] XFS (loop1): Ending clean mount [ 1295.097757][ T4141] EXT4-fs (loop0): 2 truncates cleaned up [ 1295.104637][ T4141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1295.136258][ T3954] XFS (loop1): Quotacheck needed: Please wait. [ 1295.175758][ T4141] EXT4-fs error (device loop0): empty_inline_dir:1848: inode #12: block 7: comm syz.0.10384: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1295.206900][ T54] Bluetooth: hci3: command tx timeout [ 1295.261600][ T4141] EXT4-fs warning (device loop0): empty_inline_dir:1851: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1295.263620][ T3954] XFS (loop1): Quotacheck: Done. [ 1295.470395][ T4203] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1295.479646][ T4203] overlayfs: missing 'lowerdir' [ 1295.596611][ T5933] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1295.669268][ T5937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.816356][ T3771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.850362][ T3771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.919311][ T3771] bridge_slave_0: entered allmulticast mode [ 1295.926783][ T3771] bridge_slave_0: entered promiscuous mode [ 1296.065447][ T3771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.157213][ T3771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.221271][ T3771] bridge_slave_1: entered allmulticast mode [ 1296.242070][ T3771] bridge_slave_1: entered promiscuous mode [ 1296.289598][ T5915] wlan0 speed is unknown, defaulting to 1000 [ 1296.346653][ T5915] infiniband syz0: ib_query_port failed (-19) [ 1296.755542][ T3771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.820245][ T3771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.405680][ T54] Bluetooth: hci3: command tx timeout [ 1297.745714][ T3771] team0: Port device team_slave_0 added [ 1297.803406][ T3771] team0: Port device team_slave_1 added [ 1298.141934][T24003] hsr_slave_0: left promiscuous mode [ 1298.192878][T24003] hsr_slave_1: left promiscuous mode [ 1298.221253][ T4385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.306900][T24003] veth1_macvtap: left promiscuous mode [ 1298.327940][T24003] veth1_vlan: left promiscuous mode [ 1298.333332][T24003] veth0_vlan: left promiscuous mode [ 1298.517487][ T4394] loop0: detected capacity change from 0 to 512 [ 1298.599021][ T4394] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1298.604485][ T4392] loop1: detected capacity change from 0 to 4096 [ 1298.648560][ T4392] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1298.704123][ T4394] EXT4-fs error (device loop0): ext4_clear_blocks:874: inode #13: comm syz.0.10418: attempt to clear invalid blocks 2 len 1 [ 1298.754404][ T4394] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1298.839831][ T4394] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.10418: invalid indirect mapped block 1819239214 (level 0) [ 1298.887706][ T4392] ntfs3(loop1): ino=19, mi_enum_attr [ 1298.887799][ T4394] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.10418: invalid indirect mapped block 1819239214 (level 1) [ 1298.894327][ T4392] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1298.956700][ T4394] EXT4-fs (loop0): 1 truncate cleaned up [ 1298.963910][ T4394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.042894][ T4392] ntfs3(loop1): failed to convert "c46c" to cp857 [ 1299.063571][ T4392] ntfs3(loop1): ino=20, mi_enum_attr [ 1299.257764][ T5937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.418903][ T4369] loop8: detected capacity change from 0 to 32768 [ 1299.479294][ T4415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10423'. [ 1299.512249][ T4369] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 1299.534232][ T4369] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1299.768105][ T5915] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1299.790289][ T4369] XFS (loop8): Ending clean mount [ 1299.813718][ T4369] XFS (loop8): Quotacheck needed: Please wait. [ 1299.918032][ T4369] XFS (loop8): Quotacheck: Done. [ 1299.928132][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 1299.947137][ T5915] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1299.973076][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.981163][ T5915] usb 2-1: Product: syz [ 1299.986564][ T5915] usb 2-1: Manufacturer: syz [ 1299.991207][ T5915] usb 2-1: SerialNumber: syz [ 1300.011407][ T5915] usb 2-1: config 0 descriptor?? [ 1300.048811][ T5915] gspca_main: se401-2.14.0 probing 047d:5003 [ 1300.197520][T23960] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1300.494472][ T5915] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1300.520072][ T5915] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 1300.576046][ T5915] usb 2-1: USB disconnect, device number 12 [ 1301.866140][ T4512] loop3: detected capacity change from 0 to 764 [ 1301.919868][ T4512] Symlink component flag not implemented [ 1301.949412][ T4512] Symlink component flag not implemented (116) [ 1302.236336][ T4525] netlink: 'syz.3.10448': attribute type 3 has an invalid length. [ 1303.475298][ T4557] netlink: del zone limit has 4 unknown bytes [ 1303.516381][ T3771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.524214][ T3771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.588840][ T3771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.606485][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10442'. [ 1303.659561][ T3771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.667767][ T3771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.747387][T13875] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1303.830100][ T3771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.941351][T13875] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1303.958503][T13875] usb 9-1: config 0 has no interface number 0 [ 1303.972574][T13875] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1304.030131][T13875] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1304.058181][T13875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.112112][T13875] usb 9-1: Product: syz [ 1304.131246][T13875] usb 9-1: Manufacturer: syz [ 1304.135944][T13875] usb 9-1: SerialNumber: syz [ 1304.175218][T13875] usb 9-1: config 0 descriptor?? [ 1304.206600][T13875] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 1304.381576][ T3771] hsr_slave_0: entered promiscuous mode [ 1304.414772][ T3771] hsr_slave_1: entered promiscuous mode [ 1304.429783][ C0] yurex 9-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1304.473773][ T3771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1304.482416][ T3771] Cannot create hsr debugfs directory [ 1304.652663][ T6140] usb 9-1: USB disconnect, device number 13 [ 1304.659217][T13875] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1304.705747][ T6140] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 1304.867167][T13875] usb 1-1: Using ep0 maxpacket: 16 [ 1304.892839][T13875] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1304.925414][T13875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.960405][T13875] usb 1-1: Product: syz [ 1304.989399][T13875] usb 1-1: Manufacturer: syz [ 1304.996513][T13875] usb 1-1: SerialNumber: syz [ 1305.010975][T13875] usb 1-1: config 0 descriptor?? [ 1305.040347][T13875] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1305.125375][T13875] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1305.153421][T24003] IPVS: stop unused estimator thread 0... [ 1305.238879][ T4566] loop3: detected capacity change from 0 to 32768 [ 1305.285802][ T46] usb 1-1: USB disconnect, device number 22 [ 1305.308498][ T4566] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10461 (4566) [ 1305.375222][ T4566] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1305.421493][ T4566] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1305.444783][ T4566] BTRFS info (device loop3): using free-space-tree [ 1305.467905][ T3771] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1305.563570][ T3771] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1305.632487][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1305.669432][ T4749] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1305.721876][ T3771] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1305.778891][ T3771] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1305.873854][ T4623] loop1: detected capacity change from 0 to 32768 [ 1305.970821][ T4623] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1306.106337][ T5936] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1306.257484][T13875] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x136/0x1e0, xfs_agf block 0x1 [ 1306.277296][ T3771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.310707][T13875] XFS (loop1): Unmount and run xfs_repair [ 1306.319961][T13875] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1306.350609][T13875] 00000000: 58 41 47 46 00 00 00 30 00 00 00 00 00 00 10 00 XAGF...0........ [ 1306.366949][T13875] 00000010: 00 00 00 01 00 00 00 02 00 00 00 04 00 00 00 01 ................ [ 1306.379784][T13875] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 1306.385995][ T4786] tmpfs: Bad value for 'nr_blocks' [ 1306.389572][T13875] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d ca 00 00 00 00 ................ [ 1306.461286][T13875] 00000040: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 1306.492228][ T3771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.520659][T13875] 00000050: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1306.560245][T13875] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1306.570073][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.577221][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.595659][T13875] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1306.639296][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.646510][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.690161][ T4623] XFS (loop1): metadata I/O error in "xfs_read_agf+0x292/0x560" at daddr 0x1 len 1 error 74 [ 1306.742028][ T4623] XFS (loop1): Error -117 reserving per-AG metadata reserve pool. [ 1306.809348][ T4623] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x22e/0x260 (fs/xfs/xfs_fsops.c:557). Shutting down filesystem. [ 1306.919166][ T4623] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1306.993706][ T4623] XFS (loop1): Ending clean mount [ 1307.341444][ T5933] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1307.824600][ T3771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.444976][ T4790] loop8: detected capacity change from 0 to 32768 [ 1308.579214][ T4864] loop5: detected capacity change from 0 to 16 [ 1308.614921][ T4790] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1308.620215][ T4864] erofs (device loop5): mounted with root inode @ nid 36. [ 1308.720589][ T4790] OCFS2: ERROR (device loop8): ocfs2_validate_dx_root: Dir Index Root # 28549323745621536 has bad signature  [ 1308.745564][ T4803] loop3: detected capacity change from 0 to 32768 [ 1308.752996][ T4790] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1308.781096][T13875] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1308.795587][ T4803] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10475 (4803) [ 1308.812918][ T4790] OCFS2: File system is now read-only. [ 1308.844253][ T4790] (syz.8.10476,4790,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 1308.895644][ T4803] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1308.953101][ T4803] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1308.972445][T13875] usb 1-1: Using ep0 maxpacket: 8 [ 1308.985358][ T3771] veth0_vlan: entered promiscuous mode [ 1308.995196][T13875] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1309.015115][T13875] usb 1-1: config 0 has no interface number 0 [ 1309.029533][T13875] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1309.050168][ T4803] BTRFS info (device loop3): using free-space-tree [ 1309.058311][ T3771] veth1_vlan: entered promiscuous mode [ 1309.061343][T13875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.097588][T13875] usb 1-1: Product: syz [ 1309.139856][T13875] usb 1-1: Manufacturer: syz [ 1309.163624][T13875] usb 1-1: SerialNumber: syz [ 1309.166718][ T3771] veth0_macvtap: entered promiscuous mode [ 1309.187643][T13875] usb 1-1: config 0 descriptor?? [ 1309.220899][ T3771] veth1_macvtap: entered promiscuous mode [ 1309.280776][T23960] ocfs2: Unmounting device (7,8) on (node local) [ 1309.290476][ T3771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.325586][ T3771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.335471][ T3771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.399894][ T3771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.447835][ T3771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.473858][T13875] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1309.506881][T13875] usb 1-1: No valid video chain found. [ 1309.516589][ T3771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.572646][ T3771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.631106][ T3771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.695094][ T5915] usb 1-1: USB disconnect, device number 23 [ 1309.710460][ T3771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.746209][ T3771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.795542][ T3771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.827548][ T3771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.838063][ T3771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.892810][ T5936] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1309.906058][ T3771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.952149][ T3771] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.011844][ T3771] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.035584][ T3771] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.072494][ T3771] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.481152][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.489044][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.672719][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.693319][ T4956] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10498'. [ 1310.725680][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.385457][ T4980] loop0: detected capacity change from 0 to 64 [ 1311.816554][ T4997] loop3: detected capacity change from 0 to 512 [ 1311.866724][ T5008] netlink: 'syz.1.10507': attribute type 9 has an invalid length. [ 1311.918334][ T5008] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10507'. [ 1311.931611][ T4997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1312.051405][ T4997] ext4 filesystem being mounted at /1698/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1312.525218][ T5936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1313.170697][ T5074] program syz.1.10525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.212544][ T5074] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1313.716766][ T5095] netlink: 'syz.9.10530': attribute type 5 has an invalid length. [ 1313.786033][ T5095] : entered promiscuous mode [ 1313.911985][ T5061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1313.946023][ T5061] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1313.976921][ T5061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1313.994136][ T5061] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1314.185338][ T5048] loop8: detected capacity change from 0 to 32768 [ 1314.220099][ T5048] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.10518 (5048) [ 1314.275852][ T5048] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1314.336256][ T5048] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 1314.374209][ T5048] BTRFS info (device loop8): disk space caching is enabled [ 1314.429445][ T5048] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1314.654261][ T5156] loop1: detected capacity change from 0 to 64 [ 1314.691892][ T5048] BTRFS info (device loop8): rebuilding free space tree [ 1314.754830][ T5048] BTRFS info (device loop8): disabling free space tree [ 1314.782437][ T5048] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1314.822826][ T5048] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1315.166214][T23960] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1315.201577][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.208966][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.223894][ T52] sl0: compressed packet ignored [ 1315.821288][ T5061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1315.842004][ T5061] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1316.648826][ T5262] tmpfs: Bad value for 'nr_blocks' [ 1316.673526][ T5263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1317.178915][ T5281] loop5: detected capacity change from 0 to 2048 [ 1317.242461][ T5281] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1317.275095][ T5282] loop9: detected capacity change from 0 to 4096 [ 1317.343342][ T5282] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 1317.755155][ T5301] loop3: detected capacity change from 0 to 4096 [ 1317.929113][ T5318] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1318.224018][ T5330] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1319.611085][ T5408] program syz.9.10591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1319.705912][ T5408] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1319.843654][ T5421] No such timeout policy "syz0" [ 1320.240913][T23234] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1320.423685][T23234] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 1320.431939][T23234] usb 4-1: config 0 has no interface number 0 [ 1320.507293][T23234] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1320.516997][T23234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.563341][T23234] usb 4-1: Product: syz [ 1320.571915][T23234] usb 4-1: Manufacturer: syz [ 1320.577852][T23234] usb 4-1: SerialNumber: syz [ 1320.603246][T23234] usb 4-1: config 0 descriptor?? [ 1320.621598][T23234] qmi_wwan 4-1:0.207: bogus CDC Union: master=0, slave=1 [ 1320.628923][ T5915] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1320.817242][ T5915] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1320.869302][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.901061][T23234] qmi_wwan 4-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1320.935919][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1321.007182][ T5915] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1321.030753][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.071605][ T5915] usb 2-1: Product: syz [ 1321.090873][ T5915] usb 2-1: Manufacturer: syz [ 1321.138508][ T5915] usb 2-1: SerialNumber: syz [ 1321.154248][ T5915] usb 2-1: config 0 descriptor?? [ 1321.165321][T23234] usb 4-1: USB disconnect, device number 16 [ 1321.202016][ T5915] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1321.254443][ T5915] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1321.310050][ T5502] PM: Enabling pm_trace changes system date and time during resume. [ 1321.310050][ T5502] PM: Correct system time has to be restored manually after resume. [ 1321.470912][T23236] usb 2-1: USB disconnect, device number 13 [ 1322.370728][ T5540] netlink: 'syz.9.10616': attribute type 11 has an invalid length. [ 1322.434351][ T5477] loop0: detected capacity change from 0 to 32768 [ 1322.476664][ T5477] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10606 (5477) [ 1322.593575][ T5477] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1322.649316][ T5477] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1322.692011][ T5477] BTRFS info (device loop0): disk space caching is enabled [ 1322.741831][ T5477] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1323.163193][ T5477] BTRFS info (device loop0): rebuilding free space tree [ 1323.233643][T23236] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1323.262206][ T5477] BTRFS info (device loop0): disabling free space tree [ 1323.287149][ T5477] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1323.327829][ T5477] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1323.458443][T23236] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1323.511668][T23236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1323.565319][T23236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 64 [ 1323.598006][T23236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 1323.692807][T23236] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1323.723886][T23236] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.756076][ T5937] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1323.768195][T23236] usb 9-1: Product: syz [ 1323.772463][T23236] usb 9-1: Manufacturer: syz [ 1323.777091][T23236] usb 9-1: SerialNumber: syz [ 1323.809227][ T5611] loop3: detected capacity change from 0 to 64 [ 1323.821175][T23236] usb 9-1: config 0 descriptor?? [ 1324.334084][T23236] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1324.377512][T23236] input input67: Device does not respond to id packet M [ 1324.402424][T23236] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1324.408533][T23236] input input67: Device does not respond to id packet P [ 1324.466735][T23236] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1324.472843][T23236] input input67: Device does not respond to id packet B [ 