last executing test programs: 3m53.293660909s ago: executing program 1 (id=120): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd(0x7ff) 3m53.147630298s ago: executing program 1 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000023c0)='./file0\x00', &(0x7f0000002380)='vxfs\x00', 0x2008410, 0x0) 3m52.945216417s ago: executing program 1 (id=122): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68000000071401"], 0x68}}, 0x0) 3m52.868174607s ago: executing program 1 (id=123): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x23694ca, 0x0) 3m52.565449797s ago: executing program 1 (id=130): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0xff95) 3m52.003152694s ago: executing program 1 (id=140): r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0x20000000, 0x4) 3m51.718862594s ago: executing program 32 (id=140): r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0x20000000, 0x4) 2.388465597s ago: executing program 4 (id=4480): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.249720186s ago: executing program 4 (id=4484): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0xffff8881a56043d8}}}) 2.218954936s ago: executing program 4 (id=4486): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000200)={[{@nostrict}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@adinicb}, {@uid}, {@shortad}, {}, {@unhide}, {@unhide}]}, 0x1, 0xc45, &(0x7f0000001d40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1.778112385s ago: executing program 4 (id=4496): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 1.425513824s ago: executing program 4 (id=4502): r0 = socket(0x23, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) 1.181785463s ago: executing program 5 (id=4505): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x10000) 1.047658093s ago: executing program 4 (id=4507): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204c08, &(0x7f00000000c0)={[{@space_cache_v2}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0xa, 0x2, {0x2, @struct={0x7f}, 0x0, 0x10000000000002, 0x0, 0x6, 0x7e, 0x88000, 0xe8, @usage=0x200, 0x0, 0x40000, [0x100000001, 0x1, 0x0, 0x0, 0x10]}, {0x10000000000000, @struct={0xd4d, 0xaf8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @struct={0x4, 0x3}, 0x81, 0x2, [0x0, 0x100000000000002, 0x3, 0x0, 0x0, 0xfffffffffffffffd]}, {0x5, @struct={0x0, 0xef6e}, 0x0, 0x40000000000, 0x7, 0x0, 0x200000000, 0x0, 0x48c, @struct={0x12, 0x8}, 0x0, 0xfd, [0x7612, 0x0, 0xb, 0x200000000000]}, {0x100000000, 0xffffffff, 0x9}}) 932.985572ms ago: executing program 3 (id=4509): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000440)={0x0, @reserved}) 800.788492ms ago: executing program 3 (id=4512): r0 = syz_io_uring_setup(0x6be, &(0x7f00000009c0), &(0x7f0000000a40), &(0x7f0000000a80)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x5, 0x0, 0x0) 785.154232ms ago: executing program 5 (id=4513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 738.493872ms ago: executing program 2 (id=4515): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x140, 0x0) 676.106692ms ago: executing program 5 (id=4516): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x7) 675.713352ms ago: executing program 3 (id=4518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000080000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000010480000000c0a01020000000000000000010000000900020073797a32000000000900010073797a30000000001c0003801800008004000180040007800c0005"], 0xd4}}, 0x0) 619.614162ms ago: executing program 0 (id=4519): r0 = socket(0x11, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x107, 0x11, 0x0, 0x20000000) 578.204662ms ago: executing program 3 (id=4520): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x24c, &(0x7f0000002840)="$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") chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 575.505942ms ago: executing program 2 (id=4521): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x121101, 0x0) write$UHID_INPUT2(r0, &(0x7f00000000c0)={0x6, {0x62, "fe813594089329e2b52f458c5ced477b93da5cfd7756771689ffc3307365820a8817c841bb7dd2eeed18037543e66eb8ea5594eefae4652e6903ba8dbee54f2a5350c0a6002463216f402780fa155eaa107ac1ee14dd54b78c0bfb4f795050e20a13"}}, 0x68) 568.977051ms ago: executing program 5 (id=4522): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000001300)={{0x3, 0x0, 0x1, 0x1}}) 531.749441ms ago: executing program 0 (id=4523): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x15, 0x0, &(0x7f0000000800)) 469.097271ms ago: executing program 5 (id=4524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000007c0)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1, 0x3, 0x7ff, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x20, 0x2016, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8000) 456.548411ms ago: executing program 2 (id=4525): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a7bd6"], 0x68}}, 0x0) 420.141101ms ago: executing program 0 (id=4526): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2b900, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000040)=0x1) 375.715371ms ago: executing program 3 (id=4527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x64}}, 0x0) 373.851431ms ago: executing program 5 (id=4528): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 305.84963ms ago: executing program 2 (id=4529): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x5, 0x4) 275.84963ms ago: executing program 0 (id=4530): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000014c0)={&(0x7f0000000440)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 212.49128ms ago: executing program 3 (id=4531): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800411, &(0x7f00000000c0)={[{@usebackuproot}, {@max_inline={'max_inline', 0x3d, [0x37, 0x65, 0x6]}}, {@flushoncommit}]}, 0x0, 0x5105, &(0x7f0000000180)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) 166.37645ms ago: executing program 2 (id=4532): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001280)='/sys/power/reserved_size', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xa) 138.75691ms ago: executing program 0 (id=4533): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000001340)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=win95,nonumtail=0,iocharset=euc-jp,utf8=0,uni_xlate=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x6, 0x2d3, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 5.83306ms ago: executing program 2 (id=4534): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) 0s ago: executing program 0 (id=4535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000085000000230000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): d symbol dib7000p_attach() [ 218.900247][ T13] dvb-usb: no frontend was attached by 'Gigabyte U8000-RH' [ 218.948483][T10773] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.015030][ T5458] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 219.095105][ T13] rc_core: IR keymap rc-dib0700-rc5 not found [ 219.101271][ T13] Registered IR keymap rc-empty [ 219.108061][ T13] dvb-usb: could not initialize remote control. [ 219.114362][ T13] dvb-usb: Gigabyte U8000-RH successfully initialized and connected. [ 219.148435][ T13] usb 5-1: USB disconnect, device number 13 [ 219.177354][ T13] dvb-usb: Gigabyte U8000-RH successfully deinitialized and disconnected. [ 219.235042][ T1110] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 219.279047][T10786] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 219.289497][ T4810] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 219.364729][T10790] loop4: detected capacity change from 0 to 512 [ 219.393589][T10790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 219.402384][T10790] System zones: 1-12 [ 219.408388][T10790] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2747: inode #1: comm syz.4.2747: iget: illegal inode # [ 219.421836][ T5459] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 219.431518][T10790] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2747: error while reading EA inode 1 err=-117 [ 219.444369][ T5458] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 219.450582][T10790] EXT4-fs (loop4): 1 orphan inode deleted [ 219.453508][ T5458] usb 1-1: config 0 has no interface number 0 [ 219.462234][T10790] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,journal_dev=0x0000000000000002,debug,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 219.502103][T10790] EXT4-fs error (device loop4): ext4_lookup:1855: inode #2: comm syz.4.2747: 'file0' linked to parent dir [ 219.515272][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 219.635564][ T1110] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 219.643880][ T1110] usb 4-1: config 0 has no interface number 0 [ 219.655226][ T4810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.655456][ T5458] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=9e.3c [ 219.681678][ T5458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.711277][ T5459] usb 6-1: Using ep0 maxpacket: 32 [ 219.718368][ T5458] usb 1-1: Product: syz [ 219.722730][ T5458] usb 1-1: Manufacturer: syz [ 219.733380][ T5458] usb 1-1: SerialNumber: syz [ 219.741131][ T5458] usb 1-1: config 0 descriptor?? [ 219.751882][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2750'. [ 219.755948][ T4810] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.771198][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.780819][ T4810] usb 3-1: SerialNumber: syz [ 219.811949][ T5458] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 219.826332][ T4810] cdc_ether 3-1:1.0: skipping garbage [ 219.830585][ T5458] dvb-usb: bulk message failed: -22 (3/0) [ 219.831829][ T4810] usb 3-1: bad CDC descriptors [ 219.842689][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 219.852763][ T1110] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 219.864145][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.875210][ T1110] usb 4-1: Product: syz [ 219.879419][ T1110] usb 4-1: Manufacturer: syz [ 219.880533][ T5458] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.895106][ T1110] usb 4-1: SerialNumber: syz [ 219.906858][ T1110] usb 4-1: config 0 descriptor?? [ 219.925499][ T5458] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 219.933790][ T5458] usb 1-1: media controller created [ 219.970890][ T5458] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.029693][ T5459] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 220.038960][ T4810] usb 3-1: USB disconnect, device number 15 [ 220.045331][ T5459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.053506][ T5458] DVB: Unable to find symbol mt352_attach() [ 220.074614][ T5458] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 220.083130][ T5459] usb 6-1: Product: syz [ 220.087674][ T5459] usb 6-1: Manufacturer: syz [ 220.092289][ T5459] usb 6-1: SerialNumber: syz [ 220.100006][ T5459] usb 6-1: config 0 descriptor?? [ 220.135725][ T5458] dvb-usb: bulk message failed: -22 (3/0) [ 220.159987][T10810] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.170134][ T1110] usb 4-1: Found multiple Units with ID 1 [ 220.171645][ T5458] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 220.197807][ T5458] usb 1-1: USB disconnect, device number 14 [ 220.272813][ T5458] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 220.391464][ T5459] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 220.402949][ T4810] usb 4-1: USB disconnect, device number 13 [ 220.404973][ T5459] RobotFuzz Open Source InterFace, OSIF: probe of 6-1:0.0 failed with error -71 [ 220.455976][ T5459] usb 6-1: USB disconnect, device number 12 [ 220.602544][T10822] netlink: 'syz.2.2762': attribute type 4 has an invalid length. [ 220.610771][T10822] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2762'. [ 220.708169][T10826] loop0: detected capacity change from 0 to 1024 [ 220.775254][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 220.861764][T10834] loop2: detected capacity change from 0 to 256 [ 220.951087][T10834] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84977, utbl_chksum : 0xe619d30d) [ 221.023552][T10840] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2771'. [ 221.024997][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 221.111526][T10844] loop3: detected capacity change from 0 to 8 [ 221.185336][ T7] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 221.193763][ T7] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 221.219506][T10844] SQUASHFS error: Unable to read inode 0x87 [ 221.226798][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.254952][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 221.264456][ T7] usb 5-1: config 1 has no interface number 0 [ 221.285708][ T7] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 221.325002][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.377835][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 221.388904][T10858] netlink: 'syz.0.2781': attribute type 1 has an invalid length. [ 221.448314][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 221.464488][T10862] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 221.533262][T10864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2779'. [ 221.595239][ T7] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 221.618343][ T7] snd_usb_pod 5-1:1.1: invalid control EP [ 221.630437][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2785'. [ 221.639773][ T7] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 221.655056][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 221.675575][ T7] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 221.793331][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2790'. [ 221.818565][T10878] loop5: detected capacity change from 0 to 512 [ 221.844269][ T7] usb 5-1: USB disconnect, device number 14 [ 221.855531][ T4810] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 221.921728][T10878] EXT4-fs (loop5): inline encryption not supported [ 221.960093][T10878] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 222.074656][T10878] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.2789: corrupted inode contents [ 222.095597][T10878] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #2: comm syz.5.2789: mark_inode_dirty error [ 222.121211][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 222.127252][T10878] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.2789: corrupted inode contents [ 222.199036][T10878] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.2789: mark_inode_dirty error [ 222.274551][ T4810] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 222.294054][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.315619][ T4810] usb 3-1: config 0 descriptor?? [ 222.479603][T10887] loop0: detected capacity change from 0 to 32768 [ 222.575194][ T4810] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 222.623878][T10900] netlink: 'syz.4.2800': attribute type 21 has an invalid length. [ 222.626082][T10887] ialloc: diAlloc returned -5! [ 222.640684][T10898] loop5: detected capacity change from 0 to 4096 [ 222.686326][T10892] loop3: detected capacity change from 0 to 32768 [ 222.729342][T10892] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2796 (10892) [ 222.790648][T10906] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.795172][ T4810] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 222.821503][ T4810] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 222.843559][T10892] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 222.851062][ T4810] asix: probe of 3-1:0.0 failed with error -71 [ 222.867564][T10892] BTRFS info (device loop3): using free space tree [ 222.874448][T10892] BTRFS info (device loop3): has skinny extents [ 222.902921][ T4810] usb 3-1: USB disconnect, device number 16 [ 222.954726][T10898] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 223.001485][T10898] Remounting filesystem read-only [ 223.090128][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2808'. [ 223.106222][ T4587] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 223.140695][ T4587] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 223.177205][ T4587] NILFS (loop5): discard dirty page: offset=794624, ino=3 [ 223.184384][ T4587] NILFS (loop5): discard dirty block: blocknr=35, size=4096 [ 223.215820][T10892] BTRFS info (device loop3): enabling ssd optimizations [ 223.247830][T10940] loop0: detected capacity change from 0 to 1024 [ 223.379334][T10940] attempt to access beyond end of device [ 223.379334][T10940] loop0: rw=0, want=5780, limit=1024 [ 223.411383][ T9977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (9977) [ 224.031775][T10963] libceph: resolve '400' (ret=-3): failed [ 224.176137][T10970] xt_hashlimit: invalid interval [ 224.200797][ T5458] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 224.277832][T10972] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2826'. [ 224.301243][T10972] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2826'. [ 224.560471][T10987] netlink: 'syz.2.2832': attribute type 12 has an invalid length. [ 224.599902][ T5458] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 224.653261][ T5458] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.688911][ T5458] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.716953][T10946] loop4: detected capacity change from 0 to 32768 [ 224.730447][ T5458] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 224.747913][ T5458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.772587][ T5458] usb 6-1: config 0 descriptor?? [ 224.796176][T10946] XFS: ikeep mount option is deprecated. [ 224.816754][ T5458] usb-storage 6-1:0.0: USB Mass Storage device detected [ 224.838297][T11002] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2839'. [ 224.849656][ T5458] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 224.979055][T10946] XFS (loop4): Mounting V5 Filesystem [ 225.023824][ T13] usb 6-1: USB disconnect, device number 13 [ 225.162744][T10946] XFS (loop4): Ending clean mount [ 225.188832][T10946] XFS (loop4): Quotacheck needed: Please wait. [ 225.243606][ T9] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_cntbt block 0x8 [ 225.271053][ T9] XFS (loop4): Unmount and run xfs_repair [ 225.288227][ T9] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 225.306888][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 225.323242][ T9] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80 ................ [ 225.333263][ T9] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 225.343691][ T9] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 225.398252][ T9] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 225.431094][ T9] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00 ................ [ 225.467698][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.480067][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 225.491055][ T9] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 4 error 74 [ 225.522075][T10946] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 225.675499][T11038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.677835][T11042] __nla_validate_parse: 1 callbacks suppressed [ 225.677853][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2854'. [ 225.732549][T11038] bond0: (slave rose0): Enslaving as an active interface with an up link [ 225.748097][ T4169] XFS (loop4): Unmounting Filesystem [ 225.765889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 225.945697][T11053] loop3: detected capacity change from 0 to 256 [ 226.090435][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2862'. [ 226.100413][T11053] FAT-fs (loop3): Directory bread(block 64) failed [ 226.127687][T11053] FAT-fs (loop3): Directory bread(block 65) failed [ 226.140869][T11060] openvswitch: netlink: Missing key (keys=40, expected=80) [ 226.165274][T11053] FAT-fs (loop3): Directory bread(block 66) failed [ 226.171850][T11053] FAT-fs (loop3): Directory bread(block 67) failed [ 226.216434][T11053] FAT-fs (loop3): Directory bread(block 68) failed [ 226.287198][T11053] FAT-fs (loop3): Directory bread(block 69) failed [ 226.293923][T11053] FAT-fs (loop3): Directory bread(block 70) failed [ 226.378530][T11053] FAT-fs (loop3): Directory bread(block 71) failed [ 226.427715][T11053] FAT-fs (loop3): Directory bread(block 72) failed [ 226.434313][T11053] FAT-fs (loop3): Directory bread(block 73) failed [ 226.667634][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2856'. [ 226.944478][T11043] loop0: detected capacity change from 0 to 32768 [ 227.079808][T11043] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2853 (11043) [ 227.184215][T11043] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 227.260641][T11043] BTRFS info (device loop0): force clearing of disk cache [ 227.262525][T11108] loop2: detected capacity change from 0 to 4096 [ 227.313516][T11043] BTRFS info (device loop0): setting nodatasum [ 227.335345][T11043] BTRFS info (device loop0): use zlib compression, level 3 [ 227.373663][T11043] BTRFS info (device loop0): allowing degraded mounts [ 227.402253][T11108] NILFS (loop2): mounting unchecked fs [ 227.419546][T11043] BTRFS info (device loop0): enabling disk space caching [ 227.427225][T11123] netlink: 'syz.3.2882': attribute type 10 has an invalid length. [ 227.450111][T11116] loop5: detected capacity change from 0 to 4096 [ 227.457586][T11108] NILFS (loop2): recovery required for readonly filesystem [ 227.464858][T11108] NILFS (loop2): write access will be enabled during recovery [ 227.472554][T11043] BTRFS info (device loop0): disk space caching is enabled [ 227.489233][T11043] BTRFS info (device loop0): has skinny extents [ 227.513414][T11108] NILFS (loop2): invalid segment: Checksum error in segment payload [ 227.540499][T11108] NILFS (loop2): trying rollback from an earlier position [ 227.564502][T11108] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 227.695372][T11108] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 227.697151][T11116] ntfs3: loop5: ino=5, "/" directory corrupted [ 227.718330][T11116] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 227.822628][T11150] loop4: detected capacity change from 0 to 256 [ 228.006755][T11043] BTRFS info (device loop0): enabling ssd optimizations [ 228.019230][T11043] BTRFS info (device loop0): clearing free space tree [ 228.026943][T11043] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 228.037665][T11043] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 228.053003][T11150] FAT-fs (loop4): Directory bread(block 64) failed [ 228.087944][T11150] FAT-fs (loop4): Directory bread(block 65) failed [ 228.098138][T11150] FAT-fs (loop4): Directory bread(block 66) failed [ 228.104721][T11150] FAT-fs (loop4): Directory bread(block 67) failed [ 228.170821][T11150] FAT-fs (loop4): Directory bread(block 68) failed [ 228.180582][T11167] xt_socket: unknown flags 0xc [ 228.201174][T11150] FAT-fs (loop4): Directory bread(block 69) failed [ 228.219298][T11150] FAT-fs (loop4): Directory bread(block 70) failed [ 228.248554][T11150] FAT-fs (loop4): Directory bread(block 71) failed [ 228.313743][T11150] FAT-fs (loop4): Directory bread(block 72) failed [ 228.343925][T11150] FAT-fs (loop4): Directory bread(block 73) failed [ 228.846059][T11196] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2904'. [ 228.915470][T11187] loop5: detected capacity change from 0 to 4096 [ 228.971534][T11187] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 229.687673][T11237] x_tables: duplicate underflow at hook 3 [ 229.890758][T11250] loop2: detected capacity change from 0 to 16 [ 229.964617][T11250] erofs: (device loop2): mounted with root inode @ nid 36. [ 230.162526][T11269] loop2: detected capacity change from 0 to 256 [ 230.256555][T11269] exfat: Deprecated parameter 'utf8' [ 230.272818][T11269] exfat: Deprecated parameter 'namecase' [ 230.330161][T11269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x364566b4, utbl_chksum : 0xe619d30d) [ 230.508378][T11292] loop3: detected capacity change from 0 to 1764 [ 230.638845][T11292] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 230.702628][T11306] QAT: failed to copy from user cfg_data. [ 230.831267][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 230.848391][T11318] loop4: detected capacity change from 0 to 256 [ 231.119170][T11340] netlink: 'syz.4.2968': attribute type 10 has an invalid length. [ 231.252051][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 231.263936][T11340] team0: Port device vlan0 added [ 231.453908][T11361] device gre0 entered promiscuous mode [ 231.599095][ T9155] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 231.615882][T11366] loop0: detected capacity change from 0 to 2048 [ 231.755372][T11379] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.824125][T11381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.856444][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2993'. [ 231.885181][ T9155] usb 4-1: Using ep0 maxpacket: 8 [ 231.885752][T11384] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2992'. [ 232.002314][T11387] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.030963][ T9155] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 232.214778][T11403] netlink: 'syz.4.3002': attribute type 4 has an invalid length. [ 232.229807][ T9155] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 232.250018][ T9155] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 232.282407][ T9155] usb 4-1: Product: syz [ 232.297228][ T9155] usb 4-1: Manufacturer: syz [ 232.322227][ T9155] usb 4-1: SerialNumber: syz [ 232.502054][T11407] loop2: detected capacity change from 0 to 4096 [ 232.595449][ T9155] usb 4-1: Invalid connection information received from device [ 232.607206][T11407] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 232.632515][T11417] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3010'. [ 232.764811][T11407] ntfs: volume version 3.1. [ 232.814666][ T5459] usb 4-1: USB disconnect, device number 14 [ 233.189233][T11434] loop5: detected capacity change from 0 to 512 [ 233.232522][T11436] netlink: 'syz.2.3018': attribute type 12 has an invalid length. [ 233.244602][T11436] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 233.300184][T11434] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,grpquota,abort,,errors=continue. Quota mode: writeback. [ 233.630930][T11445] loop3: detected capacity change from 0 to 4096 [ 233.764130][T11445] ntfs: volume version 3.1. [ 233.895637][ T9155] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 233.909229][T11430] loop4: detected capacity change from 0 to 32768 [ 234.013387][T11430] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 234.013387][T11430] [ 234.087807][ T4692] read_mapping_page failed! [ 234.094285][ T4692] ERROR: (device loop4): txCommit: [ 234.094285][ T4692] [ 234.110494][ T4692] jfs_write_inode: jfs_commit_inode failed! [ 234.186814][ T9155] usb 6-1: Using ep0 maxpacket: 8 [ 234.485345][ T9155] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 234.508638][ T9155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.545015][ T9155] usb 6-1: Product: syz [ 234.549268][ T9155] usb 6-1: Manufacturer: syz [ 234.575241][ T9155] usb 6-1: SerialNumber: syz [ 234.596090][ T9155] usb 6-1: config 0 descriptor?? [ 234.642925][ T9155] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 234.661321][ T9155] usb 6-1: setting power ON [ 234.675708][ T9155] dvb-usb: bulk message failed: -22 (2/0) [ 234.696090][ T9155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.775426][ T9155] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 234.794165][ T9155] usb 6-1: media controller created [ 234.861165][ T9155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.881717][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3054'. [ 234.936460][ T9155] usb 6-1: selecting invalid altsetting 6 [ 234.965050][ T9155] usb 6-1: digital interface selection failed (-22) [ 234.988928][ T9155] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 235.075207][T11524] netlink: 'syz.3.3060': attribute type 5 has an invalid length. [ 235.079620][ T9155] usb 6-1: setting power OFF [ 235.106518][ T9155] dvb-usb: bulk message failed: -22 (2/0) [ 235.126055][T11526] binfmt_misc: register: failed to install interpreter file ./file0 [ 235.135091][ T9155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 235.152725][ T9155] (NULL device *): no alternate interface [ 235.192771][ T9155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 235.240213][ T9155] usb 6-1: USB disconnect, device number 14 [ 235.359559][T11536] sctp: [Deprecated]: syz.0.3065 (pid 11536) Use of int in maxseg socket option. [ 235.359559][T11536] Use struct sctp_assoc_value instead [ 235.368234][T11538] loop3: detected capacity change from 0 to 64 [ 235.577598][T11552] loop3: detected capacity change from 0 to 64 [ 235.798821][T11567] netlink: 'syz.2.3079': attribute type 1 has an invalid length. [ 235.897071][T11574] loop0: detected capacity change from 0 to 64 [ 236.170049][T11593] loop2: detected capacity change from 0 to 64 [ 236.215025][ T9155] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 236.228061][ T150] block nbd5: Attempted send on invalid socket [ 236.234344][ T150] blk_update_request: I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.253871][ T150] block nbd5: Attempted send on invalid socket [ 236.260446][ T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.275856][ T263] block nbd5: Attempted send on invalid socket [ 236.282075][ T263] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.296100][ T263] block nbd5: Attempted send on invalid socket [ 236.302477][ T263] blk_update_request: I/O error, dev nbd5, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.314640][ T263] block nbd5: Attempted send on invalid socket [ 236.320913][ T263] blk_update_request: I/O error, dev nbd5, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.333104][ T150] block nbd5: Attempted send on invalid socket [ 236.339469][ T150] blk_update_request: I/O error, dev nbd5, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.351371][T11597] VFS: unable to find oldfs superblock on device nbd5 [ 236.416724][T11603] netlink: 'syz.3.3099': attribute type 1 has an invalid length. [ 236.496577][ T9155] usb 5-1: Using ep0 maxpacket: 8 [ 236.519787][ T263] block nbd0: Attempted send on invalid socket [ 236.526164][ T263] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.545226][ T263] block nbd0: Attempted send on invalid socket [ 236.552040][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.563748][ T263] block nbd0: Attempted send on invalid socket [ 236.570060][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.581701][ T150] block nbd0: Attempted send on invalid socket [ 236.588477][ T150] blk_update_request: I/O error, dev nbd0, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 236.600060][T11608] VFS: unable to find oldfs superblock on device nbd0 [ 236.795270][ T9155] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 236.804364][ T9155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.834129][T11626] sctp: [Deprecated]: syz.3.3107 (pid 11626) Use of int in maxseg socket option. [ 236.834129][T11626] Use struct sctp_assoc_value instead [ 236.843163][ T9155] usb 5-1: Product: syz [ 236.880907][ T9155] usb 5-1: Manufacturer: syz [ 236.895055][ T9155] usb 5-1: SerialNumber: syz [ 236.912227][ T9155] usb 5-1: config 0 descriptor?? [ 236.931829][T11629] netlink: 'syz.5.3110': attribute type 5 has an invalid length. [ 236.973221][ T9155] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 236.986893][T11631] loop0: detected capacity change from 0 to 64 [ 236.995197][ T9155] usb 5-1: setting power ON [ 236.999749][ T9155] dvb-usb: bulk message failed: -22 (2/0) [ 237.028055][ T9155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.075356][ T9155] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 237.083869][ T9155] usb 5-1: media controller created [ 237.130062][ T9155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.225874][ T9155] usb 5-1: selecting invalid altsetting 6 [ 237.231663][ T9155] usb 5-1: digital interface selection failed (-22) [ 237.274422][ T9155] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 237.341116][ T9155] usb 5-1: setting power OFF [ 237.346009][ T9155] dvb-usb: bulk message failed: -22 (2/0) [ 237.351762][ T9155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 237.405065][ T9155] (NULL device *): no alternate interface [ 237.450692][ T9155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 237.485903][T11615] loop2: detected capacity change from 0 to 32768 [ 237.513062][ T9155] usb 5-1: USB disconnect, device number 15 [ 237.563254][T11657] sctp: [Deprecated]: syz.5.3124 (pid 11657) Use of int in maxseg socket option. [ 237.563254][T11657] Use struct sctp_assoc_value instead [ 237.642239][T11615] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 237.642239][T11615] [ 237.650218][T11659] netlink: 'syz.0.3126': attribute type 7 has an invalid length. [ 237.667291][T11659] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3126'. [ 237.718318][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3138'. [ 237.782676][ T588] read_mapping_page failed! [ 237.800506][ T588] ERROR: (device loop2): txCommit: [ 237.800506][ T588] [ 237.820331][ T588] jfs_write_inode: jfs_commit_inode failed! [ 238.302142][T11691] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.3144'. [ 238.529840][T11701] device bond1 entered promiscuous mode [ 238.565379][T11701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.617824][ T9155] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 238.684331][T11715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3153'. [ 238.713728][T11715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3153'. [ 238.839439][T11724] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.3158'. [ 238.914838][T11726] binfmt_misc: register: failed to install interpreter file ./file0 [ 238.923448][ T9155] usb 5-1: Using ep0 maxpacket: 16 [ 238.974346][T11728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3160'. [ 239.013233][T11728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3160'. [ 239.045219][ T9155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.075729][ T9155] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 239.083182][T11695] loop5: detected capacity change from 0 to 32768 [ 239.101381][ T9155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.122405][ T9155] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 239.171286][T11732] xt_l2tp: v2 doesn't support IP mode [ 239.183360][T11695] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 239.183360][T11695] [ 239.242493][T11734] device bond2 entered promiscuous mode [ 239.335367][ T9155] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 239.344509][ T9155] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 239.370887][ T9155] usb 5-1: Product: syz [ 239.375402][T11734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.393923][ T9155] usb 5-1: Manufacturer: syz [ 239.421464][ T9155] usb 5-1: SerialNumber: syz [ 239.430474][ T588] read_mapping_page failed! [ 239.435370][ T588] ERROR: (device loop5): txCommit: [ 239.435370][ T588] [ 239.450875][ T588] jfs_write_inode: jfs_commit_inode failed! [ 239.490699][ T9155] usb 5-1: config 0 descriptor?? [ 239.556114][ T9155] usb 5-1: NFC: intf ffff88807a520000 id ffffffff8d359020 [ 239.684286][ T9155] nfcmrvl 5-1:0.0: NFC: registered with nci successfully [ 239.754379][T11756] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.780120][T11756] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 239.926140][ T9155] usb 5-1: USB disconnect, device number 16 [ 239.933759][ T9155] usb 5-1: NFC: intf ffff88807a520000 [ 239.946320][T11758] loop3: detected capacity change from 0 to 4096 [ 239.960926][T11749] loop2: detected capacity change from 0 to 4096 [ 239.990535][T11758] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 240.089435][T11758] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 240.100837][T11749] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 240.159921][T11758] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 240.171298][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3172'. [ 240.215481][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3172'. [ 240.225715][T11758] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 240.258209][T11749] ntfs3: loop2: failed to convert "c46c" to cp865 [ 240.285696][T11758] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 240.402109][T11758] ntfs: volume version 3.1. [ 241.039370][T11805] loop5: detected capacity change from 0 to 256 [ 241.086561][T11796] loop4: detected capacity change from 0 to 4096 [ 241.091711][T11805] exfat: Deprecated parameter 'namecase' [ 241.139006][T11805] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 241.171279][T11796] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 241.215051][ T5459] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 241.309251][T11796] ntfs3: loop4: failed to convert "c46c" to cp865 [ 241.450783][T11825] netlink: 'syz.5.3199': attribute type 7 has an invalid length. [ 241.459008][ T5458] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 241.505412][ T5459] usb 3-1: Using ep0 maxpacket: 8 [ 241.816564][ T5459] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 241.850776][ T5459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.876171][ T5459] usb 3-1: Product: syz [ 241.880386][ T5459] usb 3-1: Manufacturer: syz [ 241.902839][ T5459] usb 3-1: SerialNumber: syz [ 241.925710][ T5459] usb 3-1: config 0 descriptor?? [ 241.935207][ T5458] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.977641][ T5459] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 241.992409][ T5459] usb 3-1: setting power ON [ 241.999037][ T5459] dvb-usb: bulk message failed: -22 (2/0) [ 242.010609][ T5459] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.021290][ T5458] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.030473][T11854] netlink: 'syz.5.3211': attribute type 1 has an invalid length. [ 242.048803][ T5458] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.063081][ T5458] usb 1-1: config 1 interface 0 has no altsetting 1 [ 242.073410][ T5459] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 242.082849][ T9155] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 242.095328][ T5459] usb 3-1: media controller created [ 242.146530][ T5459] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.201785][ T5459] usb 3-1: selecting invalid altsetting 6 [ 242.228908][ T5459] usb 3-1: digital interface selection failed (-22) [ 242.244114][ T5459] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 242.285716][ T5458] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 242.294848][ T5458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.312401][ T5459] usb 3-1: setting power OFF [ 242.317078][ T5459] dvb-usb: bulk message failed: -22 (2/0) [ 242.323241][ T5459] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 242.336624][ T5458] usb 1-1: Product: syz [ 242.355197][ T9155] usb 4-1: Using ep0 maxpacket: 16 [ 242.360423][ T5459] (NULL device *): no alternate interface [ 242.363718][ T5458] usb 1-1: Manufacturer: syz [ 242.391124][ T5458] usb 1-1: SerialNumber: syz [ 242.414743][ T5459] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 242.429692][ T5459] usb 3-1: USB disconnect, device number 17 [ 242.440502][ T5458] smsusb:smsusb_probe: board id=8, interface number 0 [ 242.505589][ T9155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 242.525337][ T9155] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 242.537790][T11874] netlink: 'syz.4.3221': attribute type 6 has an invalid length. [ 242.627232][ T26] audit: type=1400 audit(242.595:19): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=11876 comm="syz.5.3223" [ 242.685418][ T5458] smsusb:smsusb_probe: Device initialized with return code -19 [ 242.735545][ T9155] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 242.744676][ T9155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.774969][ T9155] usb 4-1: Product: syz [ 242.779190][ T9155] usb 4-1: Manufacturer: syz [ 242.783799][ T9155] usb 4-1: SerialNumber: syz [ 242.826359][ T9155] usb 4-1: config 0 descriptor?? [ 242.839638][T11885] loop4: detected capacity change from 0 to 1024 [ 242.847568][T11841] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 242.865916][ T9155] hub 4-1:0.0: bad descriptor, ignoring hub [ 242.871926][ T9155] hub: probe of 4-1:0.0 failed with error -5 [ 242.901740][ T9155] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 242.912835][ T4159] usb 1-1: USB disconnect, device number 15 [ 243.052845][T11893] netlink: 'syz.2.3232': attribute type 1 has an invalid length. [ 243.068086][T11895] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 243.082567][T11895] overlayfs: missing 'lowerdir' [ 243.123309][T11893] __nla_validate_parse: 6 callbacks suppressed [ 243.123325][T11893] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3232'. [ 243.402695][T11907] netlink: 'syz.2.3236': attribute type 6 has an invalid length. [ 243.762068][T11935] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.918217][T11946] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.940823][T11947] loop4: detected capacity change from 0 to 1024 [ 244.048818][T11947] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,noquota,,errors=continue. Quota mode: none. [ 244.077260][ T9155] usb 4-1: USB disconnect, device number 15 [ 244.107398][T11947] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.3256: inode #458752: comm syz.4.3256: iget: illegal inode # [ 244.138650][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 244.145071][ T4825] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 244.174676][T11962] loop5: detected capacity change from 0 to 1024 [ 244.182839][T11947] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.3256: error while reading EA inode 458752 err=-117 [ 244.449126][T11976] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 244.450699][T11975] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 244.525128][ T1110] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 244.555354][ T4825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 244.635243][ T4825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 244.644690][ T4825] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 244.672536][ T4825] usb 3-1: config 1 interface 0 has no altsetting 1 [ 244.679529][T11984] loop5: detected capacity change from 0 to 256 [ 244.701392][T11988] loop4: detected capacity change from 0 to 8 [ 244.756886][T11988] SQUASHFS error: Unable to read inode 0x87 [ 244.775120][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 244.788438][T11984] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84977, utbl_chksum : 0xe619d30d) [ 244.845577][ T4825] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 244.855158][T11994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3281'. [ 244.879512][ T4825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.895161][ T4825] usb 3-1: Product: syz [ 244.902308][ T4825] usb 3-1: Manufacturer: syz [ 244.914555][ T4825] usb 3-1: SerialNumber: syz [ 244.919618][ T1110] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 244.924211][T11996] loop4: detected capacity change from 0 to 1024 [ 244.928227][ T1110] usb 1-1: config 0 has no interface number 0 [ 244.967402][ T4825] smsusb:smsusb_probe: board id=8, interface number 0 [ 245.017499][T11998] loop3: detected capacity change from 0 to 512 [ 245.058202][T11998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 245.069115][T11998] System zones: 1-12 [ 245.076421][T11998] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.3283: inode #1: comm syz.3.3283: iget: illegal inode # [ 245.090195][ T1110] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 245.099359][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.106272][T11998] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3283: error while reading EA inode 1 err=-117 [ 245.108083][ T1110] usb 1-1: Product: syz [ 245.123791][ T1110] usb 1-1: Manufacturer: syz [ 245.128579][ T1110] usb 1-1: SerialNumber: syz [ 245.143938][ T1110] usb 1-1: config 0 descriptor?? [ 245.185153][ T4825] smsusb:smsusb_probe: Device initialized with return code -19 [ 245.187406][T11998] EXT4-fs (loop3): 1 orphan inode deleted [ 245.235499][T11998] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,journal_dev=0x0000000000000002,debug,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 245.299066][T11998] EXT4-fs error (device loop3): ext4_lookup:1855: inode #2: comm syz.3.3283: 'file0' linked to parent dir [ 245.313065][ T13] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 245.415381][ T1110] usb 1-1: Found multiple Units with ID 1 [ 245.458315][ T1110] usb 3-1: USB disconnect, device number 18 [ 245.649688][ T5459] usb 1-1: USB disconnect, device number 16 [ 245.685260][ T13] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 245.693768][ T13] usb 6-1: config 0 has no interface number 0 [ 245.855253][ T13] usb 6-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=10.b1 [ 245.864533][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.873170][ T13] usb 6-1: Product: syz [ 245.877519][ T13] usb 6-1: Manufacturer: syz [ 245.882126][ T13] usb 6-1: SerialNumber: syz [ 245.888591][ T13] usb 6-1: config 0 descriptor?? [ 246.076995][T12010] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 246.146444][ T13] dvb-usb: found a 'Gigabyte U8000-RH' in warm state. [ 246.169074][ T13] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 246.217341][ T13] dvbdev: DVB: registering new adapter (Gigabyte U8000-RH) [ 246.226763][ T13] usb 6-1: media controller created [ 246.233944][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.269618][T12022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3292'. [ 246.328240][ T13] DVB: Unable to find symbol dib7000p_attach() [ 246.334456][ T13] dvb-usb: no frontend was attached by 'Gigabyte U8000-RH' [ 246.436499][ T13] rc_core: IR keymap rc-dib0700-rc5 not found [ 246.452315][ T13] Registered IR keymap rc-empty [ 246.463509][ T13] dvb-usb: could not initialize remote control. [ 246.473984][ T13] dvb-usb: Gigabyte U8000-RH successfully initialized and connected. [ 246.515171][ T1110] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 246.533181][ T13] usb 6-1: USB disconnect, device number 15 [ 246.589815][ T13] dvb-usb: Gigabyte U8000-RH successfully deinitialized and disconnected. [ 246.616010][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 246.655134][ T4825] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 246.709562][T12038] loop0: detected capacity change from 0 to 4096 [ 246.765133][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 246.840353][T12043] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.885278][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.905156][ T4825] usb 3-1: Using ep0 maxpacket: 32 [ 246.925694][T12038] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 246.926025][ T1110] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 246.962994][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.980857][T12038] Remounting filesystem read-only [ 246.989169][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3304'. [ 247.005393][ T1110] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 247.041064][ T4168] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 247.045262][ T4825] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 247.065317][ T4825] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 247.079100][ T4168] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 247.082940][ T4825] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.114576][ T4168] NILFS (loop0): discard dirty page: offset=794624, ino=3 [ 247.117706][ T4825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 247.130951][ T4168] NILFS (loop0): discard dirty block: blocknr=35, size=4096 [ 247.145330][ T4825] usb 3-1: config 1 has no interface number 0 [ 247.161797][ T4825] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 247.185293][ T1110] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 247.195127][ T4825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.213717][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 247.223593][ T1110] usb 4-1: Product: syz [ 247.227836][ T1110] usb 4-1: Manufacturer: syz [ 247.232621][ T1110] usb 4-1: SerialNumber: syz [ 247.239324][ T1110] usb 4-1: config 0 descriptor?? [ 247.258662][ T4825] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 247.275978][ T1110] usb 4-1: NFC: intf ffff888062178000 id ffffffff8d359020 [ 247.329528][ T1110] nfcmrvl 4-1:0.0: NFC: registered with nci successfully [ 247.341521][T12042] loop4: detected capacity change from 0 to 32768 [ 247.465207][ T4825] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 247.473463][ T4825] snd_usb_pod 3-1:1.1: invalid control EP [ 247.494976][ T4825] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 247.502270][ T4825] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 247.510960][ T4825] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 247.523455][ T9155] usb 4-1: USB disconnect, device number 16 [ 247.533609][ T9155] usb 4-1: NFC: intf ffff888062178000 [ 247.585210][ T13] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 247.689461][ T4825] usb 3-1: USB disconnect, device number 19 [ 247.835194][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 248.087771][T12063] xt_hashlimit: invalid interval [ 248.115290][ T13] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 248.134946][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.146344][T12062] loop4: detected capacity change from 0 to 4096 [ 248.153326][ T13] usb 1-1: Product: syz [ 248.163516][ T13] usb 1-1: Manufacturer: syz [ 248.173710][ T13] usb 1-1: SerialNumber: syz [ 248.183106][ T13] usb 1-1: config 0 descriptor?? [ 248.219142][T12069] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3311'. [ 248.253605][T12070] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.316560][T12062] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 248.373503][T12072] netlink: 'syz.2.3313': attribute type 21 has an invalid length. [ 248.377473][T12062] Remounting filesystem read-only [ 248.445393][ T13] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 248.456131][ T13] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71 [ 248.492014][ T13] usb 1-1: USB disconnect, device number 17 [ 248.505230][ T4169] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 248.524341][ T4169] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 248.533404][T12083] netlink: 'syz.2.3317': attribute type 1 has an invalid length. [ 248.563825][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'. [ 248.580163][ T4169] NILFS (loop4): discard dirty page: offset=794624, ino=3 [ 248.593536][ T4169] NILFS (loop4): discard dirty block: blocknr=35, size=4096 [ 248.668250][T12087] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3323'. [ 248.693326][T12087] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3323'. [ 248.735079][ T9155] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 248.850689][T12098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3328'. [ 249.135066][ T5465] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 249.143820][ T9155] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 249.158097][ T9155] usb 4-1: config 0 has no interface number 0 [ 249.228310][T12110] loop4: detected capacity change from 0 to 8192 [ 249.280441][T12121] netlink: 'syz.0.3337': attribute type 12 has an invalid length. [ 249.344532][T12110] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 249.354840][ T9155] usb 4-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=10.b1 [ 249.364606][ T9155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.373893][T12110] REISERFS (device loop4): using ordered data mode [ 249.380804][T12110] reiserfs: using flush barriers [ 249.386911][ T9155] usb 4-1: Product: syz [ 249.391101][ T9155] usb 4-1: Manufacturer: syz [ 249.397354][ T9155] usb 4-1: SerialNumber: syz [ 249.402017][T12110] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 249.418787][ T5465] usb 6-1: Using ep0 maxpacket: 32 [ 249.432402][T12110] REISERFS (device loop4): checking transaction log (loop4) [ 249.445581][ T9155] usb 4-1: config 0 descriptor?? [ 249.466642][T12110] REISERFS (device loop4): Using r5 hash to sort names [ 249.555213][ T5465] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 249.563663][ T5465] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 249.614780][ T5465] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.635624][ T5465] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 249.644622][ T5465] usb 6-1: config 1 has no interface number 0 [ 249.671752][ T5465] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 249.704788][ T5465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.725237][ T9155] dvb-usb: found a 'Gigabyte U8000-RH' in warm state. [ 249.738220][ T9155] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 249.775297][ T9155] dvbdev: DVB: registering new adapter (Gigabyte U8000-RH) [ 249.782588][ T9155] usb 4-1: media controller created [ 249.795494][ T9155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.808138][ T5465] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 249.878979][ T9155] DVB: Unable to find symbol dib7000p_attach() [ 249.924971][ T9155] dvb-usb: no frontend was attached by 'Gigabyte U8000-RH' [ 250.036464][ T5465] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 250.058783][ T9155] rc_core: IR keymap rc-dib0700-rc5 not found [ 250.077180][ T9155] Registered IR keymap rc-empty [ 250.082228][ T9155] dvb-usb: could not initialize remote control. [ 250.089551][ T5465] snd_usb_pod 6-1:1.1: invalid control EP [ 250.103349][ T5465] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 250.117758][ T9155] dvb-usb: Gigabyte U8000-RH successfully initialized and connected. [ 250.136155][ T5465] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 250.143704][ T5465] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 250.176812][ T9155] usb 4-1: USB disconnect, device number 17 [ 250.210183][ T9155] dvb-usb: Gigabyte U8000-RH successfully deinitialized and disconnected. [ 250.299432][ T4825] usb 6-1: USB disconnect, device number 16 [ 250.480767][T12168] netlink: 'syz.4.3359': attribute type 12 has an invalid length. [ 250.614641][T12175] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3362'. [ 250.723254][T12181] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3365'. [ 250.948321][T12196] mmap: syz.3.3375 (12196): VmData 37474304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 250.985137][ T9155] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 251.275011][ T9155] usb 3-1: Using ep0 maxpacket: 8 [ 251.282885][T12219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3385'. [ 251.311110][T12219] openvswitch: netlink: Missing key (keys=40, expected=80) [ 251.385803][T12225] xt_hashlimit: Unknown mode mask 1000000, kernel too old? [ 251.423848][ T9155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.454978][ T9155] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 251.472063][T12230] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 251.635379][ T9155] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 251.638290][T12237] loop5: detected capacity change from 0 to 1024 [ 251.653843][ T9155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.686548][ T9155] usb 3-1: Product: syz [ 251.690765][ T9155] usb 3-1: Manufacturer: syz [ 251.730701][ T9155] usb 3-1: SerialNumber: syz [ 251.750531][ T9155] usb 3-1: config 0 descriptor?? [ 251.794653][T12237] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 251.839696][T12243] loop3: detected capacity change from 0 to 4096 [ 251.926806][T12243] NILFS (loop3): mounting unchecked fs [ 251.944318][T12243] NILFS (loop3): recovery required for readonly filesystem [ 251.964600][T12243] NILFS (loop3): write access will be enabled during recovery [ 251.983727][T12243] NILFS (loop3): invalid segment: Checksum error in segment payload [ 252.002284][T12243] NILFS (loop3): trying rollback from an earlier position [ 252.033775][T12243] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 252.114057][T12243] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state [ 252.200617][ T5460] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 252.273233][ T5459] usb 3-1: USB disconnect, device number 20 [ 252.334596][T12245] loop4: detected capacity change from 0 to 32768 [ 252.559650][T12245] XFS (loop4): Mounting V5 Filesystem [ 252.626256][T12274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.635796][ T5460] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 252.648971][ T5460] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.660126][ T5460] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.673616][ T5460] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 252.683072][ T5460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.703288][ T5460] usb 1-1: config 0 descriptor?? [ 252.756140][ T5460] usb-storage 1-1:0.0: USB Mass Storage device detected [ 252.776533][T12245] XFS (loop4): Ending clean mount [ 252.806151][ T5460] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 252.896344][ T4169] XFS (loop4): Unmounting Filesystem [ 252.968619][T12294] loop5: detected capacity change from 0 to 1764 [ 253.020044][ T4825] usb 1-1: USB disconnect, device number 18 [ 253.213700][T12303] loop3: detected capacity change from 0 to 64 [ 253.368152][T12303] attempt to access beyond end of device [ 253.368152][T12303] loop3: rw=0, want=550, limit=64 [ 253.393748][T12310] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3426'. [ 253.413408][T12303] Buffer I/O error on dev loop3, logical block 274, async page read [ 253.462966][T12303] attempt to access beyond end of device [ 253.462966][T12303] loop3: rw=0, want=550, limit=64 [ 253.504190][T12303] Buffer I/O error on dev loop3, logical block 274, async page read [ 253.559590][ T26] audit: type=1800 audit(253.525:20): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3423" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 253.560295][T12303] Trying to free block not in datazone [ 253.640017][T12303] Trying to free block not in datazone [ 253.658552][T12303] Trying to free block not in datazone [ 253.662020][T12320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3429'. [ 253.675054][T12303] Trying to free block not in datazone [ 253.685025][T12303] Trying to free block not in datazone [ 253.715227][T12303] minix_free_block (loop3:6): bit already cleared [ 253.774382][T12303] Trying to free block not in datazone [ 253.809798][T12303] Trying to free block not in datazone [ 253.828083][T12330] loop5: detected capacity change from 0 to 64 [ 253.953938][T12336] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3448'. [ 254.006711][T12331] loop4: detected capacity change from 0 to 4096 [ 254.082546][T12331] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 254.745265][T12373] x_tables: duplicate underflow at hook 3 [ 255.167236][T12393] netlink: 'syz.4.3467': attribute type 2 has an invalid length. [ 255.178202][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 255.245375][T12393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3467'. [ 255.366719][T12352] loop5: detected capacity change from 0 to 32768 [ 255.376304][ T1110] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 255.561732][T12352] XFS (loop5): Mounting V5 Filesystem [ 255.649815][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.656239][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.723199][T12352] XFS (loop5): Ending clean mount [ 255.749748][ T1110] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 255.772284][ T1110] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 255.841532][ T1110] usb 4-1: config 8 has no interface number 0 [ 255.861168][ T1110] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 255.887081][ T1110] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.928763][ T1110] usb 4-1: config 8 interface 177 has no altsetting 0 [ 255.950542][ T1110] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 255.997836][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.030789][T12352] XFS (loop5): Quotacheck needed: Please wait. [ 256.110386][T12352] XFS (loop5): Quotacheck: Done. [ 256.129660][T12352] XFS (loop5): Unmounting Filesystem [ 256.303175][ T1110] usb 4-1: string descriptor 0 read error: -71 [ 256.339173][ T1110] ir_toy 4-1:8.177: required endpoints not found [ 256.367438][ T1110] usb 4-1: USB disconnect, device number 18 [ 256.470972][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'. [ 256.510979][T12464] loop2: detected capacity change from 0 to 1764 [ 256.610727][T12475] QAT: failed to copy from user cfg_data. [ 256.619452][T12464] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 257.087398][T12495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3514'. [ 257.135526][T12499] netlink: 'syz.0.3513': attribute type 10 has an invalid length. [ 257.143017][T12497] loop2: detected capacity change from 0 to 1024 [ 257.241759][T12499] team0: Port device vlan0 added [ 257.473984][T12518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.566423][T12523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3535'. [ 257.623076][T12527] cgroup: Invalid name [ 257.643730][T12529] netlink: 'syz.5.3529': attribute type 4 has an invalid length. [ 257.719584][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3532'. [ 257.860057][T12539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3536'. [ 258.498995][T12575] loop4: detected capacity change from 0 to 512 [ 258.641037][T12575] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,grpquota,abort,,errors=continue. Quota mode: writeback. [ 258.698482][T12545] loop0: detected capacity change from 0 to 32768 [ 258.729542][T12545] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3538 (12545) [ 258.791203][T12589] __nla_validate_parse: 1 callbacks suppressed [ 258.791220][T12589] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3558'. [ 258.817742][T12545] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 258.857656][T12545] BTRFS info (device loop0): force zlib compression, level 3 [ 258.872086][T12545] BTRFS info (device loop0): force clearing of disk cache [ 258.886094][T12545] BTRFS info (device loop0): setting nodatasum [ 258.927411][T12545] BTRFS info (device loop0): allowing degraded mounts [ 258.937231][T12545] BTRFS info (device loop0): enabling disk space caching [ 258.944348][T12545] BTRFS info (device loop0): disk space caching is enabled [ 259.004928][T12545] BTRFS info (device loop0): has skinny extents [ 259.100625][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3562'. [ 259.297384][T12545] BTRFS info (device loop0): clearing free space tree [ 259.324746][T12545] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 259.335700][T12545] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 259.361132][T12545] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 259.501285][T12636] netlink: 'syz.5.3572': attribute type 44 has an invalid length. [ 259.559839][T12642] loop2: detected capacity change from 0 to 256 [ 259.747700][T12648] netlink: 'syz.5.3580': attribute type 10 has an invalid length. [ 259.957431][T12656] loop3: detected capacity change from 0 to 64 [ 260.088091][T12648] team0: Port device vlan0 added [ 260.155060][T12658] loop0: detected capacity change from 0 to 1024 [ 260.237367][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'. [ 260.345108][T12670] netlink: 'syz.5.3588': attribute type 2 has an invalid length. [ 260.363824][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3588'. [ 260.542298][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 260.558434][T12688] xt_l2tp: