last executing test programs: 4m56.601561513s ago: executing program 4 (id=4840): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 4m56.386084509s ago: executing program 4 (id=4843): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x514, &(0x7f0000000f40)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 4m55.707224092s ago: executing program 4 (id=4854): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) 4m55.237943236s ago: executing program 4 (id=4861): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@umask={'umask', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 4m54.78267082s ago: executing program 4 (id=4863): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x700, 0x35315258, 0xf00, 0x870, 0x0, @stepwise}) 4m54.277751566s ago: executing program 4 (id=4870): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, 0x0) 4m53.92983671s ago: executing program 32 (id=4870): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, 0x0) 4.2222346s ago: executing program 3 (id=9391): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00fc0000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="140005"], 0x3c}, 0x1, 0x11}, 0x0) 4.057706423s ago: executing program 3 (id=9396): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x120, 0x720d, 0x148, 0x120, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'wlan1\x00', 'vlan1\x00', {}, {}, 0x2e, 0x1, 0x50}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6]}, {0xffffffffffffffff, [0x7, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 3.742281001s ago: executing program 3 (id=9402): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) 3.513094604s ago: executing program 3 (id=9407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3.32786847s ago: executing program 3 (id=9410): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000100)={[{@resv_level={'resv_level', 0x3d, 0x3}}, {@heartbeat_none}, {@grpquota}, {@inode64}, {@barrier={'barrier', 0x3d, 0x42}}, {@localflocks}]}, 0x0, 0x4703, &(0x7f0000008f40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001900)={0x0, 0x9, 0x6, 0x2, 0x4, 0x3, 0xa64, 0x8, 0x9d}) 2.341040696s ago: executing program 5 (id=9417): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x7, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x0, 0x0, 0x4, 0x10, 0x0, {0x77359400}, {0x3, 0x1, 0x3, 0x9, 0x82, 0x40, "2a9f5388"}, 0x9, 0x2, {0x0}, 0x100004}) 2.083801543s ago: executing program 5 (id=9421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001500010000000000000000000af00000", @ANYRES32=0x0, @ANYBLOB="14000200"], 0x34}}, 0x0) 1.838038611s ago: executing program 5 (id=9422): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x8, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.574206976s ago: executing program 5 (id=9424): unshare(0x26020480) unshare(0xe000480) 1.485162845s ago: executing program 3 (id=9425): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000002600)={{}, "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"}) 1.36056525s ago: executing program 5 (id=9428): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0x1, 0x61f5, &(0x7f00000075c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c1242, 0x15c) 1.086021972s ago: executing program 1 (id=9430): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 1.076200521s ago: executing program 2 (id=9431): pipe(&(0x7f00000002c0)) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) 1.037161026s ago: executing program 0 (id=9432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) 866.062814ms ago: executing program 1 (id=9433): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x4, 0x0, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000180)="88ad6a24", 0x0, 0x0, 0x0, 0x0, 0x0}) 865.792252ms ago: executing program 2 (id=9434): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x7e, 0x4, 0x3, 0x0, 0x3}) 792.422314ms ago: executing program 0 (id=9435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback=r0, 0x26, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 689.597594ms ago: executing program 1 (id=9436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48022, 0x400}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x80) 636.057633ms ago: executing program 2 (id=9437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000580)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 606.999515ms ago: executing program 0 (id=9438): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 494.072707ms ago: executing program 1 (id=9439): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 448.01564ms ago: executing program 2 (id=9440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 410.396408ms ago: executing program 0 (id=9441): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 336.261947ms ago: executing program 1 (id=9442): r0 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r0, 0x0, 0x0) 239.260744ms ago: executing program 2 (id=9443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x1}, 0x20) 229.82818ms ago: executing program 0 (id=9444): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0x5) 205.868261ms ago: executing program 1 (id=9445): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x42, r0}, 0x0) 105.838123ms ago: executing program 0 (id=9446): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x2e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 62.63362ms ago: executing program 5 (id=9447): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0)="1082da76", 0x4, r0) 0s ago: executing program 2 (id=9448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) kernel console output (not intermixed with test programs): a EP is not usually 2 [ 573.291243][T31949] BTRFS info (device loop1): checking UUID tree [ 573.298146][T31949] BTRFS warning (device loop1): failed to start uuid_rescan task [ 573.306565][T31949] BTRFS warning (device loop1): failed to check the UUID tree: -4 [ 573.321918][T31962] bcachefs (loop5): dropping and reconstructing all alloc info [ 573.342051][T32029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.360763][ T5947] scsi host1: microtekX6 [ 573.533696][T31962] bcachefs (loop5): accounting_read... done [ 573.581625][T31962] bcachefs (loop5): alloc_read... done [ 573.587640][T31962] bcachefs (loop5): snapshots_read... done [ 573.599082][T31962] bcachefs (loop5): done starting filesystem [ 573.617122][ T43] usb 3-1: USB disconnect, device number 31 [ 573.630107][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.673355][T31949] BTRFS error (device loop1): open_ctree failed: -4 [ 574.004869][T20271] bcachefs (loop5): shutting down [ 574.176127][T20271] bcachefs (loop5): shutdown complete [ 574.330398][T32063] loop3: detected capacity change from 0 to 2048 [ 574.407236][T32063] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 574.447290][T32063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.666591][T32080] bond5: entered promiscuous mode [ 574.695522][T32080] bond5: entered allmulticast mode [ 574.708134][T32080] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.758951][T32119] netlink: 'syz.2.7745': attribute type 13 has an invalid length. [ 575.023698][T32141] netlink: 'syz.2.7751': attribute type 6 has an invalid length. [ 575.237046][T32156] openvswitch: netlink: IP tunnel dst address not specified [ 575.507301][T32176] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7763'. [ 575.542070][ T30] audit: type=1326 audit(2134217986.220:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32177 comm="syz.3.7764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 575.574246][ T30] audit: type=1326 audit(2134217986.230:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32177 comm="syz.3.7764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 575.711485][ T30] audit: type=1326 audit(2134217986.230:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32177 comm="syz.3.7764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 575.747093][ T30] audit: type=1326 audit(2134217986.230:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32177 comm="syz.3.7764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 575.770527][ T30] audit: type=1326 audit(2134217986.230:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32177 comm="syz.3.7764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 575.922703][T32202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.929972][T32202] IPv6: NLM_F_CREATE should be set when creating new route [ 575.937274][T32202] IPv6: NLM_F_CREATE should be set when creating new route [ 575.949595][ T5834] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 576.078806][T32210] xt_cgroup: invalid path, errno=-2 [ 576.113876][ T5834] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 576.137826][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.158281][ T5834] usb 2-1: Product: syz [ 576.165221][ T5834] usb 2-1: Manufacturer: syz [ 576.185675][ T5834] usb 2-1: SerialNumber: syz [ 576.245682][ T5834] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 576.276107][ T5919] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 576.373582][T32227] loop3: detected capacity change from 0 to 512 [ 576.438585][T32227] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 576.520108][T32227] EXT4-fs (loop3): orphan cleanup on readonly fs [ 576.573581][T32227] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.7779: bad orphan inode 15 [ 576.601855][T32227] ext4_test_bit(bit=14, block=18) = 1 [ 576.607573][T32227] is_bad_inode(inode)=0 [ 576.611908][T32227] NEXT_ORPHAN(inode)=1023 [ 576.616380][T32227] max_ino=32 [ 576.628040][T32227] i_nlink=0 [ 576.645034][T32227] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.7779: corrupted xattr block 19: e_value size too large [ 576.687750][T32227] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 576.718156][ T917] usb 2-1: USB disconnect, device number 37 [ 576.763242][T32227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 576.767119][T32245] netlink: 'syz.0.7783': attribute type 1 has an invalid length. [ 576.833318][T32245] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7783'. [ 576.916758][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.227289][T32263] loop5: detected capacity change from 0 to 4096 [ 577.252857][T32275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7791'. [ 577.269634][T32263] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 577.345256][ T5919] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 577.367608][T32263] ntfs3(loop5): ino=19, mi_enum_attr [ 577.379551][ T5919] ath9k_htc: Failed to initialize the device [ 577.387497][T32263] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 577.401411][ T917] usb 2-1: ath9k_htc: USB layer deinitialized [ 577.409763][ T5834] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 577.584961][ T5834] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 577.592493][T32295] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 577.612655][ T5834] usb 3-1: config 0 has no interface number 0 [ 577.618800][ T5834] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 577.679240][ T5834] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 577.709325][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.714761][T32303] netlink: 'syz.3.7800': attribute type 4 has an invalid length. [ 577.764920][ T5834] usb 3-1: config 0 descriptor?? [ 577.768193][T32303] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.7800'. [ 577.815807][ T5834] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input39 [ 577.920121][T32319] netlink: 'syz.5.7802': attribute type 3 has an invalid length. [ 577.958199][T32319] netlink: 'syz.5.7802': attribute type 1 has an invalid length. [ 578.127598][ T5834] usb 3-1: USB disconnect, device number 32 [ 578.127740][ C1] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 578.252117][T32336] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7807'. [ 578.372603][T32347] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7808'. [ 578.612647][T32360] loop1: detected capacity change from 0 to 256 [ 578.642966][T32360] exfat: Deprecated parameter 'namecase' [ 578.676517][T32360] exfat: Deprecated parameter 'namecase' [ 578.774954][T32360] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 579.696171][T32420] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.7829'. [ 579.887404][T32432] xt_TCPMSS: Only works on TCP SYN packets [ 580.415988][T32457] loop3: detected capacity change from 0 to 2048 [ 580.468518][T32463] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 580.899459][ T5906] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 581.063990][ T5906] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 581.079485][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.107942][ T5906] usb 4-1: Product: syz [ 581.126667][ T5906] usb 4-1: Manufacturer: syz [ 581.146692][ T5906] usb 4-1: SerialNumber: syz [ 581.167885][ T5906] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 581.219932][ T43] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 581.376621][ T30] audit: type=1326 audit(2134217992.060:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32508 comm="syz.2.7857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc52ab8e929 code=0x0 [ 581.702564][ T5906] usb 4-1: USB disconnect, device number 39 [ 582.304740][ T43] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 582.329970][ T43] ath9k_htc: Failed to initialize the device [ 582.352683][ T5906] usb 4-1: ath9k_htc: USB layer deinitialized [ 582.356361][T32553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7874'. [ 582.390675][ T30] audit: type=1326 audit(2134217993.060:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32555 comm="syz.1.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 582.444205][ T30] audit: type=1326 audit(2134217993.070:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32555 comm="syz.1.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 582.515802][ T30] audit: type=1326 audit(2134217993.100:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32555 comm="syz.1.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 582.559347][ T30] audit: type=1326 audit(2134217993.160:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32555 comm="syz.1.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 582.568951][T32565] loop2: detected capacity change from 0 to 256 [ 582.615054][ T30] audit: type=1326 audit(2134217993.160:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32555 comm="syz.1.