1324.544000][T23236] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1324.579147][ T5639] loop3: detected capacity change from 0 to 256 [ 1324.591358][T23236] input input67: Device does not respond to id packet N [ 1324.623617][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10634'. [ 1324.632742][ T29] audit: type=1326 audit(2000000670.242:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5642 comm="syz.5.10633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1324.666172][T23236] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1324.682566][T23236] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1324.706139][ T5641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10634'. [ 1324.734156][T23236] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1324.759209][T23236] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1324.784588][ T29] audit: type=1326 audit(2000000670.242:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5642 comm="syz.5.10633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1324.814801][T23236] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input67 [ 1324.856300][ T29] audit: type=1326 audit(2000000670.279:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5642 comm="syz.5.10633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1324.884311][ T29] audit: type=1326 audit(2000000670.279:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5642 comm="syz.5.10633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1324.941760][T23236] usb 9-1: USB disconnect, device number 14 [ 1324.941868][ C0] iforce 9-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 1325.035811][ T29] audit: type=1326 audit(2000000670.279:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5642 comm="syz.5.10633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1325.082155][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10635'. [ 1325.548618][ T5687] loop3: detected capacity change from 0 to 2048 [ 1326.229199][ T5720] loop8: detected capacity change from 0 to 16 [ 1326.296353][ T5720] erofs (device loop8): mounted with root inode @ nid 36. [ 1326.398519][ T5731] ip6t_srh: unknown srh match flags 4001 [ 1326.852441][ T5757] netlink: 'syz.0.10656': attribute type 1 has an invalid length. [ 1327.258544][ T5781] loop0: detected capacity change from 0 to 256 [ 1327.329476][ T5781] exfat: Deprecated parameter 'utf8' [ 1327.334879][ T5781] exfat: Deprecated parameter 'utf8' [ 1327.473928][ T5781] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1327.563860][ T5793] wireguard0: entered promiscuous mode [ 1327.617013][ T5793] wireguard0: entered allmulticast mode [ 1328.120898][ T5824] loop0: detected capacity change from 0 to 16 [ 1328.152488][ T5824] erofs (device loop0): mounted with root inode @ nid 36. [ 1328.209227][ T5824] tmpfs: Bad value for 'size' [ 1328.574197][ T5827] loop5: detected capacity change from 0 to 8192 [ 1329.133367][ T5786] loop3: detected capacity change from 0 to 32768 [ 1329.200349][ T5786] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10662 (5786) [ 1329.274066][ T5873] wireguard0: entered promiscuous mode [ 1329.295367][ T5915] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1329.303658][ T5873] wireguard0: entered allmulticast mode [ 1329.405898][ T5786] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1329.466309][ T5786] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1329.475618][ T5786] BTRFS info (device loop3): disk space caching is enabled [ 1329.493846][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1329.537425][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1329.556248][ T5786] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1329.570697][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1329.594302][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1329.652680][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10685'. [ 1329.665264][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1329.723713][ T5915] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1329.755770][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.776400][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1329.783656][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.794842][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1329.807587][ T8] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1329.824922][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.827702][ T5915] usb 1-1: Product: syz [ 1329.834585][ T8] usb 6-1: Product: syz [ 1329.841713][ T8] usb 6-1: Manufacturer: syz [ 1329.846518][ T8] usb 6-1: SerialNumber: syz [ 1329.860003][ T8] usb 6-1: config 0 descriptor?? [ 1329.872775][ T5915] usb 1-1: Manufacturer: syz [ 1329.888365][ T5915] usb 1-1: SerialNumber: syz [ 1329.917252][ T5915] usb 1-1: config 0 descriptor?? [ 1330.028897][ T5786] BTRFS info (device loop3): rebuilding free space tree [ 1330.172227][ T5786] BTRFS info (device loop3): disabling free space tree [ 1330.179302][ T5786] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1330.214921][ T5915] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1330.257825][ T5786] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1330.371516][ T8] usb 6-1: USB disconnect, device number 3 [ 1330.429686][T22612] usb 1-1: USB disconnect, device number 24 [ 1330.740861][ T5936] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1331.786199][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10700'. [ 1332.528096][ T6058] netlink: 'syz.3.10708': attribute type 10 has an invalid length. [ 1332.605319][ T6058] hsr0: entered promiscuous mode [ 1333.475338][ T6091] netlink: 'syz.9.10717': attribute type 2 has an invalid length. [ 1333.514005][ T6091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1333.715710][ T6099] loop0: detected capacity change from 0 to 128 [ 1333.903466][ T6044] loop1: detected capacity change from 0 to 32768 [ 1333.968960][ T6044] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10703 (6044) [ 1334.042097][ T5937] sysv_free_block: flc_count > flc_size [ 1334.061937][ T6044] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1334.080701][ T5937] sysv_free_block: flc_count > flc_size [ 1334.097582][ T5937] sysv_free_block: flc_count > flc_size [ 1334.109494][ T6044] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1334.130755][ T5937] sysv_free_block: flc_count > flc_size [ 1334.148975][ T5937] sysv_free_block: flc_count > flc_size [ 1334.170520][ T6044] BTRFS info (device loop1): using free-space-tree [ 1334.188179][ T5937] sysv_free_block: flc_count > flc_size [ 1334.213487][ T5937] sysv_free_block: flc_count > flc_size [ 1334.288395][ T5937] sysv_free_block: flc_count > flc_size [ 1334.312765][ T5937] sysv_free_block: flc_count > flc_size [ 1334.334788][ T5937] sysv_free_block: flc_count > flc_size [ 1334.374652][ T5937] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1335.147915][ T5933] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1335.590363][ T6200] netlink: 'syz.3.10730': attribute type 7 has an invalid length. [ 1335.717476][ T6087] loop5: detected capacity change from 0 to 32768 [ 1336.044308][ T6213] tmpfs: Bad value for 'mpol' [ 1336.703825][ T5915] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1336.898146][ T5915] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1336.901179][ T6254] loop8: detected capacity change from 0 to 256 [ 1336.906636][ T5915] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1336.983482][ T5915] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.995327][ T5915] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1337.013499][ T6254] exfat: Deprecated parameter 'utf8' [ 1337.027524][ T5915] usb 10-1: config 1 has no interface number 0 [ 1337.034628][ T5915] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1337.083512][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.108939][ T6260] loop0: detected capacity change from 0 to 1764 [ 1337.187192][ T5915] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1337.334664][ T6254] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1337.388134][ T5915] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values [ 1337.429091][ T5915] snd_usb_pod 10-1:1.1: invalid control EP [ 1337.452232][ T5915] snd_usb_pod 10-1:1.1: cannot start listening: -22 [ 1337.459080][ T5915] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1337.538666][ T5915] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1337.655111][ T5915] usb 10-1: USB disconnect, device number 2 [ 1338.294968][ T6312] loop3: detected capacity change from 0 to 2048 [ 1338.372508][ T6312] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1338.403234][ T5949] udevd[5949]: incorrect nilfs2 checksum on /dev/loop3 [ 1338.479327][ T6323] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1338.650489][ T6324] loop8: detected capacity change from 0 to 2048 [ 1338.661059][ T6328] netlink: 'syz.9.10756': attribute type 10 has an invalid length. [ 1338.730711][ T6328] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1338.759207][ T6261] loop5: detected capacity change from 0 to 32768 [ 1338.884441][ T6335] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10758'. [ 1338.933461][ T6335] bond_slave_0: entered promiscuous mode [ 1338.940030][ T6335] bond_slave_1: entered promiscuous mode [ 1338.945780][ T6335] bridge0: entered promiscuous mode [ 1338.951825][ T6335] team_slave_0: entered promiscuous mode [ 1338.958062][ T6335] team_slave_1: entered promiscuous mode [ 1339.194711][ T6344] loop3: detected capacity change from 0 to 1024 [ 1339.252511][ T6344] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1339.301666][ T6344] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1339.354222][ T6344] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1339.409384][ T6344] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.10759: unexpected bad inode w/o EXT4_IGET_BAD [ 1339.493114][ T6344] EXT4-fs (loop3): no journal found [ 1339.498667][T23236] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1339.515493][ T6344] EXT4-fs (loop3): can't get journal size [ 1339.529223][ T6366] loop8: detected capacity change from 0 to 2048 [ 1339.544437][ T6344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1339.665735][T23236] usb 10-1: Using ep0 maxpacket: 16 [ 1339.677608][T23236] usb 10-1: config 0 has an invalid interface number: 237 but max is 0 [ 1339.681952][ T6366] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1339.688131][T23236] usb 10-1: config 0 has no interface number 0 [ 1339.721670][ T5936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.772641][T23236] usb 10-1: config 0 interface 237 has no altsetting 0 [ 1339.795519][T23236] usb 10-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1339.830849][T23236] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.886653][T23236] usb 10-1: Product: syz [ 1339.936807][T23236] usb 10-1: Manufacturer: syz [ 1339.977242][T23236] usb 10-1: SerialNumber: syz [ 1340.004060][T23236] usb 10-1: config 0 descriptor?? [ 1340.061674][T23236] snd_usb_podhd 10-1:0.237: Line 6 POD HD300 found [ 1340.283599][T23236] snd_usb_podhd 10-1:0.237: cannot get proper max packet size [ 1340.326090][T23236] snd_usb_podhd 10-1:0.237: Line 6 POD HD300 now disconnected [ 1340.370953][T23236] snd_usb_podhd 10-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 1340.497745][ T6411] netlink: 224 bytes leftover after parsing attributes in process `syz.8.10771'. [ 1340.580310][ T6416] loop1: detected capacity change from 0 to 256 [ 1340.617112][ T8] usb 10-1: USB disconnect, device number 3 [ 1340.658807][ T6416] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1341.999093][ T29] audit: type=1326 audit(2000000686.499:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.5.