last executing test programs: 1m3.930659853s ago: executing program 3 (id=3863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48) 1m1.689825639s ago: executing program 3 (id=3898): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000140)=0x8, 0x4) 1m1.451898543s ago: executing program 3 (id=3903): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x2d0, 0x1e0, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x300}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) 1m1.354326298s ago: executing program 3 (id=3904): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@dmask={'dmask', 0x3d, 0x4ae}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@sys_tz}, {@errors_remount}, {}, {}, {@gid}, {@utf8}, {@sys_tz}, {@sys_tz}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f00000034c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 1m1.055762681s ago: executing program 3 (id=3906): r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x3f, &(0x7f0000000300)={0x34, 0x7, 0x4}) 1m0.186626016s ago: executing program 3 (id=3912): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) 59.317621125s ago: executing program 32 (id=3912): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) 4.10357259s ago: executing program 5 (id=4631): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x80c, 0x5, 0x30314742, 0x6, 0x7, [{0xb, 0x94}, {0x2, 0x8000}, {0x100, 0x1}, {0x8, 0x1ff}, {0x800, 0x7fff}, {0x8, 0xfffffffd}, {0x6, 0x9}, {0xf00, 0xfffffffa}], 0x3, 0x9, 0x7, 0x2}}) 4.027229918s ago: executing program 5 (id=4633): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x61d0, &(0x7f0000016fc0)="$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") lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00') 3.287775196s ago: executing program 1 (id=4643): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2.818280923s ago: executing program 1 (id=4650): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 2.600500783s ago: executing program 5 (id=4652): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b63, 0x0) 2.540441284s ago: executing program 1 (id=4654): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x2d0, 0x1e0, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e0}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) 2.14965546s ago: executing program 1 (id=4657): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 1.948467429s ago: executing program 1 (id=4661): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.690273836s ago: executing program 5 (id=4666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 1.618970683s ago: executing program 2 (id=4668): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x2}) 1.549496935s ago: executing program 0 (id=4669): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="180000007a006bcd9e3f88dc6e0800000709000018c00000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.467242167s ago: executing program 5 (id=4670): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 1.347234309s ago: executing program 2 (id=4671): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 1.345677964s ago: executing program 0 (id=4672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x1, 0x4, 0x0, 0x2, 'syz1\x00', "523ca936f8f61abb3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b1639cd090c61155070ae569ac4a65ef2100", [{0x8, 0x9, {0x1, 0xf}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0x18, {0x0, 0x56c}}, {0x8, 0x1, {0x3, 0x2d}}, {0x0, 0x42, {0x3, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x1, 0x2}}, {0x4, 0x1, {0x0, 0x1000000}}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0xff, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3f}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0xe3c7305}}, {0x6, 0x8, {0x1, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x9, 0x5, {0x2, 0x7c}}, {0x1, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x68}}, {0x9, 0x7, {0x0, 0x3fd}}, {0x1, 0x10, {0x0, 0x7fff}}, {0x200e, 0x40, {0x3, 0x90a}}, {0x5, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xd9, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xb, {0x1, 0xfd}}, {0xc, 0x2, {0x2, 0xb}}, {0x8003, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0xe141}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x4}}, {0xb, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x1, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0x6e, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) 1.250558567s ago: executing program 5 (id=4674): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1.106033973s ago: executing program 4 (id=4675): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2, 0xd, 0x0, 0x6, 0xa, 0x0, 0x70bd2b, 0x0, [@sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e20, @broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}}]}, 0x50}}, 0x0) 1.028551631s ago: executing program 0 (id=4676): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x1, 0x0, &(0x7f0000000880)) 948.829051ms ago: executing program 2 (id=4677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) 870.929527ms ago: executing program 4 (id=4678): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 710.60371ms ago: executing program 0 (id=4679): r0 = socket(0x2b, 0x80801, 0x1) shutdown(r0, 0x7ffffffe) 709.771764ms ago: executing program 4 (id=4680): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040)) 597.953183ms ago: executing program 2 (id=4681): r0 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) 513.411361ms ago: executing program 4 (id=4682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=@setlink={0x40, 0x13, 0x5, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x41000}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x8084) 480.259454ms ago: executing program 0 (id=4683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x22) 410.202536ms ago: executing program 2 (id=4684): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f0000000480)) 287.468462ms ago: executing program 2 (id=4685): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) 274.483422ms ago: executing program 0 (id=4686): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x4, 0x335, &(0x7f0000000880)="$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") mkdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) 149.148771ms ago: executing program 4 (id=4687): capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x1, 0x3, 0x1, 0xb, 0x2c5f, 0x4}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 21.559026ms ago: executing program 1 (id=4688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x8c}}, 0x0) 0s ago: executing program 4 (id=4689): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0xa}) kernel console output (not intermixed with test programs): buffer: [ 444.605324][T13843] 00000000: 41 42 54 43 00 00 00 03 ff ff ff ff ff ff ff ff ABTC............ [ 444.614556][T13843] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 444.631521][ T29] usb-storage 2-1:0.0: USB Mass Storage device detected [ 444.639647][T13843] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 444.651040][T13843] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01 ................ [ 444.659952][T13843] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 444.669891][T13843] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 444.686678][T13843] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 444.725738][T13843] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 444.753012][T13843] XFS (loop0): Filesystem has been shut down due to log error (0x2). [ 444.797811][T13843] XFS (loop0): Please unmount the filesystem and rectify the problem(s). [ 444.822190][T13843] XFS (loop0): log mount/recovery failed: error -74 [ 444.829974][ T29] usb 2-1: USB disconnect, device number 97 [ 444.871244][T13843] XFS (loop0): log mount failed [ 445.083388][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 445.118097][T13876] loop4: detected capacity change from 0 to 64 [ 445.157443][T13879] loop3: detected capacity change from 0 to 65 [ 445.191273][T13879] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 445.582368][T13888] loop1: detected capacity change from 0 to 128 [ 445.623204][T13891] loop0: detected capacity change from 0 to 128 [ 445.650313][T13891] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 445.733020][ T5898] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 445.823978][T13894] loop3: detected capacity change from 0 to 64 [ 445.835769][T13894] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 445.879894][T13880] loop2: detected capacity change from 0 to 32768 [ 445.897554][T13894] MINIX-fs: bad superblock [ 445.909123][T13880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3425 (13880) [ 445.939363][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 445.980050][ T5898] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf [ 446.003882][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.023609][ T5898] usb 5-1: Product: syz [ 446.040357][ T5898] usb 5-1: Manufacturer: syz [ 446.045144][T13880] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 446.056069][ T5898] usb 5-1: SerialNumber: syz [ 446.090591][T13880] BTRFS info (device loop2 state S): using crc32c checksum algorithm [ 446.098766][T13880] BTRFS error (device loop2 state S): superblock fsid doesn't match fsid of fs_devices: c9fe44da-de57-406a-8241-57ec7d4412cf != 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 446.116212][ T5898] usb 5-1: config 0 descriptor?? [ 446.136828][ T5898] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now attached [ 446.188125][T13880] BTRFS error (device loop2 state S): superblock metadata_uuid doesn't match metadata uuid of fs_devices: c9fe44da-de57-406a-8241-57ec7d4412cf != 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 446.242432][T13904] loop3: detected capacity change from 0 to 16 [ 446.264646][T13880] BTRFS error (device loop2 state S): dev_item UUID does not match metadata fsid: 14d642db-7b15-43e4-81e6-4b8fac6a25f8 != c9fe44da-de57-406a-8241-57ec7d4412cf [ 446.282312][T13904] erofs (device loop3): mounted with root inode @ nid 36. [ 446.318157][T13880] BTRFS error (device loop2 state S): superblock contains fatal errors [ 446.326705][T13880] BTRFS error (device loop2 state S): open_ctree failed: -22 [ 446.347179][T13907] loop0: detected capacity change from 0 to 16 [ 446.380331][T13907] erofs (device loop0): mounted with root inode @ nid 36. [ 446.394226][ T5914] usb 5-1: USB disconnect, device number 101 [ 446.403887][ T5914] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now disconnected [ 446.704622][T13915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.730169][ T29] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 446.806752][T13921] qnx6: superblock #1 checksum error [ 446.881593][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.912134][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 446.928120][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.939898][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 446.973752][T13924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.985865][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 446.985901][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.011188][ T29] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 447.080180][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.113809][ T29] usb 2-1: Product: syz [ 447.118133][ T29] usb 2-1: Manufacturer: syz [ 447.163797][ T29] usb 2-1: SerialNumber: syz [ 447.188302][ T29] usb 2-1: config 0 descriptor?? [ 447.190450][T13927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.238267][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.295574][T13931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.347333][ T29] rc_core: IR keymap rc-xbox-dvd not found [ 447.353308][ T29] Registered IR keymap rc-empty [ 447.409292][ T29] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 447.418690][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.468307][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.479651][ T29] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 447.558604][T13935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.625475][ T29] usb 2-1: USB disconnect, device number 98 [ 447.631482][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 447.680384][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.819138][T13945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.846181][ T5882] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 447.913500][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.954100][ T5914] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 448.046791][T13950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.086964][ T5882] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 448.112693][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.124875][T13953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.140449][ T5882] usb 3-1: config 0 descriptor?? [ 448.173611][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 448.245769][ T5914] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 448.266409][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.282813][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.282821][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.322348][ T5914] usb 4-1: Product: syz [ 448.337225][ T5914] usb 4-1: Manufacturer: syz [ 448.365749][ T5914] usb 4-1: SerialNumber: syz [ 448.403066][T13957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.418897][ T5882] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 448.429390][ T5882] hackrf 3-1:0.0: Could not detect board [ 448.435739][ T5882] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 448.450242][ T5882] usb 3-1: USB disconnect, device number 90 [ 448.495459][ T5914] usb 4-1: config 0 descriptor?? [ 448.542682][ T5914] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 448.607159][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.623359][ T5914] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 448.647906][T13963] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 448.682787][ T6666] udevd[6666]: incorrect ext4 checksum on /dev/loop4 [ 448.798512][ T5914] usb 4-1: USB disconnect, device number 86 [ 448.922789][T13968] befs: (loop4): No write support. Marking filesystem read-only [ 448.958921][T13968] befs: (loop4): invalid magic header [ 448.969919][T13967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.064059][T13962] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3457 (13962) [ 449.135017][T13962] BTRFS info (device loop0): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 449.157003][T13962] BTRFS info (device loop0): using blake2b checksum algorithm [ 449.236939][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.307061][T13962] BTRFS info (device loop0): enabling ssd optimizations [ 449.330208][T13962] BTRFS info (device loop0): turning on async discard [ 449.370019][T13962] BTRFS info (device loop0): enabling free space tree [ 