last executing test programs: 3m24.918702262s ago: executing program 3 (id=91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 3m24.790812694s ago: executing program 3 (id=93): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000001080)=""/4096, &(0x7f0000000000)=0x1000) 3m24.727969415s ago: executing program 3 (id=94): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x10) 3m24.490961689s ago: executing program 3 (id=97): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@dioread_lock}, {}, {@noauto_da_alloc}]}, 0xfe, 0x564, &(0x7f0000001180)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 3m24.214043093s ago: executing program 3 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001640), &(0x7f0000000040)=0xc) 3m22.106152255s ago: executing program 3 (id=136): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x260, 0x0, 0x260, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 3m21.81880753s ago: executing program 32 (id=136): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x260, 0x0, 0x260, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 2.020852099s ago: executing program 2 (id=3463): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) 1.883076591s ago: executing program 1 (id=3465): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x18, 0x3d, 0x9, 0x80000, 0x80, {0x2}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 1.882955591s ago: executing program 2 (id=3466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0xf48ec000) 1.679486264s ago: executing program 1 (id=3469): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x0, 0x33524742}) 1.679176584s ago: executing program 2 (id=3470): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.492733837s ago: executing program 1 (id=3474): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f023}) 1.457548528s ago: executing program 2 (id=3475): r0 = socket(0x2, 0x3, 0x9) getsockopt(r0, 0xff, 0x100000000000001, 0x0, 0x0) 1.3016518s ago: executing program 2 (id=3478): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x80340, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) 1.258657311s ago: executing program 1 (id=3479): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x3c8, 0xffffffff, 0x228, 0x0, 0x228, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@mark={{0x30}}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 1.208567031s ago: executing program 5 (id=3480): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, 0x0, 0x0) 1.121153973s ago: executing program 2 (id=3482): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x4, 0x2, 0xffff, 0x3, 0x1, 0xfffffffffffffffd, 0x0, 0x36a, 0x309}) 1.109469063s ago: executing program 4 (id=3483): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)) 996.872525ms ago: executing program 1 (id=3484): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x780, 0x258, 0x1e0, 0x40, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 981.290685ms ago: executing program 5 (id=3485): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) 913.497056ms ago: executing program 4 (id=3487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x70bd28, 0xffffffff, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0xe4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 836.403687ms ago: executing program 1 (id=3488): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002040)={0x2, 0x2, {0x7, @usage=0x2000000002, 0x0, 0x8001, 0x0, 0x7f, 0x2, 0x0, 0x28, @struct={0x163, 0x8b}, 0x1, 0x402, [0x80000000, 0x0, 0x8000000000000000, 0x4, 0x4de6, 0x5]}, {0xb, @usage=0x3, 0x0, 0x1, 0x2, 0x20080000009, 0x4, 0x10000000000, 0x0, @struct={0x9, 0xd3}, 0x7, 0xfffffffc, [0x100000000000, 0x2, 0x0, 0x8, 0x0, 0x9]}, {0xfffffffffffffff6, @usage=0x7, 0x0, 0x80000000000000, 0x400000000000, 0x8000000000000001, 0xdfffffff, 0x0, 0x9f, @usage=0x5456c48a, 0x0, 0x7, [0xfffffffffffffffd, 0x6, 0x7ff, 0x0, 0xd44f, 0x6]}, {0x3, 0x2, 0x400000}}) 732.761039ms ago: executing program 0 (id=3489): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xba, &(0x7f0000001040), &(0x7f00000000c0)=0x4) 732.596759ms ago: executing program 5 (id=3490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd632f77fb86dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 711.642889ms ago: executing program 4 (id=3491): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$sysctl(r0, &(0x7f0000000000)='5\x00', 0x2) 643.28443ms ago: executing program 0 (id=3492): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000580)={[{@overriderock}, {@nocompress}, {@hide}, {@session={'session', 0x3d, 0x5a}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@block={'block', 0x3d, 0x400}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) 532.888372ms ago: executing program 5 (id=3493): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000280)={0x0, 0x1, 0x4}) 480.801653ms ago: executing program 4 (id=3494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000068000100030000000000008000000000000000001400020001000000070000007d67fc9ada70"], 0x2c}}, 0x4000) 475.620983ms ago: executing program 0 (id=3495): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001080), 0x40101, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) 304.820165ms ago: executing program 0 (id=3496): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 299.121405ms ago: executing program 4 (id=3497): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x7}) 289.153196ms ago: executing program 5 (id=3498): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 145.877547ms ago: executing program 5 (id=3499): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502) 96.353848ms ago: executing program 0 (id=3500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) 83.502159ms ago: executing program 4 (id=3501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x35}]}], {0x14, 0x10}}, 0x8c}}, 0x0) 0s ago: executing program 0 (id=3502): r0 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x113, 0x0, 0x0, 0xffffffffffffff33) kernel console output (not intermixed with test programs): SB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 150.222833][ T4603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.230991][ T4603] usb 5-1: Product: syz [ 150.242560][ T4603] usb 5-1: Manufacturer: syz [ 150.247186][ T4603] usb 5-1: SerialNumber: syz [ 150.271840][ T8378] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 150.502904][ T8411] loop1: detected capacity change from 0 to 40427 [ 150.508053][ T4603] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 150.564625][ T4387] usb 3-1: USB disconnect, device number 2 [ 150.571639][ T4603] usb 5-1: USB disconnect, device number 5 [ 150.577824][ T8411] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 150.592519][ T8411] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 150.614427][ T8411] F2FS-fs (loop1): invalid crc value [ 150.625970][ T8447] loop5: detected capacity change from 0 to 256 [ 150.656278][ T8411] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.722893][ T8447] FAT-fs (loop5): Directory bread(block 64) failed [ 150.743374][ T8447] FAT-fs (loop5): Directory bread(block 65) failed [ 150.780823][ T8447] FAT-fs (loop5): Directory bread(block 66) failed [ 150.787868][ T1191] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 150.802642][ T1191] ath9k_htc: Failed to initialize the device [ 150.820216][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 150.826278][ T8447] FAT-fs (loop5): Directory bread(block 67) failed [ 150.831616][ T8411] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 150.843210][ T8411] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.849469][ T8447] FAT-fs (loop5): Directory bread(block 68) failed [ 150.863513][ T8447] FAT-fs (loop5): Directory bread(block 69) failed [ 150.873210][ T8447] FAT-fs (loop5): Directory bread(block 70) failed [ 150.922716][ T26] audit: type=1326 audit(1751064066.746:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 150.923209][ T8447] FAT-fs (loop5): Directory bread(block 71) failed [ 150.962628][ T8447] FAT-fs (loop5): Directory bread(block 72) failed [ 150.963107][ T26] audit: type=1326 audit(1751064066.766:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 150.981266][ T8447] FAT-fs (loop5): Directory bread(block 73) failed [ 151.013539][ T26] audit: type=1326 audit(1751064066.766:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.0.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 151.183057][ T4307] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 151.190128][ T4307] ath9k_htc: Failed to initialize the device [ 151.232156][ T4387] usb 3-1: ath9k_htc: USB layer deinitialized [ 151.548144][ T8492] loop2: detected capacity change from 0 to 2048 [ 151.590585][ T8492] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 151.595706][ T8499] loop0: detected capacity change from 0 to 1024 [ 151.628842][ T8492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.067323][ T8530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1305'. [ 152.130437][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1307'. [ 152.652581][ T4387] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.654957][ T4359] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.819739][ T8586] libceph: resolve '4..' (ret=-3): failed [ 152.832710][ T4387] usb 3-1: Using ep0 maxpacket: 8 [ 152.839587][ T4387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.872423][ T4359] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 152.875831][ T4387] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.880632][ T4359] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 152.890605][ T4387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.936747][ T4359] usb 1-1: config 0 has no interface number 0 [ 152.952915][ T4387] usb 3-1: config 0 descriptor?? [ 152.975754][ T4359] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 152.982046][ T4387] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 153.001669][ T4359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.022652][ T4359] usb 1-1: Product: syz [ 153.029462][ T8598] loop4: detected capacity change from 0 to 16 [ 153.042690][ T4359] usb 1-1: Manufacturer: syz [ 153.047354][ T4359] usb 1-1: SerialNumber: syz [ 153.065987][ T4359] usb 1-1: config 0 descriptor?? [ 153.071165][ T8598] erofs: (device loop4): mounted with root inode @ nid 36. [ 153.113929][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 153.142749][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 153.167480][ T4259] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 153.179112][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 153.198856][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 153.238504][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 153.318339][ T8610] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 153.320209][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 153.352732][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 153.363461][ T14] usb 3-1: USB disconnect, device