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1342.127586][ T29] audit: type=1326 audit(2000000686.499:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.5.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1342.511411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1342.543265][ T6520] (syz.8.10799,6520,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1342.583880][ T6526] Malformed UNC in devname [ 1342.583880][ T6526] [ 1342.594570][ T6520] (syz.8.10799,6520,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1342.626793][ T6526] CIFS: VFS: Malformed UNC in devname [ 1342.633243][ T6521] loop5: detected capacity change from 0 to 1024 [ 1342.791334][ T6521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1343.097669][ T29] audit: type=1326 audit(2000000687.528:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.10806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048498cde9 code=0x7ffc0000 [ 1343.097991][ T5950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.214133][ T29] audit: type=1326 audit(2000000687.547:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.10806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048498cde9 code=0x7ffc0000 [ 1343.351541][ T29] audit: type=1326 audit(2000000687.575:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.10806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f048498cde9 code=0x7ffc0000 [ 1343.449669][ T29] audit: type=1326 audit(2000000687.575:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.10806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048498cde9 code=0x7ffc0000 [ 1343.552844][ T6569] loop5: detected capacity change from 0 to 256 [ 1343.599367][ T6565] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1343.621765][ T6569] exfat: Deprecated parameter 'utf8' [ 1343.627194][ T6569] exfat: Deprecated parameter 'utf8' [ 1343.647160][ T6575] loop9: detected capacity change from 0 to 256 [ 1343.710724][ T6569] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1343.727237][ T6577] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1343.882351][ T6575] FAT-fs (loop9): Directory bread(block 64) failed [ 1343.902237][ T6575] FAT-fs (loop9): Directory bread(block 65) failed [ 1343.932444][ T6575] FAT-fs (loop9): Directory bread(block 66) failed [ 1343.951532][ T6575] FAT-fs (loop9): Directory bread(block 67) failed [ 1343.996752][ T6575] FAT-fs (loop9): Directory bread(block 68) failed [ 1344.003872][ T6575] FAT-fs (loop9): Directory bread(block 69) failed [ 1344.060321][ T6594] netlink: 'syz.0.10818': attribute type 2 has an invalid length. [ 1344.089676][ T6575] FAT-fs (loop9): Directory bread(block 70) failed [ 1344.107342][ T6594] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10818'. [ 1344.145332][ T6575] FAT-fs (loop9): Directory bread(block 71) failed [ 1344.149455][ T6598] xt_hashlimit: size too large, truncated to 1048576 [ 1344.152005][ T6575] FAT-fs (loop9): Directory bread(block 72) failed [ 1344.190551][ T6598] xt_hashlimit: overflow, rate too high: 0 [ 1344.200680][ T6575] FAT-fs (loop9): Directory bread(block 73) failed [ 1344.590170][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10823'. [ 1344.833145][ T6630] loop1: detected capacity change from 0 to 256 [ 1345.427129][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10835'. [ 1346.411168][ T6710] netlink: 'syz.0.10851': attribute type 9 has an invalid length. [ 1346.619184][ T29] audit: type=1326 audit(2000000690.820:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.1.10855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2c18cde9 code=0x7ffc0000 [ 1346.763857][ T29] audit: type=1326 audit(2000000690.820:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.1.10855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2c18cde9 code=0x7ffc0000 [ 1346.899245][ T29] audit: type=1326 audit(2000000690.858:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.1.10855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f8b2c18cde9 code=0x7ffc0000 [ 1346.977621][ T6737] netlink: 'syz.3.10859': attribute type 21 has an invalid length. [ 1346.985612][ T6737] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10859'. [ 1347.040223][ T29] audit: type=1326 audit(2000000690.858:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.1.10855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2c18cde9 code=0x7ffc0000 [ 1347.070428][ T6737] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10859'. [ 1347.128296][ T6745] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10861'. [ 1347.177853][ T6745] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10861'. [ 1347.606879][ T6774] loop5: detected capacity change from 0 to 164 [ 1347.926176][ T6783] netlink: 56 bytes leftover after parsing attributes in process `syz.9.10872'. [ 1348.227011][ T6802] nftables ruleset with unbound set [ 1348.478310][ T6814] loop5: detected capacity change from 0 to 64 [ 1348.707717][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10883'. [ 1348.835940][ T6833] netlink: 666 bytes leftover after parsing attributes in process `syz.9.10884'. [ 1349.222755][ T6849] openvswitch: netlink: IP tunnel dst address not specified [ 1349.542898][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1349.542925][ T29] audit: type=1326 audit(2000000693.552:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e878cde9 code=0x7ffc0000 [ 1349.571367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.724775][ T29] audit: type=1326 audit(2000000693.552:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e878cde9 code=0x7ffc0000 [ 1349.747452][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.864601][ T29] audit: type=1326 audit(2000000693.561:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fa2e878cde9 code=0x7ffc0000 [ 1349.971461][ T29] audit: type=1326 audit(2000000693.561:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e878cde9 code=0x7ffc0000 [ 1350.120602][ T29] audit: type=1326 audit(2000000693.561:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.10893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e878cde9 code=0x7ffc0000 [ 1350.276204][ T29] audit: type=1326 audit(2000000694.235:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.5.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1350.298648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.370415][ T6822] loop1: detected capacity change from 0 to 32768 [ 1350.417498][ T29] audit: type=1326 audit(2000000694.235:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.5.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1350.541935][ T29] audit: type=1326 audit(2000000694.300:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.5.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1350.717282][ T29] audit: type=1326 audit(2000000694.338:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.5.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1350.801893][ T29] audit: type=1326 audit(2000000694.338:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.5.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dafd8cde9 code=0x7ffc0000 [ 1351.035824][ T6928] netlink: 'syz.8.10909': attribute type 1 has an invalid length. [ 1351.472790][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10915'. [ 1351.947435][ T6974] netlink: 'syz.5.10923': attribute type 27 has an invalid length. [ 1352.583341][ T7004] overlayfs: cannot append lower layer [ 1353.169863][ T7029] loop1: detected capacity change from 0 to 2048 [ 1353.288307][ T7042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1353.524272][ T7029] NILFS (loop1): error -2 truncating bmap (ino=16) [ 1353.718908][ T7060] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10947'. [ 1354.102454][ T7076] loop1: detected capacity change from 0 to 256 [ 1354.134444][ T7076] exfat: Deprecated parameter 'namecase' [ 1354.295119][ T7076] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1354.521394][ T7096] QAT: Device 7 not found [ 1354.762524][ T7109] loop1: detected capacity change from 0 to 64 [ 1355.395018][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10966'. [ 1355.457425][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10966'. [ 1355.848948][ T7162] autofs4:pid:7162:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 1356.816604][ T7209] SET target dimension over the limit! [ 1357.168412][ T7226] loop9: detected capacity change from 0 to 64 [ 1357.281587][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1357.281617][ T29] audit: type=1800 audit(2000000700.792:258): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10992" name="file1" dev="loop9" ino=18 res=0 errno=0 [ 1357.796424][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10999'. [ 1357.825525][ T7255] cgroup: Name too long [ 1358.096033][ T7260] nfs: Unknown parameter 'ntext' [ 1358.401697][ T7267] loop3: detected capacity change from 0 to 4096 [ 1358.445487][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11008'. [ 1358.456053][ T7267] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1358.555633][ T7267] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1358.775610][ T7292] trusted_key: encrypted_key: hex blob is missing [ 1358.886396][ T7229] loop1: detected capacity change from 0 to 32768 [ 1359.035981][ T7229] jfs_strtoUCS: char2uni returned -22. [ 1359.071449][ T7229] charset = euc-jp, char = 0xd4 [ 1359.805293][ T7342] dlm: no locking on control device [ 1359.913402][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1360.097643][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1360.138747][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.172085][ T9] usb 6-1: Product: syz [ 1360.176313][ T9] usb 6-1: Manufacturer: syz [ 1360.199289][ T9] usb 6-1: SerialNumber: syz [ 