last executing test programs: 3.407336462s ago: executing program 3 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffe, {0x2, 0x20, 0x0, 0x4, 0xff, 0x3, 0x0, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.261230154s ago: executing program 3 (id=928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x100000, 0x0, 0x0, 0x3}, 0x20) 2.993154096s ago: executing program 2 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 2.933907111s ago: executing program 3 (id=933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500000000000000000000007b", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c000280080001"], 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 2.781638773s ago: executing program 2 (id=934): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[], 0x1, 0x1e7, &(0x7f0000000340)="$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") open(&(0x7f0000000100)='./file2\x00', 0x84242, 0x1df2a23c5997fb1d) 2.751311175s ago: executing program 3 (id=935): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=@newtaction={0x2b60, 0x30, 0x1, 0x0, 0x0, {}, [{0x2b4c, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0xffffffffffffff07, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x2ae8, 0x20, 0x0, 0x0, {{0xb}, {0x29ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xbca}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xc, 0x6, 0x400, 0x9, 0x40, 0x0, 0x4, 0x1, 0x0, 0x6, 0x200, 0x5, 0x1, 0xe046, 0x800, 0x2, 0x200, 0xfffffff7, 0x3, 0x6, 0x4, 0x3, 0x6, 0x101, 0x2, 0x7, 0x9, 0xfffffe00, 0x8, 0x1b1, 0x7f, 0x9, 0xfff, 0x5, 0x6, 0x0, 0x4, 0x0, 0x5, 0xfff, 0x5216, 0x6, 0x9, 0x741, 0x6, 0x7, 0x5, 0x6c, 0xe, 0x8, 0x11f, 0xffffef62, 0x5, 0x3, 0x4, 0x2, 0x5, 0xffff08f1, 0x6, 0x0, 0x8, 0x4, 0x4c8ea46f, 0x40, 0x7ff, 0x6, 0x3, 0x2, 0x2, 0x0, 0x7f, 0x9, 0x3, 0xf, 0x3ff, 0x8000, 0x10000000, 0x2, 0x1, 0x9, 0x0, 0x6, 0xfff, 0xfffffffb, 0x6829ee6b, 0x0, 0x7, 0x80000000, 0x3, 0x173, 0x7fffffff, 0x7, 0x8, 0x3, 0x9, 0x3, 0x1, 0x1, 0x9, 0x3, 0x86a7, 0x3, 0x9, 0x1, 0x1, 0x3ac32ac2, 0x7, 0x3, 0x8, 0x80, 0x1, 0xb2, 0x4b13, 0x9, 0x10001, 0x4, 0x7, 0xffff, 0x2, 0xd, 0x3, 0x660, 0x7ff, 0x9, 0xc2, 0x7d, 0x1, 0x4, 0x7, 0xffffffff, 0x1, 0xffff, 0x2, 0x6, 0x2, 0x5, 0x2, 0xffff, 0x10001, 0x8, 0x7, 0x55, 0x0, 0x7d, 0x4, 0x81, 0x0, 0x101, 0x2, 0xba3, 0x8, 0xa, 0x200, 0xbac6, 0xb4a, 0x0, 0xfa9, 0x81, 0xfffffffa, 0x0, 0xd0c4, 0x9, 0x9f1, 0x5, 0xff, 0x6, 0xfff, 0xda0, 0x19, 0x7, 0x9ed, 0x5, 0x3, 0xa559, 0x6, 0x1cd, 0xa476, 0x3, 0x5c30, 0x9, 0xffffffff, 0x0, 0x2, 0x7ad3, 0x0, 0x3, 0x4, 0xfe, 0x7fff, 0x6, 0x7, 0xed, 0xffffff84, 0x3, 0x5, 0x9, 0x0, 0x7, 0xf1a5, 0x1, 0xffff5f6d, 0x3, 0x4, 0x7, 0x1ff, 0x87, 0xfffffff1, 0x8, 0x9, 0xffffffff, 0x2a, 0x3, 0x0, 0x0, 0x0, 0x89, 0x4, 0x5, 0xfffff2a3, 0x1, 0x1, 0x0, 0x6, 0x5, 0xfffffff9, 0x6, 0x8, 0x5, 0x800, 0x0, 0x25c2, 0x3, 0xd, 0x3, 0x0, 0x2, 0x5, 0xfffff001, 0x621d, 0x1, 0x3, 0xc, 0x5, 0x10001, 0xc477, 0x9, 0x6, 0x3e, 0x9, 0x6, 0x100, 0x3, 0xffffffff, 0x7, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x80000001, 0x3587, 0xab, 0x0, 0x1, 0x290, 0x90, 0x0, 0x7, 0x400, 0xf, 0x0, 0x101, 0x6, 0x8, 0x1, 0xe9, 0x50, 0x80, 0x2cb6, 0x8, 0x8, 0x0, 0x1, 0x2, 0x4, 0xf153, 0x6e, 0xd7, 0xffffffff, 0x76, 0x6, 0xc5, 0x80000001, 0x9, 0xff, 0x5, 0x16d, 0x1, 0x8a3, 0x80000000, 0xffffff5d, 0xd2, 0x7, 0x200, 0xb84, 0xffff29b4, 0x101, 0x3, 0x6, 0x3, 0x9, 0x4, 0x7, 0x0, 0x7, 0x1, 0x2, 0x0, 0xf857, 0x52f375fc, 0x10001, 0x2, 0x8656370, 0x6, 0x5b, 0x5, 0x4, 0x3, 0x1, 0x10001, 0x0, 0xfffffff8, 0x4, 0xc, 0x8, 0x8, 0xb8, 0x7f, 0x100, 0xa86, 0x0, 0x1000, 0x8, 0x8, 0x7, 0x1, 0xfffffff6, 0xfffffc01, 0xfffffffa, 0x89df, 0xeb98, 0x5, 0x7, 0x80000000, 0x80000000, 0x8000, 0x80, 0x3, 0x8000, 0x5, 0x3, 0x7, 0x10, 0x1, 0xfffffffd, 0x1, 0x324, 0x4, 0x4, 0x5, 0x1000, 0x80, 0x3, 0x0, 0x4, 0x7f, 0x7, 0xb, 0x99c, 0x2, 0x8, 0x6, 0x1, 0x2, 0x9, 0x558f, 0x80, 0xb, 0x6, 0x400, 0x754d857c, 0xc0, 0x72d, 0x8, 0x50fb, 0x0, 0x800, 0xfd, 0x2, 0x1, 0x4, 0x0, 0x5, 0x3, 0x7fff, 0xb, 0x1, 0x6, 0x0, 0x2, 0x2, 0xffffffff, 0x80, 0x8, 0xe, 0x8, 0x401, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x0, 0xdc9, 0xecd3, 0x6, 0xffff, 0x1, 0x0, 0xff, 0x9b, 0xfffffff7, 0x8, 0x0, 0x1, 0x7, 0x4, 0x98b, 0xf4, 0x2, 0x800, 0x7, 0x3, 0x7, 0xfffffffe, 0x7, 0x5, 0xfffffffc, 0x68c, 0x5, 0x1, 0x1, 0x5, 0x0, 0x5, 0x6, 0x3, 0x1, 0x7, 0xb40, 0xffffffff, 0x7, 0x200, 0xfff, 0xac1d, 0x1, 0x9, 0x4, 0x7, 0x2, 0x300000, 0x1, 0x0, 0x6, 0x9, 0x5, 0x2, 0x1, 0x2, 0x3, 0x7, 0x9, 0xffff638b, 0x1ab, 0xa2, 0x1, 0x481, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x2, 0x5, 0x0, 0x100, 0x5, 0x0, 0x8001, 0x8, 0x0, 0x4, 0x2, 0x4, 0xffffffff, 0x3, 0xffffff80, 0x3ff, 0x3, 0x0, 0x8, 0xffffffff, 0xffffff42, 0xfffffff5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x22}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x2, 0x2, 0x80, {0x80, 0x2, 0xede, 0x8, 0x5, 0x40}, {0x5, 0x2, 0x2, 0x0, 0x7, 0xff}, 0x9, 0x6, 0x46}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x8, 0x9, 0x2, {0x5, 0x0, 0x101, 0x9, 0x1ff, 0x200}, {0x7, 0x0, 0x8, 0xdc, 0xb, 0x7f}, 0x1, 0x0, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0x8, 0x2, 0x2, 0x3, 0x6, 0xa6, 0x3, 0x5, 0x8, 0x1de5dd58, 0x0, 0x9, 0x27e4f440, 0x5, 0x6, 0x6, 0x17, 0x3, 0x1, 0x0, 0xef34, 0x1be, 0x2, 0x2, 0x8, 0xfffffffd, 0x2, 0x1, 0x6, 0x2, 0x4, 0x7, 0x3, 0x8, 0x6, 0x4, 0x9, 0x6, 0x6, 0xd, 0x10001, 0x0, 0x7fff, 0xde, 0xd4da, 0xcf, 0x0, 0xa81d, 0x0, 0x2, 0x1a2, 0x9, 0x6, 0x5, 0x4, 0x6, 0x800, 0x0, 0x6, 0x5, 0x80, 0xc, 0x3, 0xab9a, 0x5, 0x9, 0x7, 0x2, 0x1, 0x0, 0x200, 0x6, 0x9, 0x7, 0x0, 0xfffffff8, 0x6, 0x87, 0x7, 0x200, 0xa, 0x1, 0x2, 0x7, 0xffff0000, 0x7, 0x2, 0x8, 0x9d71, 0x101, 0x8000, 0xa, 0xfffffffc, 0x8, 0x1ff, 0x7bfd03e4, 0x4, 0x261a0965, 0x2, 0x0, 0x80000001, 0x9, 0x1897, 0xffffffff, 0x71, 0xffffffff, 0x4, 0x8, 0x1, 0x7, 0x8, 0x5, 0x9, 0x400, 0xfe4a, 0x0, 0xfff, 0x8, 0x4e28613d, 0x2, 0xff8, 0x3, 0xc, 0x8, 0x2, 0x7, 0x7, 0x0, 0x7acfa0dd, 0x1, 0x4, 0xffffffdf, 0x2, 0x9, 0x9, 0x86, 0x8001, 0x1, 0x6, 0x7f, 0x5, 0xf, 0x1, 0xd64, 0x63f6, 0x20, 0x9, 0x1, 0x9, 0x40c, 0x0, 0x5, 0xd6, 0x4, 0x5, 0x6, 0x380000, 0x8, 0x1, 0x9, 0x4, 0x8, 0x80000001, 0xb, 0x7fff, 0x0, 0x10, 0x7, 0xc5, 0x1ff, 0x8000, 0x4, 0xfffffffe, 0x169, 0x8, 0x80000001, 0x9, 0x1000, 0x4, 0x8, 0x31, 0x7, 0x1, 0xffff, 0x4, 0x8, 0x2, 0x80000001, 0x3ff, 0x2c4c, 0x1, 0x8001, 0x5, 0x0, 0x10001, 0x0, 0x3, 0x8000, 0x4, 0x9, 0x6, 0x2, 0xff, 0xb110, 0x3, 0x2, 0xffffffff, 0x9, 0x0, 0x2, 0xffff, 0x0, 0x8, 0x4, 0x800, 0xfff, 0x8, 0xf, 0x9, 0x71, 0xfd, 0xffff, 0x9, 0x37de, 0x0, 0x9, 0x4, 0x80, 0x5, 0x5, 0x4, 0x8, 0x9700, 0x3, 0x5, 0x8727, 0x2, 0x9, 0x3227, 0x1000, 0x3, 0x2, 0x8, 0x8, 0x400, 0x101, 0x0, 0x0, 0x3ff, 0x9, 0x8, 0xb097, 0x9, 0xdb]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x9, 0x9, 0xe6be, {0x6, 0x2, 0x3, 0x80, 0x989a, 0x4df}, {0x10, 0x1, 0x7fff, 0x0, 0x6, 0x8}, 0x3, 0x81, 0x101}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x4a1, 0x3, 0xff, 0x5, 0x8a7, 0x4c, 0x7f, 0x6, 0x5, 0x101, 0x2, 0xfffffff7, 0x1, 0x786, 0x7, 0x1, 0x2, 0x1, 0x2c, 0x3, 0x9, 0x2, 0xb, 0x0, 0x21ce0, 0xf, 0x4, 0x800, 0x401, 0x200, 0x5, 0x80000000, 0x7f, 0x0, 0x5, 0x5f, 0x8, 0x5, 0x0, 0xde, 0x55, 0x3, 0x8, 0x8, 0x60a, 0x8, 0xfffffffb, 0x5, 0x0, 0x3, 0x1ff, 0x0, 0xfffff801, 0x2, 0x1, 0x2, 0x6, 0x80, 0x6, 0xa593, 0x7f, 0x1, 0x2, 0xcaa, 0x7, 0xa, 0x80, 0x9, 0x3, 0x3, 0x9, 0x10001, 0xd, 0x100, 0x2, 0x5, 0x10000, 0x1, 0x80, 0xa6, 0xc, 0x0, 0x4, 0x7fffffff, 0x400, 0xffffff00, 0x3, 0x7fffffff, 0x1, 0xb, 0x53bc, 0x2, 0x9, 0x5, 0x4, 0x1, 0x0, 0x3, 0x6, 0xb, 0x7ff0000, 0x2, 0x7, 0x8000, 0x4, 0x6, 0xffffffff, 0x78000000, 0x6, 0x8, 0xc, 0x100, 0xc0, 0x9, 0x3, 0x7fff, 0x65, 0x0, 0x2, 0x72, 0x1, 0x4, 0x73793c9b, 0xd, 0x6, 0xfffffff7, 0x2, 0x0, 0x5, 0x84e, 0x10, 0xfffffffd, 0xfffffff9, 0x40, 0xe94, 0xea5, 0x6, 0x4, 0x8001, 0x477, 0x9, 0x2250, 0x5, 0x7a, 0x54, 0x2, 0x0, 0x5, 0x8, 0x4, 0x2, 0x9, 0x6, 0xf, 0x9, 0x9, 0x80000000, 0xec, 0x3, 0x7ff, 0x7, 0x8001, 0xb, 0x4, 0x10, 0x1, 0x1ff, 0x10, 0x1, 0x2, 0xe6, 0x9, 0x1ff, 0x9, 0x4, 0x67, 0x800, 0x0, 0x7, 0x10, 0x6, 0x5, 0xcd, 0x5, 0x2, 0x4, 0x1, 0x1000, 0x10, 0xcc, 0x80, 0x5, 0xf1, 0x3, 0x1, 0x3ff, 0x1, 0x9, 0xf, 0x3, 0x9, 0x697e, 0x0, 0xa519, 0x0, 0x6, 0xfffffff7, 0x9, 0x6, 0x800, 0x0, 0x7, 0xc, 0x7, 0xa, 0xf6, 0xe8dc, 0xff, 0x7, 0x49, 0x2, 0x7ff, 0x7, 0xc, 0x4, 0x2, 0x7, 0x1, 0x0, 0x1, 0x4292, 0x6ea6, 0xfffffff9, 0x1, 0x0, 0x7b376f5c, 0xe8, 0x7, 0xfff, 0x156, 0x6, 0x7ce, 0x9, 0x64400000, 0x5, 0x0, 0x7, 0xfffffff8, 0x80000001, 0x8, 0x1fee, 0x1, 0x1ff, 0xdb, 0x7, 0x9]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x35}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x7f, 0x2, 0x0, 0xa5b, 0xfffffffd, 0x6, 0x8, 0x6, 0x3, 0xe1, 0x2, 0xfffff800, 0x3a46, 0x9, 0x80000001, 0x9, 0xffff7fff, 0x50c, 0x2, 0x10, 0x72131cdf, 0x2, 0x1, 0xfff, 0xa4, 0xa5, 0x4, 0x3, 0x7, 0x22, 0xac03, 0x6, 0x1, 0x7, 0x9, 0x14000, 0x8, 0x8, 0x1, 0x66dd, 0x1, 0x3, 0x200, 0x3ff, 0x6, 0x80000000, 0x2, 0x1, 0x0, 0x705d, 0x9, 0xe, 0x2, 0x0, 0x8000, 0xff, 0x8, 0x6, 0x344, 0x5, 0x80000001, 0x3ff, 0x5, 0x100, 0x88c, 0x7, 0x7ff, 0x5, 0x4, 0x1000, 0x5, 0x7, 0x8, 0x0, 0x7fff, 0xff, 0x3, 0x6, 0x9, 0x8, 0x3ff, 0x8, 0xfffffffd, 0x7, 0xfffffffd, 0x7fff, 0x528b, 0x7fffffff, 0xd4f, 0x7f, 0xd69, 0x8, 0xed, 0x3, 0x80, 0x6, 0x2, 0x5, 0x40, 0xc, 0x9, 0x9, 0x8, 0xfffffffb, 0x2, 0x5, 0xb, 0x80000000, 0x3, 0x6, 0x40, 0x40000, 0xfa2, 0xcc, 0x4, 0x0, 0x2a, 0x2, 0x8d68, 0x2, 0xfffff800, 0xe8, 0xfffffff4, 0x1, 0x4, 0x100, 0xc9d, 0x3ff, 0x1, 0x20bb, 0x7, 0x5, 0x3, 0x84d, 0x4bf, 0x2, 0x3, 0xfffffffd, 0x80, 0x100, 0x6, 0x1, 0x10, 0x7ff, 0x3, 0xffff, 0x1, 0x0, 0x5, 0x4, 0x3, 0x7fff, 0x7, 0x6, 0x1, 0x3, 0x9, 0x3, 0x8, 0x6f, 0x361, 0x9, 0xfffffffa, 0x4e, 0x7, 0x1, 0x4ef8d2fb, 0xfffffffc, 0x2000000, 0x0, 0x0, 0x15, 0x100, 0x1, 0xfffffff0, 0x1, 0x1ffc0, 0x1, 0x400, 0x1, 0x5, 0x2, 0x2, 0x3, 0xfffffff8, 0x9, 0x401, 0xab3c, 0x200, 0x100, 0x10, 0x5, 0x2, 0x9, 0x2, 0x5, 0x101, 0x3, 0x60f, 0xfff, 0x7, 0x9, 0x5, 0x400, 0x8001, 0x2, 0x2, 0x6, 0xfffffff8, 0x200, 0x9, 0x0, 0x5, 0x3, 0x4, 0x1, 0x7, 0x8, 0x1, 0x6, 0xffffff3a, 0x5b5, 0x7, 0x800, 0x0, 0x4, 0x6, 0x3, 0x9, 0x0, 0x5, 0x1, 0x2, 0x7, 0x200, 0x100, 0xff, 0xe, 0x9, 0x7, 0x0, 0x3, 0x401, 0x6, 0x7, 0x9, 0x3, 0x4, 0x80000000, 0x5, 0x800, 0x0, 0x0, 0x4, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0xee2, 0x2bfe, 0x9, {0x9, 0x0, 0xfffc, 0x4, 0x8001, 0x6}, {0x2, 0x0, 0x4, 0x101, 0xb10, 0x1}, 0x2, 0x14, 0x71}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x2, 0x8c8, 0x7, 0x7fffffff, 0x1, 0x0, 0x1, 0x5a1, 0x7ff, 0x7ff, 0x6, 0x40, 0x0, 0x3, 0x7, 0xffff8001, 0xb39d, 0xf, 0x1, 0x9, 0x3, 0xfff, 0x7f, 0x0, 0x9, 0x80, 0xfffffffa, 0x87, 0x7fffffff, 0x10001, 0x74ae, 0x2, 0x1, 0x7, 0x6, 0x9, 0x4, 0x0, 0x8, 0x80, 0x6, 0x800, 0x2, 0x9, 0x1000, 0x4, 0x0, 0x1, 0xffff0001, 0x93, 0x8, 0x4, 0xdd61, 0x4, 0x8, 0x2e, 0xac, 0x3, 0x5, 0x6, 0x2, 0x80000000, 0xffff, 0xffffffff, 0x5, 0x81, 0xd, 0x80, 0x40, 0x100, 0x10, 0x6, 0x2, 0x9, 0x6b2a, 0x5, 0xb35, 0xfffffc00, 0x1, 0x5, 0x8, 0x3, 0x0, 0x4, 0x6, 0x3, 0x8, 0xffffffff, 0x2, 0x6, 0x2, 0x6, 0x7, 0x8, 0x4, 0x1000, 0x8001, 0x8, 0x4bb, 0x1000, 0x0, 0x0, 0xb2d9, 0xfffffff9, 0x2, 0x7, 0xff593916, 0xb5, 0x3, 0x10, 0x8001, 0x8, 0x200000, 0x1, 0x6, 0x9, 0x4, 0x1, 0x6fa5, 0x2, 0xb, 0x1ff, 0x9129, 0x100, 0x7, 0x9, 0x400, 0x5, 0x4e, 0x401, 0x2, 0x8, 0xffffff50, 0x3, 0x8000, 0xa, 0x1, 0x7, 0x800, 0x8000, 0x3ff, 0x80000001, 0x4, 0x2, 0x8, 0xed, 0x0, 0x0, 0x1, 0x80000000, 0x6, 0x8, 0xff, 0xffff, 0x40000, 0x3, 0x7, 0x0, 0x0, 0x0, 0x200, 0x4, 0x5, 0x9, 0x5b5, 0x77e93514, 0xe, 0x2755, 0x0, 0x0, 0xd, 0xfff, 0xff, 0x0, 0xe032, 0xb, 0x1, 0x7, 0x8, 0x7fffffff, 0x6, 0x10000, 0x68e4, 0x7b69277e, 0x7, 0x0, 0x7fffffff, 0x0, 0xf, 0x9, 0x8, 0x9, 0x44, 0x8000, 0x0, 0x0, 0xb, 0x7, 0x7f4, 0xfffffff8, 0x9, 0x8, 0xfff, 0x10, 0x1ff, 0xe8, 0x6, 0x5, 0xffffffff, 0x4, 0x1, 0x3, 0x1ff, 0xe, 0x1000, 0x5, 0x80000001, 0x4, 0x3, 0x6, 0x6, 0x1, 0x6, 0x7ff0000, 0x5, 0x9, 0x573, 0x42, 0x4, 0x800, 0xc35, 0x716, 0x3, 0x5, 0x8000, 0x1, 0x58e, 0x2, 0x443f, 0x9, 0x9, 0x2, 0x9, 0x70, 0x2, 0xfffffff9, 0x800, 0x7, 0x10001, 0x0, 0x1, 0x8, 0x8, 0x0, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3570}, @TCA_POLICE_RATE={0x404, 0x2, [0xbf9, 0x8, 0x4, 0xf, 0x9, 0x59f7, 0x6, 0xd3d, 0x800, 0x8, 0x8, 0x55e, 0x7, 0xa2, 0x9, 0x0, 0x7, 0x800, 0x5, 0x8, 0x9703, 0x9, 0xd, 0x8001, 0x9, 0x3, 0x56a7, 0x10000, 0x7, 0x1000, 0x80000001, 0x2, 0x2, 0x8, 0x96, 0x3, 0x1, 0x9, 0x7, 0xef, 0x9, 0x70000, 0x1, 0x3d24, 0x7, 0x8, 0xfffffffd, 0x9, 0xc0, 0xfffffff8, 0x266, 0x7, 0x6, 0x0, 0x2, 0x5, 0x3, 0x8001, 0x4, 0x7bee, 0xb3, 0x9, 0x926c, 0xfffffc01, 0x4, 0x9, 0xf337, 0x3c76, 0xc936, 0x0, 0x7, 0x3, 0x0, 0x6, 0x9, 0xeb00, 0x4d, 0x0, 0xf, 0xe, 0x6, 0xc0, 0x2, 0x9, 0x1000, 0x80, 0xb717, 0x6, 0x3f90, 0x0, 0x1, 0x5, 0x81, 0x4, 0x2, 0x8, 0x10000, 0x0, 0x4, 0xffffffff, 0x8, 0x8, 0x0, 0x6, 0x2, 0x81, 0x9, 0xa1, 0xfff, 0x78, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6, 0x1, 0xfe65, 0x5, 0x3, 0xf6, 0xa, 0x5, 0x1, 0x10001, 0x0, 0xfffffffa, 0x800, 0x6, 0xf, 0x0, 0x80000000, 0x1, 0x2, 0x5, 0x7, 0x100, 0x7be, 0x0, 0x8001, 0x7, 0x3, 0x5, 0x3, 0x200, 0x6, 0x1000, 0x4, 0xd5c3, 0x8, 0x7fff, 0x3, 0x391, 0x7, 0x1000, 0xff, 0x4, 0x6, 0xfffffffe, 0x6, 0x0, 0xdecc, 0x4, 0xd84b1f17, 0xa, 0x95b, 0x3, 0xc, 0x5, 0x6, 0x7, 0xf4, 0x5, 0xa, 0xfffffffd, 0x8001, 0xfa9, 0x0, 0x400, 0x2, 0x9, 0x5, 0x7, 0xffffedcc, 0x2, 0x60, 0xfffffeff, 0x1, 0x3, 0x5, 0x7, 0x2, 0x3ff, 0xfffffff9, 0x385, 0x4, 0x8, 0x1, 0x8, 0x57, 0xffffff81, 0xfff, 0x0, 0x4, 0x5, 0x7, 0x10, 0xe9b, 0x9, 0xfffffffd, 0x9, 0x101, 0x5b, 0x0, 0x10, 0x8, 0x8, 0x29a, 0x594, 0x6, 0x8, 0x2, 0x9, 0x2, 0x8, 0x6, 0x1, 0x4, 0x800, 0x0, 0x6, 0x80000001, 0x1, 0x5, 0x2, 0x2, 0x52, 0x8, 0x4, 0x0, 0x80000000, 0x6, 0x2, 0x9, 0x0, 0x6, 0x3000, 0xd27, 0xd2, 0x0, 0x8, 0xf, 0xb, 0x60e8, 0xfffffff3, 0x7c]}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3, 0x5, 0x6, 0x3, 0x9, 0x6, 0x9, 0x3, 0x10d96823, 0xe, 0x800, 0xdd, 0x9, 0x4, 0x0, 0x300, 0x800, 0x2, 0x8, 0x4, 0xd, 0x1000, 0x9, 0x3d, 0x8, 0xfffffff5, 0x6a4, 0x401, 0x3286, 0x74, 0x7, 0x8, 0x7ff, 0x910000, 0x90f, 0x7ff, 0x6, 0xa3, 0xfffff001, 0x5bed, 0x1, 0x4, 0x2, 0x3, 0x7fff, 0x80000000, 0x0, 0x9ec, 0x15e88000, 0x400, 0xa9f, 0x2, 0xa387, 0x7ff, 0x6, 0x10001, 0x1, 0x0, 0xe103, 0x4, 0x800, 0x3, 0x3, 0x9, 0x1, 0x100, 0x1, 0x3, 0xfff, 0x400, 0x5, 0x1, 0xaa, 0x0, 0x4, 0x400, 0x8, 0xffffffff, 0x4, 0x3, 0x80, 0x0, 0x3, 0x5, 0x6, 0x7, 0x8, 0x3, 0x8, 0x101, 0xa8d, 0x1, 0xfffffffe, 0x0, 0x4, 0x1, 0x51c9, 0x8, 0xbf7e, 0x7, 0x42, 0x7f, 0x518, 0xfffffffe, 0x4, 0xc00000, 0x0, 0x8, 0x8, 0x7, 0x3, 0xe, 0x3, 0x6, 0x2, 0x7, 0x8, 0x0, 0x5, 0xa, 0xfff, 0x6, 0x400, 0xfd, 0x7, 0x0, 0x8000, 0x8, 0x1, 0x3, 0x3, 0xfff, 0x1, 0x800, 0x3, 0x8, 0x8000000, 0x7f, 0xffff8001, 0x10000, 0x6, 0x0, 0x3, 0x2, 0xfffffffe, 0xe, 0x6, 0x4, 0x0, 0x5, 0x8, 0x4, 0x1, 0x80000000, 0x7, 0x1, 0xd, 0x7, 0x0, 0x5, 0x3, 0x101, 0x101, 0x9, 0x0, 0x0, 0x0, 0x10, 0x35, 0x5, 0xa, 0xfff, 0x3, 0x36, 0x6, 0xe50, 0x2, 0x1, 0x1, 0xf75a, 0x8, 0x2, 0x0, 0x3, 0x7, 0x1000, 0x5, 0x81, 0x5f9, 0x7f, 0x2, 0x512, 0x4, 0x0, 0x1, 0x8, 0x4, 0x0, 0x1, 0x401, 0xf, 0x6, 0x47f, 0x0, 0x7, 0x7317, 0x4, 0x7, 0x2, 0x7fffffff, 0x1, 0x800, 0x6, 0x66c, 0x7, 0x2, 0x7a3, 0xfff, 0x5, 0x6, 0xfed, 0x2400000, 0x80000000, 0x9, 0x10e8, 0xb, 0xc, 0x3ff, 0x2, 0x1ff, 0x2, 0xa2b, 0x5, 0x9, 0xffffffff, 0x8, 0x0, 0x2, 0xd77, 0x3, 0xca, 0x7, 0x6, 0x9, 0xd30f, 0x0, 0x59, 0x1000, 0x2, 0x2, 0x9, 0x0, 0x2, 0x1, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x800, 0x0, 0x32, 0x6, 0x6, 0xdcc, 0x3, 0x2, 0x8, 0x7, 0x2907f99e, 0x8, 0x4a9d, 0xb, 0x0, 0x4, 0x0, 0x1, 0xfffffffc, 0x5, 0x4, 0xffffa3cb, 0xfffffffe, 0x7, 0xfffffffb, 0x2d50, 0x6, 0x0, 0x70b, 0x5, 0x833, 0xd, 0x7ff, 0x85, 0x7fffffff, 0xbe5f, 0x8001, 0x1, 0x0, 0x3, 0xfffff000, 0x5, 0xfffffff9, 0xfffffff7, 0x41, 0x2, 0x83d6, 0xca61, 0x9, 0xb, 0x0, 0x40, 0x100, 0x6, 0x8, 0xd, 0x1, 0x0, 0xfffffff7, 0xff, 0x36, 0x5d8, 0x8000, 0x69d, 0x7, 0x9, 0x4, 0x5, 0x747c3d30, 0x6c, 0x4, 0x0, 0x0, 0xc, 0x2, 0x1, 0x8, 0x2, 0x3ff, 0x2, 0x3ff, 0x4, 0x3, 0x1, 0x7, 0xffff, 0x5, 0x6, 0x9, 0x0, 0x8, 0x3e, 0x6, 0x1, 0x6, 0xfd3e, 0x30, 0x7a25, 0x2, 0x9, 0x5f, 0x5, 0xe767, 0x339, 0x9, 0x1000, 0x1, 0x3, 0x4, 0x3, 0x8ff, 0xffffffc4, 0xe0000000, 0x5, 0x5, 0x6, 0x0, 0x8, 0x7, 0xa, 0x351, 0x862, 0x2, 0x6, 0x4, 0x5359, 0x6, 0x8, 0x11b, 0x50d, 0x81, 0x9, 0xffffffff, 0x8, 0x1, 0x1, 0x2, 0x3, 0x5, 0x0, 0xfffffff9, 0x4, 0x12000, 0x0, 0x9, 0x10, 0x72, 0x5, 0x10, 0x4, 0x0, 0x2, 0x6, 0x40, 0x1, 0x2, 0x4, 0x2, 0x7ff, 0x3ff, 0x140, 0x617f, 0x47, 0x7, 0x400, 0x9, 0x10000, 0x0, 0xf90, 0xfffffff7, 0x1, 0x7e8, 0x19af, 0x8e, 0x3, 0x0, 0x17a, 0x7, 0x42d2, 0x3, 0x3, 0x7, 0x27, 0x2, 0x6, 0x7c, 0x2, 0x8, 0x7, 0x7, 0x995, 0x3, 0x8, 0xa42, 0x5, 0xe4b, 0x1, 0x1e, 0xfffffffa, 0x3, 0xfffffe00, 0x8, 0x1, 0x6, 0x26, 0x37bf, 0x8000, 0x1, 0x6, 0x2, 0x2, 0x4, 0x7fd, 0x7, 0x400, 0xffff7fff, 0x4, 0x8, 0x5, 0x9, 0x0, 0x3, 0xffff, 0xec1, 0xfffffff7, 0x5, 0x1, 0xb9, 0x9, 0x3, 0x5, 0xa, 0x3, 0x9, 0x4, 0x6, 0x3, 0x7fffffff, 0x1000, 0x4, 0x9, 0x6, 0x1894, 0x8, 0x6ce36fde, 0x0, 0xd, 0x0, 0x10, 0x2, 0x7, 0x5, 0x4, 0x6, 0x7fff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x0, 0x0, 0xad0, 0x9f64, 0x8, 0x9f62, 0xe3f, 0x6, 0x1, 0x8, 0x378000, 0x5, 0x4b601748, 0x10, 0xe4a, 0x3, 0xe, 0x7f, 0x7, 0x165, 0x7, 0xf, 0xfffffff8, 0x0, 0x2, 0x3a, 0x10000, 0x2, 0x3ff, 0x649, 0x3, 0x8, 0x800, 0x8, 0x5, 0x1d5c, 0x40, 0x3, 0x1, 0x580c, 0xfffff7cb, 0x5e4, 0xa, 0x746b0000, 0x8, 0x2, 0x1, 0x9, 0xa91, 0x2, 0x0, 0x9, 0xb, 0x0, 0x9, 0x1ff, 0x6, 0x4, 0x67be, 0x3, 0x4, 0xc73c, 0x2, 0x895, 0x10001, 0x0, 0x2, 0x1, 0x2, 0x7fffffff, 0x27, 0x10000, 0x3, 0x893e, 0xc, 0x0, 0x1ff00, 0xca2, 0x8, 0x8, 0x20, 0x686, 0x4, 0x2, 0x5, 0x6, 0x8001, 0x794575c2, 0x67c4, 0x83fa, 0x7fff, 0x9, 0xfffff001, 0x1, 0x7e, 0xc, 0x7f, 0x7f, 0xff, 0x2, 0x8, 0x3, 0xffffff7f, 0x8, 0x80, 0x212, 0x8001, 0x4, 0x3, 0x4, 0x1, 0x8, 0x1ff, 0x7, 0x5, 0x3, 0x400, 0x0, 0x9, 0x7, 0x3, 0x2, 0x7, 