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 582.875872][T32396] syz.5.7821 (32396): drop_caches: 3 [ 583.032392][T32591] x_tables: duplicate entry at hook 1 [ 583.476265][T32626] loop2: detected capacity change from 0 to 64 [ 583.520482][T32626] hfs: unable to locate alternate MDB [ 583.555455][T32626] hfs: continuing without an alternate MDB [ 583.729712][ T43] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 583.890068][T32655] loop5: detected capacity change from 0 to 512 [ 583.896495][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 583.924475][ T43] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 583.949689][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.961024][ T43] usb 4-1: Product: syz [ 583.965589][ T43] usb 4-1: Manufacturer: syz [ 583.971298][ T43] usb 4-1: SerialNumber: syz [ 583.995090][ T43] usb 4-1: config 0 descriptor?? [ 583.995572][T32655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.020750][ T43] gspca_main: sq905-2.14.0 probing 2770:9120 [ 584.070070][T32667] loop2: detected capacity change from 0 to 256 [ 584.071683][T32655] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.127553][T32667] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 584.204000][T32619] loop1: detected capacity change from 0 to 32768 [ 584.333454][T32680] xt_TCPMSS: Only works on TCP SYN packets [ 584.394792][T20271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.436615][ T43] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 584.454757][ T43] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 584.525802][ T43] usb 4-1: USB disconnect, device number 40 [ 584.543153][T32619] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 584.543179][T32619] allowing incompatible features above 0.0: (unknown version) [ 584.543191][T32619] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 584.735423][T32619] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 584.753957][T32619] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 584.763559][T32619] bcachefs (loop1): Version upgrade required: [ 584.763559][T32619] Version upgrade from 0.10: bkey_renumber to 1.7: mi_btree_bitmap incomplete [ 584.763559][T32619] Doing incompatible version upgrade from 0.10: bkey_renumber to 1.28: inode_has_case_insensitive [ 584.763559][T32619] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 584.835668][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.893798][T32619] bcachefs (loop1): dropping and reconstructing all alloc info [ 584.937577][T32619] bcachefs (loop1): accounting_read... done [ 584.964905][T32619] bcachefs (loop1): alloc_read... done [ 584.993915][T32619] bcachefs (loop1): snapshots_read... done [ 585.031134][T32619] bcachefs (loop1): check_allocations... done [ 585.078541][T32619] bcachefs (loop1): going read-write [ 585.089677][T32619] bcachefs (loop1): insufficient writeable journal devices available: have 0, need 1 [ 585.089677][T32619] rw journal devs: [ 585.123174][T32619] bcachefs (loop1): done starting filesystem [ 585.334122][ T5832] bcachefs (loop1): shutting down [ 585.353877][ T5832] bcachefs (loop1): going read-only [ 585.402852][ T5832] bcachefs (loop1): finished waiting for writes to stop [ 585.469676][ T5832] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 585.478595][ T5832] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 585.523256][ T5832] bcachefs (loop1): unclean shutdown complete, journal seq 10 [ 585.602663][ T5832] bcachefs (loop1): done going read-only, filesystem not clean [ 585.711178][T32762] loop2: detected capacity change from 0 to 8 [ 585.743748][ T5832] bcachefs (loop1): shutdown complete [ 585.750565][T32766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.776321][T32762] SQUASHFS error: Unable to read inode 0xa7 [ 586.143032][ T326] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 586.483765][ T345] netlink: 'syz.3.7944': attribute type 11 has an invalid length. [ 586.979252][ T363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7950'. [ 587.002174][ T343] loop5: detected capacity change from 0 to 32768 [ 587.060703][ T343] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt [ 587.060703][ T343] [ 587.097464][ T343] ERROR: (device loop5): remounting filesystem as read-only [ 587.125258][ T343] jfs_lookup: dtSearch returned -5 [ 587.313418][ T5834] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 587.492053][ T5834] usb 3-1: config 0 has an invalid interface number: 75 but max is 0 [ 587.500529][ T5834] usb 3-1: config 0 has no interface number 0 [ 587.506748][ T5834] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=cd.d2 [ 587.543584][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.562714][ T5834] usb 3-1: config 0 descriptor?? [ 587.794820][ T5834] usb 3-1: string descriptor 0 read error: -71 [ 587.826116][ T5834] usb 3-1: Found UVC 0.00 device (1bcf:0b40) [ 587.850145][ T5834] usb 3-1: Forcing UVC version to 1.0a [ 587.859555][ T5834] usb 3-1: No valid video chain found. [ 587.891999][ T5834] usb 3-1: USB disconnect, device number 33 [ 588.265774][ T391] loop5: detected capacity change from 0 to 32768 [ 588.949174][ T456] loop1: detected capacity change from 0 to 4096 [ 589.463031][ T486] erspan1: entered promiscuous mode [ 589.801096][ T512] netlink: 'syz.2.7998': attribute type 10 has an invalid length. [ 589.808941][ T512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7998'. [ 589.866564][ T512] bond0: left allmulticast mode [ 589.889423][ T512] bond_slave_0: left allmulticast mode [ 589.908913][ T517] loop1: detected capacity change from 0 to 1024 [ 589.911308][ T512] bond_slave_1: left allmulticast mode [ 589.941661][ T512] team0: left allmulticast mode [ 589.959474][ T512] team_slave_1: left allmulticast mode [ 589.979168][ T517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.988950][ T512] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 589.992311][ T517] ext4 filesystem being mounted at /1613/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.109955][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.148535][ T532] netlink: 212 bytes leftover after parsing attributes in process `syz.3.8005'. [ 590.278478][ T541] netlink: 'syz.2.8007': attribute type 1 has an invalid length. [ 590.303170][ T541] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8007'. [ 590.561656][ T557] ip6t_srh: unknown srh match flags FDC7 [ 590.613541][ T562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8014'. [ 590.740647][ T569] netlink: 'syz.0.8017': attribute type 16 has an invalid length. [ 590.748494][ T569] netlink: 'syz.0.8017': attribute type 17 has an invalid length. [ 590.998939][ T581] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8023'. [ 591.046380][ T581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8023'. [ 591.079374][ T581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8023'. [ 591.219230][ T554] loop2: detected capacity change from 0 to 32768 [ 591.302911][ T554] syz.2.8012: attempt to access beyond end of device [ 591.302911][ T554] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 591.363437][ T602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8032'. [ 591.369913][ T554] metapage_write_end_io: I/O error [ 591.424492][ T554] ERROR: (device loop2): release_metapage: metapage_write_one() failed [ 591.424492][ T554] [ 591.489728][ T554] ERROR: (device loop2): remounting filesystem as read-only [ 591.497077][ T554] ERROR: (device loop2): diWrite: ixpxd invalid [ 591.497077][ T554] [ 591.505401][ T610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8034'. [ 591.539403][ T554] ERROR: (device loop2): txCommit: [ 591.539403][ T554] [ 591.583693][ T554] blkno = 8f7c0, nblocks = 1 [ 591.597946][ T554] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 591.597946][ T554] [ 591.626989][ T554] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 591.626989][ T554] [ 591.637893][ T554] ialloc: diAlloc returned -5! [ 591.820658][ T5843] syz-executor: attempt to access beyond end of device [ 591.820658][ T5843] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 591.859436][ T5843] metapage_write_end_io: I/O error [ 592.112262][ T638] loop5: detected capacity change from 0 to 4096 [ 592.146397][ T638] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 592.281572][ T650] loop2: detected capacity change from 0 to 256 [ 593.449251][ T710] SET target dimension over the limit! [ 593.639955][ T720] overlayfs: missing 'lowerdir' [ 593.712389][ T691] loop2: detected capacity change from 0 to 32768 [ 593.756344][ T691] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8062 (691) [ 593.786158][ T691] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 593.859062][ T691] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 593.916085][ T691] BTRFS info (device loop2): using free-space-tree [ 594.043453][ T691] BTRFS info (device loop2): rebuilding free space tree [ 594.079692][ T5834] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 594.191688][ T5843] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 594.246914][ T775] netlink: 'syz.0.8087': attribute type 2 has an invalid length. [ 594.262753][ T5834] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 594.273940][ T775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8087'. [ 594.286592][ T5834] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 594.296689][ T5834] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 594.314390][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.328003][ T766] loop5: detected capacity change from 0 to 4096 [ 594.372660][ T766] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 594.404966][ T731] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.428727][ T5834] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.747487][ T5834] usb 4-1: USB disconnect, device number 41 [ 595.529029][ T858] netlink: 'syz.2.8105': attribute type 1 has an invalid length. [ 595.732295][ T870] netlink: 208 bytes leftover after parsing attributes in process `syz.5.8110'. [ 595.953457][ T874] loop2: detected capacity change from 0 to 2048 [ 596.012139][ T874] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.137051][ T842] loop1: detected capacity change from 0 to 32768 [ 596.537941][ T30] audit: type=1326 audit(2134218007.220:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=903 comm="syz.3.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 596.616934][ T30] audit: type=1326 audit(2134218007.220:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=903 comm="syz.3.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 596.693654][ T30] audit: type=1326 audit(2134218007.220:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=903 comm="syz.3.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 596.761553][ T30] audit: type=1326 audit(2134218007.220:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=903 comm="syz.3.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 596.818387][ T922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8124'. [ 597.001195][ T932] netlink: 'syz.0.8127': attribute type 1 has an invalid length. [ 597.008967][ T932] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8127'. [ 597.031167][ T882] loop5: detected capacity change from 0 to 32768 [ 597.106936][ T946] loop2: detected capacity change from 0 to 8 [ 597.186571][ T946] SQUASHFS error: Failed to read block 0x738: -5 [ 597.193203][ T951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8131'. [ 597.239357][ T946] SQUASHFS error: Unable to read metadata cache entry [736] [ 597.656683][ T983] loop2: detected capacity change from 0 to 164 [ 597.708351][ T983] Unsupported NM flag settings (8) [ 597.828487][ T992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 598.253404][ T1032] C: entered promiscuous mode [ 598.272562][ T1032] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8155'. [ 598.309991][ T1032] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 598.372257][ T5834] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 598.531270][ T5834] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.551952][ T5834] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 598.580726][ T5834] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.614350][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.660596][ T1016] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 598.673429][ T5834] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.817362][ T1080] netlink: 'syz.2.8167': attribute type 10 has an invalid length. [ 598.844871][ T1080] lo: entered promiscuous mode [ 598.888674][ T1080] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 598.973662][ T5834] usb 6-1: USB disconnect, device number 9 [ 599.130285][ T1107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8172'. [ 599.149473][ T1107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8172'. [ 599.187009][ T1093] loop3: detected capacity change from 0 to 4096 [ 599.223673][ T1093] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 599.306500][ T1093] ntfs3(loop3): ino=19, mi_enum_attr [ 599.313232][ T1111] netlink: 'syz.2.8173': attribute type 1 has an invalid length. [ 599.319346][ T1093] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 599.330665][ T1037] loop1: detected capacity change from 0 to 32768 [ 599.403288][ T1037] [ 599.403288][ T1037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 599.403288][ T1037] [ 599.477793][ T1037] ERROR: (device loop1): diWrite: ixpxd invalid [ 599.477793][ T1037] [ 599.533987][ T1037] ERROR: (device loop1): txCommit: [ 599.533987][ T1037] [ 599.695124][ T1125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8176'. [ 599.730744][ T5832] [ 599.730744][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 599.730744][ T5832] [ 599.771010][ T5832] [ 599.771010][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 599.771010][ T5832] [ 600.182640][ T1153] netlink: 'syz.1.8178': attribute type 2 has an invalid length. [ 600.209231][ T1153] netlink: 'syz.1.8178': attribute type 2 has an invalid length. [ 600.485259][ T30] audit: type=1326 audit(2134218011.170:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1178 comm="syz.2.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52ab8e929 code=0x7ffc0000 [ 600.529881][ T30] audit: type=1326 audit(2134218011.200:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1178 comm="syz.2.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc52ab8e929 code=0x7ffc0000 [ 600.585611][ T30] audit: type=1326 audit(2134218011.210:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1182 comm="syz.2.