number 3 [ 153.382304][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 153.391782][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 153.406615][ T8598] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 153.419745][ T8598] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 153.436283][ T8598] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 153.461631][ T26] audit: type=1800 audit(1751064069.276:1757): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1323" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 153.490801][ T4359] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 153.493146][ T8582] loop5: detected capacity change from 0 to 40427 [ 153.512618][ T4359] usb 1-1: No valid video chain found. [ 153.529515][ T8582] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 153.548359][ T4359] usb 1-1: USB disconnect, device number 4 [ 153.572448][ T8582] F2FS-fs (loop5): invalid crc value [ 153.596282][ T8582] F2FS-fs (loop5): Found nat_bits in checkpoint [ 153.724433][ T8582] F2FS-fs (loop5): recover fsync data on readonly fs [ 153.753268][ T8582] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 153.768313][ T8582] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 153.802402][ T8582] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 153.936287][ T8582] F2FS-fs (loop5): Try to recover all the superblocks, ret: 0 [ 154.667465][ T8679] ipt_CLUSTERIP: Please specify destination IP [ 154.781563][ T8682] loop0: detected capacity change from 0 to 1024 [ 154.859936][ T8682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 154.962822][ T8661] loop4: detected capacity change from 0 to 32768 [ 154.990419][ T8661] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 155.022300][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 155.042902][ T4835] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.358062][ T8711] loop1: detected capacity change from 0 to 2048 [ 155.391848][ T8711] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 155.457491][ T8718] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.634044][ T8724] loop2: detected capacity change from 0 to 512 [ 155.686043][ T8724] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.759846][ T8724] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 155.778606][ T8724] Quota error (device loop2): write_blk: dquota write failed [ 155.787302][ T8724] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 155.797741][ T8724] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.1352: Failed to acquire dquot type 0 [ 155.797846][ T8734] loop4: detected capacity change from 0 to 2048 [ 155.817299][ T8684] loop5: detected capacity change from 0 to 32768 [ 155.821280][ T8724] EXT4-fs (loop2): 1 truncate cleaned up [ 155.871746][ T8724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.881598][ T8684] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1343 (8684) [ 155.911563][ T8734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.962061][ T8684] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 155.980621][ T8734] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0 [ 156.019849][ T8684] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 156.059509][ T8684] BTRFS info (device loop5): force zlib compression, level 3 [ 156.110594][ T8684] BTRFS info (device loop5): force clearing of disk cache [ 156.132758][ T8684] BTRFS info (device loop5): setting nodatasum [ 156.140570][ T8684] BTRFS info (device loop5): use zlib compression, level 3 [ 156.177354][ T8684] BTRFS info (device loop5): allowing degraded mounts [ 156.204664][ T8684] BTRFS info (device loop5): enabling disk space caching [ 156.242660][ T4359] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.242881][ T8684] BTRFS info (device loop5): disk space caching is enabled [ 156.434119][ T4359] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.492611][ T4359] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 62709, setting to 1024 [ 156.527044][ T8684] BTRFS info (device loop5): enabling ssd optimizations [ 156.536442][ T8684] BTRFS info (device loop5): rebuilding free space tree [ 156.568949][ T8684] BTRFS info (device loop5): disabling free space tree [ 156.577521][ T8684] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.578904][ T4359] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 156.604176][ T8684] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.701490][ T4359] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.731815][ T4359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.743477][ T8684] BTRFS info (device loop5): balance: start -susage=0..511,limit=0 [ 156.767714][ T8724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.781996][ T8684] BTRFS info (device loop5): balance: ended with status: 0 [ 156.803715][ T4359] usb 3-1: invalid MIDI out EP 0 [ 157.032308][ T4359] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 157.057428][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 157.076414][ T4501] udevd[4501]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.110824][ T4359] usb 3-1: USB disconnect, device number 4 [ 157.148639][ T4716] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 157.759715][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 157.929937][ T8899] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 158.056769][ T8896] loop4: detected capacity change from 0 to 4096 [ 158.058244][ T8896] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 158.107245][ T8909] loop1: detected capacity change from 0 to 512 [ 158.213343][ T8909] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1391: bad orphan inode 11862016 [ 158.254092][ T8909] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.278581][ T8919] befs: (nullb0): No write support. Marking filesystem read-only [ 158.286665][ T8909] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.370679][ T8919] befs: (nullb0): invalid magic header [ 158.537555][ T8934] loop2: detected capacity change from 0 to 512 [ 158.574644][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 158.673559][ T8934] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 158.733895][ T8934] EXT4-fs (loop2): orphan cleanup on readonly fs [ 158.741079][ T8934] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.1398: Block bitmap for bg 0 marked uninitialized [ 158.818650][ T8934] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 158.861012][ T8934] EXT4-fs (loop2): 1 orphan inode deleted [ 158.879725][ T8934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.052125][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 159.513136][ T4387] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 159.702661][ T4387] usb 6-1: Using ep0 maxpacket: 16 [ 159.709976][ T4387] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 159.720912][ T9019] usb usb8: usbfs: process 9019 (syz.2.1421) did not claim interface 4 before use [ 159.743783][ T4387] usb 6-1: config 0 has no interface number 0 [ 159.750310][ T4387] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.800817][ T4387] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 159.839829][ T4387] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 159.882521][ T4387] usb 6-1: Product: syz [ 159.886736][ T4387] usb 6-1: SerialNumber: syz [ 159.905933][ T4387] usb 6-1: config 0 descriptor?? [ 159.928722][ T9032] loop4: detected capacity change from 0 to 2048 [ 159.935664][ T4387] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input9 [ 160.020629][ T9032] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 160.102873][ T9032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.124031][ T14] usb 6-1: USB disconnect, device number 3 [ 160.124036][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 160.124249][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 160.211648][ T14] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 160.748445][ T9097] loop1: detected capacity change from 0 to 256 [ 160.882663][ T9097] FAT-fs (loop1): Directory bread(block 64) failed [ 160.889599][ T9097] FAT-fs (loop1): Directory bread(block 65) failed [ 160.932670][ T9097] FAT-fs (loop1): Directory bread(block 66) failed [ 160.939252][ T9097] FAT-fs (loop1): Directory bread(block 67) failed [ 160.962763][ T9097] FAT-fs (loop1): Directory bread(block 68) failed [ 160.969423][ T9097] FAT-fs (loop1): Directory bread(block 69) failed [ 160.999487][ T9097] FAT-fs (loop1): Directory bread(block 70) failed [ 161.032648][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1446'. [ 161.032803][ T9097] FAT-fs (loop1): Directory bread(block 71) failed [ 161.041607][ T9113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1446'. [ 161.078118][ T9097] FAT-fs (loop1): Directory bread(block 72) failed [ 161.113707][ T9097] FAT-fs (loop1): Directory bread(block 73) failed [ 161.880317][ T9174] cgroup: No subsys list or none specified [ 162.082771][ T8866] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.199131][ T9200] vivid-000: ================= START STATUS ================= [ 162.252645][ T9200] vivid-000: Generate PTS: true [ 162.262576][ T9200] vivid-000: Generate SCR: true [ 162.272784][ T8866] usb 2-1: Using ep0 maxpacket: 32 [ 162.283447][ T9200] tpg source WxH: 320x180 (Y'CbCr) [ 162.289389][ T8866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.325004][ T9200] tpg field: 1 [ 162.328657][ T9200] tpg crop: 320x180@0x0 [ 162.340963][ T8866] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 162.360021][ T9200] tpg compose: 320x180@0x0 [ 162.366152][ T9200] tpg colorspace: 8 [ 162.369407][ T8866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.369962][ T9200] tpg transfer function: 0/0 [ 162.382179][ T8866] usb 2-1: Product: syz [ 162.391857][ T8866] usb 2-1: Manufacturer: syz [ 162.414960][ T8866] usb 2-1: SerialNumber: syz [ 162.442513][ T9200] tpg Y'CbCr encoding: 0/0 [ 162.447001][ T9200] tpg quantization: 0/0 [ 162.451160][ T9200] tpg RGB range: 0/2 [ 162.459286][ T8866] usb 2-1: config 0 descriptor?? [ 162.481626][ T8866] usb 2-1: bad CDC descriptors [ 162.488916][ T8866] usb 2-1: unsupported MDLM descriptors [ 162.502168][ T9200] vivid-000: ================== END STATUS ================== [ 162.700090][ T8866] usb 2-1: USB disconnect, device number 8 [ 162.812107][ T9246] loop4: detected capacity change from 0 to 256 [ 163.170619][ T9273] syz.5.1489 (9273): /proc/9271/oom_adj is deprecated, please use /proc/9271/oom_score_adj instead. [ 163.298294][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 163.346605][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 163.781873][ T9312] tc_dump_action: action bad kind [ 163.912964][ T9323] __vm_enough_memory: pid: 9323, comm: syz.4.1503, no enough memory for the allocation [ 164.289352][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1514'. [ 164.344025][ T9361] loop2: detected capacity change from 0 to 8 [ 164.354215][ T9360] loop0: detected capacity change from 0 to 512 [ 164.414047][ T9360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.437092][ T9360] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.490616][ T9360] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 164.513262][ T9360] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 164.527217][ T9360] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1512: Failed to acquire dquot type 0 [ 164.538647][ T9361] SQUASHFS error: lzo decompression failed, data probably corrupt [ 164.555693][ T9361] SQUASHFS error: Failed to read block 0x1c0: -5 [ 164.563175][ T9361] SQUASHFS error: Unable to read metadata cache entry [1be] [ 164.657252][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 164.947191][ T9399] ./file0: Can't open blockdev [ 165.416536][ T9433] loop2: detected capacity change from 0 to 1024 [ 165.454045][ T9433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.492339][ T9433] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.1535: bit already cleared for inode 15 [ 165.675567][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 165.809878][ T9460] loop4: detected capacity change from 0 to 512 [ 165.875006][ T9460] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1544: bad orphan inode 11862016 [ 165.951906][ T9460] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.995663][ T9479] netlink: 'syz.2.1548': attribute type 27 has an invalid length. [ 166.028582][ T9460] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.070528][ T9479] bond0: (slave bond_slave_0): Releasing backup interface [ 166.241928][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 166.263531][ T9495] loop1: detected capacity change from 0 to 8 [ 166.363853][ T9495] SQUASHFS error: zlib decompression failed, data probably corrupt [ 166.384958][ T9495] SQUASHFS error: Failed to read block 0x4e8: -5 [ 166.416283][ T9495] SQUASHFS error: zlib decompression failed, data probably corrupt [ 166.442067][ T9495] SQUASHFS error: Failed to read block 0x4ee: -5 [ 166.459885][ T9495] SQUASHFS error: zlib decompression failed, data probably corrupt [ 166.471650][ T9495] SQUASHFS error: Failed to read block 0x4ef: -5 [ 166.509536][ T26] audit: type=1800 audit(1751064082.316:1758): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1551" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 166.766404][ T9528] netlink: 'syz.1.1559': attribute type 14 has an invalid length. [ 166.967419][ T9545] loop1: detected capacity change from 0 to 128 [ 167.028214][ T9545] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 167.212000][ T4251] sysv_free_block: flc_count > flc_size [ 167.224086][ T9560] device gtp0 entered promiscuous mode [ 167.261873][ T4251] sysv_free_block: flc_count > flc_size [ 167.298071][ T4251] sysv_free_block: flc_count > flc_size [ 167.304802][ T4251] sysv_free_block: flc_count > flc_size [ 167.320080][ T4251] sysv_free_block: flc_count > flc_size [ 167.329918][ T4251] sysv_free_block: flc_count > flc_size [ 167.349234][ T4251] sysv_free_block: flc_count > flc_size [ 167.408319][ T4251] sysv_free_block: flc_count > flc_size [ 167.452104][ T4251] sysv_free_block: flc_count > flc_size [ 167.457919][ T4251] sysv_free_block: flc_count > flc_size [ 167.489471][ T4251] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 167.511216][ T9583] loop2: detected capacity change from 0 to 16 [ 167.567316][ T9583] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 167.594537][ T9583] erofs: (device loop2): mounted with root inode @ nid 36. [ 167.717458][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 168.176691][ T9626] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 168.203908][ T9626] netlink: 'syz.0.1588': attribute type 3 has an invalid length. [ 168.220958][ T9632] netlink: 'syz.4.1589': attribute type 10 has an invalid length. [ 168.227732][ T9626] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1588'. [ 168.282930][ T9632] team0: Port device wlan1 removed [ 168.329059][ T9632] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.523239][ T26] audit: type=1326 audit(1751064084.346:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 168.609042][ T26] audit: type=1326 audit(1751064084.376:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 168.674487][ T9650] loop1: detected capacity change from 0 to 256 [ 168.683976][ T9650] exfat: Deprecated parameter 'utf8' [ 168.689346][ T9650] exfat: Deprecated parameter 'utf8' [ 168.722713][ T26] audit: type=1326 audit(1751064084.376:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 168.761530][ T9650] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 168.772526][ T26] audit: type=1326 audit(1751064084.376:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 168.779697][ T9660] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1599'. [ 168.831177][ T9661] autofs4:pid:9661:autofs_fill_super: called with bogus options [ 168.869230][ T9650] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 169.190442][ T9683] loop4: detected capacity change from 0 to 512 [ 169.238887][ T9683] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.367859][ T9683] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 169.384708][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1613'. [ 169.393929][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1613'. [ 169.412939][ T9683] Quota error (device loop4): write_blk: dquota write failed [ 169.440622][ T9683] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 169.465437][ T9683] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.1607: Failed to acquire dquot type 0 [ 169.497883][ T9683] EXT4-fs (loop4): 1 truncate cleaned up [ 169.503788][ T9683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.740215][ T9724] netlink: 'syz.2.1619': attribute type 2 has an invalid length. [ 169.852557][ T4596] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.044246][ T4596] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.082512][ T4596] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 62709, setting to 1024 [ 170.122518][ T4596] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 170.152676][ T4596] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.173179][ T4596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.205672][ T9683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.216999][ T4596] usb 5-1: invalid MIDI out EP 0 [ 170.317519][ T4596] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 170.416437][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.527481][ T4387] usb 5-1: USB disconnect, device number 6 [ 170.891135][ T9752] loop5: detected capacity change from 0 to 40427 [ 170.905366][ T4307] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 170.943450][ T9752] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 170.951216][ T9752] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 170.987747][ T9752] F2FS-fs (loop5): invalid crc value [ 171.028821][ T9752] F2FS-fs (loop5): Found nat_bits in checkpoint [ 171.112728][ T4307] usb 1-1: Using ep0 maxpacket: 16 [ 171.126372][ T9752] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 171.131528][ T4307] usb 1-1: config 0 has an invalid interface number: 115 but max is 0 [ 171.145796][ T9752] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 171.160845][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 171.162036][ T4307] usb 1-1: config 0 has no interface number 0 [ 171.234249][ T4307] usb 1-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 171.275969][ T4307] usb 1-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 171.315273][ T4307] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 171.357264][ T4307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.372858][ T4307] usb 1-1: Product: syz [ 171.383275][ T4307] usb 1-1: Manufacturer: syz [ 171.397668][ T4307] usb 1-1: SerialNumber: syz [ 171.431359][ T4307] usb 1-1: config 0 descriptor?? [ 171.684558][ T9852] netlink: 'syz.2.1649': attribute type 10 has an invalid length. [ 171.748600][ T4596] usb 1-1: USB disconnect, device number 5 [ 171.788504][ T9852] team0: Device ipvlan1 failed to register rx_handler [ 172.100354][ T9874] loop1: detected capacity change from 0 to 512 [ 172.129108][ T9874] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.192169][ T9874] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 172.212204][ T9874] Quota error (device loop1): write_blk: dquota write failed [ 172.220697][ T9874] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 172.246092][ T9874] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1653: Failed to acquire dquot type 0 [ 172.277777][ T9874] EXT4-fs (loop1): 1 truncate cleaned up [ 172.283600][ T9874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.306946][ T9886] syz.2.1656 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 172.312502][ T26] audit: type=1326 audit(1751064088.126:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9885 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cc18e929 code=0x7ffc0000 [ 172.398572][ T9848] loop4: detected capacity change from 0 to 40427 [ 172.448430][ T9848] F2FS-fs (loop4): invalid crc value [ 172.453108][ T9898] xt_limit: Overflow, try lower: 65536/2147483648 [ 172.462365][ T26] audit: type=1326 audit(1751064088.126:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9885 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd3cc18e929 code=0x7ffc0000 [ 172.527883][ T26] audit: type=1326 audit(1751064088.136:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9885 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cc18e929 code=0x7ffc0000 [ 172.559301][ T9848] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.572587][ T4596] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.649370][ T9848] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 172.765083][ T4596] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.802584][ T4596] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 62709, setting to 1024 [ 172.831355][ T4596] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 172.842447][ T4596] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.852654][ T4596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.876476][ T9874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.897518][ T4596] usb 2-1: invalid MIDI out EP 0 [ 172.996111][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 173.019569][ T4596] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 173.088170][ T4832] udevd[4832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.184574][ T4596] usb 2-1: USB disconnect, device number 9 [ 173.792130][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 174.572586][ T4387] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.585046][T10047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1698'. [ 174.784702][ T4387] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 174.813076][ T4387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.838191][ T4387] usb 2-1: config 0 descriptor?? [ 174.859951][ T4387] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 