0xe8d, 0x20, 0x200, 0x0, 0x0, 0x9, 0xe, 0x3, 0xfffffff8, 0x4, 0x8, 0x3f589cda, 0x2, 0x3, 0x401, 0x0, 0x9, 0x9, 0x6b7, 0x3, 0x3, 0x5, 0x6d74, 0x80, 0x9, 0x9, 0x9, 0x0, 0x1000, 0xfffffffc, 0xe178, 0xa6, 0xffffffff, 0x6, 0x4, 0x2, 0x1ff, 0xffff, 0x79, 0x401, 0x6, 0xb826, 0x9, 0x2, 0xcca, 0x2, 0x4, 0x0, 0x2c95b6d2, 0x437a, 0xae1c, 0x7ff, 0xfffffffd, 0xff, 0xb284, 0x3b36, 0xff, 0x4, 0x3, 0x401, 0xd1, 0x9, 0x101, 0x3, 0x9, 0x5, 0x3, 0xb, 0x7, 0xb, 0x462f, 0x8, 0x5, 0x2, 0x9, 0xb, 0x0, 0x7, 0x200, 0x241, 0x6, 0xb, 0x6, 0x1, 0xfff, 0x81, 0x54, 0x200, 0x8, 0xa, 0xffffffff, 0x5, 0x0, 0x100, 0x10, 0x5, 0x2, 0x10, 0xf, 0x10000, 0x0, 0x81, 0x4f, 0x4, 0x4, 0x3, 0x1, 0xc, 0xc34d, 0x3, 0x4, 0x6, 0x2, 0x2, 0x2, 0x5, 0x4, 0x7f, 0xfffffff0, 0x5, 0x1, 0x493, 0x5, 0x5, 0x0, 0x7f, 0x46eea5e, 0x3, 0x0, 0x9, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0xd4, 0x6, "5f6093602913ab3e7f6f1ffac30b527fb97980ff81390ab3d3a8ba73644c2fdff8c5d3d764b05057ae6d21ba20a8ac653cd08b71038e879bd21da6745f5f2a71387092b48f62f6de44731a6bce3a1131aefbb74d42585a87cd721cd06e7194007ca2be429d1f89637d453e686c99ecc3d22d367d870fac5eeafa7d416ec812908bb7a8b66a5717c23d7a1196beff1e0189d9514cab31767931e7ba7df298b37a93e8116e3f57b91c186633c4730cffa5462ebd3c79b459443959caf17cd76a0c2527cb5a45eed323ee3836d2145aa14d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x2b60}}, 0x40000) 2.415936153s ago: executing program 3 (id=937): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) 2.318565061s ago: executing program 2 (id=940): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x2000040, &(0x7f0000000140)={[{@codepage={'codepage', 0x3d, 'cp932'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}, 0x1, 0x302, &(0x7f00000008c0)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 2.161981663s ago: executing program 3 (id=942): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 1.906521765s ago: executing program 2 (id=945): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 1.58451765s ago: executing program 2 (id=948): r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='coredump_filter\x00') writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="81", 0x1}], 0x1) 1.5843804s ago: executing program 0 (id=949): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d020000060000000000000085"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x7ff}, 0x28) 1.352413149s ago: executing program 1 (id=951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff7ffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.352311669s ago: executing program 2 (id=952): syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902760002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d052415a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d000009040101"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007df09808e1050804da20010203010902"], 0x0) 1.351846299s ago: executing program 0 (id=959): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 1.22170058s ago: executing program 0 (id=953): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x114, 0x4, 0x0, 0x0) 1.196628842s ago: executing program 1 (id=954): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000100)={0x0, @broadcast}) 1.056132294s ago: executing program 0 (id=955): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@generic={0x2, 0xdcc, 0x1}) 1.055999633s ago: executing program 1 (id=956): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@index_on}, {@volatile}], [], 0x2c}) 924.311624ms ago: executing program 0 (id=957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048"], 0x122}}, 0x0) 818.964272ms ago: executing program 1 (id=958): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) 652.109976ms ago: executing program 0 (id=960): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 417.185825ms ago: executing program 1 (id=961): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) 0s ago: executing program 1 (id=962): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, 0x0, &(0x7f0000002e80)) kernel console output (not intermixed with test programs): 4.195387][ T787] usb 2-1: 26:2 : does not exist [ 94.209869][ T787] usb 2-1: unknown interface protocol 0x13, assuming v1 [ 94.227095][ T787] usb 2-1: 89:0 : does not exist [ 94.234554][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 94.259610][ T787] usb 2-1: USB disconnect, device number 8 [ 94.333726][ T6269] loop0: detected capacity change from 0 to 512 [ 94.346355][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.361644][ T6269] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.165: casefold flag without casefold feature [ 94.386166][ T6261] loop3: detected capacity change from 0 to 40427 [ 94.404987][ T6261] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 94.412011][ T6261] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 94.422900][ T6269] EXT4-fs (loop0): get root inode failed [ 94.430850][ T6269] EXT4-fs (loop0): mount failed [ 94.444782][ T6261] F2FS-fs (loop3): invalid crc value [ 94.492183][ T9] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 94.496748][ T5780] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.520191][ T9] usb 3-1: config 0 has no interface number 0 [ 94.526370][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00 [ 94.543758][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.570337][ T9] usb 3-1: config 0 descriptor?? [ 94.581786][ T9] usb-storage 3-1:0.14: USB Mass Storage device detected [ 94.621907][ T9] usb-storage 3-1:0.14: Quirks match for vid 04e6 pid 0006: 1 [ 94.643800][ T9] usb-storage 3-1:0.14: This device (04e6,0006,0100 S de P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.6.101-syzkaller) [ 94.643800][ T9] Please send a copy of this message to and [ 94.673080][ T6261] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 94.697076][ T6261] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 94.836149][ T6278] loop0: detected capacity change from 0 to 4096 [ 94.878228][ T5838] usb 3-1: USB disconnect, device number 9 [ 94.891521][ T6278] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 94.930071][ T6278] ntfs3: loop0: $Volume is corrupted. [ 94.944063][ T6280] loop1: detected capacity change from 0 to 512 [ 94.970304][ T6280] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.036395][ T6280] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 95.167415][ T6283] loop0: detected capacity change from 0 to 128 [ 95.238782][ T6283] vxfs: unable to set final block size [ 95.393655][ T6289] loop3: detected capacity change from 0 to 8 [ 95.439312][ T6289] SQUASHFS error: zlib decompression failed, data probably corrupt [ 95.455619][ T6289] SQUASHFS error: Failed to read block 0x9b: -5 [ 95.463454][ T6289] SQUASHFS error: Unable to read metadata cache entry [99] [ 95.475313][ T6289] SQUASHFS error: Unable to read inode 0x127 [ 95.537202][ T5852] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 95.624820][ T6295] futex_wake_op: syz.3.174 tries to shift op by 32; fix this program [ 95.649708][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 95.759529][ T5852] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.770568][ T5852] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 95.787484][ T5852] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 32 [ 95.817191][ T5852] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.831484][ T5852] usb 2-1: config 1 interface 0 has no altsetting 0 [ 95.842175][ T5852] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.857183][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.871044][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.887291][ T5852] usb 2-1: Product: syz [ 95.892779][ T9] usb 1-1: config 3 has an invalid interface number: 212 but max is 0 [ 95.907124][ T5852] usb 2-1: Manufacturer: syz [ 95.912243][ T9] usb 1-1: config 3 has no interface number 0 [ 95.918496][ T5852] usb 2-1: SerialNumber: syz [ 95.930919][ T9] usb 1-1: config 3 interface 212 has no altsetting 0 [ 95.941117][ T9] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=2a.65 [ 95.952475][ T6285] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.967569][ T6285] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.974962][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.989685][ T9] usb 1-1: Product: syz [ 95.993923][ T9] usb 1-1: Manufacturer: syz [ 95.999123][ T9] usb 1-1: SerialNumber: syz [ 96.038987][ T6293] loop2: detected capacity change from 0 to 32768 [ 96.066800][ T6293] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.173 (6293) [ 96.099738][ T6293] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 96.137240][ T6293] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 96.146977][ T6293] BTRFS error (device loop2): unrecognized mount option 'fragment=data' [ 96.169989][ T6293] BTRFS error (device loop2): open_ctree failed: -22 [ 96.202006][ T5905] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by udevd (5905) [ 96.233255][ T5852] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 96.248864][ T9] usb 1-1: USB disconnect, device number 8 [ 96.278765][ T5852] usb 2-1: USB disconnect, device number 9 [ 96.368865][ T6306] tmpfs: Bad value for 'mpol' [ 96.887522][ T5852] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.039930][ T6322] loop1: detected capacity change from 0 to 4096 [ 97.081138][ T6322] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 97.101623][ T6322] NILFS (loop1): mounting unchecked fs [ 97.110200][ T6326] loop0: detected capacity change from 0 to 2048 [ 97.116848][ T6322] NILFS (loop1): recovery required for readonly filesystem [ 97.125395][ T5852] usb 3-1: config 6 has an invalid interface number: 108 but max is 0 [ 97.137203][ T5852] usb 3-1: config 6 has no interface number 0 [ 97.146413][ T5852] usb 3-1: config 6 interface 108 has no altsetting 0 [ 97.149825][ T5780] udevd[5780]: incorrect nilfs2 checksum on /dev/loop1 [ 97.153502][ T6322] NILFS (loop1): write access will be enabled during recovery [ 97.189945][ T5852] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 97.217668][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.245426][ T6322] NILFS (loop1): invalid segment: Checksum error in super root [ 97.262354][ T6322] NILFS (loop1): error -22 while loading super root [ 97.263444][ T5852] usb 3-1: Product: syz [ 97.284108][ T5852] usb 3-1: Manufacturer: syz [ 97.294852][ T5852] usb 3-1: SerialNumber: syz [ 97.496721][ T6318] loop3: detected capacity change from 0 to 40427 [ 97.528200][ T6318] F2FS-fs (loop3): Invalid log blocks per segment (3279) [ 97.533404][ T5852] mos7840 3-1:6.108: missing endpoints [ 97.555992][ T6318] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 97.558848][ T5852] usb 3-1: USB disconnect, device number 10 [ 97.620407][ T6318] F2FS-fs (loop3): invalid crc value [ 97.632829][ T6318] F2FS-fs (loop3): invalid journal entries nats 0 sits 50950 [ 97.662267][ T6318] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-22) [ 97.697449][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 97.879069][ T23] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 97.897105][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.919625][ T23] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 97.929426][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.955151][ T23] usb 1-1: Product: syz [ 97.960608][ T23] usb 1-1: Manufacturer: syz [ 97.965240][ T23] usb 1-1: SerialNumber: syz [ 97.993048][ T23] usb 1-1: config 0 descriptor?? [ 98.010114][ T23] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 98.027530][ T23] ims_pcu: probe of 1-1:0.0 failed with error -22 [ 98.162103][ T6332] loop1: detected capacity change from 0 to 40427 [ 98.190713][ T6332] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 98.217134][ T6332] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 98.225430][ T6332] F2FS-fs (loop1): build fault injection attr: rate: 6, type: 0x7ffff [ 98.242253][ T5838] usb 1-1: USB disconnect, device number 9 [ 98.277744][ T6332] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 98.321129][ T6332] F2FS-fs (loop1): invalid crc value [ 98.339716][ T6332] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4552/0x6c20 [ 98.377104][ T6332] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12) [ 98.556826][ T6347] loop2: detected capacity change from 0 to 4096 [ 98.583959][ T6347] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 98.637294][ T6347] ntfs3: loop2: Failed to load $LogFile (-22). [ 98.868348][ T6355] syz.1.203: attempt to access beyond end of device [ 98.868348][ T6355] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 98.889396][ T6355] vxfs: unable to read disk superblock at 1 [ 98.896286][ T6355] syz.1.203: attempt to access beyond end of device [ 98.896286][ T6355] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 98.919516][ T6357] loop2: detected capacity change from 0 to 47 [ 98.919933][ T6355] vxfs: unable to read disk superblock at 8 [ 98.934008][ T6355] vxfs: can't find superblock. [ 98.985321][ T5852] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 99.244380][ T5852] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.263138][ T5852] usb 4-1: not running at top speed; connect to a high speed hub [ 99.288050][ T5852] usb 4-1: config 5 has an invalid interface number: 121 but max is 0 [ 99.305469][ T5852] usb 4-1: config 5 has no interface number 0 [ 99.313464][ T6371] loop2: detected capacity change from 0 to 256 [ 99.325928][ T5852] usb 4-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=b3.a2 [ 99.349528][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.374015][ T5852] usb 4-1: Product: syz [ 99.378243][ T5852] usb 4-1: Manufacturer: syz [ 99.399625][ T5852] usb 4-1: SerialNumber: syz [ 99.499246][ T6377] loop2: detected capacity change from 0 to 8 [ 99.548613][ T6377] SQUASHFS error: xz decompression failed, data probably corrupt [ 99.556889][ T6377] SQUASHFS error: Failed to read block 0x108: -5 [ 99.571431][ T6377] SQUASHFS error: Unable to read metadata cache entry [106] [ 99.580421][ T6377] SQUASHFS error: Unable to read inode 0x11f [ 99.691320][ T5852] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 99.708998][ T5852] pctv452e: pctv452e_power_ctrl: 1 [ 99.708998][ T5852] [ 99.717946][ T5852] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 99.717946][ T5852] [ 99.732622][ T787] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 99.742337][ T5852] dvb-usb: bulk message failed: -22 (5/0) [ 99.769169][ T5852] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 99.794007][ T5852] dvb-usb: PCTV HDTV USB error while loading driver (-19) [ 99.827552][ T5852] usb 4-1: USB disconnect, device number 8 [ 99.942578][ T787] usb 1-1: config 2 has an invalid interface number: 233 but max is 0 [ 99.953661][ T787] usb 1-1: config 2 has no interface number 0 [ 99.972899][ T787] usb 1-1: config 2 interface 233 has no altsetting 0 [ 100.000117][ T787] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0109, bcdDevice=33.00 [ 100.010512][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.023923][ T787] usb 1-1: Product: syz [ 100.028622][ T787] usb 1-1: Manufacturer: syz [ 100.034560][ T787] usb 1-1: SerialNumber: syz [ 100.288229][ T787] ftdi_sio 1-1:2.233: FTDI USB Serial Device converter detected [ 100.308747][ T787] usb 1-1: Detected FT232HP [ 100.319311][ T787] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 100.343712][ T787] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 100.375655][ T787] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.417599][ T787] usb 1-1: USB disconnect, device number 10 [ 100.443127][ T787] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 100.465834][ T787] ftdi_sio 1-1:2.233: device disconnected [ 100.716406][ T6392] loop1: detected capacity change from 0 to 40427 [ 100.723214][ T5852] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 100.775331][ T6392] F2FS-fs (loop1): invalid crc value [ 100.797735][ T6392] F2FS-fs (loop1): Found nat_bits in checkpoint [ 100.867054][ T6392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.930552][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 100.946739][ T5852] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 100.977316][ T5852] usb 3-1: config 0 has no interface number 0 [ 101.018038][ T5852] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0010, bcdDevice=61.2f [ 101.036814][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.046757][ T5852] usb 3-1: Product: syz [ 101.064928][ T5852] usb 3-1: Manufacturer: syz [ 101.085616][ T5852] usb 3-1: SerialNumber: syz [ 101.102495][ T5852] usb 3-1: config 0 descriptor?? [ 101.109759][ T5852] esd_usb 3-1:0.222: sending version message failed [ 101.116761][ T787] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 101.129985][ T5852] esd_usb: probe of 3-1:0.222 failed with error -22 [ 101.315315][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 101.320966][ T6421] loop1: detected capacity change from 0 to 2048 [ 101.337252][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 101.351538][ T5852] usb 3-1: USB disconnect, device number 11 [ 101.358174][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.380115][ T787] usb 4-1: config 9 has an invalid interface number: 131 but max is 0 [ 101.382950][ T6421] loop1: p1 < > p4 < > [ 101.388312][ T787] usb 4-1: config 9 has no interface number 0 [ 101.405005][ T787] usb 4-1: config 9 interface 131 has no altsetting 0 [ 101.409475][ T6421] loop1: partition table partially beyond EOD, truncated [ 101.421289][ T787] usb 4-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=c8.ec [ 101.430083][ T6421] loop1: p4 start 42180 is beyond EOD, truncated [ 