449.532023][ T5828] BTRFS info (device loop0): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 449.601570][ T5914] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 449.810190][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 449.861823][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 449.892213][ T5914] usb 2-1: config 56 has an invalid interface number: 216 but max is 0 [ 449.913895][ T5914] usb 2-1: config 56 has no interface number 0 [ 449.940622][ T5914] usb 2-1: config 56 interface 216 has no altsetting 0 [ 449.973804][ T5914] usb 2-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 449.994243][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.011328][T14001] set_capacity_and_notify: 17 callbacks suppressed [ 450.011348][T14001] loop3: detected capacity change from 0 to 1764 [ 450.032256][ T5914] usb 2-1: Product: syz [ 450.050490][ T5914] usb 2-1: Manufacturer: syz [ 450.083533][ T5914] usb 2-1: SerialNumber: syz [ 450.190252][T14003] loop0: detected capacity change from 0 to 2 [ 450.219859][T14003] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 450.298804][T14005] loop3: detected capacity change from 0 to 64 [ 450.351685][ T5914] hub 2-1:56.216: bad descriptor, ignoring hub [ 450.368097][ T5914] hub 2-1:56.216: probe with driver hub failed with error -5 [ 450.388134][ T5914] option 2-1:56.216: GSM modem (1-port) converter detected [ 450.488321][ T5914] usb 2-1: USB disconnect, device number 99 [ 450.504905][T14007] loop0: detected capacity change from 0 to 132 [ 450.535721][ T5914] option 2-1:56.216: device disconnected [ 450.592841][T14009] loop3: detected capacity change from 0 to 64 [ 450.657832][T13997] loop2: detected capacity change from 0 to 32768 [ 450.678357][T13997] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3466 (13997) [ 450.783210][T13997] BTRFS info (device loop2): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 450.811562][T13997] BTRFS info (device loop2): using crc32c checksum algorithm [ 450.889293][T14015] loop3: detected capacity change from 0 to 1024 [ 450.985810][T13997] BTRFS info (device loop2): enabling ssd optimizations [ 451.002907][T13997] BTRFS info (device loop2): turning on async discard [ 451.022190][T13997] BTRFS info (device loop2): enabling free space tree [ 451.075759][T14015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.170295][ T5823] BTRFS info (device loop2): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 451.296435][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.353168][T14031] loop1: detected capacity change from 0 to 2368 [ 451.605362][T14035] loop3: detected capacity change from 0 to 256 [ 451.906561][T14011] loop0: detected capacity change from 0 to 32768 [ 451.975384][T14011] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3473 (14011) [ 452.071053][T14011] BTRFS info (device loop0): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 452.123873][T14011] BTRFS info (device loop0): using blake2b checksum algorithm [ 452.266695][T14011] BTRFS info (device loop0): enabling ssd optimizations [ 452.278137][T14011] BTRFS info (device loop0): turning on async discard [ 452.289042][T14011] BTRFS info (device loop0): enabling free space tree [ 452.374436][ T5914] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 452.410202][ T5828] BTRFS info (device loop0): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 452.565766][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 452.604520][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 452.653899][T14040] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 0f6d8e9b-9d19-4f51-9427-a6fb057ce7db [ 452.675755][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 452.688749][T14040] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3479 (14040) [ 452.701079][ T5914] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 452.749254][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.775219][ T5914] usb 3-1: Product: syz [ 452.799818][ T5914] usb 3-1: Manufacturer: syz [ 452.818932][ T5914] usb 3-1: SerialNumber: syz [ 452.844833][T14040] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 452.865259][ T5914] usb 3-1: config 0 descriptor?? [ 452.896939][T14040] BTRFS info (device loop1): using crc32c checksum algorithm [ 453.174213][ T5914] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 453.208065][T14040] BTRFS info (device loop1): enabling ssd optimizations [ 453.217996][T14040] BTRFS info (device loop1): turning on async discard [ 453.228079][T14040] BTRFS info (device loop1): enabling free space tree [ 453.252180][ T5914] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 453.327117][ T5914] usb 3-1: USB disconnect, device number 91 [ 453.386752][ T5817] BTRFS info (device loop1): last unmount of filesystem 0f6d8e9b-9d19-4f51-9427-a6fb057ce7db [ 453.544951][ T55] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 453.761246][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 453.796818][T14093] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 453.822778][ T55] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 453.868641][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.902079][ T55] usb 5-1: Product: syz [ 453.906356][ T55] usb 5-1: Manufacturer: syz [ 453.951239][ T55] usb 5-1: SerialNumber: syz [ 453.986324][ T55] usb 5-1: config 0 descriptor?? [ 454.034207][ T55] as10x_usb: device has been detected [ 454.051574][ T55] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 454.104547][T14096] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.126954][ T55] usb 5-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 454.158120][ T55] as10x_usb: error during firmware upload part1 [ 454.174001][ T55] Registered device Sky IT Digital Key (green led) [ 454.250494][ T5898] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 454.302508][ T5927] usb 5-1: USB disconnect, device number 102 [ 454.390222][ T5927] Unregistered device Sky IT Digital Key (green led) [ 454.391905][ T5927] as10x_usb: device has been disconnected [ 454.478383][ T5898] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 454.519786][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.550646][ T5898] usb 3-1: config 0 descriptor?? [ 454.588856][T14101] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.789176][T14088] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 454.812795][ T5898] usb 3-1: Cannot read MAC address [ 454.818740][ T5898] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 454.830360][T14088] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 454.872382][ T5898] usb 3-1: USB disconnect, device number 92 [ 454.914741][T14088] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 454.972866][ T5914] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 454.995461][ T5914] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 455.415947][ T5914] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 388ms [ 455.460243][ T5914] gfs2: fsid=syz:syz.0: jid=0: Done [ 455.493700][T14088] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 455.915806][T14119] set_capacity_and_notify: 11 callbacks suppressed [ 455.915828][T14119] loop4: detected capacity change from 0 to 4096 [ 455.965705][T14119] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 456.644858][T14111] loop1: detected capacity change from 0 to 32768 [ 456.698922][T14111] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 456.720394][T14111] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 456.776887][T14115] loop2: detected capacity change from 0 to 65536 [ 456.833985][T14111] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 456.933123][ T5914] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 457.004554][ T5914] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 457.080566][T14126] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 457.326179][ T5914] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 296ms [ 457.351568][ T5914] gfs2: fsid=syz:syz.0: jid=0: Done [ 457.371231][T14111] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 457.433173][T14121] loop4: detected capacity change from 0 to 32768 [ 457.968886][T14133] loop2: detected capacity change from 0 to 128 [ 458.731114][T14135] loop2: detected capacity change from 0 to 32768 [ 458.813889][T14135] (syz.2.3503,14135,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 458.879878][T14135] (syz.2.3503,14135,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 459.347844][T14138] loop0: detected capacity change from 0 to 32768 [ 459.391048][T14138] (syz.0.3504,14138,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 459.468981][T14138] (syz.0.3504,14138,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 460.316953][T14144] loop0: detected capacity change from 0 to 32768 [ 460.340453][T14144] (syz.0.3506,14144,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 460.368007][T14144] (syz.0.3506,14144,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 461.098214][T14141] loop2: detected capacity change from 0 to 65536 [ 461.159983][T14141] (syz.2.3505,14141,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 461.199166][T14141] (syz.2.3505,14141,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 461.384264][T14156] loop2: detected capacity change from 0 to 1 [ 461.414038][T14156] syz.2.3510: attempt to access beyond end of device [ 461.414038][T14156] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 461.453570][T14156] SQUASHFS error: Failed to read block 0x0: -5 [ 461.459847][T14156] unable to read squashfs_super_block [ 461.647090][T14158] loop2: detected capacity change from 0 to 3 [ 461.687489][T14158] syz.2.3511: attempt to access beyond end of device [ 461.687489][T14158] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 461.755660][T14158] SQUASHFS error: Failed to read block 0x0: -5 [ 461.766572][T14158] unable to read squashfs_super_block [ 462.031362][T14160] loop2: detected capacity change from 0 to 2048 [ 462.084963][T14160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.305256][T14162] loop2: detected capacity change from 0 to 128 [ 462.360210][T14162] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 462.400639][T14162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.419627][T14164] loop4: detected capacity change from 0 to 256 [ 462.469317][T14164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 462.524527][T14164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 462.618561][T14164] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 462.666908][T14164] UDF-fs: Scanning with blocksize 512 failed [ 462.683284][T14164] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 462.703265][T14166] loop2: detected capacity change from 0 to 256 [ 462.725796][T14164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.775728][T14166] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 462.810347][T14166] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 462.824836][T14166] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 462.853186][T14166] UDF-fs: Scanning with blocksize 512 failed [ 462.889898][T14166] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 462.973513][T14166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 463.037012][T14168] loop4: detected capacity change from 0 to 512 [ 463.113362][T14168] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 463.120820][T14168] UDF-fs: Scanning with blocksize 512 failed [ 463.185611][T14168] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 463.193652][T14168] UDF-fs: Scanning with blocksize 1024 failed [ 463.240362][T14170] loop2: detected capacity change from 0 to 512 [ 463.254091][T14168] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 463.275908][T14168] UDF-fs: Scanning with blocksize 2048 failed [ 463.299020][T14168] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 463.299526][T14170] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 463.334557][T14168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 463.360281][T14170] UDF-fs: Scanning with blocksize 512 failed [ 463.409194][T14170] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 463.435008][T14170] UDF-fs: Scanning with blocksize 1024 failed [ 463.471128][T14170] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 463.478920][T14170] UDF-fs: Scanning with blocksize 2048 failed [ 463.509562][T14170] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 463.524979][T14170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 463.726021][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.733911][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.762544][T14174] loop2: detected capacity change from 0 to 256 [ 464.013072][T14176] loop2: detected capacity change from 0 to 256 [ 464.553240][T14172] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3518 (14172) [ 464.609256][T14172] BTRFS info (device loop4): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 464.654078][T14172] BTRFS info (device loop4): using blake2b checksum algorithm [ 464.965122][T14172] BTRFS info (device loop4): enabling ssd optimizations [ 465.023607][T14172] BTRFS info (device loop4): turning on async discard [ 465.111004][T14172] BTRFS info (device loop4): enabling free space tree [ 465.310881][ T5818] BTRFS info (device loop4): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 465.963355][T14182] (syz.1.3523,14182,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 465.993293][T14182] (syz.1.3523,14182,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 466.129491][T14203] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 466.284432][T14205] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 466.384063][T14203] XFS (loop3): Ending clean mount [ 466.406110][T14205] XFS (loop0): Ending clean mount [ 466.571575][ T5824] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 466.580783][ T5828] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 466.869412][T14229] set_capacity_and_notify: 8 callbacks suppressed [ 466.869433][T14229] loop1: detected capacity change from 0 to 4096 [ 467.491539][T14208] loop4: detected capacity change from 0 to 65536 [ 467.550620][T14208] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 467.691659][T14241] loop0: detected capacity change from 0 to 2048 [ 467.957983][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'. [ 468.051515][T14241] hpfs: filesystem error: improperly stopped; already mounted read-only [ 468.079045][T14241] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 468.087346][T14241] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000 [ 468.326988][T14260] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 468.528925][T14239] loop3: detected capacity change from 0 to 32768 [ 468.568004][T14266] loop0: detected capacity change from 0 to 64 [ 468.600685][T14239] (syz.3.3535,14239,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 468.641893][T14239] (syz.3.3535,14239,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 468.665946][T14269] loop1: detected capacity change from 0 