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc52abc11e5 code=0x7ffc0000 [ 600.619643][ T5906] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 600.649026][ T30] audit: type=1326 audit(2134218011.210:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1178 comm="syz.2.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52ab8e929 code=0x7ffc0000 [ 600.660816][ T1188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8195'. [ 600.672814][ T30] audit: type=1326 audit(2134218011.250:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1178 comm="syz.2.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52ab8e929 code=0x7ffc0000 [ 600.714396][ T5834] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 600.721811][ T30] audit: type=1400 audit(2134218011.330:318): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=1183 comm="syz.5.8194" [ 600.797259][ T5906] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 600.814766][ T5906] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 600.824862][ T5906] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 600.833983][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.851334][ T1165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 600.873700][ T5906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.887282][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 600.912041][ T1196] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 600.928371][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 600.946684][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 600.962485][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 601.032589][ T5834] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 601.073627][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.081906][ T5834] usb 4-1: Product: syz [ 601.086080][ T5834] usb 4-1: Manufacturer: syz [ 601.137951][ T5834] usb 4-1: SerialNumber: syz [ 601.159918][ T5834] usb 4-1: config 0 descriptor?? [ 601.163469][ T5906] usb 2-1: USB disconnect, device number 38 [ 601.167362][ T5834] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 601.427766][ T5834] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 601.621544][ T5834] usb 4-1: USB disconnect, device number 42 [ 601.733404][ T1273] netlink: 'syz.5.8205': attribute type 3 has an invalid length. [ 601.769784][ T1273] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8205'. [ 601.985475][ T1543] netlink: 'syz.2.8214': attribute type 21 has an invalid length. [ 601.995253][ T1543] netlink: 'syz.2.8214': attribute type 1 has an invalid length. [ 602.014570][ T1543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8214'. [ 602.139423][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 602.726564][ T1586] loop5: detected capacity change from 0 to 1024 [ 602.788538][ T1586] syz.5.8231: attempt to access beyond end of device [ 602.788538][ T1586] loop5: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 602.825680][ T1586] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 602.865808][ T1586] hfsplus: unable to mark blocks free: error -5 [ 602.893405][ T1586] hfsplus: can't free extent [ 603.915945][ T1660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8256'. [ 603.935140][ T1660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8256'. [ 603.953593][ T1660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8256'. [ 604.365667][ T1688] loop5: detected capacity change from 0 to 64 [ 604.491679][ T1688] syz.5.8266: attempt to access beyond end of device [ 604.491679][ T1688] loop5: rw=0, sector=128, nr_sectors = 2 limit=64 [ 604.535514][ T1641] loop3: detected capacity change from 0 to 32768 [ 604.545716][ T1688] Trying to free block not in datazone [ 604.574019][ T1641] ialloc: diAlloc returned -5! [ 604.595367][ T1688] Trying to free block not in datazone [ 604.629369][ T1688] Trying to free block not in datazone [ 604.640797][ T1688] Trying to free block not in datazone [ 604.656196][ T1688] Trying to free block not in datazone [ 604.677175][ T1688] Trying to free block not in datazone [ 604.708303][ T1688] minix_free_block (loop5:6): bit already cleared [ 604.851567][ T1709] loop2: detected capacity change from 0 to 256 [ 605.027092][ T1727] netlink: 'syz.0.8277': attribute type 16 has an invalid length. [ 605.051936][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.119776][ T1730] netlink: 'syz.3.8278': attribute type 3 has an invalid length. [ 605.145200][ T1709] FAT-fs (loop2): Filesystem has been set read-only [ 605.199561][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.237393][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.269654][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.286828][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.329345][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.359400][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.401034][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.427181][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.452788][ T1709] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 605.484940][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 605.484956][ T30] audit: type=1800 audit(2134218016.170:320): pid=1709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8274" name="file1" dev="loop2" ino=1048678 res=0 errno=0 [ 605.512987][ T1709] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 605.631521][ T1760] loop5: detected capacity change from 0 to 8 [ 605.642790][ T1758] loop3: detected capacity change from 0 to 512 [ 605.693009][ T1760] SQUASHFS error: Failed to read block 0x636: -5 [ 605.724365][ T1760] SQUASHFS error: Unable to read metadata cache entry [634] [ 605.749683][ T1760] SQUASHFS error: Unable to read metadata cache entry [634] [ 605.764545][ T1758] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 605.767602][ T1760] SQUASHFS error: Unable to read directory block [629:0] [ 605.815246][ T1775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8289'. [ 605.819557][ T1758] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 605.838025][ T1758] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8286: Failed to acquire dquot type 1 [ 605.879868][ T1758] EXT4-fs (loop3): 1 truncate cleaned up [ 605.901353][ T1758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.901957][ T5906] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 605.946085][ T1758] ext4 filesystem being mounted at /1669/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.012246][ T1758] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 606.044248][ T1758] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 606.058170][ T1758] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8286: Failed to acquire dquot type 1 [ 606.070107][T30856] Bluetooth: hci0: unexpected cc 0x040d length: 63 > 7 [ 606.078614][T30856] Bluetooth: hci0: unexpected event for opcode 0x040d [ 606.101393][ T5906] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.131852][ T5906] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 606.142037][ T5906] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.151269][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.162968][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.175591][ T1762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.188905][ T5906] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.189424][ T917] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 606.319727][ T43] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 606.369508][ T917] usb 6-1: Using ep0 maxpacket: 8 [ 606.383736][ T917] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 606.401118][ T917] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 606.422208][ T917] usb 6-1: Product: syz [ 606.426770][ T917] usb 6-1: Manufacturer: syz [ 606.435744][ T917] usb 6-1: SerialNumber: syz [ 606.451733][ T917] usb 6-1: config 0 descriptor?? [ 606.473454][ T917] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 606.481822][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 606.481854][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 606.481879][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 606.481923][ T43] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 606.481945][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.501753][ T5906] usb 3-1: USB disconnect, device number 34 [ 606.550139][ T43] usb 1-1: config 0 descriptor?? [ 606.555773][ T1792] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 606.558872][ T1824] batadv1: entered promiscuous mode [ 606.586276][ T43] gspca_main: spca561-2.14.0 probing abcd:cdee [ 606.593173][ T1824] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 606.730765][ T1844] loop1: detected capacity change from 0 to 1024 [ 606.799008][ T43] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 606.808385][ T1844] hfsplus: keylen 65060 too large [ 606.811897][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.831806][ T43] usb 1-1: MIDIStreaming interface descriptor not found [ 606.842389][ T1844] hfsplus: xattr searching failed [ 606.863608][ T1851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8300'. [ 606.888956][ T917] gspca_zc3xx: reg_r err -71 [ 606.916296][ T917] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 606.930374][ T43] usb 1-1: USB disconnect, device number 40 [ 606.967344][ T917] usb 6-1: USB disconnect, device number 10 [ 607.034008][ T5840] udevd[5840]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 607.099905][ T5840] udevd[5840]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 607.388134][ T1905] netlink: 'syz.3.8307': attribute type 18 has an invalid length. [ 607.933041][ T1935] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 608.096170][ T1948] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8322'. [ 608.125153][ T1948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8322'. [ 608.146972][ T1948] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8322'. [ 608.290893][ T1956] loop5: detected capacity change from 0 to 2048 [ 608.359523][ T1965] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 608.424644][ T1956] CPU: 0 UID: 0 PID: 1956 Comm: syz.5.8326 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) [ 608.424671][ T1956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 608.424690][ T1956] Call Trace: [ 608.424700][ T1956] [ 608.424709][ T1956] dump_stack_lvl+0x189/0x250 [ 608.424740][ T1956] ? rcu_is_watching+0x15/0xb0 [ 608.424768][ T1956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.424790][ T1956] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 608.424820][ T1956] ? __asan_memset+0x22/0x50 [ 608.424842][ T1956] ? nilfs_btree_alloc_path+0x5e5/0x610 [ 608.424873][ T1956] nilfs_btree_last_key+0x491/0x620 [ 608.424902][ T1956] nilfs_bmap_last_key+0x7a/0x130 [ 608.424923][ T1956] nilfs_truncate_bmap+0xfe/0x340 [ 608.424944][ T1956] ? __pfx_nilfs_truncate_bmap+0x10/0x10 [ 608.424966][ T1956] ? nilfs_transaction_begin+0x52a/0x710 [ 608.424985][ T1956] ? __pfx_nilfs_get_block+0x10/0x10 [ 608.425014][ T1956] nilfs_truncate+0x279/0x4e0 [ 608.425045][ T1956] ? __pfx_nilfs_truncate+0x10/0x10 [ 608.425077][ T1956] ? truncate_setsize+0xcf/0xf0 [ 608.425105][ T1956] nilfs_setattr+0x206/0x2b0 [ 608.425126][ T1956] ? __pfx_nilfs_setattr+0x10/0x10 [ 608.425153][ T1956] ? try_break_deleg+0x79/0x130 [ 608.425176][ T1956] ? __pfx_nilfs_setattr+0x10/0x10 [ 608.425195][ T1956] notify_change+0xb33/0xe40 [ 608.425231][ T1956] do_truncate+0x1a4/0x220 [ 608.425252][ T1956] ? __pfx_do_truncate+0x10/0x10 [ 608.425266][ T1956] ? apparmor_file_truncate+0x23e/0x2d0 [ 608.425310][ T1956] path_openat+0x306c/0x3830 [ 608.425332][ T1956] ? arch_stack_walk+0xfc/0x150 [ 608.425389][ T1956] ? __pfx_path_openat+0x10/0x10 [ 608.425410][ T1956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.425452][ T1956] do_filp_open+0x1fa/0x410 [ 608.425473][ T1956] ? __lock_acquire+0xab9/0xd20 [ 608.425498][ T1956] ? __pfx_do_filp_open+0x10/0x10 [ 608.425556][ T1956] ? _raw_spin_unlock+0x28/0x50 [ 608.425575][ T1956] ? alloc_fd+0x64c/0x6c0 [ 608.425608][ T1956] do_sys_openat2+0x121/0x1c0 [ 608.425631][ T1956] ? __se_sys_futex+0x36f/0x400 [ 608.425652][ T1956] ? __pfx_do_sys_openat2+0x10/0x10 [ 608.425683][ T1956] ? rcu_is_watching+0x15/0xb0 [ 608.425713][ T1956] __x64_sys_creat+0x8f/0xc0 [ 608.425740][ T1956] do_syscall_64+0xfa/0x3b0 [ 608.425762][ T1956] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.425782][ T1956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.425800][ T1956] ? clear_bhb_loop+0x60/0xb0 [ 608.425823][ T1956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.425845][ T1956] RIP: 0033:0x7fe85c18e929 [ 608.425864][ T1956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.425880][ T1956] RSP: 002b:00007fe85d0ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 608.425901][ T1956] RAX: ffffffffffffffda RBX: 00007fe85c3b5fa0 RCX: 00007fe85c18e929 [ 608.425915][ T1956] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000100 [ 608.425927][ T1956] RBP: 00007fe85c210b39 R08: 0000000000000000 R09: 0000000000000000 [ 608.425939][ T1956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.425951][ T1956] R13: 0000000000000000 R14: 00007fe85c3b5fa0 R15: 00007ffc091fa7d8 [ 608.425983][ T1956] [ 608.425991][ T1956] NILFS (loop5): btree level mismatch (ino=16): 1 != 7 [ 608.434119][ T30] audit: type=1326 audit(2134218019.120:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1967 comm="syz.3.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 608.467681][ T1956] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 608.586872][ T30] audit: type=1326 audit(2134218019.120:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1967 comm="syz.3.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 608.805910][ T1956] Remounting filesystem read-only [ 608.872140][ T1936] loop2: detected capacity change from 0 to 32768 [ 608.878642][ T1956] NILFS (loop5): error -5 truncating bmap (ino=16) [ 608.895159][ T30] audit: type=1326 audit(2134218019.140:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1967 comm="syz.3.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 608.918921][ T30] audit: type=1326 audit(2134218019.140:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1967 comm="syz.3.