175.010014][T10072] loop4: detected capacity change from 0 to 2048 [ 175.273017][ T4387] gspca_stv06xx: I2C: Read error writing address: -71 [ 175.300901][ T4387] usb 2-1: USB disconnect, device number 10 [ 175.474313][T10089] loop2: detected capacity change from 0 to 8192 [ 175.527873][T10089] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.599635][T10089] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 175.657525][T10089] REISERFS (device loop2): using ordered data mode [ 175.686919][T10089] reiserfs: using flush barriers [ 175.697260][T10094] loop4: detected capacity change from 0 to 32768 [ 175.725230][T10089] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.757529][T10094] read_mapping_page failed! [ 175.862958][T10089] REISERFS (device loop2): checking transaction log (loop2) [ 175.907751][T10089] REISERFS (device loop2): Using tea hash to sort names [ 175.958125][T10089] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 176.875423][T10168] loop2: detected capacity change from 0 to 64 [ 177.577739][T10219] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 177.672421][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 177.753636][T10231] netlink: 'syz.0.1756': attribute type 11 has an invalid length. [ 178.441763][T10280] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 179.226847][T10325] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 179.714754][T10357] loop2: detected capacity change from 0 to 2048 [ 179.840792][T10371] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.880754][T10357] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 179.935715][T10357] Remounting filesystem read-only [ 180.001682][ T4257] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 180.512957][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 180.534859][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 180.635412][T10425] loop1: detected capacity change from 0 to 1024 [ 180.739196][T10425] hfsplus: bad catalog entry type [ 180.769323][T10434] netlink: 'syz.4.1817': attribute type 27 has an invalid length. [ 180.782558][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 180.783163][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 180.788576][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 180.794814][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 180.941290][ T4336] hfsplus: b-tree write err: -5, ino 4 [ 180.993550][T10434] bond0: (slave bond_slave_0): Releasing backup interface [ 181.087392][T10454] netlink: 'syz.1.1821': attribute type 27 has an invalid length. [ 181.906797][T10511] netlink: 'syz.1.1837': attribute type 1 has an invalid length. [ 181.986407][T10520] netlink: 'syz.2.1840': attribute type 10 has an invalid length. [ 182.117804][T10520] team0: Device veth1_vlan failed to register rx_handler [ 182.365079][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 182.472084][T10550] loop2: detected capacity change from 0 to 8 [ 182.563274][T10550] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 182.573008][T10563] IPv6: Can't replace route, no match found [ 182.645811][T10550] cramfs: Error -3 while decompressing! [ 182.651396][T10550] cramfs: ffffffff96b4d548(18)->ffff88804e6cf000(4096) [ 182.678711][T10550] cramfs: Error -3 while decompressing! [ 182.688806][T10550] cramfs: ffffffff96b4d548(18)->ffff88804e6cf000(4096) [ 182.719058][ T26] audit: type=1800 audit(1751064098.536:1766): pid=10550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1850" name="file1" dev="loop2" ino=324 res=0 errno=0 [ 182.742677][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.942672][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 182.960493][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.991494][T10585] syz.5.1859 (10585): drop_caches: 0 [ 183.000649][ T14] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 183.056476][ T14] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 183.087811][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.125246][ T14] usb 5-1: Product: syz [ 183.129444][ T14] usb 5-1: Manufacturer: syz [ 183.156473][ T14] usb 5-1: SerialNumber: syz [ 183.172437][T10598] loop1: detected capacity change from 0 to 256 [ 183.186368][ T14] usb 5-1: config 0 descriptor?? [ 183.248573][T10598] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 183.670075][ T14] usb 5-1: USB disconnect, device number 7 [ 183.792258][T10642] libceph: resolve '0' (ret=-3): failed [ 183.816800][T10647] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1874'. [ 183.821945][T10640] loop1: detected capacity change from 0 to 1024 [ 183.921276][T10646] loop5: detected capacity change from 0 to 4096 [ 183.939694][T10640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.161438][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 184.344322][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1882'. [ 185.060812][T10718] loop4: detected capacity change from 0 to 4096 [ 185.084354][T10718] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 185.607814][T10755] netlink: 'syz.5.1910': attribute type 10 has an invalid length. [ 185.702751][T10755] team0: Device veth1_vlan failed to register rx_handler [ 185.752634][ T4387] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 185.942620][ T4387] usb 2-1: Using ep0 maxpacket: 32 [ 185.949546][ T4387] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 185.975218][ T4387] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 185.992582][ T4387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.000686][ T4387] usb 2-1: Product: syz [ 186.022581][ T4387] usb 2-1: Manufacturer: syz [ 186.027213][ T4387] usb 2-1: SerialNumber: syz [ 186.042581][ T951] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.052075][ T4387] usb 2-1: config 0 descriptor?? [ 186.068763][T10746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.192634][ T4307] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.254107][ T951] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 186.270013][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.305693][ T951] usb 3-1: config 0 descriptor?? [ 186.327628][ T951] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 186.343647][ T951] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 186.355775][ T14] usb 2-1: USB disconnect, device number 11 [ 186.392800][ T4307] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 186.400961][ T4307] usb 5-1: config 0 has no interface number 0 [ 186.418362][ T4307] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 186.440808][ T4307] usb 5-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 186.486055][ T4307] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 186.501645][ T4307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.510900][ T4307] usb 5-1: Product: syz [ 186.531244][ T4307] usb 5-1: Manufacturer: syz [ 186.546352][T10848] netlink: 'syz.0.1929': attribute type 3 has an invalid length. [ 186.554368][ T4307] usb 5-1: SerialNumber: syz [ 186.557394][T10848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1929'. [ 186.560052][ T4387] usb 3-1: USB disconnect, device number 5 [ 186.584690][ T4307] usb 5-1: config 0 descriptor?? [ 186.591231][T10776] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 186.696190][T10862] netlink: 'syz.0.1931': attribute type 5 has an invalid length. [ 186.704444][T10862] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1931'. [ 186.831618][ T4307] kaweth 5-1:0.58: Firmware present in device. [ 187.017016][ T4307] kaweth 5-1:0.58: Error reading configuration (-71), no net device created [ 187.062002][ T4307] kaweth: probe of 5-1:0.58 failed with error -5 [ 187.076332][ T4307] usb 5-1: USB disconnect, device number 8 [ 187.245060][ T1077] block nbd2: Attempted send on invalid socket [ 187.251271][ T1077] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.266959][ T4387] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.444463][T10869] loop5: detected capacity change from 0 to 40427 [ 187.466852][T10869] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 187.466953][ T4387] usb 1-1: Using ep0 maxpacket: 8 [ 187.494699][ T4387] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 187.515206][ T4387] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 187.532051][T10869] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 187.553409][ T4387] usb 1-1: Product: syz [ 187.569348][ T4387] usb 1-1: Manufacturer: syz [ 187.577094][T10869] F2FS-fs (loop5): invalid crc value [ 187.602352][ T4387] usb 1-1: SerialNumber: syz [ 187.630801][ T4387] usb 1-1: config 0 descriptor?? [ 187.641728][T10869] F2FS-fs (loop5): Found nat_bits in checkpoint [ 187.689333][ T4387] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 187.780336][T10869] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 187.797543][T10869] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 187.914377][T10869] syz.5.1933: attempt to access beyond end of device [ 187.914377][T10869] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.086492][ T4387] gspca_zc3xx: reg_r err -71 [ 188.092081][ T4387] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 188.123550][ T4387] usb 1-1: USB disconnect, device number 6 [ 188.368665][T10957] loop2: detected capacity change from 0 to 8192 [ 188.427379][T10957] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.477141][T10970] loop1: detected capacity change from 0 to 1024 [ 188.588830][T10970] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 188.659206][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 188.861025][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 189.102940][T11013] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1969'. [ 189.114048][ T8866] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.151934][T11016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1971'. [ 189.170817][T11016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1971'. [ 189.322811][ T8866] usb 3-1: Using ep0 maxpacket: 8 [ 189.333932][ T8866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.343424][T11030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1975'. [ 189.369883][ T8866] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 189.389875][ T8866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.427984][ T8866] usb 3-1: Product: syz [ 189.432221][ T8866] usb 3-1: Manufacturer: syz [ 189.453570][ T8866] usb 3-1: SerialNumber: syz [ 189.488405][ T8866] usb 3-1: config 0 descriptor?? [ 189.540043][ T8866] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 189.566507][T11047] dlm: no locking on control device [ 189.730919][ T8866] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 189.751566][T11058] loop1: detected capacity change from 0 to 64 [ 189.770251][ T8866] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 189.788606][T11057] openvswitch: netlink: EtherType 0 is less than min 600 [ 189.981984][ T8866] usb 3-1: USB disconnect, device number 6 [ 190.011069][T11079] loop1: detected capacity change from 0 to 256 [ 190.055501][T11079] exfat: Deprecated parameter 'namecase' [ 190.076742][T11079] exfat: Deprecated parameter 'utf8' [ 190.108765][T11079] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 190.399047][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 190.801198][T11123] loop2: detected capacity change from 0 to 4096 [ 191.093668][T11145] netlink: 'syz.2.2010': attribute type 13 has an invalid length. [ 191.145394][T11107] loop5: detected capacity change from 0 to 32768 [ 191.290010][T11107] XFS (loop5): Mounting V5 Filesystem [ 191.383588][T11107] XFS (loop5): Ending clean mount [ 191.617331][ T4716] XFS (loop5): Unmounting Filesystem [ 191.779460][T11189] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2022'. [ 191.799503][T11194] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2024'. [ 192.499335][T11240] loop1: detected capacity change from 0 to 1024 [ 193.051602][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 193.221091][T11288] netlink: 'syz.1.2054': attribute type 21 has an invalid length. [ 193.229564][T11293] xt_TCPMSS: Only works on TCP SYN packets [ 193.256131][T11288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2054'. [ 193.317386][T11298] loop2: detected capacity change from 0 to 8 [ 193.353315][T11298] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 193.413876][T11298] cramfs: Error -3 while decompressing! [ 193.429147][T11298] cramfs: ffffffff96b51568(26)->ffff88804ff58000(4096) [ 193.461155][T11298] cramfs: Error -5 while decompressing! [ 193.482694][T11298] cramfs: ffffffff96b51582(26)->ffff88804e574000(4096) [ 193.526037][T11298] cramfs: Error -3 while decompressing! [ 193.552054][T11298] cramfs: ffffffff96b51568(26)->ffff88804ff58000(4096) [ 193.569384][ T26] audit: type=1800 audit(1751064109.386:1767): pid=11298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2056" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 193.776528][T11331] x_tables: ip_tables: osf match: only valid for protocol 6 [ 194.070806][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.080585][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.236024][T11361] loop5: detected capacity change from 0 to 256 [ 194.599117][T11388] device vlan0 entered promiscuous mode [ 195.147670][T11431] loop1: detected capacity change from 0 to 128 [ 195.176827][T11431] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 195.192643][ T4603] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.227683][T11431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.394049][ T4603] usb 5-1: Using ep0 maxpacket: 8 [ 195.410434][ T4603] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 195.450308][ T4603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.478687][ T4603] usb 5-1: Product: syz [ 195.487122][ T4603] usb 5-1: Manufacturer: syz [ 195.497240][ T4603] usb 5-1: SerialNumber: syz [ 195.506613][ T4603] usb 5-1: config 0 descriptor?? [ 195.516905][ T4603] gspca_main: se401-2.14.0 probing 047d:5003 [ 195.707618][ T4307] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 195.846902][T11477] proc: Bad value for 'gid' [ 195.908877][ T4307] usb 6-1: Using ep0 maxpacket: 16 [ 195.917852][ T4307] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 195.922623][ T4603] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 195.952617][ T4307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.961529][ T4603] se401: probe of 5-1:0.0 failed with error -71 [ 195.967923][ T4307] usb 6-1: Product: syz [ 195.967941][ T4307] usb 6-1: Manufacturer: syz [ 195.967956][ T4307] usb 6-1: SerialNumber: syz [ 195.983752][ T4307] r8152-cfgselector 6-1: config 0 descriptor?? [ 196.002222][ T4603] usb 5-1: USB disconnect, device number 9 [ 196.145719][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 196.299233][T11504] loop1: detected capacity change from 0 to 4096 [ 196.417313][ T4307] r8152-cfgselector 6-1: Unknown version 0x0000 [ 196.431047][ T4307] r8152-cfgselector 6-1: bad CDC descriptors [ 196.452991][ T4307] r8152-cfgselector 6-1: Unknown version 0x0000 [ 196.470022][ T4307] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 197.195145][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'. [ 197.221474][T11518] loop2: detected capacity change from 0 to 32768 [ 197.351675][T11518] XFS (loop2): Mounting V5 Filesystem [ 197.508037][T11518] XFS (loop2): Ending clean mount [ 197.742679][ T4257] XFS (loop2): Unmounting Filesystem [ 198.109458][T11619] netlink: 'syz.5.2155': attribute type 2 has an invalid length. [ 198.562561][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.756405][ T14] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 198.782551][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.810922][ T14] usb 3-1: Product: syz [ 198.828180][ T14] usb 3-1: Manufacturer: syz [ 198.847831][ T14] usb 3-1: SerialNumber: syz [ 198.887176][ T14] usb 3-1: config 0 descriptor?? [ 198.903796][ T14] hub 3-1:0.0: bad descriptor, ignoring hub [ 198.909746][ T14] hub: probe of 3-1:0.0 failed with error -5 [ 198.954130][ T14] f81232 3-1:0.0: f81534a converter detected [ 199.116770][T11683] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2174'. [ 199.120549][ T14] usb 3-1: f81534a converter now attached to ttyUSB0 [ 199.459214][T11686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2175'. [ 199.524770][ T14] usb 3-1: USB disconnect, device number 7 [ 199.550824][ T14] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 199.600948][ T14] f81232 3-1:0.0: device disconnected [ 199.649520][T11704] loop1: detected capacity change from 0 to 8192 [ 199.690441][T11704] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 199.768323][T11704] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 199.837685][T11704] REISERFS (device loop1): using ordered data mode [ 199.859343][ T26] audit: type=1326 audit(1751064115.676:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 199.904816][T11704] reiserfs: using flush barriers [ 199.912368][ T26] audit: type=1326 audit(1751064115.676:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 199.952522][T11704] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.982530][ T26] audit: type=1326 audit(1751064115.706:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 200.040511][ T26] audit: type=1326 audit(1751064115.706:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 200.051366][T11704] REISERFS (device loop1): checking transaction log (loop1) [ 200.108794][T11731] loop4: detected capacity change from 0 to 2048 [ 200.148116][ T26] audit: type=1326 audit(1751064115.706:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 200.188588][T11731] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 200.226463][T11731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.335549][T11741] loop5: detected capacity change from 0 to 2048 [ 200.362923][T11704] REISERFS (device loop1): Using tea hash to sort names [ 200.401934][T11704] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 200.410172][T11749] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.455158][T11741] NILFS (loop5): error -2 truncating bmap (ino=16) [ 200.680121][T11749] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 200.713336][T11749] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16) [ 200.798883][T11749] Remounting filesystem read-only [ 200.818026][ T4716] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 201.172190][T11793] xt_CONNSECMARK: invalid mode: 0 [ 201.866019][T11839] xt_l2tp: invalid flags combination: 4 [ 201.909626][T11842] cgroup2: Unexpected value for 'nsdelegate' [ 202.438790][T11877] loop2: detected capacity change from 0 to 2048 [ 202.505876][T11886] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.509693][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 202.599472][T11877] NILFS (loop2): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 202.657643][T11877] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=13) [ 202.745065][T11877] Remounting filesystem read-only [ 202.750160][T11877] NILFS (loop2): error -5 truncating bmap (ino=13) [ 202.870436][T11900] loop1: detected capacity change from 0 to 1764 [ 202.931781][ T4257] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 202.958945][T11900] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 203.111134][T11909] loop2: detected capacity change from 0 to 1024 [ 203.182362][T11909] hfsplus: bad catalog entry type [ 203.278977][T11882] loop5: detected capacity change from 0 to 32768 [ 203.356994][T11882] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 203.485741][T11882] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 203.609377][T11895] loop4: detected capacity change from 0 to 32768 [ 203.692018][T11895] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 203.794314][T11895] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 203.803719][ T4716] ocfs2: Unmounting device (7,5) on (node local) [ 203.848029][T11895] (syz.4.2240,11895,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 203.992577][T11895] (syz.4.2240,11895,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 204.049702][T11895] (syz.4.2240,11895,0):ocfs2_mknod:298 ERROR: status = -2 [ 204.072580][T11895] (syz.4.2240,11895,0):ocfs2_mknod:502 ERROR: status = -2 [ 204.111535][T11895] (syz.4.2240,11895,0):ocfs2_mkdir:659 ERROR: status = -2 [ 204.246672][ T4252] ocfs2: Unmounting device (7,4) on (node local) [ 204.990534][T12014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2276'. [ 205.016708][T12010] loop5: detected capacity change from 0 to 4096 [ 205.047826][T12010] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 205.053803][T12014] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2276'. [ 205.069088][T12010] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 205.139654][T12010] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 205.183031][T12010] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 205.243795][ T26] audit: type=1326 audit(1751064121.066:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12024 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71838e929 code=0x7ffc0000 [ 205.269817][T12010] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 205.318805][ T26] audit: type=1326 audit(1751064121.066:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12024 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71838e929 code=0x7ffc0000 [ 205.380109][T12010] ntfs: volume version 3.1. [ 205.408795][T12010] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 205.437811][ T26] audit: type=1326 audit(1751064121.066:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12024 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fe71838e929 code=0x7ffc0000 [ 205.482784][T12010] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 205.671344][T12046] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2286'. [ 205.935994][T12063] loop2: detected capacity change from 0 to 128 [ 205.968831][T12063] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 