to 1024 [ 468.719065][ T30] audit: type=1800 audit(1770285223.822:15): pid=14266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3546" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 469.636104][T14299] loop2: detected capacity change from 0 to 1024 [ 469.787410][ T1152] hfsplus: b-tree write err: -5, ino 4 [ 469.831680][T14307] loop4: detected capacity change from 0 to 256 [ 469.856701][T14307] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 469.885730][T14307] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 469.901089][T14307] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 469.917964][T14307] UDF-fs: Scanning with blocksize 512 failed [ 470.019136][T14307] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 470.065677][T14313] loop3: detected capacity change from 0 to 256 [ 470.093536][T14313] vfat: Deprecated parameter 'posix' [ 470.101776][T14307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.131917][T14313] FAT-fs: "posix" option is obsolete, not supported now [ 470.589403][T14327] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 470.666373][T14330] tmpfs: Bad value for 'mpol' [ 470.770899][T14333] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 471.205028][T14351] random: crng reseeded on system resumption [ 471.224266][T14315] loop2: detected capacity change from 0 to 32768 [ 471.283785][T14355] Illegal XDP return value 2865144549 on prog (id 224) dev N/A, expect packet loss! [ 471.304647][T14352] delete_channel: no stack [ 471.313159][T14315] (syz.2.3570,14315,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 471.351008][T14315] (syz.2.3570,14315,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 471.443788][T14358] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 471.492342][T14358] bond1 (unregistering): Released all slaves [ 471.709993][T14368] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 471.757634][T14366] hfsplus: hfsplus: Invalid key length: 29235 [ 472.430537][T14397] vlan0: entered promiscuous mode [ 472.676338][T14403] geneve2: entered allmulticast mode [ 472.696138][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.727642][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.760260][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.790839][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 473.031472][T14391] set_capacity_and_notify: 1 callbacks suppressed [ 473.031494][T14391] loop1: detected capacity change from 0 to 32768 [ 473.131631][T14391] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 473.144198][T14411] loop0: detected capacity change from 0 to 4096 [ 473.180107][T14411] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 473.202966][T14420] loop3: detected capacity change from 0 to 512 [ 473.225251][T14420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 473.317448][T14391] XFS (loop1): Ending clean mount [ 473.382748][T14420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.441000][T14391] XFS (loop1): Quotacheck needed: Please wait. [ 473.461600][T14420] ext4 filesystem being mounted at /770/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 473.574438][T14391] XFS (loop1): Quotacheck: Done. [ 473.711351][ T5817] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 473.730666][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.827386][T14436] FAT-fs (nbd2): unable to read boot sector [ 474.227065][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 474.413841][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 474.424051][ T24] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 474.460306][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.487300][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3637'. [ 474.509762][ T24] usb 5-1: config 0 descriptor?? [ 474.535796][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 474.747249][ T24] usb 5-1: Detected FT232B [ 474.833398][T14474] loop3: detected capacity change from 0 to 4096 [ 475.001285][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 475.018213][T14481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.033375][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 475.084896][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 475.139203][ T24] usb 5-1: USB disconnect, device number 103 [ 475.164642][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 475.236487][ T24] ftdi_sio 5-1:0.0: device disconnected [ 475.312042][T14485] binder: 14484:14485 unknown command 0 [ 475.317727][T14485] binder: 14484:14485 ioctl c0306201 200000000080 returned -22 [ 475.975494][T14507] loop4: detected capacity change from 0 to 256 [ 476.037878][T14507] FAT-fs (loop4): Directory bread(block 64) failed [ 476.065297][T14507] FAT-fs (loop4): Directory bread(block 65) failed [ 476.102485][T14507] FAT-fs (loop4): Directory bread(block 66) failed [ 476.125905][T14507] FAT-fs (loop4): Directory bread(block 67) failed [ 476.146102][ T5899] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 476.167748][T14507] FAT-fs (loop4): Directory bread(block 68) failed [ 476.174349][T14507] FAT-fs (loop4): Directory bread(block 69) failed [ 476.210721][T14507] FAT-fs (loop4): Directory bread(block 70) failed [ 476.218581][T14507] FAT-fs (loop4): Directory bread(block 71) failed [ 476.236343][T14507] FAT-fs (loop4): Directory bread(block 72) failed [ 476.250278][T14507] FAT-fs (loop4): Directory bread(block 73) failed [ 476.372295][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.389717][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.419001][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.441949][ T5899] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 476.471691][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.520395][ T5899] usb 2-1: config 0 descriptor?? [ 476.556068][ T5899] rndis_host 2-1:0.0: skipping garbage [ 476.584280][ T5899] usb 2-1: bad CDC descriptors [ 476.757381][ T5899] usb 2-1: USB disconnect, device number 100 [ 477.142203][T14545] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 477.643818][T14566] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3686'. [ 477.664452][T14566] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3686'. [ 477.694729][T14566] netlink: 'syz.1.3686': attribute type 2 has an invalid length. [ 477.873916][T14568] bond1: entered allmulticast mode [ 477.896701][T14568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.306361][T14589] openvswitch: netlink: Key type 31 is not supported [ 479.334938][T14622] bond1: option ad_actor_sys_prio: invalid value (0) [ 479.370090][T14622] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 479.446276][T14622] bond1 (unregistering): Released all slaves [ 479.644983][T14637] vlan0: entered promiscuous mode [ 479.677123][T14640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3722'. [ 479.686180][T14640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3722'. [ 479.891631][T14539] loop0: detected capacity change from 0 to 65536 [ 480.048875][T14539] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 480.233638][T14661] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 480.387987][T14661] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 480.437916][T14661] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 480.908199][T14677] loop1: detected capacity change from 0 to 256 [ 481.064410][T14677] FAT-fs (loop1): Directory bread(block 64) failed [ 481.100579][T14677] FAT-fs (loop1): Directory bread(block 65) failed [ 481.146307][T14677] FAT-fs (loop1): Directory bread(block 66) failed [ 481.174271][T14677] FAT-fs (loop1): Directory bread(block 67) failed [ 481.218225][T14677] FAT-fs (loop1): Directory bread(block 68) failed [ 481.224813][T14677] FAT-fs (loop1): Directory bread(block 69) failed [ 481.280261][T14677] FAT-fs (loop1): Directory bread(block 70) failed [ 481.299498][T14677] FAT-fs (loop1): Directory bread(block 71) failed [ 481.318124][T14677] FAT-fs (loop1): Directory bread(block 72) failed [ 481.350825][T14677] FAT-fs (loop1): Directory bread(block 73) failed [ 481.551948][ T5898] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 481.735620][ T5898] usb 3-1: not running at top speed; connect to a high speed hub [ 481.760174][T14704] loop0: detected capacity change from 0 to 16 [ 481.774312][ T5898] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 481.800789][ T5898] usb 3-1: config 95 has no interface number 0 [ 481.807049][ T5898] usb 3-1: config 95 interface 1 has no altsetting 0 [ 481.847345][T14704] erofs (device loop0): mounted with root inode @ nid 36. [ 481.865995][ T5898] usb 3-1: string descriptor 0 read error: -22 [ 481.872506][ T5898] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 481.919578][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.110290][T14692] loop3: detected capacity change from 0 to 32768 [ 482.157663][T14692] JBD2: Ignoring recovery information on journal [ 482.212190][T14692] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 482.280001][T14719] netlink: 'syz.1.3758': attribute type 11 has an invalid length. [ 482.290366][T14719] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3758'. [ 482.304614][T14692] JBD2: bad block at offset 32 [ 482.324979][T14717] netlink: 'syz.0.3756': attribute type 1 has an invalid length. [ 482.358683][T14692] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 482.410482][ T5898] usb 3-1: USB disconnect, device number 93 [ 482.452890][T14692] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 482.542445][T14724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3760'. [ 482.553240][T14692] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 482.595647][T14692] OCFS2: File system is now read-only. [ 482.614622][T14692] (syz.3.3745,14692,1):ocfs2_find_leaf:1950 ERROR: status = -30 [ 482.654110][T14692] (syz.3.3745,14692,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 482.691762][T14692] (syz.3.3745,14692,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 482.721932][T14692] (syz.3.3745,14692,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 482.730615][T14692] (syz.3.3745,14692,1):ocfs2_read_virt_blocks:1005 ERROR: status = -30 [ 482.803461][T14692] (syz.3.3745,14692,1):ocfs2_read_dir_block:524 ERROR: status = -30 [ 482.818662][T14692] (syz.3.3745,14692,1):ocfs2_find_dir_space_el:3540 ERROR: status = -5 [ 482.843218][T14692] (syz.3.3745,14692,1):ocfs2_prepare_dir_for_insert:4336 ERROR: status = -5 [ 482.850392][T14730] netlink: 'syz.4.3763': attribute type 1 has an invalid length. [ 482.861047][T14730] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3763'. [ 482.870810][T14692] (syz.3.3745,14692,1):ocfs2_mknod:302 ERROR: status = -5 [ 482.894485][T14692] (syz.3.3745,14692,1):ocfs2_mknod:506 ERROR: status = -5 [ 482.916177][T14692] (syz.3.3745,14692,1):ocfs2_mkdir:662 ERROR: status = -5 [ 482.925059][T14732] loop1: detected capacity change from 0 to 1024 [ 483.014502][T14732] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 483.049601][ T5824] ocfs2: Unmounting device (7,3) on (node local) [ 483.232228][ T13] hfsplus: b-tree write err: -5, ino 4 [ 483.447469][T14749] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3767'. [ 483.448651][ T24] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 483.644749][ T24] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 483.657815][ T24] usb 3-1: config 0 has no interface number 0 [ 483.677013][ T24] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 483.720648][ T24] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 483.756416][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.781744][ T24] usb 3-1: Product: syz [ 483.794339][ T24] usb 3-1: Manufacturer: syz [ 483.801479][ T24] usb 3-1: SerialNumber: syz [ 483.828979][ T24] usb 3-1: config 0 descriptor?? [ 483.884319][T14738] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.907047][ T24] ums-karma 3-1:0.46: USB Mass Storage device detected [ 483.991836][ T24] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 484.193317][T14778] loop0: detected capacity change from 0 to 2048 [ 484.201838][ T5914] usb 3-1: USB disconnect, device number 94 [ 484.260158][T14781] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.309986][T14778] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 484.342225][T14778] Remounting filesystem read-only [ 484.470514][ T5828] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 484.665978][T14795] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 484.709882][T14797] loop3: detected capacity change from 0 to 256 [ 484.735002][T14799] tmpfs: Bad value for 'mpol' [ 484.751576][T14797] exfat: Deprecated parameter 'namecase' [ 484.794463][T14797] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 484.870287][T14797] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 485.052657][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3797'. [ 485.099838][T14783] loop4: detected capacity change from 0 to 32768 [ 485.129315][T14783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3785 (14783) [ 485.182850][T14783] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 485.200593][T14783] BTRFS info (device loop4): using sha256 checksum algorithm [ 485.207796][ T5898] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 485.393632][T14783] BTRFS info (device loop4): enabling ssd optimizations [ 485.403878][T14783] BTRFS info (device loop4): turning on async discard [ 485.414667][ T5898] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 485.422969][ T5898] usb 1-1: config 0 has no interface number 0 [ 485.429152][ T5898] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 485.430167][T14783] BTRFS info (device loop4): enabling free space tree [ 485.440678][ T5898] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 485.462157][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.491126][ T5898] usb 1-1: config 0 descriptor?? [ 485.511711][ T5898] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input38 [ 485.748029][ T5818] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 485.837851][ T5927] usb 1-1: USB disconnect, device number 100 [ 486.702455][T14879] fuse: Bad value for 'rootmode' [ 486.867588][T14882] loop0: detected capacity change from 0 to 512 [ 486.905241][T14882] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 486.913213][T14882] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 486.953135][T14882] EXT4-fs (loop0): orphan cleanup on readonly fs [ 486.974014][T14882] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 487.030211][T14882] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 487.050123][T14862] loop3: detected capacity change from 0 to 32768 [ 487.057815][T14862] btrfs: Deprecated parameter 'usebackuproot' [ 487.063945][T14862] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 487.087415][T14882] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 487.108231][ T30] audit: type=1326 audit(1770285240.796:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb6b9aeb9 code=0x7ffc0000 [ 487.108310][T14862] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 3ad7862b-586d-47f5-b55b-83bd09231429 [ 487.145290][T14882] EXT4-fs (loop0): 1 truncate cleaned up [ 487.185880][ T30] audit: type=1326 audit(1770285240.796:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb6b9aeb9 code=0x7ffc0000 [ 487.210405][T14882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.222132][T14862] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3814 (14862) [ 487.236655][ T30] audit: type=1326 audit(1770285240.842:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fedb6b9aeb9 code=0x7ffc0000 [ 487.306914][ T30] audit: type=1326 audit(1770285240.842:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb6b9aeb9 code=0x7ffc0000 [ 487.330300][T14862] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 487.355021][ T30] audit: type=1326 audit(1770285240.842:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.1.