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 609.097721][ T30] audit: type=1326 audit(2134218019.140:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1967 comm="syz.3.8328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 609.127463][T20271] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 609.466671][ T2012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8341'. [ 609.647149][ T2024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8346'. [ 609.994456][ T2048] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 610.141559][T30856] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 610.150658][T30856] Bluetooth: hci0: Injecting HCI hardware error event [ 610.160986][T30856] Bluetooth: hci0: hardware error 0x00 [ 610.252988][ T2062] loop5: detected capacity change from 0 to 4096 [ 610.272334][ T2062] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 610.401319][ T2062] ntfs3(loop5): ino=19, mi_enum_attr [ 610.406666][ T2062] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 610.495765][ T2083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8367'. [ 611.070349][ T5834] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 611.167585][ T2125] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 611.263288][ T5834] usb 3-1: too many configurations: 89, using maximum allowed: 8 [ 611.295740][ T5834] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 611.322411][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.339089][ T5834] usb 3-1: Product: syz [ 611.372973][ T5834] usb 3-1: Manufacturer: syz [ 611.377604][ T5834] usb 3-1: SerialNumber: syz [ 611.419126][ T5834] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 611.457808][ T917] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 611.596925][ T2158] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8390'. [ 611.671478][ T2158] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 611.992524][ T5834] usb 3-1: USB disconnect, device number 35 [ 612.178860][ T2188] loop3: detected capacity change from 0 to 4096 [ 612.237339][ T2188] NILFS (loop3): invalid segment: Checksum error in segment payload [ 612.264406][ T2188] NILFS (loop3): trying rollback from an earlier position [ 612.299688][T30856] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 612.347464][ T2188] NILFS (loop3): recovery complete [ 612.382980][ T2208] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 612.550609][ T917] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 612.558123][ T917] ath9k_htc: Failed to initialize the device [ 612.641625][ T5834] usb 3-1: ath9k_htc: USB layer deinitialized [ 612.940470][ T5919] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 612.982894][ T2248] loop5: detected capacity change from 0 to 764 [ 613.011636][ T2253] loop1: detected capacity change from 0 to 1024 [ 613.024686][ T2248] rock: directory entry would overflow storage [ 613.037114][ T2248] rock: sig=0x4654, size=5, remaining=4 [ 613.083150][ T2248] isofs: Unable to find the ".." directory for NFS. [ 613.129448][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 613.144207][ T5919] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 613.179362][ T5919] usb 1-1: config 11 has no interface number 0 [ 613.212899][ T5919] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 147, changing to 7 [ 613.232947][ T12] hfsplus: b-tree write err: -5, ino 4 [ 613.269379][ T5919] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 1293, setting to 1024 [ 613.307793][ T5919] usb 1-1: config 11 interface 95 has no altsetting 0 [ 613.327016][ T5919] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 613.337430][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.364086][ T5919] usb 1-1: Product: syz [ 613.393578][ T5919] usb 1-1: Manufacturer: syz [ 613.398208][ T5919] usb 1-1: SerialNumber: syz [ 613.657762][ T5919] usbtouchscreen 1-1:11.95: probe with driver usbtouchscreen failed with error -22 [ 613.688013][ T2300] netlink: 'syz.2.8429': attribute type 1 has an invalid length. [ 613.714042][ T2300] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8429'. [ 613.744563][ T2304] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8430'. [ 613.760925][ T5919] usb 1-1: USB disconnect, device number 41 [ 613.863237][ T43] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 613.882824][ T2314] ALSA: mixer_oss: invalid OSS volume '' [ 613.894452][ T2314] ALSA: mixer_oss: invalid OSS volume 'Ü?ü×Ó%‰$ U¥!¾ÿ=À,>Qw¦½e~«v×ù' [ 613.914579][ T2314] ALSA: mixer_oss: invalid OSS volume '¹…~X›;èÐo«Ö…­ŸãB@§%hq¤az8' [ 613.937321][ T2314] ALSA: mixer_oss: invalid OSS volume 'B”ñ7ëD`^ÑV›®()(zÍP«ä÷|‘—? l' [ 613.966034][ T2314] ALSA: mixer_oss: invalid OSS volume 'Ò0»'r' [ 613.985058][ T2314] ALSA: mixer_oss: invalid OSS volume '½ºÏÇ_µÑ}\ÜCbÒs°RDp’=OpŽ™‘ûSZà”ü' [ 614.013200][ T2314] ALSA: mixer_oss: invalid OSS volume '£Ùm5‹àõ"Ú›g+çòæ½y' [ 614.030785][ T2314] ALSA: mixer_oss: invalid OSS volume 'VÀÇt[´\h A2O:õÁ‹³L±âí' [ 614.046672][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 614.049313][ T2314] ALSA: mixer_oss: invalid OSS volume '…@¢íÈ•ûN+ºû­¸©á™%.§ås_ö¶Ê' [ 614.068303][ T43] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 614.077717][ T2314] ALSA: mixer_oss: invalid OSS volume '&õ' [ 614.077780][ T2314] ALSA: mixer_oss: invalid OSS volume '­EºI޲]a¸Çg³LKèŸRmrð¥ÝN{ûšk' [ 614.077796][ T2314] ALSA: mixer_oss: invalid OSS volume 'àH}+S<1›œüˆ“b|Ÿá&èznF%ŸþíìE' [ 614.077810][ T2314] ALSA: mixer_oss: invalid OSS volume '±Îßûl2/>ŠX‚‰¾«?Ë' [ 614.077826][ T2314] ALSA: mixer_oss: invalid OSS volume '1gE' [ 614.146106][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.155011][ T43] usb 4-1: Product: syz [ 614.204169][ T43] usb 4-1: Manufacturer: syz [ 614.208807][ T43] usb 4-1: SerialNumber: syz [ 614.218967][ T2333] loop1: detected capacity change from 0 to 1764 [ 614.246296][ T43] r8152-cfgselector 4-1: Unknown version 0x0000 [ 614.253845][ T43] r8152-cfgselector 4-1: config 0 descriptor?? [ 614.420313][ T2347] loop2: detected capacity change from 0 to 256 [ 614.514138][ T2357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.583105][ T2347] FAT-fs (loop2): Directory bread(block 64) failed [ 614.615844][ T2347] FAT-fs (loop2): Directory bread(block 65) failed [ 614.649402][ T2347] FAT-fs (loop2): Directory bread(block 66) failed [ 614.655967][ T2347] FAT-fs (loop2): Directory bread(block 67) failed [ 614.690801][ T2365] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8448'. [ 614.704512][ T5919] r8152-cfgselector 4-1: USB disconnect, device number 43 [ 614.724919][ T2347] FAT-fs (loop2): Directory bread(block 68) failed [ 614.762246][ T2347] FAT-fs (loop2): Directory bread(block 69) failed [ 614.768882][ T2347] FAT-fs (loop2): Directory bread(block 70) failed [ 614.785737][ T2347] FAT-fs (loop2): Directory bread(block 71) failed [ 614.814203][ T2347] FAT-fs (loop2): Directory bread(block 72) failed [ 614.822738][ T2347] FAT-fs (loop2): Directory bread(block 73) failed [ 614.896983][ T2382] loop1: detected capacity change from 0 to 64 [ 614.997088][ T2384] veth3: entered promiscuous mode [ 615.009461][ T2384] veth3: entered allmulticast mode [ 615.122506][ T2419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 615.129792][ T2419] IPv6: NLM_F_CREATE should be set when creating new route [ 615.137066][ T2419] IPv6: NLM_F_CREATE should be set when creating new route [ 615.144342][ T2419] IPv6: NLM_F_CREATE should be set when creating new route [ 615.839758][ T5919] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 615.859719][ T43] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 615.886606][ T2483] netlink: 'syz.5.8471': attribute type 4 has an invalid length. [ 616.016128][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 616.031208][ T5919] usb 3-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 616.050095][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 616.053278][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.075716][ T5919] usb 3-1: config 0 descriptor?? [ 616.083848][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.105223][ T2507] loop3: detected capacity change from 0 to 256 [ 616.115085][ T5919] snd_usb_toneport 3-1:0.0: Line 6 POD Studio UX1 found [ 616.135562][ T43] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 616.165140][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.196304][ T43] usb 1-1: Product: syz [ 616.208483][ T2507] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 616.230620][ T43] usb 1-1: Manufacturer: syz [ 616.249649][ T43] usb 1-1: SerialNumber: syz [ 616.290471][ T43] usb 1-1: config 0 descriptor?? [ 616.311209][ T43] usb 1-1: bad CDC descriptors [ 616.326590][ T43] usb 1-1: unsupported MDLM descriptors [ 616.334617][ T5919] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 616.379699][ T5919] snd_usb_toneport 3-1:0.0: Line 6 POD Studio UX1 now disconnected [ 616.433964][ T5919] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 616.551358][ T5919] usb 1-1: USB disconnect, device number 42 [ 616.576974][ T917] usb 3-1: USB disconnect, device number 36 [ 616.662759][ T2563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8485'. [ 616.715249][ T2569] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8487'. [ 616.735938][ T2569] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8487'. [ 617.559485][ T2632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8502'. [ 617.718202][ T2645] IPv6: NLM_F_REPLACE set, but no existing node found! [ 618.139576][ T30] audit: type=1400 audit(2134218028.820:326): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=2682 comm="syz.0.8520" [ 618.253157][ T2692] openvswitch: netlink: Actions may not be safe on all matching packets [ 618.369479][ T2700] xt_TCPMSS: Only works on TCP SYN packets [ 618.455476][ T2708] IPv6: Can't replace route, no match found [ 618.669427][ T2730] xt_hashlimit: max too large, truncated to 1048576 [ 618.714768][ T2657] loop2: detected capacity change from 0 to 32768 [ 618.753064][ T2657] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 618.794430][ T2657] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 618.857649][ T30] audit: type=1326 audit(2134218029.540:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2742 comm="syz.5.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 618.916042][ T1814] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 618.978545][ T30] audit: type=1326 audit(2134218029.540:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2742 comm="syz.5.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 619.030877][ T30] audit: type=1326 audit(2134218029.570:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2742 comm="syz.5.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 619.057295][ T30] audit: type=1326 audit(2134218029.570:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2742 comm="syz.5.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 619.094378][ T30] audit: type=1326 audit(2134218029.570:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2742 comm="syz.5.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 619.121680][ T1814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 619.133330][ T5843] ocfs2: Unmounting device (7,2) on (node local) [ 619.142239][ T1814] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 619.206687][ T1814] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 619.233091][ T1814] usb 2-1: config 1 interface 0 has no altsetting 1 [ 619.252927][ T1814] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 619.288983][ T1814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.329956][ T1814] usb 2-1: Product: syz [ 619.353863][ T1814] usb 2-1: Manufacturer: syz [ 619.359221][ T1814] usb 2-1: SerialNumber: syz [ 619.401845][ T1814] smsusb:smsusb_probe: board id=8, interface number 0 [ 619.569532][ T2784] deleting an unspecified loop device is not supported. [ 619.576735][ T2783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8546'. [ 619.623902][ T2787] loop5: detected capacity change from 0 to 2048 [ 619.630015][ T1814] smsusb:smsusb_probe: Device initialized with return code -19 [ 619.631123][ T2783] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 619.680082][ T2787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 619.690601][ T2783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.825642][ T1814] usb 2-1: USB disconnect, device number 39 [ 620.311870][ T2851] loop5: detected capacity change from 0 to 256 [ 620.422165][ T2851] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 620.466618][ T2851] FAT-fs (loop5): Filesystem has been set read-only [ 620.671651][ T2884] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8568'. [ 621.032797][ T30] audit: type=1326 audit(2134218031.720:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2913 comm="syz.0.8577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baeb8e929 code=0x7ffc0000 [ 621.136293][ T30] audit: type=1326 audit(2134218031.740:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2913 comm="syz.0.8577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baeb8e929 code=0x7ffc0000 [ 621.149405][ T43] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 621.198641][ T30] audit: type=1326 audit(2134218031.760:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2913 comm="syz.0.8577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f9baeb8e929 code=0x7ffc0000 [ 621.242447][ T30] audit: type=1326 audit(2134218031.760:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2913 comm="syz.0.8577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9baeb8e929 code=0x7ffc0000 [ 621.304427][ T2930] IPv6: NLM_F_CREATE should be specified when creating new route [ 621.400210][ T43] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 621.428239][ T43] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.458774][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 621.498377][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.560558][ T43] hub 6-1:4.0: USB hub found [ 621.772229][ T43] hub 6-1:4.0: 21 ports detected [ 621.799430][ T43] usb 6-1: selecting invalid altsetting 1 [ 621.817023][ T43] hub 6-1:4.0: Using single TT (err -22) [ 621.840614][ T2966] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0) [ 621.849931][ T43] hub 6-1:4.0: insufficient power available to use all downstream ports [ 621.967559][ T43] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 621.997739][ T43] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 622.060804][ T43] usb 6-1: USB disconnect, device number 11 [ 622.525120][ T3019] loop2: detected capacity change from 0 to 64 [ 622.554023][ T3019] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 622.697529][ T3034] loop5: detected capacity change from 0 to 128 [ 622.739450][ T3034] EXT4-fs (loop5): Test dummy encryption mode enabled [ 622.787523][ T3034] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.840431][ T3034] ext4 filesystem being mounted at /684/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 622.889705][ T43] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 622.917049][ T3034] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 622.932690][ T3034] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm syz.5.8617: bg 0: bad block bitmap checksum [ 623.062042][ T3056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8622'. [ 623.078056][ T3056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8622'. [ 623.094305][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 623.101236][T20271] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 623.129480][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.158502][ T3058] loop1: detected capacity change from 0 to 512 [ 623.169049][ T43] usb 1-1: Product: syz [ 623.174477][ T43] usb 1-1: Manufacturer: syz [ 623.181427][ T43] usb 1-1: SerialNumber: syz [ 623.186608][ T3058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 623.207828][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 623.232640][ T1814] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 623.256758][ T3066] loop2: detected capacity change from 0 to 64 [ 623.268327][ T3069] loop3: detected capacity change from 0 to 64 [ 623.272810][ T3058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.289215][ T3058] ext4 filesystem being mounted at /1750/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.411476][ T3081] xt_hashlimit: max too large, truncated to 1048576 [ 623.453321][ C1] usb 1-1: ath9k_htc: invalid pkt_len (fe98) [ 623.472772][ T3058] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.8623: Abort forced by user [ 623.582869][ T3058] EXT4-fs (loop1): Remounting filesystem read-only [ 623.616833][ T3058] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 623.822333][ T43] usb 1-1: USB disconnect, device number 43 [ 623.825366][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.055487][ T3114] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 624.299429][ T1814] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 624.335704][ T1814] ath9k_htc: Failed to initialize the device [ 624.343096][ T3160] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 624.360300][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 624.386090][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.395968][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.549503][ T5834] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 624.725223][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 624.738771][ T5834] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.774771][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 624.818305][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 624.842760][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 624.878466][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 624.904022][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 624.931749][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.985013][ T5834] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 624.999922][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.007943][ T5834] usb 3-1: Product: syz [ 625.036827][ T5834] usb 3-1: Manufacturer: syz [ 625.046934][ T5834] usb 3-1: SerialNumber: syz [ 625.067553][ T5834] usb 3-1: config 0 descriptor?? [ 625.078371][ T3161] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 625.104059][ T5834] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 625.135855][ T5834] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 625.296607][ T3193] loop1: detected capacity change from 0 to 32768 [ 625.323443][ T3224] netlink: 'syz.0.8657': attribute type 7 has an invalid length. [ 625.363008][ T3224] : entered promiscuous mode [ 625.364482][ T43] usb 3-1: USB disconnect, device number 37 [ 625.411469][ T3193] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 625.483906][ T3247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8661'. [ 625.493096][ T3247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8661'. [ 625.502718][ T3247] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8661'. [ 625.736133][ T5832] ocfs2: Unmounting device (7,1) on (node local) [ 626.006395][ T3271] netlink: 'syz.1.8669': attribute type 12 has an invalid length. [ 626.259524][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 626.411813][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 626.434766][ T43] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 626.454593][ T43] usb 4-1: config 1 has no interface number 1 [ 626.467787][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 626.528640][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 626.550393][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.559066][ T43] usb 4-1: Product: syz [ 626.591695][ T43] usb 4-1: Manufacturer: syz [ 626.616245][ T43] usb 4-1: SerialNumber: syz [ 626.875468][ T43] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 626.901663][ T43] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 626.950591][ T43] usb 4-1: failed to enable PITCH for EP 0x82 [ 627.012084][ T3351] loop5: detected capacity change from 0 to 256 [ 627.045194][ T43] usb 4-1: USB disconnect, device number 44 [ 627.137654][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.204586][ T3351] FAT-fs (loop5): Directory bread(block 64) failed [ 627.214116][ T3351] FAT-fs (loop5): Directory bread(block 65) failed [ 627.247961][ T3351] FAT-fs (loop5): Directory bread(block 66) failed [ 627.273852][ T3351] FAT-fs (loop5): Directory bread(block 67) failed [ 627.299672][ T3351] FAT-fs (loop5): Directory bread(block 68) failed [ 627.314104][ T3351] FAT-fs (loop5): Directory bread(block 69) failed [ 627.335545][ T3351] FAT-fs (loop5): Directory bread(block 70) failed [ 627.350938][ T3351] FAT-fs (loop5): Directory bread(block 71) failed [ 627.357722][ T3351] FAT-fs (loop5): Directory bread(block 72) failed [ 627.373609][ T3351] FAT-fs (loop5): Directory bread(block 73) failed [ 627.830982][ T3343] loop2: detected capacity change from 0 to 32768 [ 627.895742][ T3414] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 627.913630][ T3414] cramfs: wrong magic [ 627.934860][ T3420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 628.008636][ T3428] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 628.153563][ T3343] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 628.153589][ T3343] allowing incompatible features above 0.0: (unknown version) [ 628.153601][ T3343] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 628.344058][ T3343] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 628.383053][ T3343] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 628.400269][ T3343] bcachefs (loop2): Version upgrade required: [ 628.400269][ T3343] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 628.400269][ T3343] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 628.400269][ T3343] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 628.496585][ T3343] bcachefs (loop2): dropping and reconstructing all alloc info [ 628.521671][ T3450] netlink: 248 bytes leftover after parsing attributes in process `syz.0.8715'. [ 628.550591][ T3343] bcachefs (loop2): accounting_read... done [ 628.558861][ T3343] bcachefs (loop2): alloc_read... done [ 628.570076][ T3343] bcachefs (loop2): snapshots_read... done [ 628.576679][ T3343] bcachefs (loop2): done starting filesystem [ 628.804914][ T5843] bcachefs (loop2): shutting down [ 628.929188][ T5843] bcachefs (loop2): shutdown complete [ 629.326394][ T3441] loop5: detected capacity change from 0 to 32768 [ 629.337488][ T3446] loop3: detected capacity change from 0 to 40427 [ 629.365372][ T3446] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (32769, 24) [ 629.379387][ T3446] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 629.409445][ T3446] F2FS-fs (loop3): Image doesn't support compression [ 629.417977][ T3446] F2FS-fs (loop3): build fault injection rate: 690 [ 629.428437][ T3446] F2FS-fs (loop3): heap/no_heap options were deprecated [ 629.457746][ T3446] F2FS-fs (loop3): build fault injection type: 0x7 [ 629.544402][ T3446] F2FS-fs (loop3): invalid crc value [ 629.574857][ T3495] cgroup: Invalid name [ 629.818795][ T3509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 629.858554][ T3446] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 629.870171][ T3446] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 630.016769][ T3441] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc [ 630.016797][ T3441] allowing incompatible features above 0.0: (unknown version) [ 630.016809][ T3441] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 630.047719][ T3516] loop1: detected capacity change from 0 to 2048 [ 630.126292][ T3523] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 630.137883][ T3516] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 630.156143][ T3516] Remounting filesystem read-only [ 630.459842][ T3441] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 630.502307][ T3441] bcachefs (loop5): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad nr_required in entry journal: 4/1 [0], fixing [ 630.577147][ T3441] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 630.657133][ T3441] bcachefs (loop5): Version upgrade required: [ 630.657133][ T3441] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 630.657133][ T3441] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 630.657133][ T3441] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 630.852897][ T3441] bcachefs (loop5): dropping and reconstructing all alloc info [ 630.934482][ T3562] loop1: detected capacity change from 0 to 16 [ 630.973543][ T3441] bcachefs (loop5): accounting_read... [ 630.973663][ T3562] erofs (device loop1): mounted with root inode @ nid 36. [ 631.010992][ T3441] done [ 631.023101][ T3441] bcachefs (loop5): alloc_read... done [ 631.045824][ T3441] bcachefs (loop5): snapshots_read... done [ 631.069893][ T3441] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 631.079559][ T3560] lo speed is unknown, defaulting to 1000 [ 631.087191][ T3560] wlan0 speed is unknown, defaulting to 1000 [ 631.113156][ T3441] bcachefs (loop5): done starting filesystem [ 631.201270][ T3560] vxcan1 speed is unknown, defaulting to 1000 [ 631.372050][T20271] bcachefs (loop5): shutting down [ 631.553416][T20271] bcachefs (loop5): shutdown complete [ 631.909425][ T3618] netlink: 'syz.2.8754': attribute type 46 has an invalid length. [ 631.999551][ T3625] netlink: zone id is out of range [ 632.039444][ T3625] netlink: zone id is out of range [ 632.044588][ T3625] netlink: zone id is out of range [ 632.066743][ T3625] netlink: zone id is out of range [ 632.078582][ T3628] netlink: 'syz.2.8758': attribute type 1 has an invalid length. [ 632.083028][ T3625] netlink: zone id is out of range [ 632.112572][ T3625] netlink: zone id is out of range [ 632.134110][ T3625] netlink: zone id is out of range [ 632.166857][ T3625] netlink: zone id is out of range [ 632.274103][ T3640] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8759'. [ 632.515625][ T3666] loop2: detected capacity change from 0 to 256 [ 632.779029][ T3676] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 633.548884][ T3711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8780'. [ 633.663667][ T3675] loop1: detected capacity change from 0 to 32768 [ 633.753634][ T3713] loop2: detected capacity change from 0 to 4096 [ 633.777944][ T3713] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 633.875612][ T3713] ntfs3(loop2): ino=19, mi_enum_attr [ 633.881059][ T3713] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 634.157538][ T3675] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 634.157563][ T3675] allowing incompatible features above 0.0: (unknown version) [ 634.157575][ T3675] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 634.338167][ T3675] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 634.376539][ T3675] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=usage in superblock: invalid journal entry usage: bad size, fixing [ 634.429414][ T3675] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 634.438113][ T3675] bcachefs (loop1): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 634.438113][ T3675] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 634.438113][ T3675] running recovery passes: check_extents_to_backpointers,check_inodes [ 634.513697][ T3675] bcachefs (loop1): dropping and reconstructing all alloc info [ 634.604121][ T3675] bcachefs (loop1): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 634.674482][ T3675] bcachefs (loop1): btree node read error at btree xattrs level 0/0 [ 634.674557][ T3675] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 634.674572][ T3675] loop1 node offset 0/16: got wrong btree node: got [ 634.674583][ T3675] btree=xattrs level=0 seq ded0abe32 1 [ 634.674592][ T3675] min: POS_MIN [ 634.674601][ T3675] max: SPOS_MAX [ 634.674610][ T3675] flagging btree xattrs lost data [ 634.674620][ T3675] ret btree_node_read_validate_error [ 634.821939][ T917] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 634.823921][ T3675] bcachefs (loop1): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 634.827877][ T3781] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 634.860880][ T3675] bcachefs (loop1): check_topology... [ 634.874089][ T3675] bcachefs (loop1): btree root dirents unreadable, must recover from scan [ 634.912502][ T3675] bcachefs (loop1): no nodes found for btree dirents, continuing [ 634.939972][ T3675] bcachefs (loop1): btree root xattrs unreadable, must recover from scan [ 634.968935][ T3675] bcachefs (loop1): no nodes found for btree xattrs, continuing [ 635.009063][ T3675] done [ 635.030471][ T3675] bcachefs (loop1): accounting_read... [ 635.044673][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 635.082667][ T917] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 635.092684][ T3675] done [ 635.095468][ T3675] bcachefs (loop1): alloc_read... done [ 635.102247][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 635.102262][ T30] audit: type=1326 audit(2134218045.780:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 635.130853][ T917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.134161][ T3675] bcachefs (loop1): snapshots_read... [ 635.149419][ T917] usb 1-1: config 0 has no interface number 0 [ 635.157887][ T3675] done [ 635.169582][ T30] audit: type=1326 audit(2134218045.780:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 635.186716][ T3675] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 635.193656][ T3789] loop2: detected capacity change from 0 to 256 [ 635.238737][ T917] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 635.247975][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.266413][ T3675] bcachefs (loop1): done starting filesystem [ 635.269289][ T917] usb 1-1: Product: syz [ 635.282989][ T30] audit: type=1326 audit(2134218045.800:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 635.308018][ T917] usb 1-1: Manufacturer: syz [ 635.328058][ T917] usb 1-1: SerialNumber: syz [ 635.363048][ T917] usb 1-1: config 0 descriptor?? [ 635.381362][ T917] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 635.387739][ T917] usb 1-1: No valid video chain found. [ 635.393329][ T30] audit: type=1326 audit(2134218045.800:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 635.446960][ T30] audit: type=1326 audit(2134218045.800:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3786 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 635.653298][ T5832] bcachefs (loop1): shutting down [ 635.707318][ T3777] loop5: detected capacity change from 0 to 32768 [ 635.744102][ T3810] loop3: detected capacity change from 0 to 512 [ 635.762042][ T5832] bcachefs (loop1): shutdown complete [ 635.773133][ T1814] usb 1-1: USB disconnect, device number 44 [ 635.885073][ T3777] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 635.944267][ T3810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.957233][ T3810] ext4 filesystem being mounted at /1776/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.025961][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.083544][ T3777] XFS (loop5): Ending clean mount [ 636.128157][ T3777] XFS (loop5): Quotacheck needed: Please wait. [ 636.128434][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8808'. [ 636.250754][ T3777] XFS (loop5): Quotacheck: Done. [ 636.388907][T20271] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 636.599891][ T917] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 636.639521][ T5834] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 636.795726][ T3877] libceph: resolve '+ælc' (ret=-3): failed [ 636.818644][ T5834] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 636.830707][ T917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 636.831355][ T3867] loop2: detected capacity change from 0 to 32768 [ 636.851893][ T5834] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.883374][ T5834] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 636.893838][ T5834] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 636.904890][ T917] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 636.914382][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.922527][ T5834] usb 1-1: Product: syz [ 636.927077][ T917] usb 4-1: Product: syz [ 636.937613][ T5834] usb 1-1: Manufacturer: syz [ 636.947374][ T917] usb 4-1: Manufacturer: syz [ 636.968375][ T917] usb 4-1: SerialNumber: syz [ 636.974789][ T5834] hub 1-1:4.0: USB hub found [ 637.009009][ T917] usb 4-1: config 0 descriptor?? [ 637.031503][ T917] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 637.060714][ T3887] loop5: detected capacity change from 0 to 256 [ 637.067604][ T917] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 637.081779][ T917] usb-storage 4-1:0.0: USB Mass Storage device detected [ 637.101210][ T917] usb-storage 4-1:0.0: device ignored [ 637.118680][ T3887] MINIX-fs: mounting file system with errors, running fsck is recommended [ 637.148967][ T3887] Trying to free block not in datazone [ 637.155723][ T3887] Trying to free block not in datazone [ 637.197290][ T5834] hub 1-1:4.0: 8 ports detected [ 637.211980][ T5834] hub 1-1:4.0: insufficient power available to use all downstream ports [ 637.267046][ T917] usb 4-1: USB disconnect, device number 45 [ 637.394401][ T3867] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=accounting_read,nojournal_transaction_names,read_only,version_upgrade=incompatible [ 637.394426][ T3867] allowing incompatible features above 0.0: (unknown version) [ 637.394438][ T3867] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 637.421418][ T5834] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 637.421474][ T5834] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 637.474347][ T5834] usb 1-1: USB disconnect, device number 45 [ 637.515305][ T3867] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 637.524041][ T3867] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 637.540895][ T3867] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 637.540895][ T3867] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 637.599463][ T3867] bcachefs (loop2): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version) [ 637.599463][ T3867] [ 637.687427][ T3867] bcachefs (loop2): accounting_read... done [ 637.704492][ T3867] bcachefs (loop2): done starting filesystem [ 637.919929][ T5843] bcachefs (loop2): shutting down [ 638.030211][ T5843] bcachefs (loop2): shutdown complete [ 638.379590][ T1814] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 638.437161][ T3926] loop5: detected capacity change from 0 to 32768 [ 638.549644][ T1814] usb 4-1: Using ep0 maxpacket: 16 [ 638.560741][ T3926] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 638.590653][ T1814] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 638.608752][ T1814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.632520][T20271] ocfs2: Unmounting device (7,5) on (node local) [ 638.687597][ T1814] usb 4-1: Product: syz [ 638.700977][ T1814] usb 4-1: Manufacturer: syz [ 638.705597][ T1814] usb 4-1: SerialNumber: syz [ 638.943079][ T3980] netlink: 'syz.0.8835': attribute type 21 has an invalid length. [ 638.968052][ T1814] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 638.995970][ T30] audit: type=1326 audit(2134218049.680:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 639.029581][ T1814] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 639.057365][ T1814] usb 4-1: USB disconnect, device number 46 [ 639.086082][ T30] audit: type=1326 audit(2134218049.680:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 639.121495][ T30] audit: type=1326 audit(2134218049.690:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 639.139072][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.158520][ T30] audit: type=1326 audit(2134218049.690:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 639.192347][ T30] audit: type=1326 audit(2134218049.690:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3987 comm="syz.5.8831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 639.524898][ T4019] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8844'. [ 639.949530][ T4041] loop1: detected capacity change from 0 to 4096 [ 639.974712][ T4041] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 640.067666][ T4041] ntfs3(loop1): ino=19, mi_enum_attr [ 640.103144][ T4041] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 640.129368][ T4057] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8856'. [ 640.161726][ T4041] ntfs3(loop1): failed to convert "c46c" to iso8859-15 [ 640.186986][ T4041] ntfs3(loop1): ino=20, mi_enum_attr [ 640.263874][ T4064] loop2: detected capacity change from 0 to 64 [ 640.336562][ T30] audit: type=1326 audit(2134218051.020:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 640.439557][ T30] audit: type=1326 audit(2134218051.050:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 640.501562][ T4079] netlink: 'syz.1.8861': attribute type 10 has an invalid length. [ 640.528753][ T30] audit: type=1326 audit(2134218051.070:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 640.657680][ T30] audit: type=1326 audit(2134218051.070:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 640.685556][ T4085] loop5: detected capacity change from 0 to 1764 [ 640.714319][ T4079] @ÿ: left promiscuous mode [ 640.753475][ T4079] @ÿ: entered promiscuous mode [ 640.794039][ T30] audit: type=1326 audit(2134218051.070:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4070 comm="syz.5.8860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85c18e929 code=0x7ffc0000 [ 640.821551][ T4079] team0: Device 1@ÿ failed to register rx_handler [ 641.354975][ T4131] loop5: detected capacity change from 0 to 8 [ 641.394427][ T4131] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 641.468725][ T4138] netlink: 'syz.0.8880': attribute type 1 has an invalid length. [ 641.529302][ T4138] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8880'. [ 641.949564][ T4174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8892'. [ 642.064951][ T4184] loop5: detected capacity change from 0 to 512 [ 642.147306][ T4184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.227422][ T4195] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 642.229478][ T4196] loop1: detected capacity change from 0 to 128 [ 642.254376][ T4197] net_ratelimit: 21 callbacks suppressed [ 642.254397][ T4197] bridge0: mtu less than device minimum [ 642.295951][ T4184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.305000][ T4204] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8901'. [ 642.323679][ T4204] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 642.385881][ T4184] ext4 filesystem being mounted at /733/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.457614][ T4184] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.8896: corrupted xattr block 19: overlapping e_value [ 642.546414][ T4184] EXT4-fs error (device loop5): ext4_get_inode_usage:884: inode #15: comm syz.5.8896: corrupted xattr block 19: overlapping e_value [ 642.698467][ T4222] loop1: detected capacity change from 0 to 4096 [ 642.721134][T20271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.733279][ T4222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 642.764345][ T4222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.775228][ T4222] EXT4-fs (loop1): Test dummy encryption mode enabled [ 642.787263][ T5919] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 642.852110][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.930712][ T4222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 642.937509][ T4222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.969768][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 643.010298][ T4222] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 643.013827][ T5919] usb 1-1: config index 0 descriptor too short (expected 4096, got 18) [ 643.044845][ T5919] usb 1-1: config 0 has too many interfaces: 72, using maximum allowed: 32 [ 643.047092][ T4246] loop2: detected capacity change from 0 to 256 [ 643.063978][ T5919] usb 1-1: config 0 has an invalid interface descriptor of length 4, skipping [ 643.086584][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.123521][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 72 [ 643.166500][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.167966][ T5919] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 643.261046][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.261824][ T4246] FAT-fs (loop2): Directory bread(block 64) failed [ 643.304577][ T4246] FAT-fs (loop2): Directory bread(block 65) failed [ 643.331983][ T5919] usb 1-1: config 0 descriptor?? [ 643.361196][ T4246] FAT-fs (loop2): Directory bread(block 66) failed [ 643.367761][ T4246] FAT-fs (loop2): Directory bread(block 67) failed [ 643.387925][ T4263] netlink: 'syz.3.8917': attribute type 21 has an invalid length. [ 643.395434][ T4246] FAT-fs (loop2): Directory bread(block 68) failed [ 643.402810][ T4246] FAT-fs (loop2): Directory bread(block 69) failed [ 643.418952][ T4246] FAT-fs (loop2): Directory bread(block 70) failed [ 643.425846][ T4246] FAT-fs (loop2): Directory bread(block 71) failed [ 643.428364][ T4263] IPv6: NLM_F_CREATE should be specified when creating new route [ 643.439975][ T4246] FAT-fs (loop2): Directory bread(block 72) failed [ 643.446993][ T4246] FAT-fs (loop2): Directory bread(block 73) failed [ 643.473528][ T4263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.480962][ T4263] IPv6: NLM_F_CREATE should be set when creating new route [ 643.488365][ T4263] IPv6: NLM_F_CREATE should be set when creating new route [ 643.495611][ T4263] IPv6: NLM_F_CREATE should be set when creating new route [ 643.577403][ T5919] usb 1-1: string descriptor 0 read error: -71 [ 643.582519][ T5919] usb 1-1: USB disconnect, device number 46 [ 643.609060][ T4246] FAT-fs (loop2): Filesystem has been set read-only [ 643.622282][ T4246] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006c61) [ 643.626099][ T30] audit: type=1800 audit(2134218054.310:352): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8912" name="cpu.stat" dev="loop2" ino=1048685 res=0 errno=0 [ 643.862623][ T4290] unsupported nlmsg_type 40 [ 643.987056][ T4298] loop2: detected capacity change from 0 to 64 [ 644.479729][ T4332] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 644.724501][ T4341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.752587][ T4346] IPv6: Can't replace route, no match found [ 644.962945][ T4357] loop1: detected capacity change from 0 to 256 [ 644.997689][ T4357] FAT-fs (loop1): Directory bread(block 1285) failed [ 645.000482][ T4300] loop3: detected capacity change from 0 to 32768 [ 645.049465][ T4300] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8925 (4300) [ 645.082768][ T4357] FAT-fs (loop1): Directory bread(block 1285) failed [ 645.125829][ T4357] FAT-fs (loop1): Directory bread(block 1285) failed [ 645.168499][ T4300] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 645.174501][ T4357] FAT-fs (loop1): Directory bread(block 1285) failed [ 645.189775][ T4371] netlink: 'syz.2.8946': attribute type 11 has an invalid length. [ 645.219424][ T4300] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 645.224562][ T4371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8946'. [ 645.266990][ T4300] BTRFS info (device loop3): using free-space-tree [ 645.497475][ T4300] BTRFS info (device loop3): rebuilding free space tree [ 645.628777][ T4405] [U]  [ 645.754855][ T5836] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 645.986825][ T4430] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8960'. [ 646.634933][ T4467] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 646.915924][ T4485] netlink: 'syz.5.8975': attribute type 13 has an invalid length. [ 647.530014][ T4526] netlink: 'syz.3.8990': attribute type 32 has an invalid length. [ 647.650477][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8993'. [ 648.214494][ T4513] loop5: detected capacity change from 0 to 32768 [ 648.302838][ T4555] loop3: detected capacity change from 0 to 512 [ 648.400488][ T4555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.549705][ T4555] ext4 filesystem being mounted at /1813/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.587261][ T4513] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=/dev/loop5,noinodes_use_key_cache,fsck,fix_errors=yes,norecovery,nojournal_transaction_names [ 648.587288][ T4513] allowing incompatible features above 0.0: (unknown version) [ 648.587299][ T4513] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 648.655205][ T4531] loop1: detected capacity change from 0 to 32768 [ 648.724722][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.753900][ T4531] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 648.806429][ T4581] netlink: 'syz.0.9002': attribute type 13 has an invalid length. [ 648.854495][ T4553] loop2: detected capacity change from 0 to 32768 [ 648.890630][ T4587] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9001'. [ 648.890804][ T4587] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave [ 648.890823][ T4587] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0) [ 648.937665][ T30] audit: type=1800 audit(2134218059.610:353): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8999" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 648.955386][ T4531] XFS (loop1): Ending clean mount [ 649.007167][ T4531] XFS (loop1): Quotacheck needed: Please wait. [ 649.094580][ T4531] XFS (loop1): Quotacheck: Done. [ 649.193992][ T4597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.214992][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 649.296945][ T4513] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 649.305639][ T4513] bcachefs (loop5): recovering from clean shutdown, journal seq 13 [ 649.333955][ T4513] bcachefs (loop5): Version upgrade required: [ 649.333955][ T4513] Version upgrade from 0.32: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 649.333955][ T4513] Doing incompatible version upgrade from 0.32: (unknown version) to 1.28: inode_has_case_insensitive [ 649.333955][ T4513] running recovery passes: check_allocations,check_extents_to_backpointers,check_snapshots,check_subvols,check_inodes,check_dirents,set_fs_needs_rebalance [ 649.381738][ T4604] loop2: detected capacity change from 0 to 64 [ 649.516125][ T4604] hfs: request for non-existent node 56 in B*Tree [ 649.542628][ T4604] hfs: request for non-existent node 56 in B*Tree [ 649.543938][ T4513] bcachefs (loop5): accounting_read... [ 649.578206][ T4604] hfs: request for non-existent node 57 in B*Tree [ 649.600047][ T4513] done [ 649.602851][ T4513] bcachefs (loop5): alloc_read... done [ 649.609415][ T4604] hfs: request for non-existent node 57 in B*Tree [ 649.629161][ T4513] bcachefs (loop5): snapshots_read... done [ 649.650414][ T4513] bcachefs (loop5): done starting filesystem [ 650.024529][ T4632] geneve3: entered promiscuous mode [ 650.069472][ T4632] geneve3: entered allmulticast mode [ 650.077789][T20271] bcachefs (loop5): shutting down [ 650.225799][T20271] bcachefs (loop5): shutdown complete [ 650.535221][ T4657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9022'. [ 650.552040][ T30] audit: type=1326 audit(2134218061.230:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.1.9023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 650.595948][ T30] audit: type=1326 audit(2134218061.240:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.1.9023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 650.619847][ T30] audit: type=1326 audit(2134218061.260:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.1.9023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 650.739392][ T30] audit: type=1326 audit(2134218061.260:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.1.9023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 650.787133][ T4667] loop1: detected capacity change from 0 to 1764 [ 650.827134][ T4667] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 650.830134][ T30] audit: type=1326 audit(2134218061.260:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.1.9023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0458e929 code=0x7ffc0000 [ 651.249358][ T5919] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 651.307300][ T4703] Invalid source name [ 651.314483][ T4703] UBIFS error (pid: 4703): cannot open "./file0", error -22 [ 651.453708][ T5919] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 651.505447][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.527463][ T5919] usb 2-1: config 0 descriptor?? [ 651.727321][ T4731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.957480][ T5919] ath6kl: Failed to submit usb control message: -71 [ 651.984823][ T5919] ath6kl: unable to send the bmi data to the device: -71 [ 652.007266][ T5919] ath6kl: Unable to send get target info: -71 [ 652.024696][ T5919] ath6kl: Failed to init ath6kl core: -71 [ 652.041016][ T5919] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 652.078279][ T5919] usb 2-1: USB disconnect, device number 40 [ 652.144011][ T30] audit: type=1400 audit(2134218062.820:359): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 8 bytes leftover after parsing attributes in process `syz.0.9072'. [ 653.418130][ T4827] lo speed is unknown, defaulting to 1000 [ 653.449930][ T4844] netlink: 'syz.5.9075': attribute type 8 has an invalid length. [ 653.496375][ T4827] wlan0 speed is unknown, defaulting to 1000 [ 653.505905][ T4827] vxcan1 speed is unknown, defaulting to 1000 [ 653.526036][ T4849] loop3: detected capacity change from 0 to 128 [ 654.189625][ T4887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9084'. [ 654.256707][ T4893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9087'. [ 654.281839][ T4895] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9086'. [ 654.323018][ T4895] netlink: 'syz.2.9086': attribute type 2 has an invalid length. [ 654.358173][ T4900] loop5: detected capacity change from 0 to 512 [ 654.395127][ T4900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 654.464279][ T4900] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 654.507092][ T4900] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 654.557650][ T4900] EXT4-fs (loop5): orphan cleanup on readonly fs [ 654.594003][ T4900] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 654.632090][ T4900] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 654.689445][ T4916] usb usb1: usbfs: process 4916 (syz.0.9091) did not claim interface 0 before use [ 654.728067][ T4900] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 654.772031][ T4900] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9088: bg 0: block 40: padding at end of block bitmap is not set [ 654.879372][ T4900] EXT4-fs (loop5): Remounting filesystem read-only [ 654.931637][ T4900] EXT4-fs (loop5): 1 truncate cleaned up [ 655.069811][ T4900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.255041][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9098'. [ 655.397808][T20271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.607054][ T4982] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.9102' sets config #1 [ 655.867720][ T4995] loop2: detected capacity change from 0 to 256 [ 655.922839][ T4995] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 655.974506][ T4995] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 656.039733][ T5000] loop3: detected capacity change from 0 to 2048 [ 656.074396][ T5000] udf: Bad value for 'mode' [ 656.139529][ T5007] netlink: 'syz.0.9113': attribute type 46 has an invalid length. [ 656.405374][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9118'. [ 656.909521][ T30] audit: type=1326 audit(2134218067.590:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5063 comm="syz.3.9129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 657.003148][ T30] audit: type=1326 audit(2134218067.590:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5063 comm="syz.3.9129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 657.089992][ T30] audit: type=1326 audit(2134218067.590:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5063 comm="syz.3.9129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 657.152808][ T30] audit: type=1326 audit(2134218067.590:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5063 comm="syz.3.9129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 657.211165][ T5079] futex_wake_op: syz.5.9135 tries to shift op by -1; fix this program [ 657.264267][ T30] audit: type=1326 audit(2134218067.590:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5063 comm="syz.3.9129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc1938e929 code=0x7ffc0000 [ 657.294558][ T5086] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 657.451164][ T5034] loop1: detected capacity change from 0 to 32768 [ 657.487339][ T5034] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9120 (5034) [ 657.505834][ T5099] netlink: 'syz.5.9141': attribute type 2 has an invalid length. [ 657.529050][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9141'. [ 657.576767][ T5034] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 657.620574][ T5034] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 657.634433][ T5099] : entered promiscuous mode [ 657.661994][ T5034] BTRFS info (device loop1): disk space caching is enabled [ 657.708610][ T5034] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 658.030421][ T5034] BTRFS info (device loop1): rebuilding free space tree [ 658.101738][ T5034] BTRFS info (device loop1): disabling free space tree [ 658.128209][ T5034] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 658.146387][ T5034] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 658.448061][ T5832] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 658.479444][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 658.597038][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9162'. [ 658.659480][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 658.709840][ T5919] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 658.718909][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.719813][ T1814] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 658.779702][ T5919] usb 6-1: Product: syz [ 658.783906][ T5919] usb 6-1: Manufacturer: syz [ 658.788507][ T5919] usb 6-1: SerialNumber: syz [ 658.889054][ T5919] usb 6-1: config 0 descriptor?? [ 658.922954][ T5919] gspca_main: se401-2.14.0 probing 047d:5003 [ 658.947766][ T1814] usb 1-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 658.964282][ T1814] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 659.007391][ T1814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 56265, setting to 1024 [ 659.035826][ T1814] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 659.097819][ T1814] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 659.128402][ T1814] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 659.158088][ T1814] usb 1-1: Product: syz [ 659.178350][ T1814] usb 1-1: Manufacturer: syz [ 659.188501][ T1814] usb 1-1: SerialNumber: syz [ 659.208404][ T1814] usb 1-1: config 0 descriptor?? [ 659.232704][ T5178] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 659.282564][ T1814] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.338573][ T5919] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 659.359902][ T5919] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 659.400907][ T5919] usb 6-1: USB disconnect, device number 12 [ 659.425475][ T5236] netlink: 'syz.3.9173': attribute type 1 has an invalid length. [ 659.460962][ T5236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.557556][ T1814] usb 1-1: USB disconnect, device number 47 [ 659.814923][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.915954][ T5287] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 660.118433][ T5299] netlink: 'syz.1.9185': attribute type 1 has an invalid length. [ 660.690106][ T5331] loop1: detected capacity change from 0 to 4096 [ 660.762691][ T5371] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 660.838484][ T5331] syz.1.9195: attempt to access beyond end of device [ 660.838484][ T5331] loop1: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 660.861737][ T5336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 660.902367][ T5331] syz.1.9195: attempt to access beyond end of device [ 660.902367][ T5331] loop1: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 661.010784][ T30] audit: type=1800 audit(2134218071.690:365): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9195" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 661.030435][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.137400][ T5395] syz.3.9208: attempt to access beyond end of device [ 661.137400][ T5395] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 661.188485][ T5395] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 661.318685][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9211'. [ 661.809625][ T5439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9222'. [ 661.975710][ T5454] netlink: 6 bytes leftover after parsing attributes in process `syz.0.9228'. [ 662.106998][ T5460] loop2: detected capacity change from 0 to 4096 [ 662.148631][ T5466] netlink: 'syz.1.9232': attribute type 4 has an invalid length. [ 662.183077][ T5469] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 662.184104][ T5466] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9232'. [ 662.266470][ T5460] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 662.281449][ T5460] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 662.295088][ T5460] Remounting filesystem read-only [ 662.303997][ T5460] NILFS (loop2): error -5 truncating bmap (ino=12) [ 662.308531][ T5466] : renamed from bond0 (while UP) [ 662.387696][ T5843] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 662.547217][ T5476] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 662.906098][ T5507] loop2: detected capacity change from 0 to 512 [ 662.941535][ T5507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.970250][ T5507] ext4 filesystem being mounted at /1769/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.021325][ T5507] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 663.050879][ T5517] netlink: 'syz.5.9243': attribute type 1 has an invalid length. [ 663.076262][ T5507] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 64512 [ 663.086677][ T5517] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9243'. [ 663.099830][ T5507] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.9241: Failed to acquire dquot type 0 [ 663.119624][ T5919] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 663.184080][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.286327][ T5919] usb 2-1: too many