206.001507][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2292'. [ 206.029137][T12063] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 206.037797][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2292'. [ 206.082580][T12063] FAT-fs (loop2): Filesystem has been set read-only [ 206.956822][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 206.984156][T12137] loop5: detected capacity change from 0 to 4096 [ 207.005318][T12137] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 207.065087][T12137] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 207.157059][T12137] ntfs3: loop5: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 207.186498][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 207.195213][ T14] usb 3-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 207.236809][ T14] usb 3-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 207.274137][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.294459][ T4716] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 207.312703][ T14] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 207.347864][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.368090][ T14] usb 3-1: Product: syz [ 207.372298][ T14] usb 3-1: Manufacturer: syz [ 207.382802][ T32] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.398447][ T14] usb 3-1: SerialNumber: syz [ 207.428536][ T14] usb 3-1: config 0 descriptor?? [ 207.443764][ T14] usb 3-1: cannot find UAC_HEADER [ 207.503423][ T14] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 207.560385][ T4416] udevd[4416]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.582714][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 207.592305][ T32] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 207.627348][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.670689][ T32] usb 5-1: Product: syz [ 207.677943][ T32] usb 5-1: Manufacturer: syz [ 207.679120][ T14] usb 3-1: USB disconnect, device number 8 [ 207.688048][ T32] usb 5-1: SerialNumber: syz [ 207.701641][ T32] usb 5-1: config 0 descriptor?? [ 207.728041][ T32] gspca_main: sq930x-2.14.0 probing 2770:930c [ 208.040415][T12223] loop5: detected capacity change from 0 to 64 [ 208.130091][ T32] gspca_sq930x: ucbus_write failed -71 [ 208.139015][T12229] loop1: detected capacity change from 0 to 512 [ 208.222254][T12229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 208.289526][T12229] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.392615][ T32] gspca_sq930x: Sensor ov9630 not yet treated [ 208.398812][ T32] sq930x: probe of 5-1:0.0 failed with error -22 [ 208.435863][ T32] usb 5-1: USB disconnect, device number 10 [ 208.462413][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 208.808697][T12282] device ip6tnl2 entered promiscuous mode [ 209.125502][T12292] xt_CT: No such helper "pptp" [ 209.264283][T12311] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2364'. [ 209.377895][T12321] loop1: detected capacity change from 0 to 2048 [ 209.407721][T12321] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.424796][T12317] loop5: detected capacity change from 0 to 4096 [ 209.493330][T12317] ntfs: volume version 3.1. [ 210.005465][T12356] loop1: detected capacity change from 0 to 2048 [ 210.074516][T12356] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 210.330035][T12380] netlink: 'syz.4.2382': attribute type 2 has an invalid length. [ 210.398581][ T4307] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 210.489889][T12391] netlink: 'syz.4.2385': attribute type 10 has an invalid length. [ 210.510025][T12391] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.519085][T12391] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.604866][T12391] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.607234][ T4307] usb 3-1: Using ep0 maxpacket: 32 [ 210.612026][T12391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.625640][T12391] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.632801][T12391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.634614][ T4307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.690115][ T4307] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 210.708836][T12391] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 210.715714][ T4307] usb 3-1: config 7 has no interface number 0 [ 210.744132][ T4307] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 210.774580][ T4307] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 210.815904][ T4307] usb 3-1: config 7 interface 187 has no altsetting 0 [ 210.850605][ T4307] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 210.880117][ T4307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.912558][ T4307] usb 3-1: Product: syz [ 210.916842][ T4307] usb 3-1: Manufacturer: syz [ 210.921537][ T4307] usb 3-1: SerialNumber: syz [ 210.941416][T12367] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.949755][T12367] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.971783][T12415] loop1: detected capacity change from 0 to 8 [ 211.187347][ T4307] usb 3-1: Limiting number of CPorts to U8_MAX [ 211.209744][ T4307] usb 3-1: Unknown endpoint type found, address 0x07 [ 211.221980][T12429] trusted_key: encrypted_key: master key parameter is missing [ 211.258163][ T4307] usb 3-1: Unused bulk OUT endpoint found: 0x03 [ 211.278965][ T4307] usb 3-1: Not enough endpoints found in device, aborting! [ 211.450650][T12440] trusted_key: encrypted_key: keyword 'ryptfs' not recognized [ 211.476647][ T4307] usb 3-1: USB disconnect, device number 9 [ 211.992569][ T4387] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 212.222979][ T4387] usb 6-1: Using ep0 maxpacket: 32 [ 212.267781][ T4387] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.329897][ T4387] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 212.362661][ T4387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.382624][ T4387] usb 6-1: Product: syz [ 212.386826][ T4387] usb 6-1: Manufacturer: syz [ 212.391463][ T4387] usb 6-1: SerialNumber: syz [ 212.421494][ T4387] usb 6-1: config 0 descriptor?? [ 212.642179][ T4387] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 212.918377][ T32] usb 6-1: USB disconnect, device number 5 [ 213.474545][T12510] loop1: detected capacity change from 0 to 32768 [ 213.610692][T12510] XFS (loop1): Mounting V5 Filesystem [ 213.774933][T12510] XFS (loop1): Ending clean mount [ 213.966226][ T4251] XFS (loop1): Unmounting Filesystem [ 214.236566][T12589] loop4: detected capacity change from 0 to 128 [ 214.284465][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 214.284480][ T26] audit: type=1800 audit(1751064130.106:1779): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2445" name="file0" dev="loop4" ino=1048623 res=0 errno=0 [ 214.478571][T12602] loop4: detected capacity change from 0 to 1024 [ 214.591057][ T2900] hfsplus: b-tree write err: -5, ino 4 [ 214.602353][T12597] loop2: detected capacity change from 0 to 4096 [ 214.675265][T12597] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 214.738811][T12597] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 214.764116][T12616] Cannot find add_set index 0 as target [ 214.770582][T12597] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 214.798273][T12597] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 214.822629][T12597] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 214.861000][T12597] ntfs: volume version 3.1. [ 214.881047][T12597] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 214.909383][T12597] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 214.954147][T12597] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 214.976019][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2452'. [ 215.008762][T12597] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 215.034868][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2456'. [ 215.073240][T12631] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2456'. [ 215.082223][T12631] netlink: 'syz.1.2456': attribute type 3 has an invalid length. [ 215.131435][T12631] netlink: 'syz.1.2456': attribute type 2 has an invalid length. [ 215.159776][T12631] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2456'. [ 215.619966][T12656] loop4: detected capacity change from 0 to 2048 [ 215.701551][T12666] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.711400][T12667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2467'. [ 215.750365][T12669] netlink: 'syz.0.2469': attribute type 1 has an invalid length. [ 215.761561][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 215.782635][T12667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2467'. [ 215.812850][T12656] Remounting filesystem read-only [ 215.818191][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 215.864788][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 215.898290][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 215.925466][T12671] loop1: detected capacity change from 0 to 4096 [ 215.931104][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 215.950810][T12676] loop2: detected capacity change from 0 to 1024 [ 215.971075][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 215.994129][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 216.023880][T12671] ntfs: volume version 3.1. [ 216.029718][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 216.092887][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 216.132946][T12656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 216.155280][ T46] hfsplus: b-tree write err: -5, ino 4 [ 216.254559][T12685] device ip6gretap2 entered promiscuous mode [ 216.331759][T12656] syz.4.2464 (12656) used greatest stack depth: 19840 bytes left [ 216.515118][T12703] loop2: detected capacity change from 0 to 16 [ 216.539834][T12702] trusted_key: encrypted_key: hex blob is missing [ 216.561347][T12703] erofs: (device loop2): mounted with root inode @ nid 36. [ 216.632854][T12708] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 216.789965][T12718] loop1: detected capacity change from 0 to 1024 [ 216.953461][ T37] hfsplus: b-tree write err: -5, ino 4 [ 217.598591][T12763] openvswitch: netlink: Flow key attr not present in new flow. [ 217.621387][T12759] loop1: detected capacity change from 0 to 4096 [ 217.670116][T12759] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 218.094787][T12747] loop4: detected capacity change from 0 to 32768 [ 218.202771][T12786] loop1: detected capacity change from 0 to 4096 [ 218.203895][T12747] XFS (loop4): Mounting V5 Filesystem [ 218.275415][T12786] ntfs: volume version 3.1. [ 218.452715][T12747] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 218.557381][T12747] XFS (loop4): Starting recovery (logdev: internal) [ 218.625988][T12747] XFS (loop4): Ending recovery (logdev: internal) [ 218.719254][T12832] netlink: 'syz.0.2512': attribute type 4 has an invalid length. [ 218.800196][T12835] netlink: 'syz.5.2514': attribute type 21 has an invalid length. [ 218.841675][T12835] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2514'. [ 