1360.236178][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1360.307789][T13875] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1360.888048][T23234] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1361.126083][T23234] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1361.179846][T23234] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.292607][T23234] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1361.368037][T23234] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1361.419488][T23234] usb 9-1: Manufacturer: syz [ 1361.539191][T23234] usb 9-1: config 0 descriptor?? [ 1361.854790][ T7416] loop1: detected capacity change from 0 to 512 [ 1362.113279][T23234] rc_core: IR keymap rc-hauppauge not found [ 1362.137164][ T7416] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1362.171990][T23234] Registered IR keymap rc-empty [ 1362.243998][T23234] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1362.255084][ T7416] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1362.326840][ T7416] EXT4-fs error (device loop1): ext4_acquire_dquot:6925: comm syz.1.11043: Failed to acquire dquot type 1 [ 1362.369718][T23234] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input68 [ 1362.511320][ T7416] EXT4-fs (loop1): 1 truncate cleaned up [ 1362.534970][ C1] igorplugusb 9-1:0.0: Error: urb status = -32 [ 1362.596302][ T8] usb 6-1: USB disconnect, device number 4 [ 1362.604504][ T7416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1362.607184][T13875] usb 6-1: Service connection timeout for: 256 [ 1362.622686][T23234] usb 9-1: USB disconnect, device number 15 [ 1362.627653][T13875] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1362.639966][T13875] ath9k_htc: Failed to initialize the device [ 1362.646287][ T8] usb 6-1: ath9k_htc: USB layer deinitialized [ 1362.700017][ T7416] ext4 filesystem being mounted at /1957/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1362.824063][ T7416] Quota error (device loop1): do_check_range: Getting block 1536 out of range 0-5 [ 1363.044738][ T7466] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1363.149356][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.458845][ T7481] loop3: detected capacity change from 0 to 512 [ 1363.522897][ T7481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1363.586061][ T7484] loop1: detected capacity change from 0 to 2048 [ 1363.630620][ T7481] EXT4-fs (loop3): 1 orphan inode deleted [ 1363.648921][ T7481] EXT4-fs (loop3): 1 truncate cleaned up [ 1363.656040][ T7481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1363.725925][ T7484] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1363.740748][ T7484] UDF-fs: Scanning with blocksize 512 failed [ 1363.742077][ T7481] EXT4-fs error (device loop3): ext4_search_dir:1504: inode #12: block 7: comm syz.3.11054: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 1363.823635][ T7484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1363.866440][ T7481] EXT4-fs (loop3): Remounting filesystem read-only [ 1363.897242][ T7499] loop8: detected capacity change from 0 to 256 [ 1363.922899][ T7422] loop9: detected capacity change from 0 to 32768 [ 1364.012696][ T7422] (syz.9.11044,7422,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1364.146436][ T7422] (syz.9.11044,7422,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1364.229385][ T7499] FAT-fs (loop8): Directory bread(block 64) failed [ 1364.245371][ T7499] FAT-fs (loop8): Directory bread(block 65) failed [ 1364.251502][ T7422] JBD2: Ignoring recovery information on journal [ 1364.300680][ T7499] FAT-fs (loop8): Directory bread(block 66) failed [ 1364.323476][ T5936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.371360][ T7499] FAT-fs (loop8): Directory bread(block 67) failed [ 1364.378034][ T7499] FAT-fs (loop8): Directory bread(block 68) failed [ 1364.418192][ T7422] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1364.466883][ T7499] FAT-fs (loop8): Directory bread(block 69) failed [ 1364.509700][ T7528] netlink: 'syz.1.11062': attribute type 7 has an invalid length. [ 1364.532733][ T7499] FAT-fs (loop8): Directory bread(block 70) failed [ 1364.589423][ T7499] FAT-fs (loop8): Directory bread(block 71) failed [ 1364.607399][ T7499] FAT-fs (loop8): Directory bread(block 72) failed [ 1364.627726][ T7499] FAT-fs (loop8): Directory bread(block 73) failed [ 1364.827581][ T7536] netlink: 'syz.0.11065': attribute type 3 has an invalid length. [ 1364.903221][ T3771] ocfs2: Unmounting device (7,9) on (node local) [ 1364.922478][ T7536] netlink: 'syz.0.11065': attribute type 1 has an invalid length. [ 1364.980407][ T7536] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11065'. [ 1365.234967][ T7554] loop3: detected capacity change from 0 to 128 [ 1365.353242][ T7554] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1365.391386][ T7559] loop1: detected capacity change from 0 to 1024 [ 1365.406603][ T7554] ext4 filesystem being mounted at /1803/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1365.548336][ T7554] EXT4-fs warning (device loop3): verify_group_input:136: Cannot add at group 3 (only 1 groups) [ 1365.743789][ T7570] loop8: detected capacity change from 0 to 4096 [ 1365.866350][ T5936] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1365.889431][ T7583] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1366.228021][ T7602] loop3: detected capacity change from 0 to 1024 [ 1366.285385][ T5915] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1366.498511][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 1366.541736][ T5915] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 1366.562768][ T5915] usb 1-1: config 0 has no interface number 0 [ 1366.568984][ T5915] usb 1-1: config 0 interface 224 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1366.590307][ T5915] usb 1-1: config 0 interface 224 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1366.690998][ T5915] usb 1-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=ea.ac [ 1366.736509][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.759347][ T5915] usb 1-1: Product: syz [ 1366.763591][ T5915] usb 1-1: Manufacturer: syz [ 1366.835192][ T5915] usb 1-1: SerialNumber: syz [ 1366.864723][ T5915] usb 1-1: config 0 descriptor?? [ 1366.873342][ T7590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1366.905072][ T7590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1367.173961][ T7590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1367.181304][ T7590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1367.335180][ T5915] cdc_subset 1-1:0.224 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, ALi M5632, e2:6b:74:1e:1e:cf [ 1367.601476][ T8] usb 1-1: USB disconnect, device number 25 [ 1367.644035][ T8] cdc_subset 1-1:0.224 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, ALi M5632 [ 1367.742682][ T7668] loop8: detected capacity change from 0 to 1024 [ 1367.975747][ T7612] loop1: detected capacity change from 0 to 32768 [ 1368.035667][ T7612] (syz.1.11081,7612,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1368.115731][ T7612] (syz.1.11081,7612,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1368.134304][ T5915] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1368.223821][ T7612] JBD2: Ignoring recovery information on journal [ 1368.348869][ T5915] usb 9-1: Using ep0 maxpacket: 16 [ 1368.369568][ T5915] usb 9-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 1368.380206][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 1368.405567][ T5915] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1368.437048][ T7612] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1368.450902][ T5915] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1368.497416][ T5915] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1368.540448][ T5915] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1368.548531][ T5915] usb 9-1: Manufacturer: syz [ 1368.577331][ T5915] usb 9-1: config 0 descriptor?? [ 1368.625152][ T7668] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1368.773430][ T5933] ocfs2: Unmounting device (7,1) on (node local) [ 1368.794246][ T7651] loop9: detected capacity change from 0 to 32768 [ 1368.945200][ T5915] usb 9-1: USB disconnect, device number 16 [ 1370.357386][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11111'. [ 1371.305706][ T7814] loop5: detected capacity change from 0 to 256 [ 1371.416833][ T7814] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1371.550231][ T7814] syz.5.11125: attempt to access beyond end of device [ 1371.550231][ T7814] loop5: rw=0, sector=295096, nr_sectors = 1 limit=256 [ 1371.601784][ T7827] netlink: 'syz.9.11128': attribute type 16 has an invalid length. [ 1371.630120][ T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1371.655319][ T7827] netlink: 'syz.9.11128': attribute type 17 has an invalid length. [ 1371.739949][ T7827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1371.840775][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1371.880692][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1371.915690][ T9] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1371.946035][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.994028][ T9] usb 2-1: Product: syz [ 1371.998261][ T9] usb 2-1: Manufacturer: syz [ 1372.040777][ T9] usb 2-1: SerialNumber: syz [ 1372.058790][ T7836] Cannot find del_set index 286 as target [ 1372.074366][ T9] usb 2-1: config 0 descriptor?? [ 1372.117582][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1372.435348][T13875] usb 2-1: USB disconnect, device number 14 [ 1373.051968][ T7882] qrtr: Invalid version 0 [ 1373.565612][ T7908] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1373.568301][ T7909] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1373.624551][ T7902] loop8: detected capacity change from 0 to 4096 [ 1373.653756][ T7908] exFAT-fs (nullb0): invalid boot record signature [ 1373.660326][ T7908] exFAT-fs (nullb0): failed to read boot sector [ 1373.717273][ T7908] exFAT-fs (nullb0): failed to recognize exfat type [ 1373.965591][ T7902] ntfs3(loop8): try to read out of volume at offset 0x3fffffc7000 [ 1374.008891][ T7902] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB [ 1374.296564][ T7935] loop3: detected capacity change from 0 to 2048 [ 1374.362899][ T7935] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1374.463723][ T7948] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1374.655912][ T7935] syz.3.11159: attempt to access beyond end of device [ 1374.655912][ T7935] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 1374.738560][ T7935] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 1375.115211][ T7974] netlink: 'syz.3.11170': attribute type 16 has an