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb6b9aeb9 code=0x7ffc0000 [ 487.388211][T14894] bond1: option tlb_dynamic_lb: invalid value (2) [ 487.395417][T14862] BTRFS info (device loop3): using crc32c checksum algorithm [ 487.403731][T14882] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.3822: bad symlink. [ 487.417509][T14894] bond1 (unregistering): Released all slaves [ 487.483284][T14882] EXT4-fs (loop0): Remounting filesystem read-only [ 487.524712][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.557028][ T36] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32b4fbab level 0 [ 487.604285][T14862] BTRFS error (device loop3): failed to load root extent [ 487.616684][T14862] BTRFS warning (device loop3): try to load backup roots slot 1 [ 487.639232][T14914] loop1: detected capacity change from 0 to 64 [ 487.787698][T14916] @ÿ: renamed from veth0_vlan (while UP) [ 487.858244][T14862] BTRFS info (device loop3): setting nodatasum [ 487.870556][T14862] BTRFS info (device loop3): setting nodatacow [ 487.884516][T14862] BTRFS info (device loop3): turning on flush-on-commit [ 487.920971][T14862] BTRFS info (device loop3): turning on sync discard [ 487.929020][T14862] BTRFS info (device loop3): enabling free space tree [ 487.975724][T14862] BTRFS info (device loop3): force clearing of disk cache [ 487.993093][T14862] BTRFS info (device loop3): trying to use backup root at mount time [ 488.022438][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3835'. [ 488.101250][T14924] ip6tnl1: entered allmulticast mode [ 488.265515][ T5824] BTRFS info (device loop3): last unmount of filesystem 3ad7862b-586d-47f5-b55b-83bd09231429 [ 488.442418][ T5898] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 488.500604][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3844'. [ 488.619789][T14945] bond1 (unregistering): Released all slaves [ 488.673737][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 488.718421][ T5898] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 488.762791][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.845753][ T5898] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 488.944061][T14958] netlink: 'syz.2.3851': attribute type 4 has an invalid length. [ 488.972134][T14958] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3851'. [ 489.066860][T14958] .`: renamed from bond0 (while UP) [ 489.269141][T14966] netlink: 'syz.3.3855': attribute type 1 has an invalid length. [ 489.283646][ T5898] gspca_nw80x: reg_r err -71 [ 489.301769][ T5898] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 489.319198][T14966] netlink: 'syz.3.3855': attribute type 11 has an invalid length. [ 489.327569][ T5898] usb 5-1: USB disconnect, device number 104 [ 489.331661][T14966] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3855'. [ 489.966844][T14962] loop1: detected capacity change from 0 to 32768 [ 490.036770][T14962] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 490.194375][T15004] loop0: detected capacity change from 0 to 256 [ 490.346177][T15004] FAT-fs (loop0): Directory bread(block 64) failed [ 490.394899][T15004] FAT-fs (loop0): Directory bread(block 65) failed [ 490.401572][T15004] FAT-fs (loop0): Directory bread(block 66) failed [ 490.415467][T14962] XFS (loop1): Ending clean mount [ 490.445627][T15004] FAT-fs (loop0): Directory bread(block 67) failed [ 490.473188][T15004] FAT-fs (loop0): Directory bread(block 68) failed [ 490.516747][T15004] FAT-fs (loop0): Directory bread(block 69) failed [ 490.530161][T15004] FAT-fs (loop0): Directory bread(block 70) failed [ 490.540577][ T5817] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 490.554039][T15004] FAT-fs (loop0): Directory bread(block 71) failed [ 490.597280][T15004] FAT-fs (loop0): Directory bread(block 72) failed [ 490.618157][T15004] FAT-fs (loop0): Directory bread(block 73) failed [ 491.080889][ T30] audit: type=1326 audit(1770285244.460:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.1.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb6b9aeb9 code=0x7ffc0000 [ 491.177962][ T30] audit: type=1326 audit(1770285244.460:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.1.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb6b9aeb9 code=0x7ffc0000 [ 491.274468][ T30] audit: type=1326 audit(1770285244.460:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.1.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fedb6b9aeb9 code=0x7ffc0000 [ 491.387784][ T30] audit: type=1326 audit(1770285244.460:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15027 comm="syz.1.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb6b9aeb9 code=0x7ffc0000 [ 491.541197][T15040] loop4: detected capacity change from 0 to 2048 [ 491.562095][T15040] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 491.605955][T15049] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.270442][T15066] loop4: detected capacity change from 0 to 2048 [ 492.283822][T15073] loop3: detected capacity change from 0 to 256 [ 492.325093][T15073] exfat: Deprecated parameter 'utf8' [ 492.345419][T15066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.369500][T15073] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 492.735120][T15054] loop1: detected capacity change from 0 to 32768 [ 492.767456][T15054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3893 (15054) [ 492.910198][T15054] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 492.938527][T15054] BTRFS info (device loop1): using sha256 checksum algorithm [ 493.111770][T15054] BTRFS info (device loop1): enabling ssd optimizations [ 493.126524][T15054] BTRFS info (device loop1): turning on async discard [ 493.197960][T15054] BTRFS info (device loop1): enabling free space tree [ 493.423176][ T5817] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 493.744726][T15080] loop2: detected capacity change from 0 to 32768 [ 493.841205][T15103] loop1: detected capacity change from 0 to 512 [ 493.848002][T15070] loop0: detected capacity change from 0 to 32768 [ 493.891565][T15070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3901 (15070) [ 493.966884][ T3909] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.025461][T15070] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.038785][T15103] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 494.096136][T15103] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 494.120358][T15070] BTRFS info (device loop0): using sha256 checksum algorithm [ 494.153600][T15103] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.3911: Failed to acquire dquot type 1 [ 494.207681][T15103] loop1: lost filesystem error report for type 5 error -5 [ 494.215802][T15103] EXT4-fs (loop1): 1 truncate cleaned up [ 494.216255][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 494.235130][ C1] EXT4-fs (loop1): last error at time 1770285247: ext4_acquire_dquot:7003 [ 494.292407][T15103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.350560][ T3909] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.489659][T15103] ext4 filesystem being mounted at /772/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.542783][T15070] BTRFS info (device loop0): enabling ssd optimizations [ 494.549858][T15070] BTRFS info (device loop0): turning on async discard [ 494.619346][T15103] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 494.638867][T15070] BTRFS info (device loop0): enabling free space tree [ 494.671443][T15103] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 494.725283][T15103] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.3911: Failed to acquire dquot type 1 [ 494.784531][ T30] audit: type=1326 audit(1770285247.885:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.4.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c8d9aeb9 code=0x7ffc0000 [ 494.818756][ T3909] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.900498][ T30] audit: type=1326 audit(1770285247.903:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.4.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c8d9aeb9 code=0x7ffc0000 [ 494.951397][ T30] audit: type=1326 audit(1770285247.922:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.4.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f81c8d9aeb9 code=0x7ffc0000 [ 494.975803][ T30] audit: type=1326 audit(1770285247.922:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.4.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c8d9aeb9 code=0x7ffc0000 [ 494.999339][ T30] audit: type=1326 audit(1770285247.922:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15127 comm="syz.4.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c8d9aeb9 code=0x7ffc0000 [ 495.095181][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.128980][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 495.141210][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 495.154610][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 495.169359][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 495.179633][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 495.308686][T15140] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3922'. [ 495.369698][ T3909] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.417444][T15143] binder: 15141:15143 ioctl c0306201 200000000540 returned -22 [ 495.429049][ T5828] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 495.698968][T15147] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 495.723496][T15147] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 495.820029][ T5914] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 496.034943][ T5914] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 496.075327][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.139488][ T5914] usb 2-1: Product: syz [ 496.167705][ T5914] usb 2-1: Manufacturer: syz [ 496.209706][ T5914] usb 2-1: SerialNumber: syz [ 496.254026][ T5914] usb 2-1: config 0 descriptor?? [ 496.288402][ T5914] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 496.335105][T15164] Cannot find add_set index 0 as target [ 496.389450][ T3909] bridge_slave_1: left allmulticast mode [ 496.404778][ T3909] bridge_slave_1: left promiscuous mode [ 496.412942][ T3909] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.487032][ T3909] bridge_slave_0: left allmulticast mode [ 496.509231][ T3909] bridge_slave_0: left promiscuous mode [ 496.527144][ T3909] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.619899][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 496.714258][ T5914] sonixb 2-1:0.0: Error writing register 01: -71 [ 496.723017][ T5914] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 496.743668][ T5914] usb 2-1: USB disconnect, device number 101 [ 496.877477][T15177] loop2: detected capacity change from 0 to 256 [ 497.177200][T15183] netlink: 'syz.0.3942': attribute type 16 has an invalid length. [ 497.206511][T15183] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3942'. [ 497.434454][ T5830] Bluetooth: hci3: command tx timeout [ 497.712915][ T3909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.728711][ T3909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.741199][ T3909] bond0 (unregistering): Released all slaves [ 497.795984][T15171] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 497.844647][T15202] loop0: detected capacity change from 0 to 1764 [ 497.942471][T15202] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 497.982720][T15132] chnl_net:caif_netlink_parms(): no params data found [ 498.435198][T15224] loop0: detected capacity change from 0 to 8 [ 498.506016][T15224] SQUASHFS error: Unable to read directory block [629:26] [ 498.768077][T15243] loop4: detected capacity change from 0 to 1024 [ 498.871355][T15246] loop0: detected capacity change from 0 to 16 [ 498.894987][T15246] erofs (device loop0): mounted with root inode @ nid 36. [ 498.971792][T15246] syz.0.3963: attempt to access beyond end of device [ 498.971792][T15246] loop0: rw=524288, sector=256, nr_sectors = 8 limit=16 [ 499.036430][ T1152] hfsplus: b-tree write err: -5, ino 4 [ 499.087450][T15246] syz.0.3963: attempt to access beyond end of device [ 499.087450][T15246] loop0: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 499.128643][T15132] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.147164][T15132] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.176322][T15132] bridge_slave_0: entered allmulticast mode [ 499.196500][T15246] syz.0.3963: attempt to access beyond end of device [ 499.196500][T15246] loop0: rw=524288, sector=0, nr_sectors = 1792 limit=16 [ 499.246184][T15132] bridge_slave_0: entered promiscuous mode [ 499.259337][T15246] syz.0.3963: attempt to access beyond end of device [ 499.259337][T15246] loop0: rw=0, sector=256, nr_sectors = 8 limit=16 [ 499.316520][T15246] erofs (device loop0): read error -5 @ 1 of nid 89 [ 499.350125][T15132] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.367365][ T30] audit: type=1800 audit(1770285252.103:30): pid=15246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3963" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 499.387432][T15132] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.414308][T15132] bridge_slave_1: entered allmulticast mode [ 499.448616][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3971'. [ 499.467643][T15132] bridge_slave_1: entered promiscuous mode [ 499.521831][ T3909] hsr_slave_0: left promiscuous mode [ 499.608858][ T3909] hsr_slave_1: left promiscuous mode [ 499.634128][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.657152][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.678794][T15270] xt_ecn: cannot match TCP bits for non-tcp packets [ 499.689559][ T5830] Bluetooth: hci3: command tx timeout [ 499.712824][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.731327][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.878786][ T3909] veth1_macvtap: left promiscuous mode [ 499.905237][ T3909] veth0_macvtap: left promiscuous mode [ 499.910992][ T3909] veth1_vlan: left promiscuous mode [ 499.935787][ T3909] veth0_vlan: left promiscuous mode [ 500.073345][T15281] loop4: detected capacity change from 0 to 4096 [ 500.182861][T15281] ntfs3(loop4): ino=5, "/" indx_read_ra [ 500.510645][T15274] loop1: detected capacity change from 0 to 32768 [ 500.559462][T15274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3979 (15274) [ 500.610852][T15274] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 500.638424][T15274] BTRFS info (device loop1): using sha256 checksum algorithm [ 500.662069][T15296] netlink: 'syz.4.3988': attribute type 61 has an invalid length. [ 500.742178][T15274] BTRFS info (device loop1): enabling ssd optimizations [ 500.762802][T15274] BTRFS info (device loop1): turning on async discard [ 500.769877][T15274] BTRFS info (device loop1): enabling free space tree [ 500.871835][T15274] BTRFS info (device loop1): balance: start -f [ 500.883232][T15274] BTRFS info (device loop1): balance: ended with status: 0 [ 500.945177][ T5817] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 501.496758][ T3909] team0 (unregistering): Port device team_slave_1 removed [ 501.591133][ T3909] team0 (unregistering): Port device team_slave_0 removed [ 501.941546][ T5830] Bluetooth: hci3: command tx timeout [ 502.025434][T15294] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 502.177311][T15132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.222130][T15132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.374849][T15333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3998'. [ 502.383908][T15333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3998'. [ 502.445460][T15335] overlayfs: missing 'lowerdir' [ 502.457008][T15132] team0: Port device team_slave_0 added [ 502.498371][T15132] team0: Port device team_slave_1 added [ 502.664737][T15132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.699687][T15342] loop4: detected capacity change from 0 to 2048 [ 502.703077][T15132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.808115][T15350] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 502.873999][T15132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.902334][T15342] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 502.950796][T15132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.971550][T15132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.981959][T15342] Remounting filesystem read-only [ 503.081898][T15342] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 503.094687][T15132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.132903][T15342] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 503.169466][T15354] loop1: detected capacity change from 0 to 4096 [ 503.176633][T15342] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 503.212568][T15354] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 503.221926][T15342] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 503.250320][T15342] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 503.289737][T15342] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 503.335199][T15342] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 503.367668][T15358] loop0: detected capacity change from 0 to 4096 [ 503.372546][ T30] audit: type=1800 audit(1770285255.813:31): pid=15342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4003" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 503.446598][T15358] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 503.504413][T15132] hsr_slave_0: entered promiscuous mode [ 503.523597][T15132] hsr_slave_1: entered promiscuous mode [ 503.542947][T15354] ntfs3(loop1): ino=0, attr_set_size [ 503.561628][T15354] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 503.573917][T15132] debugfs: 'hsr0' already exists in 'hsr' [ 503.591875][T15358] ntfs3(loop0): ino=1a, mi_enum_attr [ 503.619953][T15132] Cannot create hsr debugfs directory [ 503.631341][T15358] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 503.998252][T15348] loop2: detected capacity change from 0 to 32768 [ 504.099966][T15348] JBD2: Ignoring recovery information on journal [ 504.206710][ T5830] Bluetooth: hci3: command tx timeout [ 504.284887][T15348] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 504.372371][T15378] loop4: detected capacity change from 0 to 1024 [ 504.380777][T15379] loop1: detected capacity change from 0 to 512 [ 504.439847][T15381] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 504.560091][ T5823] ocfs2: Unmounting device (7,2) on (node local) [ 504.886139][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4020'. [ 504.956190][T15393] bridge1: entered promiscuous mode [ 504.961724][T15393] bridge1: entered allmulticast mode [ 504.980875][T15132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 505.013773][T15132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 505.042391][T15132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 505.094415][T15132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 505.535870][T15424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 505.619993][T15132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.742878][T15132] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.783665][T15247] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.790952][T15247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.883060][T15247] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.890300][T15247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.434902][T15451] loop2: detected capacity change from 0 to 4096 [ 506.480583][ T29] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 506.503726][T15451] ntfs3(loop2): ino=0, mi_enum_attr [ 506.544123][T15451] ntfs3(loop2): ino=0, mi_enum_attr [ 506.578882][T15451] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 506.645472][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 506.655889][T15422] loop4: detected capacity change from 0 to 32768 [ 506.690745][ T29] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 506.746130][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.759812][T15422] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 506.814615][ T29] usb 2-1: Product: syz [ 506.825422][T15471] netlink: 'syz.0.4042': attribute type 1 has an invalid length. [ 506.834044][T15471] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4042'. [ 506.850899][ T29] usb 2-1: Manufacturer: syz [ 506.855817][ T29] usb 2-1: SerialNumber: syz [ 506.899546][T15422] XFS (loop4): Ending clean mount [ 506.906979][ T29] usb 2-1: config 0 descriptor?? [ 507.112334][ T5818] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 507.146373][T15132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.420880][ T24] usb 2-1: USB disconnect, device number 102 [ 507.510400][ T5898] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 507.533105][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.686882][T15489] CIFS: VFS: Malformed UNC in devname [ 507.722317][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 507.753418][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 507.780779][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 507.801596][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 507.856870][ T5898] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 507.865975][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.918104][ T5898] usb 3-1: config 0 descriptor?? [ 508.121530][T15498] loop0: detected capacity change from 0 to 4096 [ 508.144810][T15498] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 508.205558][ T5898] hdpvr 3-1:0.0: firmware version 0x1e dated [ 508.268720][T15498] ntfs3(loop0): ino=1a, mi_enum_attr [ 508.303156][T15498] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 508.380157][T15132] veth0_vlan: entered promiscuous mode [ 508.413478][ T5898] hdpvr 3-1:0.0: device init failed [ 508.418826][ T5898] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 508.460839][T15132] veth1_vlan: entered promiscuous mode [ 508.488118][ T5898] usb 3-1: USB disconnect, device number 95 [ 508.688958][T15132] veth0_macvtap: entered promiscuous mode [ 508.749005][T15132] veth1_macvtap: entered promiscuous mode [ 508.859498][T15522] netlink: 'syz.0.4057': attribute type 1 has an invalid length. [ 508.869068][T15132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.883805][T15522] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4057'. [ 508.906108][T15520] warning: `syz.4.4056' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 508.968165][T15132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.015888][ T1152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.056843][ T1152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.091104][ T1152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.166177][ T1152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.179518][T15532] loop2: detected capacity change from 0 to 128 [ 509.210816][ T55] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 509.350738][T15537] loop0: detected capacity change from 0 to 164 [ 509.406004][T15537] Unable to read rock-ridge attributes [ 509.416933][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 509.433721][T15537] Unable to read rock-ridge attributes [ 509.458184][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.480129][ T55] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 509.497189][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.511090][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.524097][T15537] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 509.545273][ T55] usb 2-1: Product: syz [ 509.566300][ T55] usb 2-1: Manufacturer: syz [ 509.601019][ T55] usb 2-1: SerialNumber: syz [ 509.628413][ T55] usb 2-1: config 0 descriptor?? [ 509.662419][ T55] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 509.724261][T15247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.752254][T15247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.763638][T15541] loop2: detected capacity change from 0 to 4096 [ 509.799049][T15541] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 509.953855][T15541] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 510.064300][ T1152] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 510.094034][ T5823] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 510.105019][ T55] gspca_sonixj: reg_r err -71 [ 510.109846][ T55] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 510.145571][ T55] usb 2-1: USB disconnect, device number 103 [ 510.153367][ T5823] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 510.183203][ T5823] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 510.222278][ T13] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 510.286799][ T30] audit: type=1326 audit(1770285262.182:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 510.332650][ T30] audit: type=1326 audit(1770285262.191:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 510.386222][ T30] audit: type=1326 audit(1770285262.191:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 510.476114][ T30] audit: type=1326 audit(1770285262.191:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 510.501739][ T30] audit: type=1326 audit(1770285262.191:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 510.643939][T15562] bond0: Removing last ns target with arp_interval on [ 510.964366][T15575] loop5: detected capacity change from 0 to 64 [ 511.033189][T15554] loop4: detected capacity change from 0 to 32768 [ 511.034812][T15581] netlink: 512 bytes leftover after parsing attributes in process `syz.1.4083'. [ 511.059478][T15575] Trying to free block not in datazone [ 511.143178][T15554] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 511.392834][T15554] XFS (loop4): Ending clean mount [ 511.503133][T15607] loop2: detected capacity change from 0 to 2048 [ 511.515705][T15607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.556458][ T5818] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 511.585139][ T29] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 511.694982][T15611] loop1: detected capacity change from 0 to 512 [ 511.714558][T15611] EXT4-fs (loop1): DAX unsupported by block device. [ 511.736459][ T5899] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 511.786575][ T29] usb 1-1: config index 0 descriptor too short (expected 133, got 72) [ 511.845091][ T29] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 511.854212][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.884578][ T29] usb 1-1: Product: syz [ 511.924607][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.930376][ T29] usb 1-1: Manufacturer: syz [ 511.939376][ T29] usb 1-1: SerialNumber: syz [ 511.954406][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.009917][ T5899] usb 6-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 512.022114][ T29] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 512.038106][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 512.083090][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 512.088842][ T5899] usb 6-1: SerialNumber: syz [ 512.389776][ T5899] usb 6-1: 0:2 : does not exist [ 512.526405][ T5899] usb 6-1: USB disconnect, device number 2 [ 512.618107][ T5898] usb 1-1: USB disconnect, device number 101 [ 512.672057][ T6666] udevd[6666]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.814705][T15639] loop4: detected capacity change from 0 to 164 [ 512.851990][T15639] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 512.928091][ T55] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 513.129074][ T55] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 513.151082][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.219618][T15633] loop2: detected capacity change from 0 to 32768 [ 513.232295][ T55] usb 2-1: config 0 descriptor?? [ 513.251082][T15633] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4103 (15633) [ 513.294492][T15633] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 513.321294][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 513.338970][ T24] ath9k_htc: Failed to initialize the device [ 513.345315][T15633] BTRFS info (device loop2): using sha256 checksum algorithm [ 513.353041][ T5898] usb 1-1: ath9k_htc: USB layer deinitialized [ 513.450708][T15633] BTRFS info (device loop2): enabling ssd optimizations [ 513.481850][T15633] BTRFS info (device loop2): turning on async discard [ 513.500763][T15633] BTRFS info (device loop2): enabling free space tree [ 513.644842][T15633] BTRFS info (device loop2): balance: start -f [ 513.683943][T15633] BTRFS info (device loop2): balance: ended with status: 0 [ 513.741123][ T55] ath6kl: Failed to read usb control message: -71 [ 513.761199][ T55] ath6kl: Unable to read the bmi data from the device: -71 [ 513.803921][ T55] ath6kl: Unable to recv target info: -71 [ 513.829312][ T55] ath6kl: Failed to init ath6kl core: -71 [ 513.835600][ T55] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 513.895605][ T55] usb 2-1: USB disconnect, device number 104 [ 513.938779][ T5823] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 514.426233][T15687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4122'. [ 514.569665][T15650] loop4: detected capacity change from 0 to 32768 [ 514.646014][T15650] JBD2: Ignoring recovery information on journal [ 514.747337][ T29] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 514.833026][T15650] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 514.933717][ T29] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 514.943986][ T29] usb 3-1: config 0 has no interface number 0 [ 514.981591][ T29] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=5f.35 [ 515.021138][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.069099][ T29] usb 3-1: Product: syz [ 515.091253][ T29] usb 3-1: Manufacturer: syz [ 515.098845][ T29] usb 3-1: SerialNumber: syz [ 515.117332][ T29] usb 3-1: config 0 descriptor?? [ 515.137416][ T29] usb-storage 3-1:0.111: USB Mass Storage device detected [ 515.179989][ T29] usb-storage 3-1:0.111: device ignored [ 515.214691][ T5818] ocfs2: Unmounting device (7,4) on (node local) [ 515.377714][ T29] usb 3-1: USB disconnect, device number 96 [ 515.564547][T15722] lo: entered promiscuous mode [ 515.592228][T15722] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4138'. [ 515.706540][T15704] loop0: detected capacity change from 0 to 32768 [ 515.716473][T15704] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4129 (15704) [ 515.772281][T15704] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 515.805564][T15704] BTRFS info (device loop0): using sha256 checksum algorithm [ 515.924406][T15704] BTRFS info (device loop0): enabling ssd optimizations [ 515.970142][T15704] BTRFS info (device loop0): turning on async discard [ 516.014702][T15704] BTRFS info (device loop0): enabling free space tree [ 516.180816][T15755] deleting an unspecified loop device is not supported. [ 516.183011][T15704] BTRFS info (device loop0): balance: start -f [ 516.202251][T15757] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 516.212152][T15704] BTRFS info (device loop0): balance: ended with status: 0 [ 516.287908][T15757] xt_HMARK: spi-set and port-set can't be combined [ 516.365211][T15761] loop2: detected capacity change from 0 to 128 [ 516.377503][ T5828] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 516.410226][T15761] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 516.471227][T15761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.022731][ T29] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 517.120728][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4163'. [ 517.162955][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4163'. [ 517.204766][T15786] loop2: detected capacity change from 0 to 4096 [ 517.214151][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.236912][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.258658][T15786] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 517.294785][ T29] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 517.347339][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 517.379187][ T29] usb 1-1: SerialNumber: syz [ 517.420216][T15786] ntfs3(loop2): ino=19, mi_enum_attr [ 517.432580][ T29] usb 1-1: 0:2 : does not exist [ 517.460990][T15786] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 517.579900][T15800] tmpfs: Bad value for 'mpol' [ 517.839406][T15808] loop5: detected capacity change from 0 to 512 [ 517.916675][ T29] usb 1-1: USB disconnect, device number 102 [ 517.964072][T15808] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.041954][ T24] IPVS: starting estimator thread 0... [ 518.050066][T15808] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 518.072991][T15808] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 518.149279][T15818] IPVS: using max 33 ests per chain, 79200 per kthread [ 518.179052][T15132] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 518.379185][T15829] loop5: detected capacity change from 0 to 64 [ 519.262622][T15865] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4199'. [ 519.326046][T15869] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 519.582304][T15845] loop4: detected capacity change from 0 to 32768 [ 519.624882][T15845] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4187 (15845) [ 519.688951][T15845] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 519.732015][T15845] BTRFS info (device loop4): using sha256 checksum algorithm [ 519.967860][T15845] BTRFS info (device loop4): enabling ssd optimizations [ 520.019517][T15905] loop5: detected capacity change from 0 to 4096 [ 520.025416][T15845] BTRFS info (device loop4): turning on async discard [ 520.054214][T15845] BTRFS info (device loop4): enabling free space tree [ 520.262460][ T24] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 520.395954][ T5818] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 520.475370][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 520.500645][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 520.521692][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.557319][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 520.607794][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 520.656692][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 520.712218][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.771930][ T24] usb 1-1: config 0 descriptor?? [ 520.805109][T15908] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 520.989586][T15938] netlink: 'syz.1.4220': attribute type 25 has an invalid length. [ 521.017449][ T55] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 521.245923][ T55] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 521.256367][ T55] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 521.280852][ T55] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 521.291676][ T55] usb 5-1: config 220 has no interface number 2 [ 521.298150][ T55] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 521.316119][ T55] usb 5-1: config 220 interface 0 has no altsetting 0 [ 521.322977][ T55] usb 5-1: config 220 interface 76 has no altsetting 0 [ 521.338469][ T24] usb 1-1: USB disconnect, device number 103 [ 521.348626][ T5830] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 521.366735][ T55] usb 5-1: config 220 interface 1 has no altsetting 0 [ 521.381349][ T55] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 521.399234][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.419623][ T55] usb 5-1: Product: syz [ 521.424200][ T55] usb 5-1: Manufacturer: syz [ 521.428837][ T55] usb 5-1: SerialNumber: syz [ 521.676974][T15961] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 521.721736][ T55] usb 5-1: selecting invalid altsetting 0 [ 521.747262][ T55] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 521.778740][ T55] uvcvideo 5-1:220.0: No valid video chain found. [ 521.840811][ T55] usb 5-1: selecting invalid altsetting 0 [ 521.866056][ T55] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 521.908211][ T55] usb 5-1: USB disconnect, device number 105 [ 522.295477][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4239'. [ 522.363259][T15991] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 522.683296][T16006] xt_connbytes: Forcing CT accounting to be enabled [ 522.704798][T16006] Cannot find set identified by id 0 to match [ 522.885549][T16013] loop5: detected capacity change from 0 to 256 [ 522.984523][T16013] FAT-fs (loop5): Directory bread(block 64) failed [ 523.024953][T16013] FAT-fs (loop5): Directory bread(block 65) failed [ 523.032103][T16013] FAT-fs (loop5): Directory bread(block 66) failed [ 523.104292][T16013] FAT-fs (loop5): Directory bread(block 67) failed [ 523.118476][T16016] loop1: detected capacity change from 0 to 4096 [ 523.125210][T16013] FAT-fs (loop5): Directory bread(block 68) failed [ 523.131777][T16013] FAT-fs (loop5): Directory bread(block 69) failed [ 523.142252][T16016] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 523.163027][T16013] FAT-fs (loop5): Directory bread(block 70) failed [ 523.175203][T16013] FAT-fs (loop5): Directory bread(block 71) failed [ 523.189294][T16013] FAT-fs (loop5): Directory bread(block 72) failed [ 523.198301][T16013] FAT-fs (loop5): Directory bread(block 73) failed [ 523.368115][T16016] ntfs3(loop1): ino=19, mi_enum_attr [ 523.382029][T16016] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 523.500410][T16016] ntfs3(loop1): failed to convert "c46c" to iso8859-4 [ 523.548102][T16016] ntfs3(loop1): ino=20, mi_enum_attr [ 523.701071][T16040] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 523.740096][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 523.755243][T16040] netlink: 'syz.2.4260': attribute type 3 has an invalid length. [ 523.770624][T16042] lo: left promiscuous mode [ 523.780035][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 523.790157][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 523.808318][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 523.809724][T16040] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4260'. [ 523.863033][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 523.905118][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 523.947742][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 523.974353][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 524.523176][T16072] loop5: detected capacity change from 0 to 136 [ 524.905374][T16084] loop4: detected capacity change from 0 to 1024 [ 525.068245][ T59] hfsplus: b-tree write err: -5, ino 4 [ 525.527255][ T5898] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 525.589735][ T30] audit: type=1326 audit(1770285276.313:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24b39aeb9 code=0x7ffc0000 [ 525.686148][ T30] audit: type=1326 audit(1770285276.313:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24b39aeb9 code=0x7ffc0000 [ 525.743899][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 525.752394][ T30] audit: type=1326 audit(1770285276.332:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc24b39aeb9 code=0x7ffc0000 [ 525.788273][ T55] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 525.808514][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 525.835681][ T5898] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 525.863098][ T30] audit: type=1326 audit(1770285276.332:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24b39aeb9 code=0x7ffc0000 [ 525.890180][ T5898] usb 1-1: config 8 interface 0 has no altsetting 0 [ 525.925133][ T5898] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 525.934568][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.943764][ T30] audit: type=1326 audit(1770285276.332:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24b39aeb9 code=0x7ffc0000 [ 525.973197][ T5898] usb 1-1: Product: syz [ 525.977423][ T5898] usb 1-1: Manufacturer: syz [ 525.982062][ T5898] usb 1-1: SerialNumber: syz [ 525.993911][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 526.006153][ T55] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 526.018835][T16101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.038366][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.076048][ T55] usb 2-1: Product: syz [ 526.085164][ T55] usb 2-1: Manufacturer: syz [ 526.089875][ T55] usb 2-1: SerialNumber: syz [ 526.107435][ T55] usb 2-1: config 0 descriptor?? [ 526.273749][ T5898] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.307290][ T5898] usb 1-1: selecting invalid altsetting 0 [ 526.355192][ T55] usb 2-1: can't set first interface for hiFace device. [ 526.379691][ T55] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 526.452937][ T55] usb 2-1: USB disconnect, device number 105 [ 526.529468][ T5898] usb 1-1: USB disconnect, device number 104 [ 526.648334][ T6723] udevd[6723]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.810909][T16157] netlink: 'syz.5.4307': attribute type 10 has an invalid length. [ 526.852724][T16157] hsr0: entered promiscuous mode [ 526.887455][T16157] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 526.938072][T16157] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 526.989810][T16157] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 527.103151][T16166] loop1: detected capacity change from 0 to 64 [ 527.206966][ T30] audit: type=1800 audit(1770285277.799:42): pid=16166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4311" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 527.349208][T16169] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 527.397833][T16169] bond1 (unregistering): Released all slaves [ 527.439381][T16179] netlink: 'syz.5.4316': attribute type 1 has an invalid length. [ 527.599717][T16152] loop4: detected capacity change from 0 to 32768 [ 527.670853][T16152] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 527.883275][T16152] XFS (loop4): Ending clean mount [ 527.935312][T16202] loop5: detected capacity change from 0 to 512 [ 527.993354][T16202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.038304][T16202] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.053073][ T5818] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 528.131078][T16202] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4325: corrupted xattr block 6: invalid header [ 528.332884][T15132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.669206][T16233] netlink: 'syz.5.4337': attribute type 10 has an invalid length. [ 528.710858][T16233] veth1_macvtap: left promiscuous mode [ 528.768277][T16235] loop0: detected capacity change from 0 to 256 [ 528.780518][T16235] exfat: Deprecated parameter 'namecase' [ 528.799244][T16235] exfat: Deprecated parameter 'utf8' [ 528.832815][T16235] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 529.146316][T16247] netlink: 'syz.1.4346': attribute type 1 has an invalid length. [ 529.181038][T16249] veth2: entered allmulticast mode [ 530.252282][T16259] __nla_validate_parse: 137 callbacks suppressed [ 530.252305][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4350'. [ 530.289465][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.361574][T16263] loop0: detected capacity change from 0 to 64 [ 530.435259][T16263] hfs: unable to locate alternate MDB [ 530.471992][T16263] hfs: continuing without an alternate MDB [ 530.562044][T16268] loop5: detected capacity change from 0 to 4096 [ 531.198532][T16299] loop4: detected capacity change from 0 to 256 [ 531.306824][T16299] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 531.571092][T16316] netlink: 'syz.4.4377': attribute type 1 has an invalid length. [ 531.619755][T16321] loop5: detected capacity change from 0 to 256 [ 531.651389][T16316] netlink: 'syz.4.4377': attribute type 1 has an invalid length. [ 531.719015][T16321] FAT-fs (loop5): Directory bread(block 64) failed [ 531.738965][T16321] FAT-fs (loop5): Directory bread(block 65) failed [ 531.755901][T16321] FAT-fs (loop5): Directory bread(block 66) failed [ 531.778540][T16321] FAT-fs (loop5): Directory bread(block 67) failed [ 531.794787][T16321] FAT-fs (loop5): Directory bread(block 68) failed [ 531.820604][T16321] FAT-fs (loop5): Directory bread(block 69) failed [ 531.852470][T16321] FAT-fs (loop5): Directory bread(block 70) failed [ 531.908590][T16321] FAT-fs (loop5): Directory bread(block 71) failed [ 531.915563][T16321] FAT-fs (loop5): Directory bread(block 72) failed [ 531.925422][T16321] FAT-fs (loop5): Directory bread(block 73) failed [ 531.934138][T16329] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 531.967564][T16326] loop1: detected capacity change from 0 to 4096 [ 531.992031][T16326] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 532.001967][T16331] netlink: 'syz.2.4383': attribute type 1 has an invalid length. [ 532.100812][T16326] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 532.300805][T16338] loop2: detected capacity change from 0 to 1024 [ 532.440007][ T5936] hfsplus: b-tree write err: -5, ino 4 [ 532.612399][T16353] netlink: 'syz.1.4394': attribute type 2 has an invalid length. [ 532.640330][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 532.731005][T16355] netlink: 'syz.5.4395': attribute type 4 has an invalid length. [ 533.222797][T16371] loop0: detected capacity change from 0 to 4096 [ 533.255075][T16371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.426330][T16388] loop2: detected capacity change from 0 to 4096 [ 533.471398][T16388] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 533.546154][T16388] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 533.562291][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.583320][T16388] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 533.605025][T16393] loop1: detected capacity change from 0 to 256 [ 533.685144][T16388] ntfs3(loop2): ino=1e, mi_enum_attr [ 533.717005][T16393] FAT-fs (loop1): Directory bread(block 64) failed [ 533.740239][T16388] ntfs3(loop2): ino=1e, mi_enum_attr [ 533.750847][T16393] FAT-fs (loop1): Directory bread(block 65) failed [ 533.773275][T16393] FAT-fs (loop1): Directory bread(block 66) failed [ 533.779866][T16393] FAT-fs (loop1): Directory bread(block 67) failed [ 533.808634][T16393] FAT-fs (loop1): Directory bread(block 68) failed [ 533.837850][T16393] FAT-fs (loop1): Directory bread(block 69) failed [ 533.864385][ T13] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 533.875293][T16397] exfat: Deprecated parameter 'namecase' [ 533.881679][T16393] FAT-fs (loop1): Directory bread(block 70) failed [ 533.900071][ T5823] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 533.907356][T16393] FAT-fs (loop1): Directory bread(block 71) failed [ 533.918012][ T5823] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 533.925829][T16397] exfat: Deprecated parameter 'namecase' [ 533.931779][T16393] FAT-fs (loop1): Directory bread(block 72) failed [ 533.942609][ T5823] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 533.951454][T16393] FAT-fs (loop1): Directory bread(block 73) failed [ 533.978796][ T3909] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 534.015112][T16397] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 534.087309][T16393] syz.1.4413: attempt to access beyond end of device [ 534.087309][T16393] loop1: rw=8912896, sector=1192, nr_sectors = 4 limit=256 [ 534.142354][T16393] syz.1.4413: attempt to access beyond end of device [ 534.142354][T16393] loop1: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 534.174953][T16361] jfs_strtoUCS: char2uni returned -22. [ 534.190378][T16361] charset = euc-jp, char = 0xd4 [ 534.214476][ T30] audit: type=1800 audit(1770285284.260:43): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4413" name="file1" dev="loop1" ino=1048630 res=0 errno=0 [ 534.388614][T16403] set_capacity_and_notify: 2 callbacks suppressed [ 534.388632][T16403] loop2: detected capacity change from 0 to 164 [ 534.480291][T16409] loop4: detected capacity change from 0 to 8 [ 534.487574][ T5927] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 534.593744][T16409] SQUASHFS error: Unable to read inode 0xe3 [ 534.717425][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 534.724864][ T5927] usb 1-1: config 0 has an invalid interface number: 119 but max is 4 [ 534.746450][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 534.768515][ T5927] usb 1-1: config 0 has no interface number 0 [ 534.816744][ T5927] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.855463][ T5927] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 534.892882][ T5927] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 534.924897][ T5927] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.006301][ T5927] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 535.039598][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.047876][ T5927] usb 1-1: Product: syz [ 535.066884][ T5927] usb 1-1: Manufacturer: syz [ 535.071588][ T5927] usb 1-1: SerialNumber: syz [ 535.117259][ T5927] usb 1-1: config 0 descriptor?? [ 535.155408][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input41 [ 535.312010][T16431] loop2: detected capacity change from 0 to 4096 [ 535.371990][T16431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.588330][ T5882] usb 1-1: USB disconnect, device number 105 [ 535.616391][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.896543][ T5898] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 535.969058][T16437] loop5: detected capacity change from 0 to 32768 [ 535.989790][T16437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4435 (16437) [ 536.023693][T16437] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 536.034213][T16437] BTRFS info (device loop5): using sha256 checksum algorithm [ 536.087223][ T5898] usb 5-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 536.118984][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 536.144344][T16437] BTRFS info (device loop5): enabling ssd optimizations [ 536.155519][ T5898] usb 5-1: SerialNumber: syz [ 536.164782][T16437] BTRFS info (device loop5): turning on async discard [ 536.197983][T16437] BTRFS info (device loop5): enabling free space tree [ 536.217766][ T5898] usb 5-1: config 0 descriptor?? [ 536.255536][ T5898] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 536.263321][ T5898] dvb-usb: bulk message failed: -22 (3/0) [ 536.323456][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 536.361676][T15132] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 536.378975][ T5898] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 536.408336][ T5898] usb 5-1: media controller created [ 536.430591][ T5898] dvb-usb: bulk message failed: -22 (5/0) [ 536.436458][ T5898] dvb-usb: MAC address reading failed. [ 536.461913][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.536770][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 536.543213][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 536.607395][ T5898] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 536.666630][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 536.711857][ T5898] dvb-usb: schedule remote query interval to 100 msecs. [ 536.731421][ T5898] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 536.747750][ T5898] usb 5-1: USB disconnect, device number 106 [ 536.898946][T16455] loop1: detected capacity change from 0 to 32768 [ 536.918763][T16488] cgroup: Unknown subsys name 'cpuset' [ 536.948514][T16455] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4443 (16455) [ 537.023438][T16455] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 537.071257][ T1735] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 537.077193][T16455] BTRFS info (device loop1): using sha256 checksum algorithm [ 537.212604][ T30] audit: type=1326 audit(1770285287.038:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 537.331976][ T30] audit: type=1326 audit(1770285287.038:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 537.391854][ T30] audit: type=1326 audit(1770285287.066:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 537.416497][ T30] audit: type=1326 audit(1770285287.066:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 537.439172][ T30] audit: type=1326 audit(1770285287.085:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 537.458017][T16455] BTRFS info (device loop1): enabling ssd optimizations [ 537.498062][T16516] loop5: detected capacity change from 0 to 256 [ 537.520357][T16455] BTRFS info (device loop1): turning on async discard [ 537.524459][ T30] audit: type=1326 audit(1770285287.085:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 537.553130][T16455] BTRFS info (device loop1): enabling free space tree [ 537.601090][ T30] audit: type=1326 audit(1770285287.085:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 537.656763][ T30] audit: type=1326 audit(1770285287.085:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 537.705939][T16516] FAT-fs (loop5): Directory bread(block 64) failed [ 537.712547][T16516] FAT-fs (loop5): Directory bread(block 65) failed [ 537.740482][ T30] audit: type=1326 audit(1770285287.085:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.5.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe87c19aeb9 code=0x7ffc0000 [ 537.759444][T16516] FAT-fs (loop5): Directory bread(block 66) failed [ 537.769389][T16516] FAT-fs (loop5): Directory bread(block 67) failed [ 537.830313][T16516] FAT-fs (loop5): Directory bread(block 68) failed [ 537.846404][T16516] FAT-fs (loop5): Directory bread(block 69) failed [ 537.853096][T16516] FAT-fs (loop5): Directory bread(block 70) failed [ 537.887782][T16516] FAT-fs (loop5): Directory bread(block 71) failed [ 537.929793][ T5898] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 538.008902][T16516] FAT-fs (loop5): Directory bread(block 72) failed [ 538.015498][T16516] FAT-fs (loop5): Directory bread(block 73) failed [ 538.145670][ T5817] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 539.135382][ T55] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 539.251585][T16558] loop4: detected capacity change from 0 to 512 [ 539.263617][T16530] loop0: detected capacity change from 0 to 32768 [ 539.291227][T16558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 539.313514][T16530] JBD2: Ignoring recovery information on journal [ 539.320100][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 539.327808][ T55] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 539.359028][T16558] EXT4-fs (loop4): 1 truncate cleaned up [ 539.364994][ T55] usb 6-1: config 0 has no interface number 0 [ 539.377882][ T55] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 539.398979][ T55] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 539.400283][T16558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.409532][ T55] usb 6-1: config 0 interface 41 has no altsetting 0 [ 539.430593][ T55] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 539.445541][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.456867][ T55] usb 6-1: Product: syz [ 539.461340][ T55] usb 6-1: Manufacturer: syz [ 539.467445][ T55] usb 6-1: SerialNumber: syz [ 539.489407][ T55] usb 6-1: config 0 descriptor?? [ 539.527928][T16549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 539.535273][T16549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 539.543863][T16530] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 539.673012][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.703442][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 539.703491][ T30] audit: type=1800 audit(1770285289.346:54): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4463" name="file0" dev="loop0" ino=17056 res=0 errno=0 [ 539.722445][T16544] loop2: detected capacity change from 0 to 32768 [ 539.818182][T16549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 539.826983][T16549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 539.907089][ T5828] ocfs2: Unmounting device (7,0) on (node local) [ 540.113312][ T55] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 540.179146][ T55] usb 6-1: USB disconnect, device number 3 [ 540.478608][T16589] netlink: 'syz.4.4490': attribute type 10 has an invalid length. [ 540.493503][T16589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4490'. [ 540.527802][T16589] batman_adv: batadv0: Adding interface: virt_wifi0 [ 540.547823][T16589] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.620461][T16589] batman_adv: batadv0: Interface activated: virt_wifi0 [ 540.977656][ T55] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 541.174904][T16620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4503'. [ 541.188228][T16621] Sensor B: ================= START STATUS ================= [ 541.207104][ T55] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 541.218075][T16623] loop4: detected capacity change from 0 to 16 [ 541.226155][T16621] Sensor B: Test Pattern: 75% Colorbar [ 541.234350][T16621] Sensor B: Show Information: All [ 541.238937][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.247458][ T55] usb 1-1: Product: syz [ 541.254512][T16621] Sensor B: Vertical Flip: false [ 541.259738][T16623] erofs (device loop4): mounted with root inode @ nid 36. [ 541.269349][T16621] Sensor B: Horizontal Flip: false [ 541.281946][T16621] Sensor B: Brightness: 128 [ 541.298071][T16621] Sensor B: Contrast: 128 [ 541.301982][ T55] usb 1-1: Manufacturer: syz [ 541.313762][ T55] usb 1-1: SerialNumber: syz [ 541.318154][T16621] Sensor B: Hue: 0 [ 541.345005][T16621] Sensor B: Saturation: 128 [ 541.359858][T16621] Sensor B: ================== END STATUS ================== [ 541.374140][ T55] usb 1-1: config 0 descriptor?? [ 541.443579][ T55] ch341 1-1:0.0: ch341-uart converter detected [ 541.870975][ T55] usb 1-1: failed to send control message: -71 [ 541.887020][ T55] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 541.922140][T16639] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.4514'. [ 541.952636][ T55] usb 1-1: USB disconnect, device number 106 [ 541.964642][ T55] ch341 1-1:0.0: device disconnected [ 541.968013][T16639] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.4514'. [ 542.570155][T16631] loop1: detected capacity change from 0 to 32768 [ 542.602984][T16631] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4510 (16631) [ 542.673220][T16631] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 542.721842][T16631] BTRFS info (device loop1): using sha256 checksum algorithm [ 542.832320][T16682] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4529'. [ 542.900664][T16631] BTRFS info (device loop1): enabling ssd optimizations [ 542.948658][T16631] BTRFS info (device loop1): turning on async discard [ 542.984444][T16631] BTRFS info (device loop1): enabling free space tree [ 543.252322][T16702] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4538'. [ 543.264162][T16702] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4538'. [ 543.280186][ T5817] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 543.538866][T16708] loop5: detected capacity change from 0 to 256 [ 543.560779][T16708] exfat: Deprecated parameter 'namecase' [ 543.577077][T16708] exfat: Deprecated parameter 'utf8' [ 543.637823][T16708] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 543.768081][T16722] netlink: 'syz.0.4548': attribute type 16 has an invalid length. [ 544.286827][T16740] loop4: detected capacity change from 0 to 256 [ 544.526000][T16745] loop2: detected capacity change from 0 to 2048 [ 544.613694][T16745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.729418][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.800950][T16730] loop5: detected capacity change from 0 to 32768 [ 544.813032][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4564'. [ 544.828898][T16757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4564'. [ 544.840877][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4564'. [ 544.922153][T16730] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4551 (16730) [ 544.974599][T16730] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 545.018164][T16730] BTRFS info (device loop5): using sha256 checksum algorithm [ 545.169038][T16779] geneve2: entered promiscuous mode [ 545.194759][T16730] BTRFS info (device loop5): enabling ssd optimizations [ 545.208676][T16730] BTRFS info (device loop5): turning on async discard [ 545.214276][ T29] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 545.225500][T16730] BTRFS info (device loop5): enabling free space tree [ 545.393691][T16788] IPv6: Can't replace route, no match found [ 545.441497][ T29] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 545.449663][ T29] usb 2-1: config 0 has no interface number 0 [ 545.474802][ T29] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 545.493191][T15132] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 545.514639][ T29] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.547720][ T29] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 545.561170][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.579478][ T29] usb 2-1: Product: syz [ 545.592139][ T29] usb 2-1: Manufacturer: syz [ 545.602146][ T29] usb 2-1: SerialNumber: syz [ 545.679807][ T29] usb 2-1: config 0 descriptor?? [ 545.694375][T16761] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 545.717442][ T29] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 545.787800][ T29] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 546.171880][T16811] netlink: 'syz.5.4583': attribute type 8 has an invalid length. [ 546.214677][T16806] loop4: detected capacity change from 0 to 4096 [ 546.251369][T16806] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 546.279952][ T29] usb 2-1: USB disconnect, device number 106 [ 546.304000][ T29] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 546.321137][ T29] cyberjack 2-1:0.69: device disconnected [ 546.420750][T16806] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 546.505076][T16819] netlink: 'syz.2.4587': attribute type 1 has an invalid length. [ 546.512926][T16819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.639093][T16823] loop5: detected capacity change from 0 to 1024 [ 546.724736][T16823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.837752][T16823] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.5.4589: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 546.876324][T16823] EXT4-fs error (device loop5) in ext4_delete_inline_entry:1697: Corrupt filesystem [ 546.996331][T15132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.390921][T16853] __nla_validate_parse: 2 callbacks suppressed [ 547.390943][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 547.532273][T16853] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 547.725842][T16870] loop2: detected capacity change from 0 to 256 [ 547.873520][T16870] FAT-fs (loop2): Directory bread(block 64) failed [ 547.892495][T16870] FAT-fs (loop2): Directory bread(block 65) failed [ 547.914589][T16870] FAT-fs (loop2): Directory bread(block 66) failed [ 547.921351][T16870] FAT-fs (loop2): Directory bread(block 67) failed [ 547.921508][ T29] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 547.942009][T16870] FAT-fs (loop2): Directory bread(block 68) failed [ 547.973789][T16870] FAT-fs (loop2): Directory bread(block 69) failed [ 547.986534][T16870] FAT-fs (loop2): Directory bread(block 70) failed [ 548.003758][T16870] FAT-fs (loop2): Directory bread(block 71) failed [ 548.037282][T16870] FAT-fs (loop2): Directory bread(block 72) failed [ 548.067360][T16870] FAT-fs (loop2): Directory bread(block 73) failed [ 548.102708][T16883] loop1: detected capacity change from 0 to 128 [ 548.141670][ T29] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 548.154338][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 548.181041][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 548.210011][ T29] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 548.226459][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.256750][ T29] usb 1-1: Product: syz [ 548.262988][ T29] usb 1-1: Manufacturer: syz [ 548.278314][ T29] usb 1-1: SerialNumber: syz [ 548.323455][ T29] usb 1-1: config 0 descriptor?? [ 549.209069][T16934] loop4: detected capacity change from 0 to 512 [ 549.294124][T16934] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 549.378928][T16934] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4623: bad orphan inode 131083 [ 549.437142][T16934] loop4: lost filesystem error report for type 5 error -117 [ 549.438234][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 549.452110][ C1] EXT4-fs (loop4): initial error at time 1770285298: ext4_orphan_get:1417 [ 549.460720][ C1] EXT4-fs (loop4): last error at time 1770285298: ext4_orphan_get:1417 [ 549.476873][T16934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.625742][T16934] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.4623: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 549.818386][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4634'. [ 549.954123][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.429327][T16972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4641'. [ 550.676194][T16953] loop5: detected capacity change from 0 to 32768 [ 550.751577][T16953] [ 550.751577][T16953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 550.751577][T16953] [ 550.851517][T16953] read_mapping_page failed! [ 550.856405][T16953] ERROR: (device loop5): txCommit: [ 550.856405][T16953] [ 551.081848][T15132] [ 551.081848][T15132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 551.081848][T15132] [ 551.140627][T15132] [ 551.140627][T15132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 551.140627][T15132] [ 551.159851][ T30] audit: type=1326 audit(1770285299.896:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.0.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918299aeb9 code=0x7ffc0000 [ 551.297230][ T30] audit: type=1326 audit(1770285299.896:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.0.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f918299aeb9 code=0x7ffc0000 [ 551.297285][ T30] audit: type=1326 audit(1770285299.896:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.0.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918299aeb9 code=0x7ffc0000 [ 551.297332][ T30] audit: type=1326 audit(1770285299.896:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.0.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918299aeb9 code=0x7ffc0000 [ 552.082088][ T5899] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 552.119924][T17023] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 552.277128][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 552.286445][ T5899] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 552.343653][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.351721][ T5899] usb 2-1: Product: syz [ 552.368932][T17030] loop2: detected capacity change from 0 to 128 [ 552.397230][ T5899] usb 2-1: Manufacturer: syz [ 552.401902][ T5899] usb 2-1: SerialNumber: syz [ 552.468152][ T5899] usb 2-1: config 0 descriptor?? [ 552.489967][ T5899] gspca_main: sq930x-2.14.0 probing 2770:930c [ 552.943939][ T5899] gspca_sq930x: ucbus_write failed -71 [ 553.209312][ T5899] gspca_sq930x: Sensor ov9630 not yet treated [ 553.218722][ T5899] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 553.244310][ T5899] usb 2-1: USB disconnect, device number 107 [ 553.260400][T17052] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 553.483892][T17061] loop0: detected capacity change from 0 to 64 [ 553.631788][T17061] [ 553.634188][T17061] ====================================================== [ 553.641239][T17061] WARNING: possible circular locking dependency detected [ 553.648312][T17061] syzkaller #0 Not tainted [ 553.652751][T17061] ------------------------------------------------------ [ 553.659807][T17061] syz.0.4686/17061 is trying to acquire lock: [ 553.665914][T17061] ffff888053f4c0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 553.675298][T17061] [ 553.675298][T17061] but task is already holding lock: [ 553.682696][T17061] ffff88803570e8f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 553.693628][T17061] [ 553.693628][T17061] which lock already depends on the new lock. [ 553.693628][T17061] [ 553.704066][T17061] [ 553.704066][T17061] the existing dependency chain (in reverse order) is: [ 553.713149][T17061] [ 553.713149][T17061] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 553.722417][T17061] __mutex_lock+0x19f/0x1300 [ 553.728021][T17061] hfs_extend_file+0xf2/0x15e0 [ 553.733368][T17061] hfs_bmap_reserve+0x107/0x430 [ 553.738812][T17061] __hfs_ext_write_extent+0x1fa/0x470 [ 553.744750][T17061] hfs_ext_write_extent+0x17e/0x210 [ 553.750515][T17061] hfs_write_inode+0x117/0x960 [ 553.755859][T17061] __writeback_single_inode+0x75a/0x11a0 [ 553.762055][T17061] writeback_sb_inodes+0x944/0x19a0 [ 553.767816][T17061] wb_writeback+0x456/0xb70 [ 553.772887][T17061] wb_workfn+0x414/0xf50 [ 553.777688][T17061] process_one_work+0x949/0x1650 [ 553.783195][T17061] worker_thread+0xb46/0x1140 [ 553.788436][T17061] kthread+0x388/0x470 [ 553.793057][T17061] ret_from_fork+0x51e/0xb90 [ 553.798214][T17061] ret_from_fork_asm+0x1a/0x30 [ 553.803550][T17061] [ 553.803550][T17061] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 553.811517][T17061] __lock_acquire+0x15a5/0x2cf0 [ 553.816946][T17061] lock_acquire+0xf0/0x2e0 [ 553.821938][T17061] __mutex_lock+0x19f/0x1300 [ 553.827119][T17061] hfs_find_init+0x18e/0x300 [ 553.832280][T17061] hfs_extend_file+0x35c/0x15e0 [ 553.837703][T17061] hfs_bmap_reserve+0x107/0x430 [ 553.843128][T17061] hfs_cat_create+0x20f/0x800 [ 553.848455][T17061] hfs_mkdir+0x6c/0xe0 [ 553.853081][T17061] vfs_mkdir+0x413/0x630 [ 553.858062][T17061] filename_mkdirat+0x285/0x510 [ 553.863485][T17061] __se_sys_mkdir+0x34/0x150 [ 553.868642][T17061] do_syscall_64+0x14d/0xf80 [ 553.873789][T17061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.880237][T17061] [ 553.880237][T17061] other info that might help us debug this: [ 553.880237][T17061] [ 553.890498][T17061] Possible unsafe locking scenario: [ 553.890498][T17061] [ 553.898072][T17061] CPU0 CPU1 [ 553.903562][T17061] ---- ---- [ 553.908971][T17061] lock(&HFS_I(tree->inode)->extents_lock); [ 553.914994][T17061] lock(&tree->tree_lock/1); [ 553.922235][T17061] lock(&HFS_I(tree->inode)->extents_lock); [ 553.930766][T17061] lock(&tree->tree_lock/1); [ 553.935476][T17061] [ 553.935476][T17061] *** DEADLOCK *** [ 553.935476][T17061] [ 553.943632][T17061] 4 locks held by syz.0.4686/17061: [ 553.948840][T17061] #0: ffff88807e934420 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 553.958169][T17061] #1: ffff888035709620 (&type->i_mutex_dir_key#10/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 553.968951][T17061] #2: ffff888053f480b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 553.978598][T17061] #3: ffff88803570e8f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 553.989874][T17061] [ 553.989874][T17061] stack backtrace: [ 553.995810][T17061] CPU: 0 UID: 0 PID: 17061 Comm: syz.0.4686 Not tainted syzkaller #0 PREEMPT(full) [ 553.995833][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 553.995849][T17061] Call Trace: [ 553.995857][T17061] [ 553.995867][T17061] dump_stack_lvl+0xe8/0x150 [ 553.995901][T17061] print_circular_bug+0x2e1/0x300 [ 553.995932][T17061] check_noncircular+0x12e/0x150 [ 553.995961][T17061] __lock_acquire+0x15a5/0x2cf0 [ 553.995991][T17061] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 553.996012][T17061] ? kasan_save_track+0x4f/0x80 [ 553.996030][T17061] ? kasan_save_track+0x3e/0x80 [ 553.996049][T17061] ? __kasan_kmalloc+0x93/0xb0 [ 553.996069][T17061] ? __kmalloc_noprof+0x35c/0x760 [ 553.996087][T17061] ? hfs_find_init+0xaa/0x300 [ 553.996109][T17061] ? hfs_extend_file+0x35c/0x15e0 [ 553.996125][T17061] ? hfs_bmap_reserve+0x107/0x430 [ 553.996152][T17061] lock_acquire+0xf0/0x2e0 [ 553.996172][T17061] ? hfs_find_init+0x18e/0x300 [ 553.996198][T17061] __mutex_lock+0x19f/0x1300 [ 553.996222][T17061] ? hfs_find_init+0x18e/0x300 [ 553.996255][T17061] ? hfs_find_init+0x18e/0x300 [ 553.996280][T17061] ? __pfx___mutex_lock+0x10/0x10 [ 553.996300][T17061] ? rcu_is_watching+0x15/0xb0 [ 553.996325][T17061] ? __kmalloc_noprof+0x37d/0x760 [ 553.996341][T17061] ? kasan_save_track+0x4f/0x80 [ 553.996356][T17061] ? hfs_find_init+0xaa/0x300 [ 553.996376][T17061] ? __kmalloc_noprof+0x1b8/0x760 [ 553.996399][T17061] hfs_find_init+0x18e/0x300 [ 553.996427][T17061] hfs_extend_file+0x35c/0x15e0 [ 553.996449][T17061] ? __pfx_hfs_extend_file+0x10/0x10 [ 553.996466][T17061] ? __mutex_lock+0x319/0x1300 [ 553.996493][T17061] ? __pfx___mutex_lock+0x10/0x10 [ 553.996512][T17061] ? rcu_is_watching+0x15/0xb0 [ 553.996538][T17061] hfs_bmap_reserve+0x107/0x430 [ 553.996573][T17061] hfs_cat_create+0x20f/0x800 [ 553.996595][T17061] ? __pfx_hfs_cat_create+0x10/0x10 [ 553.996624][T17061] ? hfs_new_inode+0x838/0xbd0 [ 553.996647][T17061] hfs_mkdir+0x6c/0xe0 [ 553.996663][T17061] vfs_mkdir+0x413/0x630 [ 553.996684][T17061] filename_mkdirat+0x285/0x510 [ 553.996705][T17061] ? __pfx_filename_mkdirat+0x10/0x10 [ 553.996724][T17061] ? do_getname+0x151/0x250 [ 553.996746][T17061] __se_sys_mkdir+0x34/0x150 [ 553.996771][T17061] do_syscall_64+0x14d/0xf80 [ 553.996794][T17061] ? trace_irq_disable+0x3b/0x150 [ 553.996821][T17061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.996839][T17061] ? clear_bhb_loop+0x40/0x90 [ 553.996858][T17061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.996880][T17061] RIP: 0033:0x7f918299aeb9 [ 553.996897][T17061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.996913][T17061] RSP: 002b:00007f9183772028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 553.996936][T17061] RAX: ffffffffffffffda RBX: 00007f9182c15fa0 RCX: 00007f918299aeb9 [ 553.996954][T17061] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 553.996983][T17061] RBP: 00007f9182a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 553.996995][T17061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.997005][T17061] R13: 00007f9182c16038 R14: 00007f9182c15fa0 R15: 00007ffe6003cff8 [ 553.997025][T17061] [ 560.099378][ T29] iguanair 1-1:0.0: failed to get version [ 560.105321][ T29] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 560.120276][ T29] usb 1-1: USB disconnect, device number 107