101.440309][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.452428][ T787] usb 4-1: Product: syz [ 101.457465][ T787] usb 4-1: Manufacturer: syz [ 101.462107][ T787] usb 4-1: SerialNumber: syz [ 101.518794][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 101.526351][ T9] usb 1-1: config 2 has an invalid interface number: 66 but max is 0 [ 101.535092][ T9] usb 1-1: config 2 has no interface number 0 [ 101.541908][ T9] usb 1-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 101.553960][ T9] usb 1-1: config 2 interface 66 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 101.580842][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 101.599899][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.608556][ T9] usb 1-1: Product: syz [ 101.613311][ T9] usb 1-1: Manufacturer: syz [ 101.618467][ T9] usb 1-1: SerialNumber: syz [ 101.636680][ T9] usb 1-1: Found UVC 0.00 device syz (046d:08c6) [ 101.643896][ T9] usb 1-1: No valid video chain found. [ 101.720639][ T787] snd-usb-caiaq 4-1:9.131: can't set alt interface. [ 101.727619][ T787] usb 4-1: unable to init card! (ret=-5) [ 101.733954][ T787] snd-usb-caiaq: probe of 4-1:9.131 failed with error -5 [ 101.743401][ T787] usb 4-1: USB disconnect, device number 9 [ 101.869492][ T23] usb 1-1: USB disconnect, device number 11 [ 101.903330][ T5847] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 102.095843][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 102.109705][ T5847] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 102.119829][ T5847] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 102.135337][ T5847] usb 2-1: config 3 interface 0 altsetting 8 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 102.147267][ T5847] usb 2-1: config 3 interface 0 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0 [ 102.157550][ T5847] usb 2-1: config 3 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.174940][ T5847] usb 2-1: config 3 interface 0 has no altsetting 0 [ 102.184929][ T5847] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 102.206623][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.219016][ T5847] usb 2-1: Product: syz [ 102.223383][ T5847] usb 2-1: Manufacturer: syz [ 102.228406][ T5847] usb 2-1: SerialNumber: syz [ 102.538204][ T6446] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 102.564914][ T5847] usb 2-1: USB disconnect, device number 10 [ 102.587319][ T6446] CIFS mount error: No usable UNC path provided in device string! [ 102.587319][ T6446] [ 102.606967][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.642611][ T6446] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 103.007720][ T6464] loop0: detected capacity change from 0 to 764 [ 103.030295][ T6458] loop2: detected capacity change from 0 to 2048 [ 103.045000][ T6464] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 103.078396][ T6458] hpfs: hpfs_map_sector(): read error [ 103.635278][ T23] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 103.693224][ T6477] loop1: detected capacity change from 0 to 128 [ 103.700817][ T6477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.707453][ T6477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.714221][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 103.728580][ T6477] EXT4-fs (loop1): Test dummy encryption mode enabled [ 103.743314][ T6477] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.761990][ T6477] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.794585][ T6462] loop3: detected capacity change from 0 to 32768 [ 103.817999][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Trying to join cluster "lock_nolock", "errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í" [ 103.836536][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Now mounting FS (format 1802)... [ 103.841574][ T23] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 103.888921][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: journal 0 mapped with 1 extents in 0ms [ 103.906356][ T9] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0, already locked for use [ 103.920554][ T9] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Looking at journal... [ 103.921881][ T23] usb 3-1: config 0 has no interface number 0 [ 103.937663][ T8] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 103.947949][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.963685][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.966745][ T8] usb 1-1: Product: syz [ 103.982800][ T8] usb 1-1: Manufacturer: syz [ 103.987473][ T8] usb 1-1: SerialNumber: syz [ 103.987526][ T23] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.006602][ T8] usb 1-1: config 0 descriptor?? [ 104.026291][ T23] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.053230][ T8] go7007: probe of 1-1:0.0 failed with error -12 [ 104.073720][ T23] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 104.087488][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.103346][ T9] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Journal head lookup took 170ms [ 104.126976][ T23] usb 3-1: Product: syz [ 104.134095][ T23] usb 3-1: Manufacturer: syz [ 104.150068][ T9] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Done [ 104.159112][ T23] usb 3-1: SerialNumber: syz [ 104.175420][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: first mount done, others may mount [ 104.179965][ T23] usb 3-1: config 0 descriptor?? [ 104.204132][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: ri_addr = 18 [ 104.204132][ T6462] ri_length = 1 [ 104.204132][ T6462] ri_data0 = 19 [ 104.204132][ T6462] ri_data = 524288 [ 104.204132][ T6462] ri_bitbytes = 515 [ 104.204132][ T6462] start=0 len=515 offset=128 [ 104.237560][ T23] ums-karma 3-1:0.46: USB Mass Storage device detected [ 104.248763][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: R: n:18 f:00 b:0/0 i:0 q:0 r:0 e:0 [ 104.290396][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: fatal: filesystem consistency error [ 104.290396][ T6462] RG = 18 [ 104.290396][ T6462] function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 829 [ 104.314118][ T9] usb 1-1: USB disconnect, device number 12 [ 104.322852][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: G: s:UN n:3/12 f:n t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0 [ 104.340269][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: about to withdraw this file system [ 104.353067][ T23] ums-karma: probe of 3-1:0.46 failed with error -5 [ 104.358987][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Journal recovery skipped for jid 0 until next mount. [ 104.375286][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: Glock dequeues delayed: 0 [ 104.389766][ T6462] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: File system withdrawn [ 104.403461][ T6462] CPU: 1 PID: 6462 Comm: syz.3.251 Not tainted 6.6.101-syzkaller #0 [ 104.409813][ T6487] loop1: detected capacity change from 0 to 2048 [ 104.411466][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.427870][ T6462] Call Trace: [ 104.431169][ T6462] [ 104.434128][ T6462] dump_stack_lvl+0x16c/0x230 [ 104.438833][ T6462] ? kobject_uevent_env+0x363/0x8c0 [ 104.444077][ T6462] ? show_regs_print_info+0x20/0x20 [ 104.449285][ T6462] ? load_image+0x3b0/0x3b0 [ 104.453805][ T6462] ? kobject_uevent_env+0x363/0x8c0 [ 104.459030][ T6462] gfs2_withdraw+0xf16/0x14b0 [ 104.463720][ T6462] ? gfs2_lm+0x220/0x220 [ 104.467965][ T6462] ? preempt_schedule_thunk+0x1a/0x30 [ 104.473341][ T6462] gfs2_consist_rgrpd_i+0x14c/0x1a0 [ 104.478541][ T6462] ? gfs2_consist_inode_i+0x110/0x110 [ 104.483959][ T6462] ? gfs2_ri_update+0x46b/0x1640 [ 104.488893][ T6462] ? rcu_is_watching+0x15/0xb0 [ 104.493680][ T6462] gfs2_ri_update+0xb9a/0x1640 [ 104.498474][ T6462] ? gfs2_glock_nq_init+0x60/0x60 [ 104.503513][ T6462] ? inode_go_held+0xf8/0x200 [ 104.508304][ T6462] ? gfs2_glock_wait+0x20f/0x2a0 [ 104.513243][ T6462] gfs2_rindex_update+0x2cd/0x370 [ 104.518272][ T6462] ? gfs2_ri_total+0x200/0x200 [ 104.523032][ T6462] ? init_inodes+0x249/0x320 [ 104.527629][ T6462] ? complete_all+0x2d/0x1d0 [ 104.532239][ T6462] init_inodes+0x249/0x320 [ 104.536670][ T6462] gfs2_fill_super+0x1815/0x1f80 [ 104.541624][ T6462] ? gfs2_reconfigure+0xb10/0xb10 [ 104.546736][ T6462] ? init_locking+0xb8/0x200 [ 104.551355][ T6462] ? setup_bdev_super+0x56b/0x660 [ 104.556375][ T6462] get_tree_bdev+0x3e4/0x510 [ 104.560960][ T6462] ? end_current_label_crit_section+0x170/0x170 [ 104.567220][ T6462] ? gfs2_reconfigure+0xb10/0xb10 [ 104.572275][ T6462] ? setup_bdev_super+0x660/0x660 [ 104.577305][ T6462] gfs2_get_tree+0x51/0x1e0 [ 104.581810][ T6462] vfs_get_tree+0x8c/0x280 [ 104.586222][ T6462] do_new_mount+0x24b/0xa40 [ 104.590740][ T6462] __se_sys_mount+0x2da/0x3c0 [ 104.595421][ T6462] ? __x64_sys_mount+0xc0/0xc0 [ 104.600207][ T6462] ? lockdep_hardirqs_on+0x98/0x150 [ 104.605401][ T6462] ? __x64_sys_mount+0x20/0xc0 [ 104.610162][ T6462] do_syscall_64+0x55/0xb0 [ 104.614582][ T6462] ? clear_bhb_loop+0x40/0x90 [ 104.619256][ T6462] ? clear_bhb_loop+0x40/0x90 [ 104.623932][ T6462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.629832][ T6462] RIP: 0033:0x7f4b3af9030a [ 104.634352][ T6462] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.653974][ T6462] RSP: 002b:00007f4b3bd21e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.662403][ T6462] RAX: ffffffffffffffda RBX: 00007f4b3bd21ef0 RCX: 00007f4b3af9030a [ 104.670395][ T6462] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007f4b3bd21eb0 [ 104.678387][ T6462] RBP: 0000200000000000 R08: 00007f4b3bd21ef0 R09: 0000000000000000 [ 104.686361][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 104.694335][ T6462] R13: 00007f4b3bd21eb0 R14: 00000000000125ce R15: 00002000000000c0 [ 104.702408][ T6462] [ 104.740945][ T6487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.768664][ T23] usb 3-1: USB disconnect, device number 12 [ 105.118299][ T6494] loop1: detected capacity change from 0 to 1764 [ 105.185514][ T5905] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.284624][ T6496] loop3: detected capacity change from 0 to 4096 [ 105.294637][ T6496] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 105.383392][ T6496] ntfs3: loop3: Looks like $AttrDef is corrupted (size=0). [ 105.636864][ T6509] loop0: detected capacity change from 0 to 512 [ 105.675837][ T6509] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.687946][ T6509] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 105.698965][ T6509] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.272: Corrupt directory, running e2fsck is recommended [ 105.712491][ T6509] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 105.730552][ T6509] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.272: corrupted in-inode xattr: invalid ea_ino [ 105.762810][ T6509] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.272: couldn't read orphan inode 15 (err -117) [ 105.789788][ T6509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.795090][ T6516] IPv6: addrconf: prefix option has invalid lifetime [ 105.911486][ T6517] loop2: detected capacity change from 0 to 2048 [ 105.941257][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.965218][ T6517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.059805][ T6514] loop3: detected capacity change from 0 to 8192 [ 106.118195][ T6514] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.158313][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.166625][ T6514] REISERFS warning (device loop3): sh-2012 read_super_block: found unknown format "1" of reiserfs with non-standard magic [ 106.479849][ T6538] IPv6: addrconf: prefix option has invalid lifetime [ 106.533649][ T6534] loop0: detected capacity change from 0 to 4096 [ 106.559058][ T6534] ntfs3: loop0: MFT: r=0, expect seq=1 instead of 0! [ 106.571158][ T6534] ntfs3: loop0: Failed to load $MFT (-22). [ 106.604420][ T6540] dccp_v6_rcv: dropped packet with invalid checksum [ 106.682674][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 106.796720][ T6546] loop1: detected capacity change from 0 to 8 [ 106.816389][ T6546] squashfs image failed sanity check [ 106.909873][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.925725][ T9] usb 3-1: config 4 has an invalid interface number: 92 but max is 0 [ 106.938936][ T6550] loop1: detected capacity change from 0 to 512 [ 106.941392][ T9] usb 3-1: config 4 has no interface number 0 [ 106.959560][ T9] usb 3-1: config 4 interface 92 has no altsetting 0 [ 106.960180][ T6550] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 106.970862][ T9] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 106.989794][ T6550] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 107.000872][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.009766][ T6550] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 107.020165][ T9] usb 3-1: Product: syz [ 107.024579][ T5852] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 107.032267][ T9] usb 3-1: Manufacturer: syz [ 107.037390][ T9] usb 3-1: SerialNumber: syz [ 107.057375][ T6550] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 107.065564][ T6550] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 107.073903][ T6550] EXT4-fs (loop1): failed to initialize system zone (-117) [ 107.081347][ T6550] EXT4-fs (loop1): mount failed [ 107.245120][ T5852] usb 1-1: config 1 has an invalid interface number: 229 but max is 1 [ 107.253463][ T5852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.263970][ T5852] usb 1-1: config 1 has no interface number 0 [ 107.270195][ T5852] usb 1-1: too many endpoints for config 1 interface 229 altsetting 255: 255, using maximum allowed: 30 [ 107.281669][ T5852] usb 1-1: config 1 interface 229 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 107.295741][ T5852] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.309033][ T5852] usb 1-1: config 1 interface 229 has no altsetting 0 [ 107.318001][ T9] radioshark 3-1:4.92: Invalid radioSHARK device [ 107.324486][ T9] radioshark: probe of 3-1:4.92 failed with error -22 [ 107.332013][ T9] usbhid 3-1:4.92: couldn't find an input interrupt endpoint [ 107.339484][ T5852] usb 1-1: config 1 interface 1 has no altsetting 0 [ 107.353394][ T9] usb 3-1: USB disconnect, device number 13 [ 107.362588][ T5852] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.373522][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.383048][ T5852] usb 1-1: Product: syz [ 107.388328][ T5852] usb 1-1: Manufacturer: syz [ 107.392974][ T5852] usb 1-1: SerialNumber: syz [ 107.508174][ T6557] loop3: detected capacity change from 0 to 1024 [ 107.526207][ T6557] hfsplus: invalid btree flag [ 107.531438][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 107.540799][ T6557] hfsplus: failed to load catalog file [ 107.638614][ T5852] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 107.667740][ T5852] usb 1-1: USB disconnect, device number 13 [ 107.744233][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 107.745552][ T6563] loop3: detected capacity change from 0 to 164 [ 107.765318][ T8] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 107.785223][ T8] usb 2-1: config 0 has no interface number 0 [ 107.792272][ T8] usb 2-1: config 0 interface 153 has no altsetting 0 [ 107.803998][ T8] usb 2-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0 [ 107.813350][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.822449][ T8] usb 2-1: Product: syz [ 107.827921][ T8] usb 2-1: Manufacturer: syz [ 107.832540][ T8] usb 2-1: SerialNumber: syz [ 107.859233][ T8] usb 2-1: config 0 descriptor?? [ 107.882554][ T8] ti_usb_3410_5052 2-1:0.153: TI USB 3410 1 port adapter converter detected [ 107.919733][ T8] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 108.119253][ T55] usb 2-1: USB disconnect, device number 11 [ 108.128374][ T55] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 108.140342][ T55] ti_usb_3410_5052 2-1:0.153: device disconnected [ 108.158761][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 108.318313][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 108.358484][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.380937][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 108.401314][ T9] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 108.414677][ T9] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 108.428097][ T9] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 108.437846][ T9] usb 4-1: config 129 has no interface number 0 [ 108.454401][ T9] usb 4-1: config 129 has no interface number 1 [ 108.464163][ T9] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 108.478471][ T9] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 108.496595][ T9] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 108.510262][ T9] usb 4-1: config 129 interface 135 has no altsetting 0 [ 108.517291][ T9] usb 4-1: config 129 interface 5 has no altsetting 0 [ 108.527377][ T9] usb 4-1: string descriptor 0 read error: -22 [ 108.535810][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 108.545011][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 108.552903][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.574009][ T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 108.582559][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 108.593730][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.605220][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 108.617117][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.626184][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.636084][ T8] usb 3-1: Product: syz [ 108.640827][ T8] usb 3-1: Manufacturer: syz [ 108.647634][ T8] usb 3-1: SerialNumber: syz [ 108.872943][ T55] usb 4-1: USB disconnect, device number 10 [ 108.897712][ T8] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 108.968478][ T8] usb 3-1: USB disconnect, device number 14 [ 109.117643][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 109.265225][ T6593] loop0: detected capacity change from 0 to 4096 [ 109.278311][ T6593] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. [ 109.291358][ T6593] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 109.303206][ T6593] ntfs: (device loop0): ntfs_read_locked_inode(): Mapping pairs decompression failed. [ 109.333837][ T6593] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 109.348954][ T6593] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 109.367490][ T6593] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 109.394422][ T6593] ntfs: volume version 3.1. [ 109.399237][ T6593] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 109.422158][ T6593] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 109.442370][ T6593] ntfs: (device loop0): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 109.452590][ T6593] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 109.532167][ T5847] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 109.725922][ T6597] loop3: detected capacity change from 0 to 8192 [ 109.744046][ T6597] REISERFS warning (device loop3): super-6508 reiserfs_parse_options: bad value 0x0000000000000081=appraise_type=imasig for -ocommit [ 109.744046][ T6597] [ 109.771941][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 109.781242][ T5847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.821903][ T5847] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 109.839138][ T5847] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 109.861927][ T5847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.873406][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.888586][ T5847] usb 2-1: Product: syz [ 109.897029][ T5847] usb 2-1: Manufacturer: syz [ 109.904302][ T5847] usb 2-1: SerialNumber: syz [ 109.932165][ T5847] usb 2-1: bad CDC descriptors [ 109.964159][ T5838] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 110.017485][ T8] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 110.113700][ T787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 110.153221][ T5847] usb 2-1: USB disconnect, device number 12 [ 110.164466][ T5838] usb 1-1: config 0 has an invalid interface number: 139 but max is 0 [ 110.172750][ T5838] usb 1-1: config 0 has no interface number 0 [ 110.181730][ T5838] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 110.191248][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.200495][ T5838] usb 1-1: Product: syz [ 110.204662][ T5838] usb 1-1: Manufacturer: syz [ 110.209242][ T5838] usb 1-1: SerialNumber: syz [ 110.215862][ T5838] usb 1-1: config 0 descriptor?? [ 110.233372][ T8] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 110.242649][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.253870][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.267897][ T8] usb 3-1: string descriptor 0 read error: -22 [ 110.274620][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.283848][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.299837][ T8] usb 3-1: 0:2 : does not exist [ 110.318029][ T787] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 110.332115][ T787] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 110.345756][ T787] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 110.358107][ T787] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 110.371787][ T787] usb 4-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.386319][ T787] usb 4-1: config 48 interface 0 has no altsetting 0 [ 110.399642][ T787] usb 4-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 110.409215][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.417528][ T787] usb 4-1: Product: syz [ 110.421867][ T787] usb 4-1: Manufacturer: syz [ 110.426888][ T787] usb 4-1: SerialNumber: syz [ 110.452838][ T5838] mct_u232 1-1:0.139: MCT U232 converter detected [ 110.460622][ T5838] mct_u232 ttyUSB0: expected endpoint missing [ 110.473445][ T5838] usb 1-1: USB disconnect, device number 14 [ 110.482691][ T5838] mct_u232 1-1:0.139: device disconnected [ 110.541869][ T23] usb 3-1: USB disconnect, device number 15 [ 110.662339][ T787] usb 4-1: USB disconnect, device number 11 [ 110.945291][ T6606] loop1: detected capacity change from 0 to 32768 [ 110.981839][ T6606] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 111.000542][ T6606] (syz.1.316,6606,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 111.000542][ T6606] found = 2, set = 0, taken = 0, off = 0 [ 111.029287][ T6606] (syz.1.316,6606,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 111.041603][ T6606] (syz.1.316,6606,1):ocfs2_check_volume:2462 ERROR: status = -22 [ 111.053481][ T6606] (syz.1.316,6606,1):ocfs2_check_volume:2490 ERROR: status = -22 [ 111.079459][ T6606] (syz.1.316,6606,0):ocfs2_mount_volume:1822 ERROR: status = -22 [ 111.093717][ T6606] (syz.1.316,6606,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 111.197408][ T6612] loop0: detected capacity change from 0 to 128 [ 111.228186][ T6612] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 111.268875][ T6612] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 111.354870][ T5780] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.764924][ T6624] loop0: detected capacity change from 0 to 4096 [ 111.838032][ T6624] ntfs: volume version 3.1. [ 112.268318][ T6618] loop2: detected capacity change from 0 to 40427 [ 112.284105][ T6618] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 112.306506][ T6634] syz.0.329: attempt to access beyond end of device [ 112.306506][ T6634] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 112.327749][ T6618] F2FS-fs (loop2): Image doesn't support compression [ 112.337320][ T6634] gfs2: error 10 reading superblock [ 112.375015][ T6618] F2FS-fs (loop2): invalid crc value [ 112.410761][ T6618] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.513605][ T6618] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.572625][ T6626] loop3: detected capacity change from 0 to 32768 [ 112.594059][ T6626] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.325 (6626) [ 112.645075][ T6626] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 112.679646][ T6626] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 112.688916][ T6626] BTRFS info (device loop3): using free space tree [ 112.773761][ T6630] loop1: detected capacity change from 0 to 32768 [ 112.829738][ T6630] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop1 scanned by syz.1.327 (6630) [ 112.940047][ T6630] BTRFS info (device loop1): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 112.965005][ T6626] BTRFS info (device loop3): enabling ssd optimizations [ 113.000140][ T6626] BTRFS info (device loop3): auto enabling async discard [ 113.007563][ T6630] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 113.040037][ T6630] BTRFS info (device loop1): using free space tree [ 113.162910][ T5786] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 113.188726][ T6637] loop0: detected capacity change from 0 to 32768 [ 113.263392][ T6630] BTRFS info (device loop1): enabling ssd optimizations [ 113.313493][ T6630] BTRFS info (device loop1): auto enabling async discard [ 113.507805][ T5788] BTRFS info (device loop1): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 113.752553][ T6642] loop2: detected capacity change from 0 to 32768 [ 113.844992][ T5904] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.504571][ T6679] loop2: detected capacity change from 0 to 8 [ 114.526570][ T6679] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 114.559807][ T6679] cramfs: wrong endianness [ 114.612828][ T6675] loop3: detected capacity change from 0 to 32768 [ 114.657575][ T6675] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop3 scanned by syz.3.332 (6675) [ 114.714649][ T6674] loop0: detected capacity change from 0 to 32768 [ 114.744297][ T6674] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop0 scanned by syz.0.333 (6674) [ 114.767460][ T6675] BTRFS info (device loop3): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 114.798099][ T6675] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 114.826308][ T6674] BTRFS info (device loop0): first mount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 114.837711][ T6675] BTRFS info (device loop3): using free space tree [ 114.845941][ T6674] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 114.869049][ T6674] BTRFS info (device loop0): using free space tree [ 114.886649][ T6677] loop1: detected capacity change from 0 to 32768 [ 114.963593][ T6677] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.334 (6677) [ 114.964128][ T6681] loop2: detected capacity change from 0 to 8192 [ 115.009989][ T6677] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 115.037870][ T6675] BTRFS info (device loop3): enabling ssd optimizations [ 115.046670][ T6674] BTRFS info (device loop0): enabling ssd optimizations [ 115.081534][ T6677] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 115.090562][ T6675] BTRFS info (device loop3): auto enabling async discard [ 115.096184][ T6674] BTRFS info (device loop0): auto enabling async discard [ 115.121818][ T6677] BTRFS info (device loop1): using free space tree [ 115.235587][ T5787] BTRFS info (device loop0): last unmount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 115.310466][ T5786] BTRFS info (device loop3): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 115.400049][ T6677] BTRFS info (device loop1): enabling ssd optimizations [ 115.423483][ T6729] loop2: detected capacity change from 0 to 128 [ 115.431328][ T6677] BTRFS info (device loop1): auto enabling async discard [ 115.507977][ T6729] qnx6: superblock #1 checksum error [ 115.667065][ T5788] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 115.678472][ T5905] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 9 /dev/loop3 scanned by udevd (5905) [ 116.053586][ T6738] loop2: detected capacity change from 0 to 4096 [ 116.174753][ T6744] loop1: detected capacity change from 0 to 128 [ 116.261148][ T6738] __ntfs_error: 22 callbacks suppressed [ 116.261163][ T6738] ntfs: (device loop2): parse_options(): NLS character set cp86 not found. Using previous one cp1255. [ 116.337925][ T6738] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 116.398451][ T6738] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 116.482917][ T6738] ntfs: volume version 3.1. [ 116.514972][ T6738] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 116.542262][ T6747] loop1: detected capacity change from 0 to 128 [ 116.557341][ T6738] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 116.609571][ T6738] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 116.974544][ T6751] loop1: detected capacity change from 0 to 65 [ 117.007714][ T6751] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 117.205127][ T6740] loop3: detected capacity change from 0 to 32768 [ 117.225191][ T6742] loop0: detected capacity change from 0 to 32768 [ 117.235616][ T6740] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop3 scanned by syz.3.342 (6740) [ 117.250473][ T6742] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop0 scanned by syz.0.343 (6742) [ 117.278377][ T6740] BTRFS info (device loop3): first mount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 117.289886][ T6742] BTRFS info (device loop0): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 117.313641][ T6740] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.328197][ T6742] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.376041][ T6740] BTRFS info (device loop3): using free space tree [ 117.382964][ T6742] BTRFS info (device loop0): using free space tree [ 117.419239][ T6760] loop2: detected capacity change from 0 to 16 [ 117.471784][ T6760] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.514446][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 117.530446][ T6742] BTRFS info (device loop0): enabling ssd optimizations [ 117.534195][ T6740] BTRFS info (device loop3): enabling ssd optimizations [ 117.549164][ T6740] BTRFS info (device loop3): auto enabling async discard [ 117.562129][ T6742] BTRFS info (device loop0): auto enabling async discard [ 117.727393][ T23] usb 2-1: config index 0 descriptor too short (expected 32820, got 52) [ 117.737950][ T5786] BTRFS info (device loop3): last unmount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd [ 117.757516][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.779202][ T5787] BTRFS info (device loop0): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 117.781459][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 117.804758][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.815929][ T23] usb 2-1: Product: syz [ 117.820145][ T23] usb 2-1: Manufacturer: syz [ 117.830829][ T23] usb 2-1: SerialNumber: syz [ 117.898327][ T23] usb 2-1: config 0 descriptor?? [ 117.923153][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 118.037609][ T6794] loop3: detected capacity change from 0 to 16 [ 118.101717][ T6796] loop0: detected capacity change from 0 to 16 [ 118.109732][ T23] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 118.118983][ T6794] erofs: (device loop3): mounted with root inode @ nid 36. [ 118.159148][ T6796] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.174863][ T23] usb 2-1: USB disconnect, device number 13 [ 118.304281][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.483219][ T6800] loop0: detected capacity change from 0 to 256 [ 118.815705][ T6792] loop2: detected capacity change from 0 to 32768 [ 118.859177][ T6792] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.350 (6792) [ 118.935417][ T6792] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.958171][ T6792] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 118.978369][ T6792] BTRFS info (device loop2): using free space tree [ 119.119321][ T6792] BTRFS info (device loop2): enabling ssd optimizations [ 119.136800][ T6792] BTRFS info (device loop2): auto enabling async discard [ 119.337714][ T5789] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.360411][ T6798] loop3: detected capacity change from 0 to 32768 [ 119.382761][ T6798] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop3 scanned by syz.3.354 (6798) [ 119.445335][ T6802] loop0: detected capacity change from 0 to 32768 [ 119.461797][ T6798] BTRFS info (device loop3): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 119.487425][ T6802] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop0 scanned by syz.0.355 (6802) [ 119.503983][ T6798] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 119.555502][ T6798] BTRFS info (device loop3): using free space tree [ 119.561812][ T6802] BTRFS info (device loop0): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 119.605777][ T6802] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 119.635688][ T6802] BTRFS info (device loop0): using free space tree [ 119.772103][ T6798] BTRFS info (device loop3): enabling ssd optimizations [ 119.820170][ T6798] BTRFS info (device loop3): auto enabling async discard [ 119.827418][ T6802] BTRFS info (device loop0): enabling ssd optimizations [ 119.849933][ T6802] BTRFS info (device loop0): auto enabling async discard [ 119.987666][ T6804] loop1: detected capacity change from 0 to 32768 [ 119.999755][ T5786] BTRFS info (device loop3): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 120.032005][ T6804] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.356 (6804) [ 120.068902][ T5787] BTRFS info (device loop0): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 120.096227][ T6804] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 120.105390][ T6854] loop2: detected capacity change from 0 to 2048 [ 120.107471][ T6804] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 120.137962][ T6804] BTRFS info (device loop1): using free space tree [ 120.254744][ T6854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.323630][ T6866] loop3: detected capacity change from 0 to 128 [ 120.475338][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.519008][ T6804] BTRFS info (device loop1): enabling ssd optimizations [ 120.544578][ T6804] BTRFS info (device loop1): auto enabling async discard [ 120.639325][ T6879] loop3: detected capacity change from 0 to 512 [ 120.708807][ T5788] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 120.764766][ T6879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.830108][ T6881] loop2: detected capacity change from 0 to 4096 [ 120.897621][ T6884] loop0: detected capacity change from 0 to 2048 [ 120.984824][ T6884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.022398][ T6881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.060508][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.061190][ T6884] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.188043][ T5905] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop1 scanned by udevd (5905) [ 121.273447][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.329272][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.383622][ T6891] loop3: detected capacity change from 0 to 1024 [ 121.621329][ T6891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.716851][ T6899] loop0: detected capacity change from 0 to 2048 [ 121.789664][ T6899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.807384][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.841422][ T6899] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.943627][ T6903] loop1: detected capacity