invalid flags combination: c [ 260.575026][T12686] netlink: 'syz.4.3597': attribute type 44 has an invalid length. [ 260.765454][ T4213] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 260.769742][T12698] loop3: detected capacity change from 0 to 256 [ 260.773214][ T5725] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 260.806742][T12700] loop4: detected capacity change from 0 to 512 [ 260.900447][T12700] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 260.908897][T12700] UDF-fs: Scanning with blocksize 512 failed [ 260.921073][T12698] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 260.950977][T12700] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 260.972191][T12700] UDF-fs: Scanning with blocksize 1024 failed [ 260.981363][T12698] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 261.000747][T12700] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 261.025023][ T4213] usb 3-1: Using ep0 maxpacket: 16 [ 261.030338][ T5725] usb 6-1: Using ep0 maxpacket: 16 [ 261.040478][T12700] UDF-fs: Scanning with blocksize 2048 failed [ 261.076821][T12700] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 261.165180][ T5725] usb 6-1: config 0 has no interfaces? [ 261.170843][ T4213] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 261.188764][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 261.212042][ T4213] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 261.224086][T12700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.224114][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.253815][ T4213] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 261.327290][ T5725] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 261.344165][T12718] loop3: detected capacity change from 0 to 256 [ 261.358904][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.370265][ T5725] usb 6-1: Product: syz [ 261.374474][ T5725] usb 6-1: Manufacturer: syz [ 261.383398][ T5725] usb 6-1: SerialNumber: syz [ 261.393145][ T5725] r8152-cfgselector 6-1: config 0 descriptor?? [ 261.427620][ T4213] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 261.448096][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.457492][ T4213] usb 3-1: Product: syz [ 261.461800][ T4213] usb 3-1: Manufacturer: syz [ 261.473426][ T4213] usb 3-1: SerialNumber: syz [ 261.507556][ T4213] usb 3-1: config 0 descriptor?? [ 261.525559][T12682] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 261.567036][ T4213] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 261.573525][ T4213] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 261.656313][ T5725] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 261.787887][ T4213] mcba_usb: probe of 3-1:0.0 failed with error -90 [ 261.803821][T12730] loop0: detected capacity change from 0 to 4096 [ 261.814246][ T4692] usb 6-1: config 0 descriptor?? [ 261.828805][ T4213] usb 3-1: USB disconnect, device number 21 [ 261.911885][ T4825] usb 6-1: USB disconnect, device number 17 [ 261.925663][ T4692] usb 6-1: can't set config #0, error -71 [ 261.986545][T12730] ntfs: volume version 3.1. [ 262.146377][T12746] xt_l2tp: invalid flags combination: c [ 262.180672][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3638'. [ 262.291195][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 262.443784][T12758] loop3: detected capacity change from 0 to 4096 [ 262.615417][T12758] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.707647][T12780] loop0: detected capacity change from 0 to 512 [ 262.807709][T12786] loop5: detected capacity change from 0 to 4096 [ 262.836216][T12792] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3648'. [ 262.847070][T12780] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3642: bg 0: block 248: padding at end of block bitmap is not set [ 262.870769][T12786] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 262.903787][T12780] Quota error (device loop0): write_blk: dquota write failed [ 262.923875][T12780] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 262.927690][T12758] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #15: comm syz.3.3631: corrupted inode contents [ 262.990582][T12758] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #15: comm syz.3.3631: mark_inode_dirty error [ 263.000783][T12780] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.3642: Failed to acquire dquot type 1 [ 263.028003][T12786] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 263.039877][T12780] EXT4-fs (loop0): 1 truncate cleaned up [ 263.073433][T12758] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #15: comm syz.3.3631: corrupted inode contents [ 263.095180][T12780] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,auto_da_alloc,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 263.148435][T12758] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.3631: mark_inode_dirty error [ 263.187048][T12780] EXT4-fs (loop0): Cannot change quota options when quota turned on [ 263.208913][T12758] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #15: comm syz.3.3631: corrupted inode contents [ 263.260806][T12758] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.3631: mark_inode_dirty error [ 263.371658][T12758] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #15: comm syz.3.3631: corrupted inode contents [ 263.437823][T12758] EXT4-fs error (device loop3): ext4_truncate:4272: inode #15: comm syz.3.3631: mark_inode_dirty error [ 263.475002][T12758] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.3631: couldn't truncate inode 15 (err -117) [ 263.745392][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3667'. [ 263.802212][T12824] loop4: detected capacity change from 0 to 4096 [ 263.844090][T12836] loop2: detected capacity change from 0 to 512 [ 263.884064][T12836] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 263.884092][T12836] UDF-fs: Scanning with blocksize 512 failed [ 263.884820][T12836] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 263.884842][T12836] UDF-fs: Scanning with blocksize 1024 failed [ 263.886097][T12836] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 263.886119][T12836] UDF-fs: Scanning with blocksize 2048 failed [ 263.886714][T12836] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 263.900028][T12824] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 263.902094][T12836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.947005][T12824] ntfs: volume version 3.1. [ 264.344577][T12862] loop4: detected capacity change from 0 to 256 [ 264.417843][T12862] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 264.446800][T12862] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 264.510838][T12868] vivid-001: ================= START STATUS ================= [ 264.511036][T12868] vivid-001: Enable Output Cropping: true [ 264.511171][T12868] vivid-001: Enable Output Composing: true [ 264.511196][T12868] vivid-001: Enable Output Scaler: true [ 264.511240][T12868] vivid-001: Tx RGB Quantization Range: Automatic [ 264.511267][T12868] vivid-001: Transmit Mode: HDMI [ 264.511293][T12868] vivid-001: Display Present: true inactive [ 264.511324][T12868] vivid-001: Hotplug Present: 0x00000000 [ 264.511351][T12868] vivid-001: RxSense Present: 0x00000001 [ 264.511392][T12868] vivid-001: EDID Present: 0x00000000 [ 264.511429][T12868] vivid-001: ================== END STATUS ================== [ 265.095084][ T9155] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 265.521322][ T9155] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 265.540323][ T9155] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 265.591336][ T9155] usb 5-1: config 8 has no interface number 0 [ 265.615895][ T9155] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 265.662610][ T9155] usb 5-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.721836][ T9155] usb 5-1: config 8 interface 177 has no altsetting 0 [ 265.732562][ T9155] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 265.757304][ T9155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.051324][T12896] loop2: detected capacity change from 0 to 32768 [ 266.085215][ T9155] usb 5-1: string descriptor 0 read error: -71 [ 266.093457][ T9155] ir_toy 5-1:8.177: required endpoints not found [ 266.121754][ T9155] usb 5-1: USB disconnect, device number 17 [ 266.133837][T12939] loop5: detected capacity change from 0 to 4096 [ 266.152633][T12942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3721'. [ 266.173343][T12938] loop3: detected capacity change from 0 to 4096 [ 266.201005][T12896] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3698 (12896) [ 266.246230][T12938] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 266.293833][T12896] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 266.309247][T12939] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.324977][T12896] BTRFS info (device loop2): force zlib compression, level 3 [ 266.348930][T12939] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #15: comm syz.5.3718: corrupted inode contents [ 266.355006][T12896] BTRFS info (device loop2): force clearing of disk cache [ 266.383342][T12896] BTRFS info (device loop2): setting nodatasum [ 266.393096][T12938] ntfs: volume version 3.1. [ 266.400524][T12896] BTRFS info (device loop2): allowing degraded mounts [ 266.414176][T12896] BTRFS info (device loop2): enabling disk space caching [ 266.437217][T12896] BTRFS info (device loop2): disk space caching is enabled [ 266.455084][T12896] BTRFS info (device loop2): has skinny extents [ 266.470314][T12939] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #15: comm syz.5.3718: mark_inode_dirty error [ 266.604150][T12939] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #15: comm syz.5.3718: corrupted inode contents [ 266.604233][T12896] BTRFS info (device loop2): clearing free space tree [ 266.635023][T12896] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 266.644715][T12896] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 266.684233][T12939] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.3718: mark_inode_dirty error [ 266.795644][T12939] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #15: comm syz.5.3718: corrupted inode contents [ 266.925065][T12939] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.3718: mark_inode_dirty error [ 266.981920][T12896] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same [ 267.003319][T12939] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #15: comm syz.5.3718: corrupted inode contents [ 267.042260][T12939] EXT4-fs error (device loop5): ext4_truncate:4272: inode #15: comm syz.5.3718: mark_inode_dirty error [ 267.083672][T12939] EXT4-fs error (device loop5): ext4_evict_inode:293: comm syz.5.3718: couldn't truncate inode 15 (err -117) [ 268.070469][T13026] xt_hashlimit: Unknown mode mask 1000000, kernel too old? [ 268.090482][T13030] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 268.214129][T13039] netlink: 'syz.0.3759': attribute type 21 has an invalid length. [ 268.236769][T13040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3760'. [ 268.303393][T13044] cgroup: noprefix used incorrectly [ 268.381879][ T5459] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 268.449542][T13049] loop2: detected capacity change from 0 to 2048 [ 268.555050][T13049] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh [ 268.594433][T13049] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 268.619034][T13060] loop5: detected capacity change from 0 to 65 [ 268.641010][T13049] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 268.661201][ T5459] usb 4-1: Using ep0 maxpacket: 16 [ 268.689531][T13049] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 268.720763][T13049] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 268.753940][T13049] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 268.753995][T13060] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 268.783927][T13049] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 268.805307][ T5459] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 268.812601][ T5459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 268.839184][T13049] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 268.850563][ T5459] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 268.862751][T13049] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 268.872996][ T5459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.883523][ T5459] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 268.894960][T13049] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 268.937743][T13049] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 268.973738][T13049] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 269.020763][T13049] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 269.057489][T13049] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 269.066631][ T5459] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 269.084755][ T5459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.110504][T13075] netlink: 'syz.4.3778': attribute type 1 has an invalid length. [ 269.120127][ T5459] usb 4-1: Product: syz [ 269.124339][ T5459] usb 4-1: Manufacturer: syz [ 269.139880][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3778'. [ 269.149288][ T5459] usb 4-1: SerialNumber: syz [ 269.192780][ T5459] usb 4-1: config 0 descriptor?? [ 269.195469][T13076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3777'. [ 269.235548][T13028] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 269.292446][ T5459] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 269.324955][ T5459] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 269.381075][T13085] program syz.0.3781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.405451][ T5459] mcba_usb: probe of 4-1:0.0 failed with error -90 [ 269.469696][T13094] loop5: detected capacity change from 0 to 128 [ 269.546007][ T5459] usb 4-1: USB disconnect, device number 19 [ 269.546216][T13094] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.568642][T13097] netlink: 'syz.2.3788': attribute type 1 has an invalid length. [ 269.800441][T13108] cgroup: noprefix used incorrectly [ 269.885227][ T5459] Bluetooth: hci0: command 0x0401 tx timeout [ 270.152073][ T4213] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 270.349613][T13139] loop4: detected capacity change from 0 to 4096 [ 270.398597][ T4213] usb 1-1: Using ep0 maxpacket: 16 [ 270.427976][T13139] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 270.466642][ T5459] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 270.514033][T13139] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.3805: corrupted inode contents [ 270.535232][T13139] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #15: comm syz.4.3805: mark_inode_dirty error [ 270.554363][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.571412][T13139] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.3805: corrupted inode contents [ 270.583539][ T4213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 270.599644][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 270.611328][T13136] loop5: detected capacity change from 0 to 32768 [ 270.611395][T13139] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.3805: mark_inode_dirty error [ 270.629296][ T4213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 270.635566][T13139] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.3805: corrupted inode contents [ 270.653352][T13136] XFS: ikeep mount option is deprecated. [ 270.659655][T13139] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.3805: mark_inode_dirty error [ 270.671766][T13139] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.3805: corrupted inode contents [ 270.684167][T13139] EXT4-fs error (device loop4): ext4_truncate:4272: inode #15: comm syz.4.3805: mark_inode_dirty error [ 270.717080][T13136] XFS (loop5): Mounting V5 Filesystem [ 270.730138][T13139] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.3805: couldn't truncate inode 15 (err -117) [ 270.796616][ T4213] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 270.808096][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 270.818370][ T4213] usb 1-1: Product: syz [ 270.822589][ T4213] usb 1-1: Manufacturer: syz [ 270.831257][ T4213] usb 1-1: SerialNumber: syz [ 270.841545][ T4213] usb 1-1: config 0 descriptor?? [ 270.853260][T13136] XFS (loop5): Ending clean mount [ 270.885342][ T5459] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 270.889659][ T4213] usb 1-1: NFC: intf ffff88807d241000 id ffffffff8d359020 [ 270.904570][ T5459] usb 3-1: config 0 has no interface number 0 [ 270.911375][T13136] XFS (loop5): Quotacheck needed: Please wait. [ 270.969523][ T5465] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_cntbt block 0x8 [ 270.987461][ T4213] nfcmrvl 1-1:0.0: NFC: registered with nci successfully [ 271.005324][ T5465] XFS (loop5): Unmount and run xfs_repair [ 271.014336][ T5465] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 271.023244][ T5465] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 271.032943][ T5465] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80 ................ [ 271.044152][ T5465] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 271.054743][ T5465] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 271.065625][ T5465] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 271.075337][ T5459] usb 3-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=10.b1 [ 271.094580][ T5465] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00 ................ [ 271.103953][ T5459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.112119][ T5465] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 271.121262][ T5459] usb 3-1: Product: syz [ 271.125540][ T5459] usb 3-1: Manufacturer: syz [ 271.130155][ T5459] usb 3-1: SerialNumber: syz [ 271.135186][ T5465] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 271.144100][ T4692] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 4 error 74 [ 271.148374][ T4213] usb 1-1: USB disconnect, device number 19 [ 271.165938][ T5459] usb 3-1: config 0 descriptor?? [ 271.179916][T13136] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 271.185805][ T4213] usb 1-1: NFC: intf ffff88807d241000 [ 271.323116][ T4587] XFS (loop5): Unmounting Filesystem [ 271.374240][T13151] loop3: detected capacity change from 0 to 32768 [ 271.455218][ T5459] dvb-usb: found a 'Gigabyte U8000-RH' in warm state. [ 271.476432][ T5459] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 271.515383][ T5459] dvbdev: DVB: registering new adapter (Gigabyte U8000-RH) [ 271.541722][T13163] netlink: 'syz.4.3811': attribute type 21 has an invalid length. [ 271.543978][ T5459] usb 3-1: media controller created [ 271.589710][ T5459] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.609339][T13151] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 271.627833][T13151] BTRFS info (device loop3): using free space tree [ 271.635763][T13151] BTRFS info (device loop3): has skinny extents [ 271.690611][ T5459] DVB: Unable to find symbol dib7000p_attach() [ 271.704937][ T5459] dvb-usb: no frontend was attached by 'Gigabyte U8000-RH' [ 271.745536][T13172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3812'. [ 271.844962][ T5459] rc_core: IR keymap rc-dib0700-rc5 not found [ 271.851210][ T5459] Registered IR keymap rc-empty [ 271.857237][ T5459] dvb-usb: could not initialize remote control. [ 271.863932][ T5459] dvb-usb: Gigabyte U8000-RH successfully initialized and connected. [ 271.887344][ T5459] usb 3-1: USB disconnect, device number 22 [ 271.901932][T13179] cgroup: noprefix used incorrectly [ 271.912168][ T5459] dvb-usb: Gigabyte U8000-RH successfully deinitialized and disconnected. [ 271.965309][ T5465] Bluetooth: hci0: command 0x0401 tx timeout [ 272.043252][T13151] BTRFS info (device loop3): enabling ssd optimizations [ 272.351062][T13211] loop0: detected capacity change from 0 to 1024 [ 272.395546][T13210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.461290][T13211] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 272.500207][T13220] loop2: detected capacity change from 0 to 128 [ 272.598170][T13224] loop4: detected capacity change from 0 to 65 [ 272.633533][T13220] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.695819][T13224] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 272.923669][T13231] loop2: detected capacity change from 0 to 256 [ 273.054535][T13231] FAT-fs (loop2): Directory bread(block 64) failed [ 273.065539][T13231] FAT-fs (loop2): Directory bread(block 65) failed [ 273.092731][T13231] FAT-fs (loop2): Directory bread(block 66) failed [ 273.153681][T13231] FAT-fs (loop2): Directory bread(block 67) failed [ 273.182592][T13231] FAT-fs (loop2): Directory bread(block 68) failed [ 273.215419][T13231] FAT-fs (loop2): Directory bread(block 69) failed [ 273.239375][T13231] FAT-fs (loop2): Directory bread(block 70) failed [ 273.315373][T13231] FAT-fs (loop2): Directory bread(block 71) failed [ 273.362782][T13231] FAT-fs (loop2): Directory bread(block 72) failed [ 273.382553][T13231] FAT-fs (loop2): Directory bread(block 73) failed [ 273.739701][T13227] loop5: detected capacity change from 0 to 32768 [ 273.826784][T13263] loop4: detected capacity change from 0 to 16 [ 273.839808][T13227] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.3836 (13227) [ 273.883121][T13263] erofs: (device loop4): mounted with root inode @ nid 36. [ 273.932097][T13227] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 273.963380][T13227] BTRFS info (device loop5): force clearing of disk cache [ 273.999864][T13227] BTRFS info (device loop5): setting nodatasum [ 274.007076][T13227] BTRFS info (device loop5): use zlib compression, level 3 [ 274.024588][T13227] BTRFS info (device loop5): allowing degraded mounts [ 274.084991][T13227] BTRFS info (device loop5): enabling disk space caching [ 274.092073][T13227] BTRFS info (device loop5): disk space caching is enabled [ 274.111187][T13227] BTRFS info (device loop5): has skinny extents [ 274.139252][T13279] netlink: 'syz.4.3855': attribute type 10 has an invalid length. [ 274.241230][T13279] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 274.542077][T13227] BTRFS info (device loop5): enabling ssd optimizations [ 274.577122][T13227] BTRFS info (device loop5): clearing free space tree [ 274.584030][T13227] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.657356][T13275] loop0: detected capacity change from 0 to 32768 [ 274.692055][T13227] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 274.749922][T13275] XFS: ikeep mount option is deprecated. [ 274.766462][T13317] loop3: detected capacity change from 0 to 512 [ 274.798089][T13319] loop4: detected capacity change from 0 to 1764 [ 274.840210][T13275] XFS (loop0): Mounting V5 Filesystem [ 274.861380][T13319] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 274.945761][T13317] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.062187][T13317] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 275.080298][T13317] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 275.092693][T13317] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.3868: Failed to acquire dquot type 0 [ 275.175579][T13275] XFS (loop0): Ending clean mount [ 275.182960][T13275] XFS (loop0): Quotacheck needed: Please wait. [ 275.283934][ T144] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_cntbt block 0x8 [ 275.354508][ T144] XFS (loop0): Unmount and run xfs_repair [ 275.385078][ T144] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 275.392524][ T144] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 275.491143][ T144] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80 ................ [ 275.523957][ T144] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 275.552290][ T144] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 275.605069][ T144] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 275.623122][ T144] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00 ................ [ 275.643895][ T144] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 275.709068][ T144] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 275.725142][ T144] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 4 error 74 [ 275.741358][T13275] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 275.748336][T13354] loop2: detected capacity change from 0 to 64 [ 275.845121][T13360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3884'. [ 275.937066][T13362] cgroup: Invalid name [ 275.987628][ T4168] XFS (loop0): Unmounting Filesystem [ 275.991391][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3896'. [ 276.022624][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3896'. [ 276.473049][T13388] loop2: detected capacity change from 0 to 16 [ 276.525494][T13387] loop3: detected capacity change from 0 to 1024 [ 276.582480][T13388] erofs: (device loop2): mounted with root inode @ nid 36. [ 276.982873][T13400] loop3: detected capacity change from 0 to 2048 [ 277.069954][T13407] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.367056][T13370] loop5: detected capacity change from 0 to 32768 [ 277.561640][T13370] XFS (loop5): Mounting V5 Filesystem [ 277.766645][T13370] XFS (loop5): Ending clean mount [ 277.896941][ T4587] XFS (loop5): Unmounting Filesystem [ 278.080583][ T9155] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 278.105013][T13411] loop0: detected capacity change from 0 to 32768 [ 278.232124][T13411] ERROR: (device loop0): diNewExt: no free extents [ 278.232124][T13411] [ 278.259774][T13411] ialloc: diAlloc returned -5! [ 278.376240][T13467] loop4: detected capacity change from 0 to 1024 [ 278.395035][ T9155] usb 4-1: Using ep0 maxpacket: 8 [ 278.505755][ T4692] hfsplus: b-tree write err: -5, ino 4 [ 278.566369][ T9155] usb 4-1: unable to get BOS descriptor or descriptor too short [ 278.650207][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3938'. [ 278.665365][ T9155] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 37, changing to 9 [ 278.679741][T13479] netlink: 'syz.5.3939': attribute type 1 has an invalid length. [ 278.692041][ T9155] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.713264][T13479] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3939'. [ 278.727762][ T9155] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.861349][T13487] loop2: detected capacity change from 0 to 512 [ 278.964825][T13493] loop0: detected capacity change from 0 to 1024 [ 278.971773][ T9155] usb 4-1: New USB device found, idVendor=10cf, idProduct=5500, bcdDevice= 0.40 [ 278.999823][ T9155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.015869][T13487] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.027469][ T9155] usb 4-1: Product: syz [ 279.031674][ T9155] usb 4-1: Manufacturer: syz [ 279.058723][T13487] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 279.088757][ T9155] usb 4-1: SerialNumber: syz [ 279.119198][T13487] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 279.185372][T13487] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.3942: Failed to acquire dquot type 0 [ 279.286980][T13503] loop5: detected capacity change from 0 to 1024 [ 279.322102][T13505] loop0: detected capacity change from 0 to 256 [ 279.419728][T13500] loop4: detected capacity change from 0 to 32768 [ 279.456330][T13500] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3949 (13500) [ 279.498353][ T9155] vmk80xx 4-1:1.0: driver 'vmk80xx' failed to auto-configure device. [ 279.515268][ T1434] hfsplus: b-tree write err: -5, ino 4 [ 279.585993][ T9155] usb 4-1: USB disconnect, device number 20 [ 279.600936][T13500] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 279.617284][T13500] BTRFS info (device loop4): using free space tree [ 279.623859][T13500] BTRFS info (device loop4): has skinny extents [ 279.894139][T13534] netlink: 'syz.2.3960': attribute type 1 has an invalid length. [ 279.903052][T13534] netlink: 'syz.2.3960': attribute type 1 has an invalid length. [ 279.911662][T13534] netlink: 'syz.2.3960': attribute type 1 has an invalid length. [ 280.111361][T13500] BTRFS info (device loop4): enabling ssd optimizations [ 280.453708][T13560] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 280.554119][T13511] loop0: detected capacity change from 0 to 32768 [ 280.685891][T13511] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3953 (13511) [ 280.741520][T13570] netlink: 'syz.2.3974': attribute type 1 has an invalid length. [ 280.796327][T13570] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3974'. [ 280.876354][T13511] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 280.915357][T13511] BTRFS info (device loop0): force clearing of disk cache [ 280.922554][T13511] BTRFS info (device loop0): setting nodatasum [ 280.968251][T13511] BTRFS info (device loop0): use zlib compression, level 3 [ 280.997309][T13584] syz.5.3979 uses obsolete (PF_INET,SOCK_PACKET) [ 281.033077][T13511] BTRFS info (device loop0): allowing degraded mounts [ 281.047053][T13511] BTRFS info (device loop0): enabling disk space caching [ 281.095646][T13511] BTRFS info (device loop0): disk space caching is enabled [ 281.102906][T13511] BTRFS info (device loop0): has skinny extents [ 281.285044][ T5459] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 281.508609][T13511] BTRFS info (device loop0): enabling ssd optimizations [ 281.543794][T13511] BTRFS info (device loop0): clearing free space tree [ 281.589341][T13511] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 281.600148][T13511] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 281.732520][T13511] BTRFS info (device loop0): balance: start -f -susage=0..61294,devid=0,drange=4398046511104..7,stripes=0..253 [ 281.791287][T13511] BTRFS info (device loop0): balance: ended with status: 0 [ 281.845228][ T5459] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 281.865904][ T5459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.878258][ T5459] usb 4-1: Product: syz [ 281.882470][ T5459] usb 4-1: Manufacturer: syz [ 281.917804][ T5459] usb 4-1: SerialNumber: syz [ 282.007485][ T5459] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 282.427610][T13665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 282.554161][T13671] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 282.573140][T13671] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 282.713316][T13675] loop2: detected capacity change from 0 to 1764 [ 282.755419][ T5459] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 282.854756][T13675] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 282.888276][T13685] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢' [ 282.895291][T13675] cramfs: wrong magic [ 283.081235][T13695] loop5: detected capacity change from 0 to 512 [ 283.204833][ T4820] usb 4-1: USB disconnect, device number 21 [ 283.227017][T13695] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 283.373155][T13712] loop4: detected capacity change from 0 to 8 [ 283.391579][T13695] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 283.805289][ T5459] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 283.815151][ T5459] ath9k_htc: Failed to initialize the device [ 283.819151][T13733] loop5: detected capacity change from 0 to 64 [ 283.827742][ T4820] usb 4-1: ath9k_htc: USB layer deinitialized [ 284.179947][T13751] loop4: detected capacity change from 0 to 1764 [ 284.250870][T13762] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4054'. [ 284.273327][T13751] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 284.297652][T13766] xt_connbytes: Forcing CT accounting to be enabled [ 284.298885][T13751] cramfs: wrong magic [ 284.320019][T13766] Timeout policy `syz0' can only be used by L3 protocol number 248 [ 284.329403][T13762] netlink: 'syz.3.4054': attribute type 1 has an invalid length. [ 284.388519][T13762] netlink: 'syz.3.4054': attribute type 2 has an invalid length. [ 284.414185][T13762] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4054'. [ 284.800722][T13800] loop5: detected capacity change from 