invalid length. [ 1375.123197][ T7974] netlink: 'syz.3.11170': attribute type 17 has an invalid length. [ 1375.225606][ T7974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1375.488408][ T7924] loop1: detected capacity change from 0 to 32768 [ 1375.532779][ T7924] XFS: ikeep mount option is deprecated. [ 1375.644865][ T7924] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1375.834215][ T7924] XFS (loop1): Ending clean mount [ 1375.841345][ T7924] XFS (loop1): Quotacheck needed: Please wait. [ 1376.076363][ T7924] XFS (loop1): Quotacheck: Done. [ 1376.363461][ T8036] IPv6: NLM_F_CREATE should be specified when creating new route [ 1376.394128][ T5933] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1376.427534][ T8038] loop5: detected capacity change from 0 to 2048 [ 1376.540568][ T8043] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1376.663358][ T8052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11192'. [ 1376.756838][ T8056] loop8: detected capacity change from 0 to 256 [ 1376.774434][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1376.797925][ T8056] exfat: Deprecated parameter 'utf8' [ 1376.803346][ T8056] exfat: Deprecated parameter 'namecase' [ 1376.928139][ T8056] exFAT-fs (loop8): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1376.996550][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1377.008797][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.017937][ T9] usb 10-1: Product: syz [ 1377.026875][ T9] usb 10-1: Manufacturer: syz [ 1377.035731][ T9] usb 10-1: SerialNumber: syz [ 1377.068979][ T9] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1377.125947][ T8] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1377.672413][T23234] usb 10-1: USB disconnect, device number 4 [ 1378.041487][ T8098] loop5: detected capacity change from 0 to 4096 [ 1378.080787][ T8098] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1378.157901][ T8098] ntfs3(loop5): ino=19, mi_enum_attr [ 1378.172953][ T8098] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1378.302274][ T8098] ntfs3(loop5): failed to convert "c46c" to cp863 [ 1378.335293][ T8098] ntfs3(loop5): ino=20, mi_enum_attr [ 1378.443968][ T8111] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1378.497394][ T8066] loop3: detected capacity change from 0 to 32768 [ 1378.569898][ T8] usb 10-1: Service connection timeout for: 256 [ 1378.587151][ T8] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1378.599663][ T8] ath9k_htc: Failed to initialize the device [ 1378.612444][ T8066] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1378.686383][T23234] usb 10-1: ath9k_htc: USB layer deinitialized [ 1378.787463][ T8132] usb usb8: usbfs: process 8132 (syz.9.11209) did not claim interface 0 before use [ 1378.832371][ T8066] XFS (loop3): Ending clean mount [ 1379.179296][ T8145] netlink: 'syz.9.11214': attribute type 15 has an invalid length. [ 1379.190564][ T5936] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1379.199942][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11214'. [ 1380.236716][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11229'. [ 1380.269053][ T8182] loop8: detected capacity change from 0 to 4096 [ 1380.300261][ T8182] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1380.400829][ T8182] ntfs3(loop8): ino=19, mi_enum_attr [ 1380.419406][ T8182] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1380.490975][ T8182] ntfs3(loop8): ino=5, "/" indx_read [ 1380.670444][ T8213] loop5: detected capacity change from 0 to 256 [ 1380.675067][ T8212] netlink: zone id is out of range [ 1380.751234][ T8212] netlink: zone id is out of range [ 1380.756413][ T8212] netlink: zone id is out of range [ 1380.790158][ T8213] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1380.815863][ T8212] netlink: zone id is out of range [ 1380.837595][ T8212] netlink: zone id is out of range [ 1380.853459][ T8212] netlink: zone id is out of range [ 1380.888361][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1380.894988][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1380.909687][ T8212] netlink: zone id is out of range [ 1380.955530][ T8212] netlink: zone id is out of range [ 1380.994986][ T8212] netlink: zone id is out of range [ 1381.616797][ T8257] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.11247'. [ 1381.687497][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11248'. [ 1381.742068][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11248'. [ 1381.781432][ T8259] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11248'. [ 1381.840195][ T8267] 9pnet_fd: p9_fd_create_tcp (8267): problem connecting socket to 127.0.0.1 [ 1382.438255][T23236] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1382.609302][T23236] usb 6-1: Using ep0 maxpacket: 8 [ 1382.650337][T23236] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 1382.681151][T23236] usb 6-1: config 2 has no interface number 0 [ 1382.698365][T23236] usb 6-1: config 2 interface 31 has no altsetting 0 [ 1382.750801][T23236] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1382.776389][T23236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.800605][T23236] usb 6-1: Product: syz [ 1382.819265][T23236] usb 6-1: Manufacturer: syz [ 1382.839356][T23236] usb 6-1: SerialNumber: syz [ 1383.314031][ T8345] 9pnet_fd: p9_fd_create_tcp (8345): problem connecting socket to 127.0.0.1 [ 1383.330167][T23236] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 1383.336691][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1383.358951][T23236] usb 6-1: USB disconnect, device number 5 [ 1383.529683][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1383.541508][ T9] usb 10-1: config 4 has an invalid interface number: 128 but max is 0 [ 1383.560799][ T9] usb 10-1: config 4 has no interface number 0 [ 1383.567062][ T9] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.611351][ T9] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.645480][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1383.663942][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.706188][ T9] hub 10-1:4.128: USB hub found [ 1383.946201][ T9] hub 10-1:4.128: 2 ports detected [ 1384.074075][ T8382] loop1: detected capacity change from 0 to 512 [ 1384.141604][ T8382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1384.160985][ T9] hub 10-1:4.128: hub_hub_status failed (err = -71) [ 1384.167648][ T9] hub 10-1:4.128: config failed, can't get hub status (err -71) [ 1384.277154][ T8382] ext4 filesystem being mounted at /1993/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1384.345442][ T9] usb 10-1: USB disconnect, device number 5 [ 1384.511433][ T8382] EXT4-fs error (device loop1): ext4_empty_dir:3102: inode #12: block 32: comm syz.1.11280: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1384.592990][ T8382] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #12: comm syz.1.11280: directory missing '.' [ 1384.841408][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.015119][ T8431] net_ratelimit: 1 callbacks suppressed [ 1385.015145][ T8431] openvswitch: netlink: Actions may not be safe on all matching packets [ 1385.599562][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11299'. [ 1385.646012][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11299'. [ 1386.171300][ T8488] loop3: detected capacity change from 0 to 764 [ 1386.245381][ T8488] rock: directory entry would overflow storage [ 1386.253631][ T8488] rock: sig=0x4f50, size=4, remaining=3 [ 1386.281243][ T8488] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1386.378133][ T8495] netlink: 26 bytes leftover after parsing attributes in process `syz.1.11309'. [ 1386.976452][ T8521] syz.5.11316: attempt to access beyond end of device [ 1386.976452][ T8521] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1387.018809][ T8521] hpfs: hpfs_map_sector(): read error [ 1387.181237][ T8526] loop8: detected capacity change from 0 to 1024 [ 1387.281211][ T8530] netlink: 'syz.9.11320': attribute type 11 has an invalid length. [ 1387.316332][ T8530] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11320'. [ 1387.390635][ T8536] netlink: 'syz.5.11322': attribute type 21 has an invalid length. [ 1388.109326][ T8569] netlink: 312 bytes leftover after parsing attributes in process `syz.3.11334'. [ 1388.323211][ T8578] 9pnet_fd: p9_fd_create_tcp (8578): problem connecting socket to 127.0.0.1 [ 1388.819099][ T8595] netlink: 'syz.5.11343': attribute type 10 has an invalid length. [ 1388.861093][ T8595] veth0_vlan: left promiscuous mode [ 1388.906248][ T8595] vlan1: entered promiscuous mode [ 1388.938622][ T8595] veth0_vlan: entered promiscuous mode [ 1388.972085][ T8595] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 1389.058005][ T29] audit: type=1326 audit(2000000730.519:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.8.11347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1389.181079][ T29] audit: type=1326 audit(2000000730.547:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.8.11347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1389.286846][ T8613] netlink: 'syz.1.11349': attribute type 33 has an invalid length. [ 1389.287702][ T29] audit: type=1326 audit(2000000730.547:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.8.11347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1389.348324][ T8613] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11349'. [ 1389.380891][ T8618] loop5: detected capacity change from 0 to 512 [ 1389.398367][ T8617] xt_TCPMSS: Only works on TCP SYN packets [ 1389.404357][ T29] audit: type=1326 audit(2000000730.547:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.8.11347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1389.481711][ T29] audit: type=1326 audit(2000000730.547:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.8.11347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1389.544104][ T8618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.580161][ T8618] ext4 filesystem being mounted at /1847/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.907286][ T5950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.128209][ T8650] netlink: 'syz.3.11361': attribute type 1 has an invalid length. [ 1390.207907][ T8657] loop5: detected capacity change from 0 to 512 [ 1390.265425][ T8655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1390.281344][ T8657] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1390.323162][ T8657] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1390.379954][ T8657] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1390.438912][ T8657] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.11359: attempt to clear invalid blocks 2 len 1 [ 1390.536058][ T8657] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.11359: invalid indirect mapped block 1819239214 (level 0) [ 1390.593988][ T8667] netlink: 'syz.3.11367': attribute type 1 has an invalid length. [ 1390.654159][ T8657] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.11359: invalid indirect mapped block 1819239214 (level 1) [ 1390.712131][ T8657] EXT4-fs (loop5): 1 truncate cleaned up [ 1390.744533][ T8657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1390.897528][ T8657] EXT4-fs error (device loop5): ext4_lookup:1809: inode #2: comm syz.5.11359: 'file1' linked to parent dir [ 1391.142825][ T5950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.179410][ T8659] loop1: detected capacity change from 0 to 32768 [ 1391.228171][ T8659] XFS: ikeep mount option is deprecated. [ 1391.261096][ T8659] XFS: noikeep mount option is deprecated. [ 1391.358509][ T8659] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1391.492107][ T8659] XFS (loop1): Ending clean mount [ 1391.506470][ T8659] XFS (loop1): Quotacheck needed: Please wait. [ 1391.634453][ T8659] XFS (loop1): Quotacheck: Done. [ 1391.642556][ T8715] loop3: detected capacity change from 0 to 1024 [ 1391.982407][ T5933] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1393.047814][ T8766] loop8: detected capacity change from 0 to 128 [ 1393.105868][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11398'. [ 1393.128536][ T8766] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1393.140735][ T8768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1393.162084][ T8766] ext4 filesystem being mounted at /654/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.183976][ T8766] EXT4-fs warning (device loop8): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 1393.389415][T23960] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1393.573853][ T8788] loop8: detected capacity change from 0 to 16 [ 1393.619743][ T8788] erofs (device loop8): mounted with root inode @ nid 36. [ 1393.670413][ T8788] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1393.698438][ T8792] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1393.744420][ T8788] erofs (device loop8): read error -117 @ 43 of nid 36 [ 1393.794067][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11406'. [ 1394.130173][ T5915] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1394.346905][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1394.382384][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1394.424583][ T5915] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1394.434095][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.442146][ T5915] usb 6-1: Product: syz [ 1394.465133][ T5915] usb 6-1: Manufacturer: syz [ 1394.470660][ T5915] usb 6-1: SerialNumber: syz [ 1394.494184][ T8829] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1394.496457][ T5915] usb 6-1: config 0 descriptor?? [ 1394.629072][ T8838] loop9: detected capacity change from 0 to 64 [ 1394.809573][ T5915] input: Griffin PowerMate as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input70 [ 1394.856157][ C1] powermate: config urb returned -71 [ 1394.861985][ C1] powermate: config urb returned -71 [ 1394.867456][ C1] powermate: config urb returned -71 [ 1394.872975][ C1] powermate: config urb returned -71 [ 1394.939109][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1394.947946][ T5915] usb 6-1: USB disconnect, device number 6 [ 1394.987454][ T8853] loop3: detected capacity change from 0 to 512 [ 1395.005605][ T29] audit: type=1326 audit(2000000736.075:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.1.11425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2c18cde9 code=0x7ffc0000 [ 1395.056153][ T8853] EXT4-fs: Ignoring removed i_version option [ 1395.099084][ T8853] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.11423: inode #196608: comm syz.3.11423: iget: illegal inode # [ 1395.117154][ T29] audit: type=1326 audit(2000000736.075:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.1.11425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2c18cde9 code=0x7ffc0000 [ 1395.156001][ T8853] EXT4-fs (loop3): no journal found [ 1395.192274][ T8853] EXT4-fs (loop3): can't get journal size [ 1395.217779][ T8853] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1395.230570][ T29] audit: type=1326 audit(2000000736.122:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.1.11425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f8b2c18cde9 code=0x7ffc0000 [ 1395.286279][ T29] audit: type=1326 audit(2000000736.122:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.1.11425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2c18cde9 code=0x7ffc0000 [ 1395.295818][ T8853] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1395.309105][ T29] audit: type=1326 audit(2000000736.122:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8859 comm="syz.1.11425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2c18cde9 code=0x7ffc0000 [ 1395.363196][ T8853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.417452][ T8853] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.11423: Logical block already allocated [ 1395.665021][ T5936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.375946][ T8927] loop9: detected capacity change from 0 to 1024 [ 1396.494195][ T8927] hfsplus: filesystem is marked journaled, leaving read-only. [ 1396.819621][ T8949] openvswitch: netlink: IP tunnel dst address not specified [ 1396.851827][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.937514][ T8944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1396.972500][ T8954] loop1: detected capacity change from 0 to 2048 [ 1396.982151][ T5915] vcan0 speed is unknown, defaulting to 1000 [ 1397.034275][ T8954] loop1: p1 < > p3 [ 1397.035718][ T8954] loop1: p3 size 134217728 extends beyond EOD, truncated [ 1397.472709][ T6161] udevd[6161]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1397.473735][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1397.619336][ T8988] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 1397.660989][ T8987] loop9: detected capacity change from 0 to 2048 [ 1397.760466][ T8987] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1397.884621][ T9000] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1398.014507][ T8987] NILFS (loop9): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1398.026076][ T8987] NILFS error (device loop9): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1398.103952][ T8987] Remounting filesystem read-only [ 1398.124823][ T8987] NILFS (loop9): error -5 truncating bmap (ino=16) [ 1398.159426][ T9007] xt_connbytes: Forcing CT accounting to be enabled [ 1398.196439][ T9007] xt_bpf: check failed: parse error [ 1398.251532][ T3771] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 1398.497566][ T9024] netlink: 'syz.3.11472': attribute type 2 has an invalid length. [ 1398.570325][ T9024] netlink: 'syz.3.11472': attribute type 3 has an invalid length. [ 1398.792193][ T9036] overlayfs: conflicting options: userxattr,verity=require [ 1398.837047][ T9025] loop5: detected capacity change from 0 to 4096 [ 1398.910690][ T9025] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1399.015197][ T9025] ntfs3(loop5): ino=19, mi_enum_attr [ 1399.060478][ T9025] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1399.142911][ T9051] loop1: detected capacity change from 0 to 64 [ 1399.188623][ T9025] ntfs3(loop5): failed to convert "c46c" to cp860 [ 1399.212384][ T9025] ntfs3(loop5): ino=20, mi_enum_attr [ 1399.276339][ T9052] xfrm1: entered allmulticast mode [ 1399.292563][ T9056] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1399.299140][ T9056] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1399.369114][ T9056] vhci_hcd vhci_hcd.0: Device attached [ 1399.389684][ T9060] vhci_hcd: connection closed [ 1399.416481][ T6181] vhci_hcd: stop threads [ 1399.425479][ T6181] vhci_hcd: release socket [ 1399.451253][ T6181] vhci_hcd: disconnect device [ 1399.687691][ T9078] ./file0: Can't lookup blockdev [ 1399.758014][ T9083] kernel read not supported for file /½ lhObíñ~åÑhþµ“3žJÇÈyûxÐîÃüv÷Lª=QäRúnÁ·$h®ÌÜf€ǹ”óW£FGr‚¥òqðςû~QV7¶·"qHâ—ÉdNn9µƒÝD0ª)g [ 1399.758014][ T9083] .j``~éäN@»Û€Ï žWâctéö\x•|êbÎEïVyS$’µPAXg¦8mRC“l†EtùTíTS_øm)ל- (pid: 9083 comm: syz.5.11487) [ 1399.873668][ T9086] netlink: 'syz.8.11490': attribute type 10 has an invalid length. [ 1399.893300][ T29] audit: type=1800 audit(2000000740.649:269): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11487" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B72468AECCDC668015C7B9949DF357A346477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E21197C9644E6E39B503831CDD4430AA29670A2E6A60601F7EE9E44E40BBDB80CF1E209E571302E26374E9F65C78957CEA62CE45EF5679532492B550415867A6386D5243936C864574F954ED9054535FF86D0729D79C2D dev="mqueue" ino=92779 res=0 errno=0 [ 1399.942497][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.980434][ T9086] team0: Device veth0_macvtap failed to register rx_handler [ 1400.726930][ T9121] loop1: detected capacity change from 0 to 1024 [ 1400.755679][ T9123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1400.805257][ T9121] fuse: Bad value for 'fd' [ 1400.991640][ T6181] hfsplus: b-tree write err: -5, ino 4 [ 1401.329393][ T9154] sit0: entered promiscuous mode [ 1401.375574][ T9154] netlink: 'syz.3.11513': attribute type 1 has an invalid length. [ 1401.421531][ T9154] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11513'. [ 1401.588690][ T9160] loop9: detected capacity change from 0 to 2048 [ 1401.687282][ T9160] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=2105, location=2105 [ 1401.734440][ T9160] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1401.752817][ T9165] loop1: detected capacity change from 0 to 4096 [ 1401.964233][ T9182] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1402.010271][ T9165] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1402.044767][ T9165] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1402.098014][ T9184] tmpfs: Bad value for 'mpol' [ 1402.109006][ T9165] Remounting filesystem read-only [ 1402.120501][ T9165] NILFS (loop1): error -5 truncating bmap (ino=12) [ 1402.266803][ T5933] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1402.846940][ T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1403.017686][ T29] audit: type=1326 audit(2000000743.568:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.8.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1403.040501][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 1403.083215][ T46] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1403.091278][ T46] usb 2-1: config 0 has no interface number 0 [ 1403.134072][ T46] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1403.154566][ T29] audit: type=1326 audit(2000000743.568:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.8.