change from 0 to 2048 [ 122.010215][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.048230][ T6903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.114531][ T6907] loop3: detected capacity change from 0 to 2048 [ 122.163701][ T6909] loop0: detected capacity change from 0 to 512 [ 122.195667][ T6894] loop2: detected capacity change from 0 to 32768 [ 122.203738][ T6894] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.365 (6894) [ 122.238970][ T6894] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 122.239968][ T6907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.274016][ T6894] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.302782][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.310431][ T6894] BTRFS info (device loop2): using free space tree [ 122.319966][ T6907] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.348456][ T6909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.394130][ T6909] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.543910][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.568291][ T6894] BTRFS info (device loop2): enabling ssd optimizations [ 122.575331][ T6894] BTRFS info (device loop2): auto enabling async discard [ 122.644498][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.865696][ T6934] loop0: detected capacity change from 0 to 2048 [ 122.876100][ T6935] loop1: detected capacity change from 0 to 512 [ 122.900853][ T6935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.942924][ T5789] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 122.987758][ T6934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.028098][ T6934] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.044489][ T6939] loop3: detected capacity change from 0 to 1024 [ 123.144648][ T5778] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 9 /dev/loop2 scanned by udevd (5778) [ 123.157565][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.176998][ T6939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.202915][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.283784][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.318433][ T6946] loop1: detected capacity change from 0 to 16 [ 123.338911][ T6946] erofs: (device loop1): mounted with root inode @ nid 36. [ 123.550001][ T6951] loop3: detected capacity change from 0 to 1024 [ 123.622274][ T6951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.689098][ T6950] loop0: detected capacity change from 0 to 4096 [ 123.746458][ T6951] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.860548][ T6950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.927339][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.078428][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.135404][ T6960] loop3: detected capacity change from 0 to 1024 [ 124.220169][ T6960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.328455][ T6953] loop2: detected capacity change from 0 to 40427 [ 124.329804][ T6960] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.360555][ T6953] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 124.406579][ T6953] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.452877][ T6953] F2FS-fs (loop2): invalid crc value [ 124.514352][ T6953] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.526044][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.569436][ T6968] loop0: detected capacity change from 0 to 512 [ 124.671764][ T6968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.689489][ T6953] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 124.722804][ T6953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 124.753924][ T6968] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.900927][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.987676][ T6957] loop1: detected capacity change from 0 to 32768 [ 125.047974][ T6957] lmLogInit: exit(-22) [ 125.055161][ T6957] lmLogOpen: exit(-22) [ 125.142768][ T6975] loop0: detected capacity change from 0 to 2048 [ 125.224979][ T6975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.391027][ T6980] loop2: detected capacity change from 0 to 2048 [ 125.438768][ T6980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.493940][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.661302][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.845229][ T6983] loop0: detected capacity change from 0 to 2048 [ 125.933740][ T6983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.010713][ T6983] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.099388][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.316482][ T6978] loop1: detected capacity change from 0 to 32768 [ 126.356461][ T6978] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.387 (6978) [ 126.431227][ T6985] loop2: detected capacity change from 0 to 32768 [ 126.444992][ T6978] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 126.456585][ T6985] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop2 scanned by syz.2.389 (6985) [ 126.466120][ T6978] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 126.501263][ T6985] BTRFS info (device loop2): first mount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 126.513132][ T6978] BTRFS info (device loop1): using free space tree [ 126.528324][ T6985] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 126.565520][ T6985] BTRFS info (device loop2): using free space tree [ 126.690924][ T6978] BTRFS info (device loop1): enabling ssd optimizations [ 126.729585][ T6978] BTRFS info (device loop1): auto enabling async discard [ 126.767502][ T6985] BTRFS info (device loop2): enabling ssd optimizations [ 126.805039][ T6985] BTRFS info (device loop2): auto enabling async discard [ 126.909070][ T5788] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 127.045089][ T5789] BTRFS info (device loop2): last unmount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 127.257636][ T7023] loop1: detected capacity change from 0 to 512 [ 127.318174][ T7023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.531222][ T5905] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 9 /dev/loop2 scanned by udevd (5905) [ 127.555725][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.504916][ T7029] loop1: detected capacity change from 0 to 32768 [ 128.524562][ T7029] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.393 (7029) [ 128.575364][ T7029] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 128.594671][ T7029] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 128.618252][ T7029] BTRFS info (device loop1): using free space tree [ 128.826869][ T7029] BTRFS info (device loop1): enabling ssd optimizations [ 128.838965][ T7029] BTRFS info (device loop1): auto enabling async discard [ 128.870504][ T7046] loop3: detected capacity change from 0 to 2048 [ 128.931862][ T7046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.064286][ T7033] loop2: detected capacity change from 0 to 32768 [ 129.086917][ T5788] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 129.113904][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.155303][ T7033] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.395 (7033) [ 129.266757][ T7033] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 129.304068][ T7033] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.324640][ T7033] BTRFS info (device loop2): using free space tree [ 129.356347][ T5780] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop1 scanned by udevd (5780) [ 129.572589][ T7033] BTRFS info (device loop2): enabling ssd optimizations [ 129.579607][ T7033] BTRFS info (device loop2): auto enabling async discard [ 129.913056][ T5789] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 135.458454][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.465789][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.758195][ T7085] loop0: detected capacity change from 0 to 32768 [ 135.813684][ T7085] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 135.825257][ T7085] dlm: no local IP address has been set [ 135.831129][ T7085] dlm: cannot start dlm midcomms -107 [ 135.856871][ T7085] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 138.288665][ T7090] loop1: detected capacity change from 0 to 32768 [ 138.352692][ T7090] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop1 scanned by syz.1.406 (7090) [ 138.427946][ T7090] BTRFS info (device loop1): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 138.469479][ T7090] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 138.498586][ T7090] BTRFS info (device loop1): using free space tree [ 138.664100][ T7090] BTRFS info (device loop1): enabling ssd optimizations [ 138.689738][ T7090] BTRFS info (device loop1): auto enabling async discard [ 138.948942][ T5788] BTRFS info (device loop1): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 139.315357][ T7092] loop3: detected capacity change from 0 to 32768 [ 139.380996][ T7092] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 139.406517][ T7092] dlm: no local IP address has been set [ 139.438304][ T7092] dlm: cannot start dlm midcomms -107 [ 139.475009][ T7092] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 140.130127][ T7111] loop2: detected capacity change from 0 to 32768 [ 140.193881][ T7111] lmLogInit: exit(-22) [ 140.198209][ T7111] lmLogOpen: exit(-22) [ 140.788912][ T7118] loop3: detected capacity change from 0 to 32768 [ 140.848099][ T7118] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 140.857110][ T7118] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 140.932884][ T7118] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 141.014994][ T5838] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 141.039688][ T5838] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 141.206522][ T5838] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 156ms [ 141.226688][ T5838] gfs2: fsid=syz:syz.0: jid=0: Done [ 141.231956][ T7118] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 143.794251][ T7129] loop1: detected capacity change from 0 to 1024 [ 144.027862][ T7131] loop1: detected capacity change from 0 to 1024 [ 144.368812][ T7133] loop1: detected capacity change from 0 to 2364 [ 144.416043][ T7135] loop0: detected capacity change from 0 to 1764 [ 144.744439][ T7137] loop1: detected capacity change from 0 to 2368 [ 144.764594][ T7139] loop0: detected capacity change from 0 to 736 [ 144.996401][ T7142] loop2: detected capacity change from 0 to 2 [ 145.005916][ T7142] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 145.028143][ T7143] loop1: detected capacity change from 0 to 132 [ 145.093461][ T7145] loop0: detected capacity change from 0 to 256 [ 145.244474][ T7147] loop2: detected capacity change from 0 to 256 [ 145.342407][ T7149] loop1: detected capacity change from 0 to 64 [ 145.388671][ T7151] loop0: detected capacity change from 0 to 128 [ 145.523046][ T7153] loop2: detected capacity change from 0 to 128 [ 145.647374][ T7155] loop1: detected capacity change from 0 to 512 [ 145.708635][ T7157] loop0: detected capacity change from 0 to 512 [ 145.876597][ T7159] loop2: detected capacity change from 0 to 128 [ 146.079973][ T7163] loop0: detected capacity change from 0 to 128 [ 146.321957][ T7165] loop2: detected capacity change from 0 to 8192 [ 146.510918][ T7167] loop0: detected capacity change from 0 to 8192 [ 146.937269][ T7161] loop1: detected capacity change from 0 to 32768 [ 146.990729][ T7173] loop0: detected capacity change from 0 to 1156 [ 147.227574][ T7175] loop3: detected capacity change from 0 to 128 [ 147.302957][ T7177] loop0: detected capacity change from 0 to 256 [ 147.363646][ T7179] loop1: detected capacity change from 0 to 256 [ 147.581416][ T7181] loop3: detected capacity change from 0 to 128 [ 147.595655][ T7183] loop0: detected capacity change from 0 to 256 [ 147.677498][ T7185] loop1: detected capacity change from 0 to 256 [ 147.881796][ T7169] loop2: detected capacity change from 0 to 32768 [ 147.885688][ T7187] loop0: detected capacity change from 0 to 1024 [ 147.933386][ T7169] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 147.977536][ T7169] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 148.008139][ T7192] loop1: detected capacity change from 0 to 128 [ 148.056643][ T7169] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 148.161044][ T787] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 148.186520][ T787] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 148.350416][ T7194] loop0: detected capacity change from 0 to 2048 [ 148.447375][ T7196] loop1: detected capacity change from 0 to 4096 [ 148.458723][ T7197] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.516727][ T787] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 308ms [ 148.517789][ T7198] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.551282][ T787] gfs2: fsid=syz:syz.0: jid=0: Done [ 148.556578][ T7169] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 148.737432][ T7189] loop3: detected capacity change from 0 to 32768 [ 149.373846][ T7206] loop1: detected capacity change from 0 to 16384 [ 149.386300][ T7204] loop0: detected capacity change from 0 to 16384 [ 149.471015][ T7211] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.506202][ T7212] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.601687][ T7210] loop3: detected capacity change from 0 to 4096 [ 149.626534][ T7210] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 150.105113][ T7216] loop0: detected capacity change from 0 to 4096 [ 150.176896][ T7216] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 150.413111][ T7218] loop3: detected capacity change from 0 to 8192 [ 150.440366][ T7220] loop2: detected capacity change from 0 to 4096 [ 150.450658][ T7218] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 150.459825][ T7218] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 150.494727][ T7220] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 150.513973][ T7218] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 150.801524][ T7224] loop3: detected capacity change from 0 to 512 [ 151.351670][ T7214] loop1: detected capacity change from 0 to 65536 [ 151.493678][ T7229] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.779489][ T7226] loop2: detected capacity change from 0 to 32768 [ 151.819831][ T7226] (syz.2.460,7226,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 151.861061][ T7226] (syz.2.460,7226,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 151.878011][ T7228] loop3: detected capacity change from 0 to 32768 [ 151.902364][ T7228] (syz.3.461,7228,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 151.939314][ T7228] (syz.3.461,7228,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 152.442324][ T7235] loop2: detected capacity change from 0 to 4096 [ 152.502364][ T7235] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 152.654269][ T7231] loop1: detected capacity change from 0 to 32768 [ 152.683459][ T7231] (syz.1.462,7231,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 152.735438][ T7231] (syz.1.462,7231,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 152.994849][ T7239] loop1: detected capacity change from 0 to 164 [ 153.242183][ T7233] loop3: detected capacity change from 0 to 32768 [ 153.249759][ T7233] (syz.3.464,7233,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 153.293098][ T7233] (syz.3.464,7233,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 153.786742][ T7237] loop2: detected capacity change from 0 to 32768 [ 153.809431][ T7237] (syz.2.465,7237,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 153.835439][ T7237] (syz.2.465,7237,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 154.374144][ T7243] loop3: detected capacity change from 0 to 32768 [ 154.495343][ T7247] loop0: detected capacity change from 0 to 2048 [ 154.509350][ T7248] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.900289][ T7250] loop0: detected capacity change from 0 to 4096 [ 154.924585][ T7241] loop1: detected capacity change from 0 to 65536 [ 154.960914][ T7253] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.962111][ T7241] (syz.1.467,7241,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 155.065453][ T7241] (syz.1.467,7241,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 155.070541][ T7252] loop3: detected capacity change from 0 to 4096 [ 155.312850][ T7252] ntfs: volume version 3.1. [ 155.432637][ T7255] loop0: detected capacity change from 0 to 4096 [ 155.471542][ T7255] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 155.923766][ T7257] loop1: detected capacity change from 0 to 16384 [ 155.938158][ T7257] REISERFS warning (device loop1): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop1, block 16, size 4096) [ 155.965736][ T7257] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 155.998581][ T7245] loop2: detected capacity change from 0 to 65536 [ 156.009523][ T7245] (syz.2.469,7245,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 156.019033][ T7245] (syz.2.469,7245,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 156.170787][ T7261] loop0: detected capacity change from 0 to 4096 [ 156.305898][ T7261] ntfs: volume version 3.1. [ 156.522905][ T7266] loop1: detected capacity change from 0 to 4096 [ 156.617835][ T7266] ntfs: (device loop1): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512). This is not supported. Sorry. [ 156.678645][ T7266] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem. [ 157.069928][ T7268] loop0: detected capacity change from 0 to 16384 [ 157.085573][ T7268] REISERFS warning (device loop0): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop0, block 16, size 4096) [ 157.127010][ T7268] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 157.497457][ T7273] loop0: detected capacity change from 0 to 4096 [ 157.606365][ T7273] ntfs: volume version 3.1. [ 159.137643][ T7264] loop2: detected capacity change from 0 to 131072 [ 159.187636][ T7264] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.258403][ T7264] REISERFS (device loop2): found reiserfs format "3.6" with standard journal [ 159.267530][ T7264] REISERFS (device loop2): using ordered data mode [ 159.344763][ T7264] reiserfs: using flush barriers [ 159.369461][ T7264] REISERFS (device loop2): journal params: device loop2, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 159.415342][ T7264] REISERFS (device loop2): checking transaction log (loop2) [ 160.249278][ T7278] loop3: detected capacity change from 0 to 16384 [ 160.274606][ T7278] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 160.324560][ T7278] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 162.134877][ T7264] REISERFS (device loop2): Using rupasov hash to sort names [ 162.155985][ T7264] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 163.352993][ T7281] loop3: detected capacity change from 0 to 131072 [ 163.366711][ T7281] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.392325][ T7281] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 163.428654][ T7281] REISERFS (device loop3): using ordered data mode [ 163.435217][ T7281] reiserfs: using flush barriers [ 163.491852][ T7281] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 163.631955][ T7281] REISERFS (device loop3): checking transaction log (loop3) [ 163.908227][ T7283] loop1: detected capacity change from 0 to 131072 [ 163.953868][ T7283] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.994422][ T7283] REISERFS (device loop1): found reiserfs format "3.5" with standard journal [ 164.003405][ T7283] REISERFS (device loop1): using ordered data mode [ 164.010024][ T7283] reiserfs: using flush barriers [ 164.026495][ T7283] REISERFS (device loop1): journal params: device loop1, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 164.124849][ T7283] REISERFS warning (device loop1): journal-2004 journal_init: Journal cnode memory allocation failed (1179648 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. [ 164.188717][ T7283] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 164.645659][ T7293] loop1: detected capacity change from 0 to 8 [ 164.870541][ T7295] loop1: detected capacity change from 0 to 1 [ 164.890472][ T7295] syz.1.490: attempt to access beyond end of device [ 164.890472][ T7295] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 164.950161][ T7295] SQUASHFS error: Failed to read block 0x0: -5 [ 164.976182][ T7295] unable to read squashfs_super_block [ 165.889953][ T7289] loop2: detected capacity change from 0 to 65536 [ 166.062774][ T7298] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.531097][ T7302] loop0: detected capacity change from 0 to 128 [ 166.543201][ T7302] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 166.620866][ T7302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.978600][ T7304] loop0: detected capacity change from 0 to 1024 [ 167.062647][ T7304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.314105][ T7306] loop0: detected capacity change from 0 to 256 [ 167.358164][ T7306] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 167.406627][ T7306] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 167.428193][ T7306] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 167.447410][ T7306] UDF-fs: Scanning with blocksize 512 failed [ 167.476327][ T7306] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 167.529242][ T7306] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.906563][ T7281] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 168.948633][ T7281] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 168.976170][ T7281] REISERFS (device loop3): Remounting filesystem read-only [ 168.983420][ T7281] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 169.008872][ T7281] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 171.091980][ T7316] loop2: detected capacity change from 0 to 32768 [ 171.338845][ T7317] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.690028][ T7319] loop2: detected capacity change from 0 to 128 [ 171.739771][ T7319] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 171.769644][ T7319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.014512][ T7323] loop2: detected capacity change from 0 to 512 [ 172.030291][ T7323] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 172.058471][ T7323] UDF-fs: Scanning with blocksize 512 failed [ 172.070314][ T7323] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 172.082214][ T7323] UDF-fs: Scanning with blocksize 1024 failed [ 172.101868][ T7323] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 172.119549][ T7323] UDF-fs: Scanning with blocksize 2048 failed [ 172.136680][ T7323] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 172.163965][ T7323] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.372581][ T7327] loop2: detected capacity change from 0 to 512 [ 172.378999][ T7311] loop1: detected capacity change from 0 to 131072 [ 172.401106][ T7311] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 172.430157][ T7327] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 172.437579][ T7327] UDF-fs: Scanning with blocksize 512 failed [ 172.472198][ T7311] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 172.481486][ T7311] REISERFS (device loop1): using ordered data mode [ 172.485224][ T7327] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 172.525551][ T7311] reiserfs: using flush barriers [ 172.534981][ T7327] UDF-fs: Scanning with blocksize 1024 failed [ 172.552355][ T7311] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 172.556463][ T7327] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 172.616855][ T7327] UDF-fs: Scanning with blocksize 2048 failed [ 172.656264][ T7327] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 172.691041][ T7327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.721490][ T7311] REISERFS warning (device loop1): journal-2004 journal_init: Journal cnode memory allocation failed (2267712 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. [ 172.755405][ T7321] loop3: detected capacity change from 0 to 32768 [ 172.778689][ T7321] (syz.3.499,7321,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 172.783225][ T7311] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 172.824936][ T7321] (syz.3.499,7321,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 173.155305][ T7334] loop3: detected capacity change from 0 to 2048 [ 173.459794][ T7336] loop3: detected capacity change from 0 to 256 [ 174.100242][ T7340] loop1: detected capacity change from 0 to 24 [ 174.128335][ T7340] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 174.180955][ T7340] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 174.443152][ T7342] loop1: detected capacity change from 0 to 2048 [ 174.616803][ T7344] loop1: detected capacity change from 0 to 512 [ 174.848140][ T7346] loop1: detected capacity change from 0 to 128 [ 175.066713][ T7348] loop1: detected capacity change from 0 to 2048 [ 175.340053][ T7350] loop1: detected capacity change from 0 to 128 [ 175.610023][ T7352] loop1: detected capacity change from 0 to 128 [ 175.788655][ T7354] loop1: detected capacity change from 0 to 128 [ 175.950227][ T7356] loop1: detected capacity change from 0 to 256 [ 176.210657][ T7358] loop1: detected capacity change from 0 to 512 [ 176.472035][ T7362] loop1: detected capacity change from 0 to 128 [ 176.752173][ T7364] loop1: detected capacity change from 0 to 256 [ 177.001979][ T7366] loop1: detected capacity change from 0 to 512 [ 177.090580][ T7368] loop2: detected capacity change from 0 to 512 [ 178.312641][ T7374] loop3: detected capacity change from 0 to 32768 [ 179.979394][ T7376] loop3: detected capacity change from 0 to 65536 [ 180.064128][ T7376] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 180.077576][ T7370] loop1: detected capacity change from 0 to 131072 [ 180.110544][ T7370] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 180.177640][ T7370] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 180.222508][ T7370] REISERFS (device loop1): using ordered data mode [ 180.273739][ T7370] reiserfs: using flush barriers [ 180.332063][ T7370] REISERFS (device loop1): journal params: device loop1, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 180.421785][ T7370] REISERFS (device loop1): checking transaction log (loop1) [ 181.310279][ T7384] loop3: detected capacity change from 0 to 32768 [ 181.413338][ T7384] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 181.537357][ T7386] loop0: detected capacity change from 0 to 32768 [ 181.586414][ T7384] XFS (loop3): Ending clean mount [ 181.645200][ T7386] XFS (loop0): Mounting V5 Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2 [ 181.670018][ T5786] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 181.925418][ T7386] XFS (loop0): Ending clean mount [ 182.083414][ T5787] XFS (loop0): Unmounting Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2 [ 182.971763][ T7405] loop3: detected capacity change from 0 to 32768 [ 183.067057][ T7405] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 183.205604][ T7405] XFS (loop3): Ending clean mount [ 183.317710][ T5786] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 183.459279][ T7370] REISERFS (device loop1): Using r5 hash to sort names [ 183.474128][ T7370] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 183.578805][ T7406] loop2: detected capacity change from 0 to 65536 [ 183.697231][ T7406] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 183.938562][ T7408] loop0: detected capacity change from 0 to 65536 [ 184.124827][ T7408] XFS (loop0): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 184.216845][ T7408] XFS (loop0): Ending clean mount [ 184.285723][ T5787] XFS (loop0): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 186.187875][ T7435] loop0: detected capacity change from 0 to 65536 [ 186.270327][ T7435] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 186.840323][ T7437] loop1: detected capacity change from 0 to 32768 [ 186.911559][ T7437] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.075540][ T7437] XFS (loop1): Ending clean mount [ 187.218830][ T5788] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.198048][ T7444] loop0: detected capacity change from 0 to 131072 [ 189.277082][ T7444] XFS (loop0): Mounting V5 Filesystem 38ffc24f-675a-4986-9d8e-4951dc618329 [ 189.424636][ T7444] XFS (loop0): Ending clean mount [ 189.630873][ T5787] XFS (loop0): Unmounting Filesystem 38ffc24f-675a-4986-9d8e-4951dc618329 [ 189.829769][ T7458] loop2: detected capacity change from 0 to 65536 [ 189.921689][ T7458] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 190.054294][ T7454] loop1: detected capacity change from 0 to 131072 [ 190.159360][ T7454] XFS (loop1): Mounting V5 Filesystem 22c32dcc-57bc-4919-aeb7-102e166434d7 [ 190.447176][ T7454] XFS (loop1): Ending clean mount [ 190.619493][ T5788] XFS (loop1): Unmounting Filesystem 22c32dcc-57bc-4919-aeb7-102e166434d7 [ 192.478822][ T7485] loop1: detected capacity change from 0 to 32768 [ 192.530657][ T7485] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.797839][ T7485] XFS (loop1): Ending clean mount [ 192.961491][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.807257][ T7497] loop1: detected capacity change from 0 to 65536 [ 194.914867][ T7497] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 195.626689][ T7516] ipip0: entered promiscuous mode [ 195.688593][ T7501] loop2: detected capacity change from 0 to 32768 [ 195.814106][ T7501] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 195.941030][ T7501] XFS (loop2): Ending clean mount [ 196.123137][ T5789] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 196.670353][ T7532] loop0: detected capacity change from 0 to 32768 [ 196.751551][ T7532] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 196.790754][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'. [ 196.969775][ T7532] XFS (loop0): Ending clean mount [ 197.044175][ T7563] PKCS8: Unsupported PKCS#8 version [ 197.151091][ T5787] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 197.822970][ T7580] loop2: detected capacity change from 0 to 128 [ 197.849160][ T7580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.883423][ T7580] EXT4-fs (loop2): Test dummy encryption mode enabled [ 197.901680][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 197.901697][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 197.901736][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 197.907913][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 197.939423][ T7580] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.006993][ T7580] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.256989][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.020454][ T7616] ksmbd: Unknown IPC event: 3, ignore. [ 199.046834][ T7619] loop2: detected capacity change from 0 to 256 [ 199.086441][ T7619] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 199.357726][ T7627] capability: warning: `syz.3.593' uses 32-bit capabilities (legacy support in use) [ 199.790778][ T7637] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.965624][ T7623] loop0: detected capacity change from 0 to 32768 [ 200.014656][ T7623] loop0: p1 p2 p3 [ 200.310429][ T28] audit: type=1326 audit(1754041937.228:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.0.604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1c638eb69 code=0x0 [ 200.583710][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 200.590391][ T7656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.607'. [ 200.600224][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 200.618763][ T5905] udevd[5905]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 200.644747][ T7658] Illegal XDP return value 4294967274 on prog (id 24) dev N/A, expect packet loss! [ 201.074925][ T7671] netlink: 'syz.2.615': attribute type 3 has an invalid length. [ 201.146814][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.154047][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.578646][ T7688] netlink: 14 bytes leftover after parsing attributes in process `syz.0.624'. [ 201.594831][ T7689] loop3: detected capacity change from 0 to 8 [ 201.621188][ T7688] hsr_slave_0: left promiscuous mode [ 201.642674][ T7688] hsr_slave_1: left promiscuous mode [ 201.690077][ T7689] SQUASHFS error: Failed to read block 0x1ec: -5 [ 201.714885][ T7689] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 202.021137][ T7701] xt_l2tp: invalid flags combination: 0 [ 202.259718][ T7711] loop1: detected capacity change from 0 to 2048 [ 202.284263][ T7711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.291977][ T7717] lo speed is unknown, defaulting to 1000 [ 202.331098][ T7717] lo speed is unknown, defaulting to 1000 [ 202.355798][ T7717] lo speed is unknown, defaulting to 1000 [ 202.396205][ T7717] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 202.451850][ T7717] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 202.520168][ T7717] lo speed is unknown, defaulting to 1000 [ 202.549144][ T7717] lo speed is unknown, defaulting to 1000 [ 202.556701][ T787] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 202.566816][ T7717] lo speed is unknown, defaulting to 1000 [ 202.575224][ T7717] lo speed is unknown, defaulting to 1000 [ 202.589491][ T7725] netlink: 76 bytes leftover after parsing attributes in process `syz.1.642'. [ 202.610398][ T7725] netlink: 76 bytes leftover after parsing attributes in process `syz.1.642'. [ 202.770774][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 202.789597][ T787] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 202.814397][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.849290][ T787] usb 1-1: Product: syz [ 202.856588][ T787] usb 1-1: Manufacturer: syz [ 202.874238][ T787] usb 1-1: SerialNumber: syz [ 202.883915][ T787] usb 1-1: config 0 descriptor?? [ 202.892796][ T787] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 203.354313][ T7753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.656'. [ 203.365798][ T787] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 203.380123][ T787] visor: probe of 1-1:0.0 failed with error -71 [ 203.406026][ T787] usb 1-1: USB disconnect, device number 15 [ 203.534518][ T7753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.656'. [ 203.677039][ T7753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.656'. [ 203.879768][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 203.901187][ T7777] loop1: detected capacity change from 0 to 256 [ 203.910076][ T7777] exfat: Deprecated parameter 'namecase' [ 203.915913][ T7777] exfat: Deprecated parameter 'namecase' [ 203.958207][ T7777] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 204.504691][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 204.547456][ T7801] netlink: 'syz.2.678': attribute type 8 has an invalid length. [ 204.569762][ T7801] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 205.112081][ T7827] netlink: 'syz.1.691': attribute type 10 has an invalid length. [ 205.261299][ T7832] netlink: 'syz.0.693': attribute type 4 has an invalid length. [ 205.975193][ T7869] loop2: detected capacity change from 0 to 512 [ 206.052784][ T7869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.092529][ T7869] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.206375][ T7878] netlink: 156 bytes leftover