0 to 8 [ 284.949248][T13793] loop2: detected capacity change from 0 to 8192 [ 285.005962][T13810] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢' [ 285.006903][T13793] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 285.051583][T13793] REISERFS (device loop2): using ordered data mode [ 285.065160][T13793] reiserfs: using flush barriers [ 285.071274][T13793] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 285.144437][T13793] REISERFS (device loop2): checking transaction log (loop2) [ 285.157240][T13818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.407025][T13835] netlink: 'syz.4.4091': attribute type 2 has an invalid length. [ 285.445206][T13839] kernel read not supported for file /½ lhObíñ~åÑhþµ“3žJÇÈyûxÐîÃüv÷Lª=QäRúnÁ·$h®ÌÜf€ǹ”óW£FGr‚¥òqðςû~QV7¶·"qHâ—ÉdNn9µƒÝD0ª)g [ 285.445206][T13839] .j``~éäN@»Û€Ï žWâctéö\x•|êbÎEïVyS$’µPAXg¦8mRC“l†EtùTíTS_øm)ל- (pid: 13839 comm: syz.3.4093) [ 285.478799][ T26] audit: type=1800 audit(285.445:21): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4093" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B72468AECCDC668015C7B9949DF357A346477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E21197C9644E6E39B503831CDD4430AA29670A2E6A60601F7EE9E44E40BBDB80CF1E209E571302E26374E9F65C78957CEA62CE45EF5679532492B550415867A6386D5243936C864574F954ED9054535FF86D0729D79C2D dev="mqueue" ino=61160 res=0 errno=0 [ 285.547332][T13793] REISERFS (device loop2): Using tea hash to sort names [ 285.558002][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4094'. [ 285.588864][T13793] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 285.628751][T13793] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 285.700464][T13851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4099'. [ 285.841020][T13856] loop3: detected capacity change from 0 to 512 [ 286.055439][T13856] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 286.172294][T13879] tmpfs: Bad value for 'mpol' [ 286.193711][T13856] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 286.528612][T13902] loop4: detected capacity change from 0 to 256 [ 286.616099][T13909] x_tables: unsorted underflow at hook 1 [ 286.627191][T13898] loop5: detected capacity change from 0 to 8192 [ 286.711490][T13902] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 286.711737][T13898] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 286.733613][T13898] REISERFS (device loop5): using ordered data mode [ 286.740741][T13898] reiserfs: using flush barriers [ 286.741246][T13915] loop2: detected capacity change from 0 to 64 [ 286.754129][T13898] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 286.771216][T13898] REISERFS (device loop5): checking transaction log (loop5) [ 286.814537][T13902] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 286.845248][ T9155] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 286.905215][T13898] REISERFS (device loop5): Using tea hash to sort names [ 286.922881][T13898] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 286.954129][T13898] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 287.126164][T13925] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4134'. [ 287.165362][ T9155] usb 4-1: Using ep0 maxpacket: 32 [ 287.178384][T13929] netlink: 'syz.4.4136': attribute type 2 has an invalid length. [ 287.305606][ T9155] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.334679][T13940] loop0: detected capacity change from 0 to 64 [ 287.373019][T13935] xt_CT: No such helper "pptp" [ 287.458150][ T9155] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 287.477616][ T9155] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 287.505147][ T9155] usb 4-1: Product: syz [ 287.515011][ T9155] usb 4-1: Manufacturer: syz [ 287.596389][ T9155] hub 4-1:4.0: USB hub found [ 287.737394][T13961] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4153'. [ 287.765774][T13961] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4153'. [ 287.774762][T13961] netlink: 'syz.5.4153': attribute type 3 has an invalid length. [ 287.802343][T13961] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4153'. [ 287.865222][ T9155] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 287.876864][T13966] device veth3 entered promiscuous mode [ 287.925730][ T9155] usb 4-1: USB disconnect, device number 22 [ 287.994616][T13975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4158'. [ 288.050524][T13978] SET target dimension over the limit! [ 288.256473][T13984] loop4: detected capacity change from 0 to 4096 [ 288.370582][T13984] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 288.397028][T13997] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.4167'. [ 288.554539][T13984] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 288.755853][T14008] usb usb8: usbfs: process 14008 (syz.0.4175) did not claim interface 0 before use [ 288.820066][T14012] loop3: detected capacity change from 0 to 16 [ 288.906786][T14012] erofs: (device loop3): mounted with root inode @ nid 36. [ 289.065721][T14016] loop4: detected capacity change from 0 to 2048 [ 289.225635][T14016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.684975][ T9155] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 289.945135][ T9155] usb 3-1: Using ep0 maxpacket: 16 [ 289.981557][T14062] device gre0 entered promiscuous mode [ 290.055935][T14062] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 290.081129][T14068] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 290.088742][ T9155] usb 3-1: config 0 has no interfaces? [ 290.265303][ T9155] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 290.274396][ T9155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.315187][ T9155] usb 3-1: Product: syz [ 290.319399][ T9155] usb 3-1: Manufacturer: syz [ 290.324006][ T9155] usb 3-1: SerialNumber: syz [ 290.364481][ T9155] r8152-cfgselector 3-1: config 0 descriptor?? [ 290.437847][T14088] __nla_validate_parse: 1 callbacks suppressed [ 290.437864][T14088] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4213'. [ 290.650564][ T9155] r8152-cfgselector 3-1: Unknown version 0x6ce0 [ 290.864163][ T9155] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 291.531443][T14102] loop3: detected capacity change from 0 to 32768 [ 291.645075][T14102] JBD2: Ignoring recovery information on journal [ 291.663944][T14144] loop5: detected capacity change from 0 to 4096 [ 291.783444][T14144] NILFS (loop5): invalid segment: Checksum error in segment payload [ 291.805199][T14144] NILFS (loop5): trying rollback from an earlier position [ 291.831087][T14102] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 291.918518][T14144] NILFS (loop5): recovery complete [ 291.940857][T14160] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.024585][T14144] NILFS (loop5): the device already has a read/write mount. [ 292.039068][T14164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.174660][T14126] loop4: detected capacity change from 0 to 32768 [ 292.329277][ T4171] ocfs2: Unmounting device (7,3) on (node local) [ 292.392375][T14126] XFS (loop4): Mounting V5 Filesystem [ 292.719184][T14126] XFS (loop4): Ending clean mount [ 292.862323][T14200] loop5: detected capacity change from 0 to 4096 [ 292.902100][ T4169] XFS (loop4): Unmounting Filesystem [ 292.929464][T14200] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 293.195767][T14220] SET target dimension over the limit! [ 293.240533][ T144] ntfs3: loop5: ino=1e, Internal error [ 293.275149][ T144] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 293.327775][T14222] loop3: detected capacity change from 0 to 128 [ 293.443673][T14222] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.872259][T14256] loop0: detected capacity change from 0 to 2048 [ 294.010441][T14256] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 294.057734][T14256] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 294.099427][T14256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.295655][T14272] loop5: detected capacity change from 0 to 8 [ 294.424409][T14272] SQUASHFS error: xz decompression failed, data probably corrupt [ 294.432750][T14280] loop0: detected capacity change from 0 to 1024 [ 294.444682][T14272] SQUASHFS error: Failed to read block 0x108: -5 [ 294.481860][T14272] SQUASHFS error: Unable to read metadata cache entry [106] [ 294.506928][T14286] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4304'. [ 294.522695][T14272] SQUASHFS error: Unable to read inode 0x11f [ 294.538198][T14280] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 294.579879][T14286] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 294.975298][ T4213] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 295.026130][T14300] loop3: detected capacity change from 0 to 8192 [ 295.224995][ T4213] usb 6-1: Using ep0 maxpacket: 16 [ 295.345246][ T4213] usb 6-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 295.362641][ T4213] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF5, skipping [ 295.405042][ T4213] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 295.516988][ T4213] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 295.545019][ T4213] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 295.561119][ T4213] usb 6-1: Manufacturer: syz [ 295.588570][ T4213] usb 6-1: config 0 descriptor?? [ 295.615441][T14272] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 295.846238][T14355] loop3: detected capacity change from 0 to 16 [ 295.871870][ T5461] usb 6-1: USB disconnect, device number 18 [ 295.930803][T14355] erofs: (device loop3): mounted with root inode @ nid 36. [ 296.082508][T14369] netlink: 'syz.0.4344': attribute type 1 has an invalid length. [ 296.104354][T14365] loop2: detected capacity change from 0 to 2048 [ 296.110894][T14369] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4344'. [ 296.162770][T14371] loop3: detected capacity change from 0 to 2048 [ 296.188059][T14365] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.233141][T14371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.075111][ T9155] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 297.392693][T14391] loop2: detected capacity change from 0 to 32768 [ 297.505312][ T9155] usb 4-1: config 0 has an invalid interface number: 62 but max is 0 [ 297.513591][ T9155] usb 4-1: config 0 has no interface number 0 [ 297.540608][ T9155] usb 4-1: New USB device found, idVendor=0846, idProduct=4250, bcdDevice=2f.18 [ 297.556624][T14395] loop5: detected capacity change from 0 to 32768 [ 297.563260][ T9155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.589154][ T9155] usb 4-1: config 0 descriptor?? [ 297.605647][ T26] audit: type=1107 audit(297.565:22): pid=14425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='£' [ 297.839503][T14395] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 297.879787][T14391] JBD2: Ignoring recovery information on journal [ 297.882190][T14395] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 297.895251][ T9155] usb 4-1: string descriptor 0 read error: -71 [ 297.902078][ T9155] usb 4-1: Could not find all expected endpoints [ 297.975306][ T9155] usb 4-1: USB disconnect, device number 23 [ 297.990806][T14391] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 298.006228][T14395] gfs2: fsid=syz:syz.0: journal 0 mapped with 20 extents in 0ms [ 298.030184][ T5460] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 298.044907][ T5460] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 298.053172][T14391] (syz.2.4355,14391,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry overrun - offset=32, inode=16945, rec_len=61440, name_len=255 [ 298.075301][T14391] (syz.2.4355,14391,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 298.087821][T14391] (syz.2.4355,14391,0):ocfs2_mknod:298 ERROR: status = -2 [ 298.096768][T14391] (syz.2.4355,14391,0):ocfs2_mknod:502 ERROR: status = -2 [ 298.103474][T14439] openvswitch: netlink: Message has 8 unknown bytes. [ 298.115082][T14391] (syz.2.4355,14391,0):ocfs2_create:676 ERROR: status = -2 [ 298.161381][ T5460] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 116ms [ 298.218363][ T5460] gfs2: fsid=syz:syz.0: jid=0: Done [ 298.218440][T14395] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 298.246438][ T4175] ocfs2: Unmounting device (7,2) on (node local) [ 298.707745][T14459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4387'. [ 298.870148][T14471] loop0: detected capacity change from 0 to 64 [ 299.053613][T14483] loop5: detected capacity change from 0 to 64 [ 299.213738][T14493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4402'. [ 299.238150][T14498] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.285232][T14499] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4403'. [ 299.293302][T14501] loop4: detected capacity change from 0 to 512 [ 299.294243][T14499] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4403'. [ 299.294263][T14499] netlink: 'syz.3.4403': attribute type 3 has an invalid length. [ 299.372906][T14499] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4403'. [ 299.445919][T14501] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 299.454080][T14501] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 299.495396][T14501] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.4406: bad orphan inode 13 [ 299.525451][T14513] device veth3 entered promiscuous mode [ 299.542047][T14501] EXT4-fs (loop4): Remounting filesystem read-only [ 299.549032][T14501] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="nobarrier,noload,data_err=ignore,grpjquota="bh,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 299.662025][T14521] loop0: detected capacity change from 0 to 256 [ 299.784411][T14521] FAT-fs (loop0): Directory bread(block 64) failed [ 299.806059][T14521] FAT-fs (loop0): Directory bread(block 65) failed [ 299.845177][T14521] FAT-fs (loop0): Directory bread(block 66) failed [ 299.851775][T14521] FAT-fs (loop0): Directory bread(block 67) failed [ 299.899938][T14521] FAT-fs (loop0): Directory bread(block 68) failed [ 299.931575][T14521] FAT-fs (loop0): Directory bread(block 69) failed [ 299.959603][T14521] FAT-fs (loop0): Directory bread(block 70) failed [ 299.972263][T14535] loop4: detected capacity change from 0 to 256 [ 299.983849][T14521] FAT-fs (loop0): Directory bread(block 71) failed [ 300.005187][T14521] FAT-fs (loop0): Directory bread(block 72) failed [ 300.025610][T14521] FAT-fs (loop0): Directory bread(block 73) failed [ 300.128671][T14537] loop3: detected capacity change from 0 to 2048 [ 300.294674][T14507] loop5: detected capacity change from 0 to 32768 [ 300.312276][T14537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.438028][T14507] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.4404 (14507) [ 300.473289][T14527] loop2: detected capacity change from 0 to 32768 [ 300.508806][T14527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4419 (14527) [ 300.524138][T14507] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 300.544823][T14549] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4428'. [ 300.561424][T14507] BTRFS info (device loop5): force clearing of disk cache [ 300.569651][T14507] BTRFS info (device loop5): setting nodatasum [ 300.574248][T14527] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 300.596838][T14507] BTRFS info (device loop5): use zlib compression, level 3 [ 300.604312][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4428'. [ 300.620885][T14507] BTRFS info (device loop5): allowing degraded mounts [ 300.628249][T14549] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4428'. [ 300.643523][T14527] BTRFS info (device loop2): use no compression [ 300.661109][T14507] BTRFS info (device loop5): enabling disk space caching [ 300.668894][T14527] BTRFS info (device loop2): turning on flush-on-commit [ 300.682392][T14507] BTRFS info (device loop5): disk space caching is enabled [ 300.690281][T14549] netlink: 'syz.3.4428': attribute type 3 has an invalid length. [ 300.720734][T14527] BTRFS info (device loop2): turning on sync discard [ 