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1403.177534][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.220784][ T46] usb 2-1: Product: syz [ 1403.225024][ T46] usb 2-1: Manufacturer: syz [ 1403.229652][ T46] usb 2-1: SerialNumber: syz [ 1403.266622][ T46] usb 2-1: config 0 descriptor?? [ 1403.271707][ T29] audit: type=1326 audit(2000000743.577:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.8.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1403.309506][ T46] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1403.371714][ T29] audit: type=1326 audit(2000000743.586:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.8.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1403.405687][ T9252] loop8: detected capacity change from 0 to 64 [ 1403.455313][ T29] audit: type=1326 audit(2000000743.586:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.8.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397a78cde9 code=0x7ffc0000 [ 1403.760835][ T46] gspca_spca1528: reg_w err -71 [ 1403.799140][ T46] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1403.862203][ T46] usb 2-1: USB disconnect, device number 15 [ 1404.045787][ T9271] loop5: detected capacity change from 0 to 4096 [ 1404.088390][ T9271] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1404.115391][ T9285] Unsupported ieee802154 address type: 0 [ 1404.252652][ T9291] program syz.8.11554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1404.264970][ T9291] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1405.633608][ T9293] loop3: detected capacity change from 0 to 32768 [ 1405.702237][ T9293] (syz.3.11555,9293,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1405.777240][ T9293] (syz.3.11555,9293,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1405.888191][ T9293] JBD2: Ignoring recovery information on journal [ 1406.003911][ T9359] loop1: detected capacity change from 0 to 2048 [ 1406.082674][ T9293] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1406.123778][ T9359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1406.157101][ T9359] ext4 filesystem being mounted at /2038/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.419501][ T5933] EXT4-fs error (device loop1): ext4_readdir:259: inode #2: block 16: comm syz-executor: path /2038/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 1406.612316][ T5933] ------------[ cut here ]------------ [ 1406.618534][ T5933] bad length passed for symlink [/tmp/syz-imagegen1390833803/fil] (got 39, expected 32) [ 1406.641343][ T5933] WARNING: CPU: 1 PID: 5933 at ./include/linux/fs.h:802 __ext4_iget+0x3aa2/0x4310 [ 1406.660672][ T5933] Modules linked in: [ 1406.664698][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 1406.675643][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1406.685766][ T5933] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 1406.691284][ T5933] Code: e8 03 15 49 ff c6 05 5b 2a da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 4c 85 8b 48 8b b5 f8 fe ff ff e8 2f 47 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 f0 55 ab ff e9 f6 e6 ff ff e8 c6 54 [ 1406.711031][ T5933] RSP: 0018:ffffc90003077810 EFLAGS: 00010286 [ 1406.717180][ T5933] RAX: 0000000000000000 RBX: ffff888051d2c814 RCX: ffffffff817a1229 [ 1406.725188][ T5933] RDX: ffff88802dde3c00 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 1406.733299][ T5933] RBP: ffffc90003077960 R08: 0000000000000001 R09: 0000000000000000 [ 1406.741346][ T5933] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000020 [ 1406.749424][ T5933] R13: 0000000000000000 R14: 0000000000002000 R15: ffff888051d2c808 [ 1406.757435][ T5933] FS: 000055558d8e7500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1406.766964][ T5933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1406.775049][ T5933] CR2: 00007fa2e94d56c0 CR3: 000000005a784000 CR4: 0000000000350ef0 [ 1406.783354][ T5933] Call Trace: [ 1406.786660][ T5933] [ 1406.789893][ T5933] ? __warn+0xea/0x3c0 [ 1406.794565][ T5933] ? __ext4_iget+0x3aa2/0x4310 [ 1406.799397][ T5933] ? report_bug+0x3c0/0x580 [ 1406.804329][ T5933] ? handle_bug+0x54/0xa0 [ 1406.808731][ T5933] ? exc_invalid_op+0x17/0x50 [ 1406.813788][ T5933] ? asm_exc_invalid_op+0x1a/0x20 [ 1406.818887][ T5933] ? __warn_printk+0x199/0x350 [ 1406.824005][ T5933] ? __warn_printk+0x1a6/0x350 [ 1406.828822][ T5933] ? __ext4_iget+0x3aa2/0x4310 [ 1406.834715][ T5933] ? __pfx___ext4_iget+0x10/0x10 [ 1406.839726][ T5933] ? __pfx_ext4_fname_prepare_lookup+0x10/0x10 [ 1406.845985][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.851703][ T5933] ? kfree+0x260/0x4d0 [ 1406.855908][ T5933] ext4_lookup+0x37e/0x730 [ 1406.860394][ T5933] ? __pfx_ext4_lookup+0x10/0x10 [ 1406.865410][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.865497][ T5936] ocfs2: Unmounting device (7,3) on (node local) [ 1406.871162][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.871276][ T5933] __lookup_slow+0x252/0x470 [ 1406.888024][ T5933] ? __pfx___lookup_slow+0x10/0x10 [ 1406.893209][ T5933] ? walk_component+0x342/0x5b0 [ 1406.898143][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.903904][ T5933] ? lookup_fast+0x153/0x5f0 [ 1406.908619][ T5933] walk_component+0x350/0x5b0 [ 1406.913448][ T5933] path_lookupat+0x17f/0x770 [ 1406.918151][ T5933] filename_lookup+0x221/0x5f0 [ 1406.923055][ T5933] ? __pfx_filename_lookup+0x10/0x10 [ 1406.928403][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.934200][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.939906][ T5933] ? getname_flags.part.0+0x1c5/0x550 [ 1406.945534][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.951250][ T5933] user_path_at+0x3a/0x60 [ 1406.955741][ T5933] __x64_sys_umount+0x10b/0x1a0 [ 1406.960710][ T5933] ? __pfx___x64_sys_umount+0x10/0x10 [ 1406.966292][ T5933] do_syscall_64+0xcd/0x250 [ 1406.970864][ T5933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.976927][ T5933] RIP: 0033:0x7f8b2c18e117 [ 1406.981379][ T5933] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1407.001097][ T5933] RSP: 002b:00007ffc961dff18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1407.009662][ T5933] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b2c18e117 [ 1407.017732][ T5933] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc961dffd0 [ 1407.025741][ T5933] RBP: 00007ffc961dffd0 R08: 0000000000000000 R09: 0000000000000000 [ 1407.033806][ T5933] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc961e10c0 [ 1407.041992][ T5933] R13: 00007f8b2c20e08c R14: 0000000000144615 R15: 00007ffc961e3280 [ 1407.050156][ T5933] [ 1407.053207][ T5933] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1407.060509][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 1407.071393][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1407.081471][ T5933] Call Trace: [ 1407.084759][ T5933] [ 1407.087718][ T5933] dump_stack_lvl+0x3d/0x1f0 [ 1407.092348][ T5933] panic+0x71d/0x800 [ 1407.096275][ T5933] ? __pfx_panic+0x10/0x10 [ 1407.100720][ T5933] ? show_trace_log_lvl+0x29d/0x3d0 [ 1407.105976][ T5933] ? check_panic_on_warn+0x1f/0xb0 [ 1407.111124][ T5933] ? __ext4_iget+0x3aa2/0x4310 [ 1407.115929][ T5933] check_panic_on_warn+0xab/0xb0 [ 1407.120903][ T5933] __warn+0xf6/0x3c0 [ 1407.124832][ T5933] ? __ext4_iget+0x3aa2/0x4310 [ 1407.129632][ T5933] report_bug+0x3c0/0x580 [ 1407.134002][ T5933] handle_bug+0x54/0xa0 [ 1407.138200][ T5933] exc_invalid_op+0x17/0x50 [ 1407.142745][ T5933] asm_exc_invalid_op+0x1a/0x20 [ 1407.147634][ T5933] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 1407.153048][ T5933] Code: e8 03 15 49 ff c6 05 5b 2a da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 4c 85 8b 48 8b b5 f8 fe ff ff e8 2f 47 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 f0 55 ab ff e9 f6 e6 ff ff e8 c6 54 [ 1407.172690][ T5933] RSP: 0018:ffffc90003077810 EFLAGS: 00010286 [ 1407.178787][ T5933] RAX: 0000000000000000 RBX: ffff888051d2c814 RCX: ffffffff817a1229 [ 1407.186775][ T5933] RDX: ffff88802dde3c00 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 1407.194768][ T5933] RBP: ffffc90003077960 R08: 0000000000000001 R09: 0000000000000000 [ 1407.202765][ T5933] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000020 [ 1407.210768][ T5933] R13: 0000000000000000 R14: 0000000000002000 R15: ffff888051d2c808 [ 1407.218769][ T5933] ? __warn_printk+0x199/0x350 [ 1407.223567][ T5933] ? __warn_printk+0x1a6/0x350 [ 1407.228387][ T5933] ? __pfx___ext4_iget+0x10/0x10 [ 1407.233358][ T5933] ? __pfx_ext4_fname_prepare_lookup+0x10/0x10 [ 1407.239593][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1407.245281][ T5933] ? kfree+0x260/0x4d0 [ 1407.249399][ T5933] ext4_lookup+0x37e/0x730 [ 1407.253861][ T5933] ? __pfx_ext4_lookup+0x10/0x10 [ 1407.258858][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1407.264542][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1407.270227][ T5933] __lookup_slow+0x252/0x470 [ 1407.274850][ T5933] ? __pfx___lookup_slow+0x10/0x10 [ 1407.280000][ T5933] ? walk_component+0x342/0x5b0 [ 1407.284900][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1407.290608][ T5933] ? lookup_fast+0x153/0x5f0 [ 1407.295239][ T5933] walk_component+0x350/0x5b0 [ 1407.299961][ T5933] path_lookupat+0x17f/0x770 [ 1407.304597][ T5933] filename_lookup+0x221/0x5f0 [ 1407.309433][ T5933] ? __pfx_filename_lookup+0x10/0x10 [ 1407.314759][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1407.320473][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1407.326154][ T5933] ? getname_flags.part.0+0x1c5/0x550 [ 1407.331553][ T5933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1407.337262][ T5933] user_path_at+0x3a/0x60 [ 1407.341635][ T5933] __x64_sys_umount+0x10b/0x1a0 [ 1407.346532][ T5933] ? __pfx___x64_sys_umount+0x10/0x10 [ 1407.351960][ T5933] do_syscall_64+0xcd/0x250 [ 1407.356504][ T5933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.362471][ T5933] RIP: 0033:0x7f8b2c18e117 [ 1407.366903][ T5933] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1407.386537][ T5933] RSP: 002b:00007ffc961dff18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1407.394983][ T5933] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b2c18e117 [ 1407.402971][ T5933] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc961dffd0 [ 1407.410962][ T5933] RBP: 00007ffc961dffd0 R08: 0000000000000000 R09: 0000000000000000 [ 1407.418981][ T5933] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc961e10c0 [ 1407.426977][ T5933] R13: 00007f8b2c20e08c R14: 0000000000144615 R15: 00007ffc961e3280 [ 1407.434989][ T5933] [ 1407.438251][ T5933] Kernel Offset: disabled [ 1407.442661][ T5933] Rebooting in 86400 seconds..