after parsing attributes in process `syz.0.713'. [ 206.243899][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.560003][ T7894] Cannot find del_set index 0 as target [ 207.596171][ T28] audit: type=1326 audit(1754041944.047:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94b18eb69 code=0x7ffc0000 [ 207.646520][ T28] audit: type=1326 audit(1754041944.075:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94b18eb69 code=0x7ffc0000 [ 207.697850][ T787] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 207.721889][ T28] audit: type=1326 audit(1754041944.075:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fd94b18eb69 code=0x7ffc0000 [ 207.782062][ T28] audit: type=1326 audit(1754041944.075:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94b18eb69 code=0x7ffc0000 [ 207.843412][ T28] audit: type=1326 audit(1754041944.075:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94b18eb69 code=0x7ffc0000 [ 207.915326][ T787] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 207.925414][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.974605][ T7944] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 207.975093][ T787] usb 3-1: config 0 descriptor?? [ 208.024015][ T7944] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 208.166888][ T7920] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 208.264477][ T787] snd-usb-hiface: probe of 3-1:0.0 failed with error -22 [ 208.399588][ T7955] loop3: detected capacity change from 0 to 4096 [ 208.527047][ T787] usb 3-1: USB disconnect, device number 16 [ 208.527257][ T7955] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 208.815357][ T5786] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 208.902703][ T7973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.019990][ T7979] loop3: detected capacity change from 0 to 256 [ 209.045545][ T7979] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 209.078440][ T7979] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.146208][ T5780] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.530993][ T7998] 9pnet_fd: Insufficient options for proto=fd [ 209.930819][ T8015] ALSA: mixer_oss: invalid OSS volume '' [ 210.073999][ T28] audit: type=1326 audit(1754041946.367:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff168f8eb69 code=0x7ffc0000 [ 210.102405][ T28] audit: type=1326 audit(1754041946.367:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff168f8eb69 code=0x7ffc0000 [ 210.159477][ T28] audit: type=1326 audit(1754041946.367:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff168f8eb69 code=0x7ffc0000 [ 210.181562][ T5838] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 210.220116][ T28] audit: type=1326 audit(1754041946.367:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff168f8eb69 code=0x7ffc0000 [ 210.274713][ T28] audit: type=1326 audit(1754041946.367:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff168f8eb69 code=0x7ffc0000 [ 210.370711][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 210.394094][ T5838] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.423647][ T5838] usb 2-1: config 0 has no interface number 0 [ 210.436175][ T5838] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.448591][ T5838] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.462879][ T5838] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.473310][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.506742][ T5838] usb 2-1: config 0 descriptor?? [ 210.551548][ T5838] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 210.786182][ T787] usb 2-1: USB disconnect, device number 14 [ 211.045958][ T8060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.132401][ T8064] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.798'. [ 211.141725][ T8064] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 211.540718][ T8080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.807'. [ 211.617617][ T8085] loop1: detected capacity change from 0 to 512 [ 211.646006][ T8085] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 211.656532][ T8085] UDF-fs: Scanning with blocksize 512 failed [ 211.702163][ T8085] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 211.748259][ T8085] UDF-fs: Scanning with blocksize 1024 failed [ 211.770198][ T8085] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 211.802924][ T8085] UDF-fs: Scanning with blocksize 2048 failed [ 211.835497][ T8085] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 211.874616][ T8085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.945137][ T8085] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 30) has entry where CRC length (792) does not match entry length (24) [ 212.299903][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 212.325548][ T8108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.820'. [ 212.435192][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.825'. [ 212.457677][ T8117] netlink: 'syz.2.824': attribute type 32 has an invalid length. [ 212.659452][ T8125] netlink: 14 bytes leftover after parsing attributes in process `syz.2.829'. [ 212.693326][ T8125] hsr_slave_0: left promiscuous mode [ 212.723619][ T8125] hsr_slave_1: left promiscuous mode [ 212.769445][ T8130] loop3: detected capacity change from 0 to 256 [ 213.084627][ T8138] (syz.0.833,8138,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 213.112450][ T8138] (syz.0.833,8138,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 213.374633][ T8152] sctp: [Deprecated]: syz.3.840 (pid 8152) Use of int in maxseg socket option. [ 213.374633][ T8152] Use struct sctp_assoc_value instead [ 213.649553][ T8166] netlink: 772 bytes leftover after parsing attributes in process `syz.0.847'. [ 213.749027][ T5852] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 213.860290][ T8174] netlink: 'syz.3.852': attribute type 32 has an invalid length. [ 213.960268][ T8179] netlink: 'syz.0.854': attribute type 32 has an invalid length. [ 213.969029][ T5852] usb 3-1: Using ep0 maxpacket: 8 [ 213.982678][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 213.994778][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.011675][ T5852] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 214.029508][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.065349][ T5852] usb 3-1: Product: syz [ 214.070140][ T5852] usb 3-1: Manufacturer: syz [ 214.078185][ T5852] usb 3-1: SerialNumber: syz [ 214.098547][ T5852] usb 3-1: config 0 descriptor?? [ 214.116306][ T5852] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 214.339794][ T5852] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 214.374329][ T5852] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 214.554075][ T5852] usb 3-1: USB disconnect, device number 17 [ 214.776711][ T8193] loop1: detected capacity change from 0 to 32768 [ 214.800598][ T8193] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.834025][ T8197] loop0: detected capacity change from 0 to 32768 [ 214.872557][ T8197] loop0: p9 p11 p16 [ 214.909270][ T8193] XFS (loop1): Ending clean mount [ 215.047139][ T8209] netlink: 'syz.0.863': attribute type 32 has an invalid length. [ 215.138381][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.363199][ T8215] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.867'. [ 215.374686][ T8213] loop0: detected capacity change from 0 to 4096 [ 215.400496][ T8213] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 215.401330][ T8215] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 215.431071][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 215.431221][ T5905] udevd[5905]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory [ 215.450988][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 215.539814][ T8213] ntfs3: loop0: failed to convert "c46c" to cp864 [ 216.333676][ T8249] siw: device registration error -23 [ 216.471879][ T8253] loop3: detected capacity change from 0 to 64 [ 216.531975][ T28] audit: type=1800 audit(1754041952.400:14): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.886" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 216.561445][ T8253] Trying to free block not in datazone [ 216.568106][ T8253] Trying to free block not in datazone [ 216.596498][ T8253] Trying to free block not in datazone [ 216.603575][ T8253] Trying to free block not in datazone [ 216.609198][ T8253] Trying to free block not in datazone [ 216.626434][ T8253] minix_free_block (loop3:6): bit already cleared [ 216.645755][ T8253] Trying to free block not in datazone [ 216.655553][ T8253] Trying to free block not in datazone [ 216.936775][ T8233] loop0: detected capacity change from 0 to 32768 [ 216.985321][ T8233] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.188929][ T8246] loop1: detected capacity change from 0 to 32768 [ 217.203824][ T8233] XFS (loop0): Ending clean mount [ 217.284115][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.289504][ T8246] loop1: p1 p2 p3 [ 217.583582][ T8281] tmpfs: Bad value for 'nr_blocks' [ 217.932546][ T8289] siw: device registration error -23 [ 217.938821][ T8287] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 218.048165][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.901'. [ 218.471067][ T8301] loop2: detected capacity change from 0 to 4096 [ 218.499673][ T8301] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 218.598567][ T8301] ntfs: volume version 3.1. [ 218.672213][ T8308] loop3: detected capacity change from 0 to 4096 [ 218.701753][ T8308] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 218.860661][ T8308] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 218.942444][ T8312] loop0: detected capacity change from 0 to 256 [ 218.976278][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 219.091458][ T5786] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 219.244961][ T8320] capability: warning: `syz.3.913' uses deprecated v2 capabilities in a way that may be insecure [ 219.542786][ T23] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 219.651473][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.676330][ T8328] bond0: (slave rose0): Enslaving as an active interface with an up link [ 219.763342][ T23] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 219.787962][ T23] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 219.825665][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 219.837277][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 219.885007][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 219.923044][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 219.947630][ T8341] loop1: detected capacity change from 0 to 256 [ 219.955851][ T8341] exfat: Deprecated parameter 'namecase' [ 219.971423][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 219.976921][ T8341] exfat: Deprecated parameter 'utf8' [ 220.020700][ T23] usb 1-1: string descriptor 0 read error: -22 [ 220.036573][ T23] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 220.071096][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.104594][ T8341] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 220.110902][ T23] usb 1-1: config 0 descriptor?? [ 220.157523][ T23] hub 1-1:0.0: bad descriptor, ignoring hub [ 220.189277][ T23] hub: probe of 1-1:0.0 failed with error -5 [ 220.219546][ T23] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 220.545381][ T23] usb 1-1: USB disconnect, device number 16 [ 220.691927][ T8367] loop1: detected capacity change from 0 to 8 [ 220.708310][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 220.763608][ T8367] SQUASHFS error: Failed to read block 0x1ec: -5 [ 220.793585][ T8367] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 220.863077][ T8371] loop2: detected capacity change from 0 to 64 [ 220.905796][ T8373] netlink: 76 bytes leftover after parsing attributes in process `syz.3.935'. [ 220.936795][ T8371] Trying to free block not in datazone [ 220.942346][ T28] audit: type=1800 audit(1754041956.525:15): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.934" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 220.943215][ T8373] netlink: 76 bytes leftover after parsing attributes in process `syz.3.935'. [ 220.965718][ T8371] Trying to free block not in datazone [ 221.028743][ T8371] Trying to free block not in datazone [ 221.034355][ T8371] Trying to free block not in datazone [ 221.046336][ T8371] Trying to free block not in datazone [ 221.060420][ T8371] minix_free_block (loop2:6): bit already cleared [ 221.074745][ T8371] Trying to free block not in datazone [ 221.085388][ T8371] Trying to free block not in datazone [ 221.279870][ T8385] loop1: detected capacity change from 0 to 128 [ 221.374934][ T8389] loop2: detected capacity change from 0 to 64 [ 221.397849][ T8385] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 221.536889][ T8394] loop3: detected capacity change from 0 to 8 [ 221.633979][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.650892][ T8394] SQUASHFS error: xz decompression failed, data probably corrupt [ 221.690064][ T8394] SQUASHFS error: Failed to read block 0x108: -5 [ 221.744998][ T8394] SQUASHFS error: Unable to read metadata cache entry [106] [ 221.780444][ T8394] SQUASHFS error: Unable to read inode 0x11f [ 222.268911][ T5847] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 222.485750][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 222.508952][ T5847] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 222.530247][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 222.563575][ T5847] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 222.593736][ T8437] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 222.595374][ T5847] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 222.603437][ T787] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 222.619429][ T5847] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 222.629462][ T5847] usb 4-1: Manufacturer: syz [ 222.639198][ T8437] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 222.652442][ T5847] usb 4-1: config 0 descriptor?? [ 222.662644][ T8437] overlayfs: missing 'lowerdir' [ 222.668845][ T8394] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 222.687092][ T5847] smsusb:smsusb_probe: board id=9, interface number 0 [ 222.709207][ T5847] smsusb:siano_media_device_register: media controller created [ 222.767942][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.775498][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.782871][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.790221][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.797594][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.806933][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.814561][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.821887][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.829195][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.836545][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.844364][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.854441][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.861804][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.869125][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.875159][ T787] usb 3-1: config index 0 descriptor too short (expected 897, got 27) [ 222.877100][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.892894][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.901031][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.908523][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.912792][ T787] usb 3-1: config 2 has an invalid interface number: 1 but max is -1 [ 222.916059][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.931788][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.939112][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.958723][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.965324][ T787] usb 3-1: config 2 has an invalid interface number: 1 but max is -1 [ 222.966025][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.981705][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.989028][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 222.996317][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.003463][ T787] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 223.003930][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.019687][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.026955][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.034199][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.041451][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.056370][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.063711][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.071009][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.078301][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.085582][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.088288][ T787] usb 3-1: config 2 has no interface number 0 [ 223.093150][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.106306][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.113595][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.120887][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.128182][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.136403][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.143712][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.146106][ T787] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 