218.875774][ T4252] XFS (loop4): Unmounting Filesystem [ 218.928508][T12835] netlink: 'syz.5.2514': attribute type 4 has an invalid length. [ 218.954094][T12835] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2514'. [ 218.989698][T12845] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 219.208320][T12853] netlink: 'syz.2.2519': attribute type 1 has an invalid length. [ 219.241265][T12853] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2519'. [ 219.791304][T12883] loop5: detected capacity change from 0 to 4096 [ 219.811590][T12883] __ntfs_warning: 24 callbacks suppressed [ 219.811604][T12883] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 219.865556][T12896] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 219.920696][T12883] ntfs: (device loop5): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 219.940750][T12883] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 220.052169][T12883] ntfs: volume version 3.1. [ 221.560360][T13008] netlink: 'syz.0.2573': attribute type 8 has an invalid length. [ 221.811012][T13024] netlink: 'syz.5.2579': attribute type 5 has an invalid length. [ 221.874260][T13024] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2579'. [ 221.898379][T12974] loop2: detected capacity change from 0 to 32768 [ 222.073658][T13044] loop5: detected capacity change from 0 to 256 [ 222.077393][T12974] XFS (loop2): Mounting V5 Filesystem [ 222.100670][T13044] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 222.171207][T13044] exFAT-fs (loop5): invalid start cluster (520) [ 222.303862][T12974] XFS (loop2): Ending clean mount [ 222.436298][T13061] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2588'. [ 222.480577][T13061] unsupported nlmsg_type 40 [ 222.576559][ T4257] XFS (loop2): Unmounting Filesystem [ 222.823146][T13083] device xfrm0 entered promiscuous mode [ 222.911033][T13091] netlink: 'syz.4.2600': attribute type 2 has an invalid length. [ 223.885903][T13160] netlink: 'syz.0.2622': attribute type 7 has an invalid length. [ 223.972196][T13171] loop2: detected capacity change from 0 to 64 [ 224.049452][ T26] audit: type=1326 audit(1751064139.866:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 224.141883][ T26] audit: type=1326 audit(1751064139.906:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 224.178970][T13180] autofs4:pid:13180:autofs_fill_super: called with bogus options [ 224.246866][ T26] audit: type=1326 audit(1751064139.906:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 224.361284][ T26] audit: type=1326 audit(1751064139.906:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13173 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801238e929 code=0x7ffc0000 [ 224.774719][T13225] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 224.826797][T13221] loop4: detected capacity change from 0 to 1024 [ 224.883863][T13221] hfsplus: failed to load root directory [ 224.968639][T13236] netlink: 'syz.0.2648': attribute type 1 has an invalid length. [ 225.581710][T13277] loop2: detected capacity change from 0 to 256 [ 226.043520][T13292] loop4: detected capacity change from 0 to 256 [ 226.085004][T13292] FAT-fs (loop4): Directory bread(block 1285) failed [ 226.098377][T13296] loop2: detected capacity change from 0 to 512 [ 226.136601][T13296] EXT4-fs: Ignoring removed nobh option [ 226.143519][T13292] FAT-fs (loop4): Directory bread(block 1286) failed [ 226.200967][T13292] FAT-fs (loop4): Directory bread(block 1287) failed [ 226.216462][T13296] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.2668: inode #15: comm syz.2.2668: iget: illegal inode # [ 226.248845][T13292] FAT-fs (loop4): Directory bread(block 1288) failed [ 226.258968][T13292] FAT-fs (loop4): Directory bread(block 1289) failed [ 226.268095][T13292] FAT-fs (loop4): Directory bread(block 1290) failed [ 226.275013][T13292] FAT-fs (loop4): Directory bread(block 1291) failed [ 226.281880][T13292] FAT-fs (loop4): Directory bread(block 1292) failed [ 226.288934][T13292] FAT-fs (loop4): Directory bread(block 1293) failed [ 226.295857][T13292] FAT-fs (loop4): Directory bread(block 1294) failed [ 226.356751][T13296] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2668: couldn't read orphan inode 15 (err -117) [ 226.407477][T13296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 226.564369][T13309] loop5: detected capacity change from 0 to 256 [ 226.644151][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 226.876733][T13327] loop4: detected capacity change from 0 to 16 [ 226.905543][T13327] erofs: (device loop4): mounted with root inode @ nid 36. [ 226.989040][T13327] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 227.030093][T13327] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 227.079178][T13327] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 227.346149][T13345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2677'. [ 227.640536][T13365] loop4: detected capacity change from 0 to 64 [ 228.029024][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2694'. [ 229.396649][T13496] tmpfs: Bad value for 'mpol' [ 230.043588][ T4596] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 230.236945][ T4596] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.265317][ T4596] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.295738][ T4596] usb 2-1: string descriptor 0 read error: -22 [ 230.332644][ T4596] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.352586][ T4596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.368092][T13566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2754'. [ 230.399784][ T4596] usb 2-1: MIDIStreaming interface descriptor not found [ 230.630095][ T4596] usb 2-1: USB disconnect, device number 12 [ 230.672621][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 230.862996][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 230.874208][ T32] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 230.915259][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.944923][ T32] usb 1-1: config 0 descriptor?? [ 231.019353][T13638] netlink: 'syz.5.2768': attribute type 4 has an invalid length. [ 231.043776][T13638] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2768'. [ 231.056077][T13638] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 231.178826][ T32] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 231.208722][ T32] asix: probe of 1-1:0.0 failed with error -71 [ 231.228765][ T32] usb 1-1: USB disconnect, device number 7 [ 231.545499][T13663] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2773'. [ 231.574472][T13639] loop4: detected capacity change from 0 to 32768 [ 232.041614][T13645] loop2: detected capacity change from 0 to 32768 [ 232.137515][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2781'. [ 232.752802][T13721] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 233.044885][T13736] loop1: detected capacity change from 0 to 2048 [ 233.113569][T13747] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.157593][T13736] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 233.252677][T13736] Remounting filesystem read-only [ 233.270410][T13736] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 233.291938][T13736] NILFS (loop1): error -5 truncating bmap (ino=16) [ 233.429998][ T4251] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 233.584190][T13774] loop1: detected capacity change from 0 to 512 [ 233.662341][T13774] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 233.747267][T13774] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 233.799138][T13774] EXT4-fs (loop1): 1 truncate cleaned up [ 233.822577][T13774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.903290][T13774] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 233.926628][T13792] netlink: 'syz.0.2814': attribute type 4 has an invalid length. [ 233.940832][T13794] loop2: detected capacity change from 0 to 8 [ 233.962584][T13792] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2814'. [ 233.983397][T13794] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 233.991843][T13792] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 234.033919][T13794] cramfs: Error -3 while decompressing! [ 234.038433][ T4835] udevd[4835]: incorrect cramfs checksum on /dev/loop2 [ 234.052929][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 234.071227][T13794] cramfs: ffffffff96b4d568(1306)->ffff88804c808000(4096) [ 234.124409][T13794] cramfs: bad data blocksize 3221485966 [ 234.127175][ T4416] udevd[4416]: incorrect cramfs checksum on /dev/loop2 [ 234.162773][T13794] cramfs: Error -3 while decompressing! [ 234.184411][T13794] cramfs: ffffffff96b4d568(1306)->ffff88804c808000(4096) [ 234.315156][T13813] netlink: 'syz.5.2820': attribute type 12 has an invalid length. [ 234.392652][T13813] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2820'. [ 234.629181][T13829] loop1: detected capacity change from 0 to 4096 [ 234.738399][T13839] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.987570][T13853] netlink: 'syz.2.2830': attribute type 4 has an invalid length. [ 235.022836][T13853] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2830'. [ 235.044236][T13853] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 235.097171][T13855] netlink: 'syz.1.2834': attribute type 8 has an invalid length. [ 235.693592][T13892] cgroup: Invalid name [ 235.748586][T13896] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 235.806136][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2850'. [ 236.056006][T13873] loop4: detected capacity change from 0 to 32768 [ 236.098462][T13873] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2840 (13873) [ 236.164270][T13873] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.182187][T13873] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 236.202024][T13873] BTRFS info (device loop4): enabling disk space caching [ 236.255343][T13873] BTRFS info (device loop4): turning off barriers [ 236.261817][T13873] BTRFS info (device loop4): force clearing of disk cache [ 236.292575][T13873] BTRFS info (device loop4): enabling ssd optimizations [ 236.319237][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2860'. [ 236.322780][T13873] BTRFS info (device loop4): using spread ssd allocation scheme [ 236.348933][T13873] BTRFS info (device loop4): enabling free space tree [ 236.356423][T13873] BTRFS info (device loop4): using free space tree [ 236.412577][T13933] device wireguard0 entered promiscuous mode [ 236.586225][T13873] BTRFS info (device loop4): rebuilding free space tree [ 236.635616][T13967] loop2: detected capacity change from 0 to 256 [ 236.679773][T13873] BTRFS info (device loop4): checking UUID tree [ 236.978062][T13972] loop5: detected capacity change from 0 to 4096 [ 236.988976][ T4252] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.035206][T13972] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 237.072581][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 237.111473][T13972] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 