300.728108][T14549] netlink: 'syz.3.4428': attribute type 2 has an invalid length. [ 300.742191][T14507] BTRFS info (device loop5): has skinny extents [ 300.749067][T14527] BTRFS info (device loop2): force clearing of disk cache [ 300.779711][T14527] BTRFS info (device loop2): enabling auto defrag [ 300.795138][T14527] BTRFS info (device loop2): turning off discard [ 300.801539][T14527] BTRFS info (device loop2): using free space tree [ 300.844324][T14527] BTRFS info (device loop2): has skinny extents [ 300.949897][T14566] netlink: 'syz.0.4433': attribute type 11 has an invalid length. [ 301.207896][T14507] BTRFS info (device loop5): enabling ssd optimizations [ 301.220448][T14507] BTRFS info (device loop5): clearing free space tree [ 301.229430][T14507] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 301.280157][ T7580] udevd[7580]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 301.289889][T14507] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 301.417141][T14608] kernel profiling enabled (shift: 17) [ 301.431471][T14527] BTRFS info (device loop2): enabling ssd optimizations [ 301.460980][T14507] BTRFS info (device loop5): balance: start -f -susage=0..61294,devid=0,drange=4398046511104..7,stripes=0..253 [ 301.482012][T14527] BTRFS info (device loop2): clearing free space tree [ 301.489648][T14527] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 301.493182][ T4756] udevd[4756]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 301.499521][T14527] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 301.505230][T14507] BTRFS info (device loop5): balance: ended with status: 0 [ 301.564717][T14527] BTRFS info (device loop2): creating free space tree [ 301.583412][T14527] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 301.620203][ T4756] udevd[4756]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 301.634374][T14527] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 301.871272][T14527] Process accounting resumed [ 302.053042][T14545] loop4: detected capacity change from 0 to 40427 [ 302.118275][T14623] SET target dimension over the limit! [ 302.135706][T14545] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 302.166687][T14545] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 302.219473][T14527] syz.2.4419 (14527) used greatest stack depth: 19184 bytes left [ 302.313764][T14628] netlink: 'syz.0.4451': attribute type 25 has an invalid length. [ 302.325078][T14545] F2FS-fs (loop4): invalid crc value [ 302.414055][T14634] netlink: 332 bytes leftover after parsing attributes in process `syz.5.4443'. [ 302.440083][T14545] F2FS-fs (loop4): Found nat_bits in checkpoint [ 302.853512][T14545] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 302.903915][T14545] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 303.214594][T14658] xt_TCPMSS: Only works on TCP SYN packets [ 303.520675][T14673] loop2: detected capacity change from 0 to 512 [ 303.588368][T14637] loop3: detected capacity change from 0 to 32768 [ 303.627162][T14676] netlink: 'syz.5.4469': attribute type 11 has an invalid length. [ 303.683911][T14637] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4452 (14637) [ 303.785355][T14673] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.862885][T14637] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 303.954976][T14637] BTRFS info (device loop3): using free space tree [ 303.961544][T14637] BTRFS info (device loop3): has skinny extents [ 304.278835][T14721] loop4: detected capacity change from 0 to 2048 [ 304.386854][T14735] ieee802154 phy0 wpan0: encryption failed: -90 [ 304.436721][T14721] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.525409][T14637] BTRFS info (device loop3): enabling ssd optimizations [ 304.586969][ T263] nbd_handle_cmd: 2 callbacks suppressed [ 304.586998][ T263] block nbd2: Attempted send on invalid socket [ 304.599168][ T263] print_req_error: 2 callbacks suppressed [ 304.599184][ T263] blk_update_request: I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 304.625101][T14745] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 304.844144][T14756] loop5: detected capacity change from 0 to 512 [ 304.940650][T14756] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 304.997804][T14756] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 304.997804][T14756] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 304.997804][T14756] [ 305.074099][T14756] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 305.100610][T14756] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.163321][T14756] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x00000000000003ff,grpjquota=./file1,nouser_xattr,stripe=0x0000000000000007,nomblk_io_submit,dioread_nolock,,errors=continue. Quota mode: writeback. [ 305.932445][T14807] loop3: detected capacity change from 0 to 64 [ 306.196522][T14824] netlink: 'syz.5.4528': attribute type 10 has an invalid length. [ 306.263961][T14824] batman_adv: batadv0: Interface deactivated: vlan1 [ 306.468064][T14824] device veth0_vlan left promiscuous mode [ 306.488123][T14824] device veth0_vlan entered promiscuous mode [ 306.515590][T14824] [ 306.518094][T14824] ============================================ [ 306.524237][T14824] WARNING: possible recursive locking detected [ 306.530383][T14824] 5.15.176-syzkaller #0 Not tainted [ 306.535584][T14824] -------------------------------------------- [ 306.541861][T14824] syz.5.4528/14824 is trying to acquire lock: [ 306.547921][T14824] ffff88807e560d00 (team->team_lock_key#6){+.+.}-{3:3}, at: team_port_change_check+0x51/0x1e0 [ 306.558558][T14824] [ 306.558558][T14824] but task is already holding lock: [ 306.565920][T14824] ffff88807e560d00 (team->team_lock_key#6){+.+.}-{3:3}, at: team_add_slave+0xab/0x27a0 [ 306.575588][T14824] [ 306.575588][T14824] other info that might help us debug this: [ 306.583633][T14824] Possible unsafe locking scenario: [ 306.583633][T14824] [ 306.591073][T14824] CPU0 [ 306.594345][T14824] ---- [ 306.597612][T14824] lock(team->team_lock_key#6); [ 306.602550][T14824] lock(team->team_lock_key#6); [ 306.607488][T14824] [ 306.607488][T14824] *** DEADLOCK *** [ 306.607488][T14824] [ 306.615617][T14824] May be due to missing lock nesting notation [ 306.615617][T14824] [ 306.623923][T14824] 2 locks held by syz.5.4528/14824: [ 306.629110][T14824] #0: ffffffff8dc42188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 306.638512][T14824] #1: ffff88807e560d00 (team->team_lock_key#6){+.+.}-{3:3}, at: team_add_slave+0xab/0x27a0 [ 306.648603][T14824] [ 306.648603][T14824] stack backtrace: [ 306.654476][T14824] CPU: 0 PID: 14824 Comm: syz.5.4528 Not tainted 5.15.176-syzkaller #0 [ 306.662703][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 306.672750][T14824] Call Trace: [ 306.676127][T14824] [ 306.679075][T14824] dump_stack_lvl+0x1e3/0x2d0 [ 306.683768][T14824] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 306.689407][T14824] ? panic+0x860/0x860 [ 306.693482][T14824] validate_chain+0x46d2/0x5930 [ 306.698423][T14824] ? __local_bh_enable_ip+0x164/0x1f0 [ 306.703790][T14824] ? local_bh_enable+0x5/0x20 [ 306.708467][T14824] ? _local_bh_enable+0xa0/0xa0 [ 306.713321][T14824] ? reacquire_held_locks+0x660/0x660 [ 306.718778][T14824] ? neigh_lookup+0x3f8/0x4e0 [ 306.723455][T14824] ? neigh_ifdown+0x30/0x30 [ 306.727959][T14824] ? mark_lock+0x98/0x340 [ 306.732284][T14824] __lock_acquire+0x1295/0x1ff0 [ 306.737133][T14824] lock_acquire+0x1db/0x4f0 [ 306.741644][T14824] ? team_port_change_check+0x51/0x1e0 [ 306.747103][T14824] ? read_lock_is_recursive+0x10/0x10 [ 306.752472][T14824] ? __might_sleep+0xc0/0xc0 [ 306.757058][T14824] ? cfg80211_netdev_notifier_call+0x1ff/0x1210 [ 306.763300][T14824] __mutex_lock_common+0x1da/0x25a0 [ 306.768500][T14824] ? team_port_change_check+0x51/0x1e0 [ 306.773961][T14824] ? __local_bh_enable_ip+0x164/0x1f0 [ 306.779325][T14824] ? lockdep_hardirqs_on+0x94/0x130 [ 306.784524][T14824] ? __local_bh_enable_ip+0x164/0x1f0 [ 306.789888][T14824] ? igmpv3_del_delrec+0x710/0x710 [ 306.795013][T14824] ? ip_mc_up+0x1d1/0x2f0 [ 306.799335][T14824] ? team_port_change_check+0x51/0x1e0 [ 306.804800][T14824] ? _local_bh_enable+0xa0/0xa0 [ 306.809646][T14824] ? bond_netdev_event+0xd8/0xe80 [ 306.814667][T14824] ? mutex_lock_io_nested+0x60/0x60 [ 306.819863][T14824] ? dev_get_flags+0x141/0x1c0 [ 306.824621][T14824] ? bond_ipsec_offload_ok+0x3f0/0x3f0 [ 306.830075][T14824] ? memset+0x1f/0x40 [ 306.834056][T14824] mutex_lock_nested+0x17/0x20 [ 306.838815][T14824] team_port_change_check+0x51/0x1e0 [ 306.844129][T14824] team_device_event+0x4a7/0x580 [ 306.849070][T14824] raw_notifier_call_chain+0xd0/0x170 [ 306.854444][T14824] __dev_notify_flags+0x304/0x610 [ 306.859463][T14824] ? __dev_change_flags+0x6e0/0x6e0 [ 306.864675][T14824] ? __dev_change_flags+0x505/0x6e0 [ 306.870078][T14824] ? dev_get_flags+0x1c0/0x1c0 [ 306.874869][T14824] dev_change_flags+0xe7/0x190 [ 306.879655][T14824] vlan_device_event+0x442/0x1dd0 [ 306.884686][T14824] ? rcu_lock_release+0x20/0x20 [ 306.889539][T14824] ? br_device_event+0x143/0x970 [ 306.894482][T14824] ? phonet_exit_net+0x80/0x80 [ 306.899250][T14824] ? register_vlan_dev+0x800/0x800 [ 306.904363][T14824] ? br_switchdev_event+0x480/0x480 [ 306.909560][T14824] ? isotp_notifier+0xa0/0x690 [ 306.914323][T14824] ? cgw_notifier+0xcc/0x3a0 [ 306.918906][T14824] ? j1939_netdev_notify+0xfd/0x2e0 [ 306.924103][T14824] raw_notifier_call_chain+0xd0/0x170 [ 306.929477][T14824] dev_open+0x1c1/0x260 [ 306.933632][T14824] ? netdev_notify_peers+0x20/0x20 [ 306.938741][T14824] ? __kmalloc+0x168/0x300 [ 306.943157][T14824] ? team_add_slave+0x890/0x27a0 [ 306.948183][T14824] team_add_slave+0x981/0x27a0 [ 306.952950][T14824] ? __dev_change_flags+0x6e0/0x6e0 [ 306.958232][T14824] ? team_netpoll_cleanup+0xf0/0xf0 [ 306.963424][T14824] ? printk_parse_prefix+0x2c0/0x2c0 [ 306.968706][T14824] ? dev_get_flags+0x1c0/0x1c0 [ 306.973476][T14824] ? preempt_schedule+0xd9/0xe0 [ 306.978325][T14824] ? mutex_is_locked+0xe/0x40 [ 306.983005][T14824] do_setlink+0xdd3/0x3d80 [ 306.987422][T14824] ? __wake_up_klogd+0xd5/0x100 [ 306.992271][T14824] ? vprintk_emit+0xf5/0x150 [ 306.996857][T14824] ? _printk+0xd1/0x120 [ 307.001021][T14824] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 307.007172][T14824] ? __nla_validate_parse+0x553/0x27f0 [ 307.012629][T14824] ? panic+0x860/0x860 [ 307.016698][T14824] ? ____kasan_kmalloc+0xd1/0xf0 [ 307.021720][T14824] ? rtnetlink_rcv_msg+0x993/0xee0 [ 307.026833][T14824] ? netlink_rcv_skb+0x1cf/0x410 [ 307.031773][T14824] ? __nla_validate_parse+0x1e6b/0x27f0 [ 307.037323][T14824] ? __nla_validate+0x50/0x50 [ 307.042006][T14824] ? validate_linkmsg+0x3db/0x4c0 [ 307.047030][T14824] rtnl_newlink+0x17d6/0x2070 [ 307.051711][T14824] ? rtnl_newlink+0x501/0x2070 [ 307.056479][T14824] ? rtnl_setlink+0x560/0x560 [ 307.061155][T14824] ? reacquire_held_locks+0x660/0x660 [ 307.066525][T14824] ? rcu_lock_release+0x5/0x20 [ 307.071290][T14824] ? __lock_acquire+0x1ff0/0x1ff0 [ 307.076314][T14824] ? unwind_next_frame+0x1437/0x1fa0 [ 307.081634][T14824] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 307.086751][T14824] ? rtnl_setlink+0x560/0x560 [ 307.091424][T14824] rtnetlink_rcv_msg+0x993/0xee0 [ 307.096360][T14824] ? rtnetlink_bind+0x80/0x80 [ 307.101036][T14824] ? __local_bh_enable_ip+0x164/0x1f0 [ 307.106408][T14824] ? lockdep_hardirqs_on+0x94/0x130 [ 307.111608][T14824] ? __local_bh_enable_ip+0x164/0x1f0 [ 307.116975][T14824] ? local_bh_enable+0x5/0x20 [ 307.121651][T14824] ? _local_bh_enable+0xa0/0xa0 [ 307.126501][T14824] ? __dev_queue_xmit+0x1bf8/0x32b0 [ 307.131701][T14824] ? __copy_skb_header+0x47b/0x600 [ 307.136833][T14824] ? dev_queue_xmit+0x20/0x20 [ 307.141506][T14824] ? memcpy+0x3c/0x60 [ 307.145490][T14824] ? __copy_skb_header+0x47b/0x600 [ 307.150603][T14824] netlink_rcv_skb+0x1cf/0x410 [ 307.155367][T14824] ? rtnetlink_bind+0x80/0x80 [ 307.160041][T14824] ? netlink_ack+0xb10/0xb10 [ 307.164635][T14824] netlink_unicast+0x7b6/0x980 [ 307.169400][T14824] ? netlink_detachskb+0x90/0x90 [ 307.174334][T14824] ? __virt_addr_valid+0x3bb/0x460 [ 307.179443][T14824] ? 0xffffffff81000000 [ 307.183589][T14824] ? __check_object_size+0x300/0x410 [ 307.188882][T14824] ? bpf_lsm_netlink_send+0x5/0x10 [ 307.194000][T14824] netlink_sendmsg+0xa30/0xd60 [ 307.198854][T14824] ? netlink_getsockopt+0x5b0/0x5b0 [ 307.204054][T14824] ? futex_wait+0x634/0x740 [ 307.208553][T14824] ? aa_sock_msg_perm+0x91/0x150 [ 307.213486][T14824] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 307.218769][T14824] ? security_socket_sendmsg+0x7d/0xa0 [ 307.224226][T14824] ? netlink_getsockopt+0x5b0/0x5b0 [ 307.229423][T14824] ____sys_sendmsg+0x59e/0x8f0 [ 307.234185][T14824] ? iovec_from_user+0x300/0x390 [ 307.239120][T14824] ? __sys_sendmsg_sock+0x30/0x30 [ 307.244150][T14824] ___sys_sendmsg+0x252/0x2e0 [ 307.248826][T14824] ? __sys_sendmsg+0x260/0x260 [ 307.253608][T14824] ? __fdget+0x191/0x220 [ 307.257845][T14824] __se_sys_sendmsg+0x19a/0x260 [ 307.262691][T14824] ? __x64_sys_sendmsg+0x80/0x80 [ 307.267627][T14824] ? syscall_enter_from_user_mode+0x2e/0x240 [ 307.273605][T14824] ? lockdep_hardirqs_on+0x94/0x130 [ 307.278801][T14824] ? syscall_enter_from_user_mode+0x2e/0x240 [ 307.284781][T14824] do_syscall_64+0x3b/0xb0 [ 307.289195][T14824] ? clear_bhb_loop+0x15/0x70 [ 307.293890][T14824] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.299782][T14824] RIP: 0033:0x7f32248d7d29 [ 307.304195][T14824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.323820][T14824] RSP: 002b:00007f3222748038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.332240][T14824] RAX: ffffffffffffffda RBX: 00007f3224ac7fa0 RCX: 00007f32248d7d29 [ 307.340216][T14824] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 307.348183][T14824] RBP: 00007f3224953b08 R08: 0000000000000000 R09: 0000000000000000 [ 307.356148][T14824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.364116][T14824] R13: 0000000000000000 R14: 00007f3224ac7fa0 R15: 00007ffc88c6cbb8 [ 307.372090][T14824] [ 307.420423][T14779] loop4: detected capacity change from 0 to 32768 [ 307.515962][T14831] loop3: detected capacity change from 0 to 32768 [ 307.535473][T14779] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.4507 (14779) [ 307.554835][T14779] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 307.566167][T14831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4531 (14831) [ 307.579006][T14779] BTRFS info (device loop4): force clearing of disk cache [ 307.586543][T14779] BTRFS info (device loop4): setting nodatasum [ 307.594096][T14779] BTRFS info (device loop4): use zlib compression, level 3 [ 307.603556][T14779] BTRFS info (device loop4): allowing degraded mounts [ 307.613610][T14831] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 307.622502][T14831] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 307.633493][T14779] BTRFS info (device loop4): enabling disk space caching [ 307.640810][T14779] BTRFS info (device loop4): disk space caching is enabled [ 307.648521][T14831] BTRFS info (device loop3): trying to use backup root at mount time [ 307.656867][T14779] BTRFS info (device loop4): has skinny extents [ 307.663355][T14831] BTRFS info (device loop3): max_inline at 4096 [ 307.670546][T14831] BTRFS info (device loop3): turning on flush-on-commit [ 307.678077][T14831] BTRFS info (device loop3): using free space tree [ 307.687263][T14831] BTRFS info (device loop3): has skinny extents [ 307.769198][T14779] BTRFS info (device loop4): enabling ssd optimizations [ 307.775270][T14831] BTRFS info (device loop3): enabling ssd optimizations [ 307.784625][T14779] BTRFS info (device loop4): clearing free space tree [ 307.791768][T14779] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 307.806472][T14779] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 307.924545][T14779] BTRFS info (device loop4): balance: start -f -susage=0..61294,devid=0,drange=4398046511104..7,stripes=0..253 [ 307.955185][T14779] BTRFS info (device loop4): balance: ended with status: 0