223.150964][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.167389][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.174636][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.182130][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.191345][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.198658][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.205947][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.213243][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.220545][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.227840][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.235142][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.236136][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.242408][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.257870][ T5847] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 223.267852][ T5847] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 223.273799][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 223.275024][ T5847] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 223.290322][ T5847] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 223.298226][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.305533][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.312818][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.320096][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.327172][ T787] usb 3-1: Product: syz [ 223.327335][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.331440][ T787] usb 3-1: Manufacturer: syz [ 223.338670][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.338721][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.358086][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.370498][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.377830][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.385076][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.392318][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.399645][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.406886][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.414125][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.421379][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.429890][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.437210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.444507][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.452339][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.459645][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.466934][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.474238][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.474979][ T787] usb 3-1: SerialNumber: syz [ 223.481503][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.482705][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.501102][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.508407][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.515713][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.523013][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.530305][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.537599][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.544972][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.553208][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.560536][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.567845][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.575156][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.582492][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.589794][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.597179][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.604494][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.614621][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.621954][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.629322][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.630467][ T8] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 223.636588][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.653072][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.660348][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 223.667515][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.674759][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.682894][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 223.690152][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.696459][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.697463][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.715234][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.722584][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.730005][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 223.739993][ T5847] ------------[ cut here ]------------ [ 223.747883][ T5847] ODEBUG: free active (active state 0) object: ffff88805fc36568 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 223.760854][ T5838] ================================================================== [ 223.766867][ T787] cdc_ncm 3-1:2.1: CDC Union missing and no IAD found [ 223.768920][ T5838] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80 [ 223.783311][ T5838] Read of size 8 at addr ffff88805f517098 by task kworker/1:3/5838 [ 223.785766][ T8] usb 1-1: config 0 has no interface number 0 [ 223.791203][ T5838] [ 223.791226][ T5838] CPU: 1 PID: 5838 Comm: kworker/1:3 Not tainted 6.6.101-syzkaller #0 [ 223.791244][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.791254][ T5838] Workqueue: events do_submit_urb [ 223.791283][ T5838] Call Trace: [ 223.791290][ T5838] [ 223.791301][ T5838] dump_stack_lvl+0x16c/0x230 [ 223.809735][ T787] cdc_ncm 3-1:2.1: bind() failure [ 223.817838][ T5838] ? __lock_acquire+0x7c80/0x7c80 [ 223.817864][ T5838] ? show_regs_print_info+0x20/0x20 [ 223.817882][ T5838] ? load_image+0x3b0/0x3b0 [ 223.853501][ T5838] ? __virt_addr_valid+0x469/0x540 [ 223.858609][ T5838] print_report+0xac/0x220 [ 223.863018][ T5838] ? __lock_acquire+0xff/0x7c80 [ 223.867856][ T5838] kasan_report+0x117/0x150 [ 223.872362][ T5838] ? mark_lock+0x94/0x320 [ 223.876712][ T5838] ? __lock_acquire+0xff/0x7c80 [ 223.881562][ T5838] __lock_acquire+0xff/0x7c80 [ 223.886232][ T5838] ? mark_lock+0x94/0x320 [ 223.890549][ T5838] ? look_up_lock_class+0x75/0x140 [ 223.895694][ T5838] ? verify_lock_unused+0x140/0x140 [ 223.900880][ T5838] ? register_lock_class+0xb5/0x890 [ 223.906071][ T5838] ? is_dynamic_key+0x260/0x260 [ 223.910911][ T5838] ? mark_lock+0x94/0x320 [ 223.915230][ T5838] ? __lock_acquire+0x1334/0x7c80 [ 223.920250][ T5838] lock_acquire+0x197/0x410 [ 223.924747][ T5838] ? smscore_getbuffer+0xa9/0x440 [ 223.929765][ T5838] ? read_lock_is_recursive+0x20/0x20 [ 223.935143][ T5838] _raw_spin_lock_irqsave+0xa8/0xf0 [ 223.940348][ T5838] ? smscore_getbuffer+0xa9/0x440 [ 223.945370][ T5838] ? _raw_spin_lock+0x40/0x40 [ 223.950070][ T5838] smscore_getbuffer+0xa9/0x440 [ 223.954931][ T5838] ? smscore_onresponse+0xf10/0xf10 [ 223.960123][ T5838] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 223.966097][ T5838] ? read_lock_is_recursive+0x20/0x20 [ 223.971463][ T5838] do_submit_urb+0x98/0x360 [ 223.975968][ T5838] ? process_scheduled_works+0x957/0x15b0 [ 223.981681][ T5838] ? process_scheduled_works+0x957/0x15b0 [ 223.987397][ T5838] process_scheduled_works+0xa45/0x15b0 [ 223.992946][ T5838] ? assign_work+0x400/0x400 [ 223.997540][ T5838] ? assign_work+0x39e/0x400 [ 224.002116][ T5838] worker_thread+0xa55/0xfc0 [ 224.006702][ T5838] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 224.012589][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 224.017431][ T5838] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 224.023347][ T5838] kthread+0x2fa/0x390 [ 224.027409][ T5838] ? pr_cont_work+0x560/0x560 [ 224.032076][ T5838] ? kthread_blkcg+0xd0/0xd0 [ 224.036656][ T5838] ret_from_fork+0x48/0x80 [ 224.041063][ T5838] ? kthread_blkcg+0xd0/0xd0 [ 224.045641][ T5838] ret_from_fork_asm+0x11/0x20 [ 224.050402][ T5838] [ 224.053423][ T5838] [ 224.055742][ T5838] Allocated by task 5847: [ 224.060054][ T5838] kasan_set_track+0x4e/0x70 [ 224.064632][ T5838] __kasan_kmalloc+0x8f/0xa0 [ 224.069211][ T5838] smscore_register_device+0x63/0x10f0 [ 224.074835][ T5838] smsusb_probe+0x1362/0x1da0 [ 224.079501][ T5838] usb_probe_interface+0x5a4/0xb00 [ 224.084603][ T5838] really_probe+0x25b/0xb40 [ 224.089101][ T5838] __driver_probe_device+0x18c/0x330 [ 224.094376][ T5838] driver_probe_device+0x4f/0x420 [ 224.099387][ T5838] __device_attach_driver+0x2ca/0x520 [ 224.104747][ T5838] bus_for_each_drv+0x24b/0x2d0 [ 224.110713][ T5838] __device_attach+0x2b5/0x400 [ 224.115472][ T5838] bus_probe_device+0x180/0x260 [ 224.120330][ T5838] device_add+0x85b/0xc20 [ 224.124653][ T5838] usb_set_configuration+0x1a79/0x20c0 [ 224.130102][ T5838] usb_generic_driver_probe+0x8d/0x150 [ 224.135596][ T5838] usb_probe_device+0x13d/0x280 [ 224.140444][ T5838] really_probe+0x25b/0xb40 [ 224.144943][ T5838] __driver_probe_device+0x18c/0x330 [ 224.150212][ T5838] driver_probe_device+0x4f/0x420 [ 224.155226][ T5838] __device_attach_driver+0x2ca/0x520 [ 224.160587][ T5838] bus_for_each_drv+0x24b/0x2d0 [ 224.165422][ T5838] __device_attach+0x2b5/0x400 [ 224.170175][ T5838] bus_probe_device+0x180/0x260 [ 224.175014][ T5838] device_add+0x85b/0xc20 [ 224.179419][ T5838] usb_new_device+0xa31/0x1630 [ 224.184168][ T5838] hub_event+0x2962/0x49c0 [ 224.188568][ T5838] process_scheduled_works+0xa45/0x15b0 [ 224.194100][ T5838] worker_thread+0xa55/0xfc0 [ 224.198764][ T5838] kthread+0x2fa/0x390 [ 224.202816][ T5838] ret_from_fork+0x48/0x80 [ 224.207221][ T5838] ret_from_fork_asm+0x11/0x20 [ 224.211972][ T5838] [ 224.214379][ T5838] Freed by task 5847: [ 224.218341][ T5838] kasan_set_track+0x4e/0x70 [ 224.222918][ T5838] kasan_save_free_info+0x2e/0x50 [ 224.227927][ T5838] ____kasan_slab_free+0x126/0x1e0 [ 224.233023][ T5838] slab_free_freelist_hook+0x130/0x1b0 [ 224.238475][ T5838] __kmem_cache_free+0xba/0x1f0 [ 224.243317][ T5838] smscore_unregister_device+0x603/0x6e0 [ 224.248940][ T5838] smsusb_term_device+0x18f/0x220 [ 224.253957][ T5838] smsusb_probe+0x1708/0x1da0 [ 224.258632][ T5838] usb_probe_interface+0x5a4/0xb00 [ 224.263731][ T5838] really_probe+0x25b/0xb40 [ 224.268223][ T5838] __driver_probe_device+0x18c/0x330 [ 224.273507][ T5838] driver_probe_device+0x4f/0x420 [ 224.278515][ T5838] __device_attach_driver+0x2ca/0x520 [ 224.283873][ T5838] bus_for_each_drv+0x24b/0x2d0 [ 224.288708][ T5838] __device_attach+0x2b5/0x400 [ 224.293472][ T5838] bus_probe_device+0x180/0x260 [ 224.298395][ T5838] device_add+0x85b/0xc20 [ 224.302717][ T5838] usb_set_configuration+0x1a79/0x20c0 [ 224.308348][ T5838] usb_generic_driver_probe+0x8d/0x150 [ 224.313885][ T5838] usb_probe_device+0x13d/0x280 [ 224.318729][ T5838] really_probe+0x25b/0xb40 [ 224.323219][ T5838] __driver_probe_device+0x18c/0x330 [ 224.328499][ T5838] driver_probe_device+0x4f/0x420 [ 224.333686][ T5838] __device_attach_driver+0x2ca/0x520 [ 224.339227][ T5838] bus_for_each_drv+0x24b/0x2d0 [ 224.344150][ T5838] __device_attach+0x2b5/0x400 [ 224.348905][ T5838] bus_probe_device+0x180/0x260 [ 224.353748][ T5838] device_add+0x85b/0xc20 [ 224.358077][ T5838] usb_new_device+0xa31/0x1630 [ 224.362826][ T5838] hub_event+0x2962/0x49c0 [ 224.367319][ T5838] process_scheduled_works+0xa45/0x15b0 [ 224.372855][ T5838] worker_thread+0xa55/0xfc0 [ 224.377433][ T5838] kthread+0x2fa/0x390 [ 224.381491][ T5838] ret_from_fork+0x48/0x80 [ 224.385893][ T5838] ret_from_fork_asm+0x11/0x20 [ 224.390644][ T5838] [ 224.392954][ T5838] The buggy address belongs to the object at ffff88805f517000 [ 224.392954][ T5838] which belongs to the cache kmalloc-2k of size 2048 [ 224.406994][ T5838] The buggy address is located 152 bytes inside of [ 224.406994][ T5838] freed 2048-byte region [ffff88805f517000, ffff88805f517800) [ 224.420951][ T5838] [ 224.423347][ T5838] The buggy address belongs to the physical page: [ 224.429752][ T5838] page:ffffea00017d4400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f510 [ 224.439886][ T5838] head:ffffea00017d4400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 224.448809][ T5838] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 224.456797][ T5838] page_type: 0xffffffff() [ 224.461217][ T5838] raw: 00fff00000000840 ffff888017842000 ffffea00008cde00 dead000000000002 [ 224.470055][ T5838] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 224.478626][ T5838] page dumped because: kasan: bad access detected [ 224.485032][ T5838] page_owner tracks the page as allocated [ 224.490729][ T5838] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5786, tgid 5786 (syz-executor), ts 70336816929, free_ts 16366041811 [ 224.512352][ T5838] post_alloc_hook+0x1cd/0x210 [ 224.517125][ T5838] get_page_from_freelist+0x195c/0x19f0 [ 224.522665][ T5838] __alloc_pages+0x1e3/0x460 [ 224.527247][ T5838] alloc_slab_page+0x5d/0x170 [ 224.531914][ T5838] new_slab+0x87/0x2e0 [ 224.535973][ T5838] ___slab_alloc+0xc6d/0x12f0 [ 224.541246][ T5838] __kmem_cache_alloc_node+0x1a2/0x260 [ 224.546691][ T5838] kmalloc_trace+0x2a/0xe0 [ 224.551096][ T5838] nbp_vlan_add+0x20f/0x3c0 [ 224.555589][ T5838] nbp_vlan_init+0x358/0x440 [ 224.560167][ T5838] br_add_if+0xaa8/0xec0 [ 224.564393][ T5838] do_setlink+0xe14/0x3fb0 [ 224.568802][ T5838] rtnl_newlink+0x175b/0x2020 [ 224.573469][ T5838] rtnetlink_rcv_msg+0x7c7/0xf10 [ 224.578410][ T5838] netlink_rcv_skb+0x216/0x480 [ 224.583171][ T5838] netlink_unicast+0x751/0x8d0 [ 224.587932][ T5838] page last free stack trace: [ 224.592590][ T5838] free_unref_page_prepare+0x7ce/0x8e0 [ 224.598044][ T5838] free_unref_page+0x32/0x2e0 [ 224.602711][ T5838] free_contig_range+0xa1/0x160 [ 224.607559][ T5838] destroy_args+0x87/0x770 [ 224.611968][ T5838] debug_vm_pgtable+0x3cc/0x410 [ 224.616805][ T5838] do_one_initcall+0x1fd/0x750 [ 224.621571][ T5838] do_initcall_level+0x137/0x1f0 [ 224.626513][ T5838] do_initcalls+0x69/0xd0 [ 224.630834][ T5838] kernel_init_freeable+0x3d2/0x570 [ 224.636024][ T5838] kernel_init+0x1d/0x1c0 [ 224.640339][ T5838] ret_from_fork+0x48/0x80 [ 224.644744][ T5838] ret_from_fork_asm+0x11/0x20 [ 224.649498][ T5838] [ 224.651804][ T5838] Memory state around the buggy address: [ 224.657417][ T5838] ffff88805f516f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 224.665461][ T5838] ffff88805f517000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.673505][ T5838] >ffff88805f517080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.681549][ T5838] ^ [ 224.686390][ T5838] ffff88805f517100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.694536][ T5838] ffff88805f517180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 224.702629][ T5838] ================================================================== [ 224.710775][ T5838] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 224.717952][ T5838] CPU: 1 PID: 5838 Comm: kworker/1:3 Not tainted 6.6.101-syzkaller #0 [ 224.726090][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.736226][ T5838] Workqueue: events do_submit_urb [ 224.741426][ T5838] Call Trace: [ 224.744770][ T5838] [ 224.747842][ T5838] dump_stack_lvl+0x16c/0x230 [ 224.753104][ T5838] ? show_regs_print_info+0x20/0x20 [ 224.758312][ T5838] ? load_image+0x3b0/0x3b0 [ 224.762811][ T5838] panic+0x2c0/0x710 [ 224.766840][ T5838] ? bpf_jit_dump+0xd0/0xd0 [ 224.771348][ T5838] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 224.777278][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 224.782128][ T5838] ? print_memory_metadata+0x314/0x400 [ 224.787582][ T5838] ? __lock_acquire+0xff/0x7c80 [ 224.792424][ T5838] check_panic_on_warn+0x84/0xa0 [ 224.797358][ T5838] ? __lock_acquire+0xff/0x7c80 [ 224.802200][ T5838] end_report+0x6f/0x140 [ 224.806431][ T5838] kasan_report+0x128/0x150 [ 224.810919][ T5838] ? mark_lock+0x94/0x320 [ 224.815235][ T5838] ? __lock_acquire+0xff/0x7c80 [ 224.820072][ T5838] __lock_acquire+0xff/0x7c80 [ 224.824740][ T5838] ? mark_lock+0x94/0x320 [ 224.829057][ T5838] ? look_up_lock_class+0x75/0x140 [ 224.834155][ T5838] ? verify_lock_unused+0x140/0x140 [ 224.839338][ T5838] ? register_lock_class+0xb5/0x890 [ 224.844527][ T5838] ? is_dynamic_key+0x260/0x260 [ 224.849368][ T5838] ? mark_lock+0x94/0x320 [ 224.853683][ T5838] ? __lock_acquire+0x1334/0x7c80 [ 224.858692][ T5838] lock_acquire+0x197/0x410 [ 224.863187][ T5838] ? smscore_getbuffer+0xa9/0x440 [ 224.868394][ T5838] ? read_lock_is_recursive+0x20/0x20 [ 224.874744][ T5838] _raw_spin_lock_irqsave+0xa8/0xf0 [ 224.879968][ T5838] ? smscore_getbuffer+0xa9/0x440 [ 224.885080][ T5838] ? _raw_spin_lock+0x40/0x40 [ 224.889760][ T5838] smscore_getbuffer+0xa9/0x440 [ 224.894690][ T5838] ? smscore_onresponse+0xf10/0xf10 [ 224.899896][ T5838] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 224.905960][ T5838] ? read_lock_is_recursive+0x20/0x20 [ 224.911363][ T5838] do_submit_urb+0x98/0x360 [ 224.915860][ T5838] ? process_scheduled_works+0x957/0x15b0 [ 224.921570][ T5838] ? process_scheduled_works+0x957/0x15b0 [ 224.927278][ T5838] process_scheduled_works+0xa45/0x15b0 [ 224.932818][ T5838] ? assign_work+0x400/0x400 [ 224.937400][ T5838] ? assign_work+0x39e/0x400 [ 224.941978][ T5838] worker_thread+0xa55/0xfc0 [ 224.946558][ T5838] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 224.952584][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 224.957426][ T5838] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 224.963797][ T5838] kthread+0x2fa/0x390 [ 224.967889][ T5838] ? pr_cont_work+0x560/0x560 [ 224.972598][ T5838] ? kthread_blkcg+0xd0/0xd0 [ 224.977197][ T5838] ret_from_fork+0x48/0x80 [ 224.981608][ T5838] ? kthread_blkcg+0xd0/0xd0 [ 224.986203][ T5838] ret_from_fork_asm+0x11/0x20 [ 224.991058][ T5838] [ 224.994720][ T5838] Kernel Offset: disabled [ 224.999402][ T5838] Rebooting in 86400 seconds..