configurations: 96, using maximum allowed: 8 [ 663.317124][ T5919] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 663.335268][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.347983][ T5530] loop2: detected capacity change from 0 to 256 [ 663.357403][ T5919] usb 2-1: Product: syz [ 663.367194][ T5531] loop5: detected capacity change from 0 to 736 [ 663.369272][ T5919] usb 2-1: Manufacturer: syz [ 663.385390][ T5530] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 663.410402][ T5919] usb 2-1: SerialNumber: syz [ 663.485988][ T5919] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 663.514762][ T5834] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 663.846954][ T5919] usb 2-1: USB disconnect, device number 41 [ 664.015866][ T5571] loop3: detected capacity change from 0 to 64 [ 664.060584][ T5571] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 664.338981][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9261'. [ 664.576984][ T5617] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9268'. [ 664.595393][ T5618] loop3: detected capacity change from 0 to 1024 [ 664.633636][ T5834] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 664.638133][ T5623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.669991][ T5834] ath9k_htc: Failed to initialize the device [ 664.681155][ T5919] usb 2-1: ath9k_htc: USB layer deinitialized [ 664.715963][ T5618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.813639][ T5618] overlayfs: missing 'lowerdir' [ 664.953891][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.141280][ T5666] netlink: 'syz.1.9281': attribute type 3 has an invalid length. [ 665.168674][ T5666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9281'. [ 665.189445][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9280'. [ 665.198415][ T5669] bridge_slave_1: left allmulticast mode [ 665.290030][ T5669] bridge_slave_1: left promiscuous mode [ 665.314004][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.391629][ T5669] bridge_slave_0: left allmulticast mode [ 665.397331][ T5669] bridge_slave_0: left promiscuous mode [ 665.440953][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.653103][ T5696] loop2: detected capacity change from 0 to 1024 [ 665.882531][ T13] hfsplus: b-tree write err: -5, ino 4 [ 666.105198][ T5734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9299'. [ 666.276688][ T5771] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 666.664809][ T5802] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 666.719110][ T5802] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 666.774740][ T5802] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 666.840975][ T5813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9316'. [ 667.102788][ T5846] set match dimension is over the limit! [ 667.269440][ T5851] loop5: detected capacity change from 0 to 4096 [ 667.290560][ T5851] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 667.953900][ T5953] loop1: detected capacity change from 0 to 64 [ 668.219924][ T43] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 668.256351][ T5978] openvswitch: netlink: IP tunnel dst address not specified [ 668.412041][ T43] usb 6-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 668.456716][ T5989] autofs4:pid:5989:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 668.457623][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.500369][ T43] usb 6-1: Product: syz [ 668.504569][ T43] usb 6-1: Manufacturer: syz [ 668.509815][ T5989] autofs4:pid:5989:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 668.559350][ T43] usb 6-1: SerialNumber: syz [ 668.581255][ T43] usb 6-1: config 0 descriptor?? [ 668.594442][ T5996] loop1: detected capacity change from 0 to 512 [ 668.612131][ T43] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 668.650557][ T5996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 668.739412][ T5996] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 668.778086][ T6008] netlink: 'syz.2.9353': attribute type 10 has an invalid length. [ 668.788848][ T6008] team0: Device bond0 is already an upper device of the team interface [ 668.789339][ T5996] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 668.847487][ T43] pwc: Failed to set LED on/off time (-71) [ 668.884764][ T43] pwc: send_video_command error -71 [ 668.917010][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 668.934386][ T5996] EXT4-fs (loop1): orphan cleanup on readonly fs [ 668.959367][ T43] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 668.968897][ T5996] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 669.007862][ T43] usb 6-1: USB disconnect, device number 13 [ 669.017744][ T5996] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 669.069602][ T5996] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 669.090943][ T5996] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9351: bg 0: block 40: padding at end of block bitmap is not set [ 669.169318][ T5996] EXT4-fs (loop1): Remounting filesystem read-only [ 669.199798][ T5996] EXT4-fs (loop1): 1 truncate cleaned up [ 669.208091][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 669.289032][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.677924][ T6044] loop2: detected capacity change from 0 to 2048 [ 669.685086][ T6000] loop3: detected capacity change from 0 to 32768 [ 669.708312][ T6044] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 669.716339][ T6000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9352 (6000) [ 669.773949][ T6000] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 669.808621][ T6044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 669.838219][ T6000] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 669.915038][ T6044] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 669.939448][ T6000] BTRFS info (device loop3): using free-space-tree [ 670.263248][ T5836] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.620719][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9372'. [ 671.187223][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9382'. [ 671.752420][ T6176] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 671.833515][ T6180] loop2: detected capacity change from 0 to 2048 [ 671.877772][ T6180] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 672.385197][ T6213] xt_TCPMSS: Only works on TCP SYN packets [ 672.547192][ T6220] loop5: detected capacity change from 0 to 128 [ 672.590770][ T6220] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 672.616345][ T6223] loop2: detected capacity change from 0 to 2048 [ 672.666467][ T6223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 672.837708][ T6187] loop1: detected capacity change from 0 to 32768 [ 672.890373][ T6187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9399 (6187) [ 672.896756][ T6232] loop5: detected capacity change from 0 to 2048 [ 672.955555][ T6187] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 672.967034][ T6232] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 673.002577][ T6187] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 673.034869][ T6187] BTRFS info (device loop1): using free-space-tree [ 673.061894][ T6243] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 673.138983][ T5840] udevd[5840]: incorrect nilfs2 checksum on /dev/loop5 [ 673.146607][ T6232] NILFS (loop5): failed to count free inodes: err=-34 [ 673.510212][ T5832] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 673.593723][ T6216] loop3: detected capacity change from 0 to 32768 [ 673.630353][ T6216] (syz.3.9410,6216,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 673.668633][ T6277] netlink: 'syz.2.9420': attribute type 1 has an invalid length. [ 673.674703][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9421'. [ 673.686550][ T6216] (syz.3.9410,6216,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 673.697609][ T6277] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9420'. [ 673.732145][ T6216] JBD2: Ignoring recovery information on journal [ 673.850506][ T6216] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 674.050924][ T6289] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 674.111955][ T6289] overlayfs: conflicting options: userxattr,redirect_dir=on [ 674.367837][ T6298] vlan0: entered allmulticast mode [ 674.391749][ T5836] ocfs2: Unmounting device (7,3) on (node local) [ 674.401625][ T6298] veth0_vlan: entered allmulticast mode [ 675.340268][ T6345] xt_nfacct: accounting object `syz1' does not exists [ 675.408473][ T6301] loop5: detected capacity change from 0 to 32768 [ 675.603106][ T112] ------------[ cut here ]------------ [ 675.609635][ T112] WARNING: fs/jfs/jfs_dmap.c:2867 at dbAdjTree+0x454/0x4e0, CPU#0: jfsCommit/112 [ 675.619061][ T112] Modules linked in: [ 675.623926][ T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) [ 675.635662][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 675.646625][ T112] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 675.652203][ T112] Code: 5a ff ff ff e8 6d ea 81 fe eb 05 e8 66 ea 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 f7 2d 08 cc e8 4d ea 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 675.672916][ T112] RSP: 0018:ffffc9000259f988 EFLAGS: 00010293 [ 675.679062][ T112] RAX: ffffffff833e8123 RBX: ffff88805703a010 RCX: ffff88801ef2da00 [ 675.687565][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 675.696275][ T112] RBP: 0000000000020056 R08: ffffea00015c0e87 R09: 1ffffd40002b81d0 [ 675.704694][ T112] R10: dffffc0000000000 R11: fffff940002b81d1 R12: ffff88805703a018 [ 675.713500][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 675.721969][ T112] FS: 0000000000000000(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000 [ 675.731294][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.737894][ T112] CR2: 00007f05c23de000 CR3: 0000000075d68000 CR4: 00000000003526f0 [ 675.746314][ T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 675.754799][ T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 675.762921][ T112] Call Trace: [ 675.766217][ T112] [ 675.769155][ T112] ? __pfx_lock_metapage+0x10/0x10 [ 675.774437][ T112] dbJoin+0x238/0x300 [ 675.778434][ T112] ? do_read_cache_folio+0x4c6/0x590 [ 675.783811][ T112] dbFreeBits+0x4e1/0xdb0 [ 675.788178][ T112] dbFree+0x336/0x650 [ 675.792281][ T112] txFreeMap+0x7ff/0xde0 [ 675.796564][ T112] txUpdateMap+0x308/0x9c0 [ 675.801053][ T112] jfs_lazycommit+0x43f/0xa90 [ 675.805844][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 675.811242][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 675.817073][ T112] ? __kthread_parkme+0x7b/0x200 [ 675.822151][ T112] ? __kthread_parkme+0x1a1/0x200 [ 675.827202][ T112] kthread+0x711/0x8a0 [ 675.831427][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 675.836680][ T112] ? __pfx_kthread+0x10/0x10 [ 675.841344][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 675.846555][ T112] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.851991][ T112] ? __pfx_kthread+0x10/0x10 [ 675.853505][ T6329] loop3: detected capacity change from 0 to 32768 [ 675.856684][ T112] ret_from_fork+0x3fc/0x770 [ 675.867778][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 675.873005][ T112] ? __switch_to_asm+0x39/0x70 [ 675.877788][ T112] ? __switch_to_asm+0x33/0x70 [ 675.882636][ T112] ? __pfx_kthread+0x10/0x10 [ 675.887255][ T112] ret_from_fork_asm+0x1a/0x30 [ 675.892109][ T112] [ 675.895146][ T112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 675.902417][ T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) [ 675.913771][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 675.924255][ T112] Call Trace: [ 675.927633][ T112] [ 675.930566][ T112] dump_stack_lvl+0x99/0x250 [ 675.935189][ T112] ? __asan_memcpy+0x40/0x70 [ 675.939783][ T112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.944984][ T112] ? __pfx__printk+0x10/0x10 [ 675.949571][ T112] panic+0x2db/0x790 [ 675.953581][ T112] ? __pfx_panic+0x10/0x10 [ 675.957995][ T112] ? ret_from_fork_asm+0x1a/0x30 [ 675.962919][ T112] __warn+0x334/0x4c0 [ 675.966888][ T112] ? dbAdjTree+0x454/0x4e0 [ 675.971317][ T112] ? dbAdjTree+0x454/0x4e0 [ 675.975731][ T112] report_bug+0x2be/0x4f0 [ 675.980063][ T112] ? dbAdjTree+0x454/0x4e0 [ 675.984468][ T112] ? dbAdjTree+0x454/0x4e0 [ 675.988865][ T112] ? dbAdjTree+0x456/0x4e0 [ 675.993262][ T112] handle_bug+0x84/0x160 [ 675.997666][ T112] exc_invalid_op+0x1a/0x50 [ 676.002246][ T112] asm_exc_invalid_op+0x1a/0x20 [ 676.007337][ T112] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 676.012351][ T112] Code: 5a ff ff ff e8 6d ea 81 fe eb 05 e8 66 ea 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 f7 2d 08 cc e8 4d ea 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 676.031942][ T112] RSP: 0018:ffffc9000259f988 EFLAGS: 00010293 [ 676.038783][ T112] RAX: ffffffff833e8123 RBX: ffff88805703a010 RCX: ffff88801ef2da00 [ 676.046739][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 676.054783][ T112] RBP: 0000000000020056 R08: ffffea00015c0e87 R09: 1ffffd40002b81d0 [ 676.062756][ T112] R10: dffffc0000000000 R11: fffff940002b81d1 R12: ffff88805703a018 [ 676.070712][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 676.078678][ T112] ? dbAdjTree+0x453/0x4e0 [ 676.083087][ T112] ? dbAdjTree+0x453/0x4e0 [ 676.087485][ T112] ? __pfx_lock_metapage+0x10/0x10 [ 676.092590][ T112] dbJoin+0x238/0x300 [ 676.096644][ T112] ? do_read_cache_folio+0x4c6/0x590 [ 676.101919][ T112] dbFreeBits+0x4e1/0xdb0 [ 676.106246][ T112] dbFree+0x336/0x650 [ 676.110218][ T112] txFreeMap+0x7ff/0xde0 [ 676.114452][ T112] txUpdateMap+0x308/0x9c0 [ 676.118864][ T112] jfs_lazycommit+0x43f/0xa90 [ 676.123533][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 676.128805][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 676.134600][ T112] ? __kthread_parkme+0x7b/0x200 [ 676.139520][ T112] ? __kthread_parkme+0x1a1/0x200 [ 676.144531][ T112] kthread+0x711/0x8a0 [ 676.148584][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 676.153765][ T112] ? __pfx_kthread+0x10/0x10 [ 676.158343][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.163525][ T112] ? lockdep_hardirqs_on+0x9c/0x150 [ 676.168729][ T112] ? __pfx_kthread+0x10/0x10 [ 676.173312][ T112] ret_from_fork+0x3fc/0x770 [ 676.177894][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 676.182994][ T112] ? __switch_to_asm+0x39/0x70 [ 676.187913][ T112] ? __switch_to_asm+0x33/0x70 [ 676.192660][ T112] ? __pfx_kthread+0x10/0x10 [ 676.197235][ T112] ret_from_fork_asm+0x1a/0x30 [ 676.201992][ T112] [ 676.205276][ T112] Kernel Offset: disabled [ 676.209623][ T112] Rebooting in 86400 seconds..