237.208902][T13972] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 237.288012][T13972] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 237.303683][T13972] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 237.304353][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.336937][T13972] ntfs: volume version 3.1. [ 237.362531][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.391999][ T14] usb 1-1: config 1 has no interface number 0 [ 237.394471][T13972] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 237.412267][ T14] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.453633][T13972] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 237.495268][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.522722][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=29 [ 237.536956][T13972] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 237.573105][ T14] usb 1-1: Product: syz [ 237.577226][T13972] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 237.577283][ T14] usb 1-1: Manufacturer: syz [ 237.634002][ T14] usb 1-1: SerialNumber: syz [ 237.638573][T13972] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 237.684026][ T14] usb 1-1: selecting invalid altsetting 1 [ 237.739903][T13974] loop2: detected capacity change from 0 to 40427 [ 237.774234][ T32] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 237.791769][T13974] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 237.819950][T13974] F2FS-fs (loop2): invalid crc value [ 237.900483][T13974] F2FS-fs (loop2): Found nat_bits in checkpoint [ 237.976439][ T32] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 237.992773][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.009742][ T32] usb 2-1: Product: syz [ 238.024492][ T32] usb 2-1: Manufacturer: syz [ 238.029640][ T32] usb 2-1: SerialNumber: syz [ 238.034799][T13974] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 238.045956][ T32] usb 2-1: config 0 descriptor?? [ 238.065229][ T32] usb 2-1: interface 1 not found [ 238.101395][ T14] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 238.122605][ T14] cdc_ncm 1-1:1.1: bind() failure [ 238.153378][ T14] usb 1-1: USB disconnect, device number 8 [ 238.292436][ T32] usb 2-1: USB disconnect, device number 13 [ 238.372376][T14040] device sit0 entered promiscuous mode [ 238.390329][T14040] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 238.452308][T14040] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2879'. [ 238.595999][T14049] loop4: detected capacity change from 0 to 16 [ 238.623148][T14049] erofs: (device loop4): mounted with root inode @ nid 36. [ 238.666542][T14049] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 238.690083][T14049] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 238.723923][T14049] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 238.832373][T14063] overlayfs: unrecognized mount option "\n" or missing value [ 238.964465][T14071] device veth5 entered promiscuous mode [ 238.970612][T14082] loop4: detected capacity change from 0 to 1024 [ 239.092594][ T4596] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 239.118347][T14099] mmap: syz.1.2889 (14099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 239.198947][ T46] hfsplus: b-tree write err: -5, ino 4 [ 239.287134][ T4596] usb 3-1: Using ep0 maxpacket: 16 [ 239.309878][ T4596] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 239.335139][T14108] loop4: detected capacity change from 0 to 1024 [ 239.339921][ T4596] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.362581][ T4596] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 239.389103][ T4596] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.424665][ T4596] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.454178][ T4596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.462209][ T4596] usb 3-1: Product: syz [ 239.493519][ T4596] usb 3-1: Manufacturer: syz [ 239.506704][ T4596] usb 3-1: SerialNumber: syz [ 239.780668][T14134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2899'. [ 239.812704][ T4596] usb 3-1: USB disconnect, device number 10 [ 240.372442][T14194] netlink: 'syz.0.2914': attribute type 1 has an invalid length. [ 240.588307][T14209] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 240.603628][T14211] usb usb8: usbfs: process 14211 (syz.0.2920) did not claim interface 0 before use [ 240.752926][T14218] kernel profiling enabled (shift: 7) [ 240.941174][T14233] loop1: detected capacity change from 0 to 1024 [ 240.970564][T14233] EXT4-fs: Ignoring removed orlov option [ 240.999888][T14233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.102224][T14233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.303726][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 241.505762][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2938'. [ 241.660543][T14285] xt_l2tp: missing protocol rule (udp|l2tpip) [ 241.858291][T14297] overlayfs: missing 'lowerdir' [ 241.880767][T14298] loop4: detected capacity change from 0 to 512 [ 241.959467][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 242.013006][T14298] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.2947: casefold flag without casefold feature [ 242.081771][T14298] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2947: couldn't read orphan inode 15 (err -117) [ 242.128455][T14298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 242.133295][T14263] loop2: detected capacity change from 0 to 32768 [ 242.180864][T14263] jfs_strtoUCS: char2uni returned -22. [ 242.208815][T14263] charset = cp932, char = 0xfc [ 242.289953][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 242.435884][T14329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2957'. [ 242.511087][T14335] device netdevsim0 entered promiscuous mode [ 242.551277][T14335] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 242.785777][T14350] overlayfs: conflicting options: nfs_export=on,index=off [ 242.838395][T14353] netlink: 'syz.2.2964': attribute type 2 has an invalid length. [ 243.740246][T14416] loop1: detected capacity change from 0 to 16 [ 243.760511][T14416] erofs: (device loop1): mounted with root inode @ nid 36. [ 243.807303][T14416] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 243.874953][T14416] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 243.909606][T14427] VFS: could not find a valid V7 on nullb0. [ 244.318669][T14441] loop1: detected capacity change from 0 to 8192 [ 244.504124][T14467] loop2: detected capacity change from 0 to 256 [ 244.522797][ T7974] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 244.603010][T14467] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 244.732563][ T7974] usb 5-1: Using ep0 maxpacket: 16 [ 244.742224][ T7974] usb 5-1: config 0 has no interfaces? [ 244.794550][ T7974] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 244.821283][ T7974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.865610][ T7974] usb 5-1: Product: syz [ 244.869816][ T7974] usb 5-1: Manufacturer: syz [ 244.893195][ T7974] usb 5-1: SerialNumber: syz [ 244.919915][ T7974] r8152-cfgselector 5-1: config 0 descriptor?? [ 244.937427][T14496] netlink: 'syz.1.3010': attribute type 3 has an invalid length. [ 245.070302][T14506] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 245.127303][ T4596] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 245.155499][ T7974] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 245.310544][T14515] loop2: detected capacity change from 0 to 4096 [ 245.322867][ T4596] usb 6-1: Using ep0 maxpacket: 16 [ 245.331753][ T4596] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 245.357870][ T4596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.372377][T14515] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 245.381550][ T4596] usb 6-1: Product: syz [ 245.381569][ T4596] usb 6-1: Manufacturer: syz [ 245.394270][ T7974] usb 5-1: USB disconnect, device number 11 [ 245.405654][ T4596] usb 6-1: SerialNumber: syz [ 245.441073][ T4596] usb 6-1: config 0 descriptor?? [ 245.511671][ T4596] snd-usb-audio: probe of 6-1:0.0 failed with error -2 [ 245.539336][ T4835] udevd[4835]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.604036][ T4257] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 245.610566][ T4257] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 245.623219][ T4257] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 245.679124][T14546] PKCS8: Unsupported PKCS#8 version [ 245.729879][ T4596] usb 6-1: USB disconnect, device number 6 [ 245.863465][T14566] loop1: detected capacity change from 0 to 8 [ 245.936660][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'. [ 246.039125][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 246.039138][ T26] audit: type=1326 audit(1751064161.856:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.4.3031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4fc98e929 code=0x0 [ 246.175880][T14585] netlink: 'syz.2.3032': attribute type 10 has an invalid length. [ 246.825505][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 246.927712][T14640] binder: 14636:14640 ioctl c00c6211 0 returned -14 [ 247.013294][T14648] loop1: detected capacity change from 0 to 512 [ 247.020302][T14648] EXT4-fs: Ignoring removed bh option [ 247.115023][T14648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.167465][T14648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.177666][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 247.240848][T14648] EXT4-fs (loop1): 1 truncate cleaned up [ 247.247470][T14648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 247.376746][ T14] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 247.396141][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.412740][ T14] usb 3-1: Product: syz [ 247.417031][ T14] usb 3-1: Manufacturer: syz [ 247.421631][ T14] usb 3-1: SerialNumber: syz [ 247.470668][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 247.473783][ T14] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 247.525218][ T8866] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 247.749934][T14692] loop4: detected capacity change from 0 to 8192 [ 247.803408][T14692] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.821425][ C0] usb 3-1: ath: unknown panic pattern! [ 247.912790][T14692] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 247.923403][T14692] FAT-fs (loop4): Filesystem has been set read-only [ 248.053959][ T4596] usb 3-1: USB disconnect, device number 11 [ 248.062243][ T4252] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 248.092657][ T7974] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 248.180028][T14726] program syz.4.3076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.332250][ T7974] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 248.344345][ T7974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.353850][ T7974] usb 2-1: Product: syz [ 248.358434][ T7974] usb 2-1: Manufacturer: syz [ 248.400151][ T7974] usb 2-1: SerialNumber: syz [ 248.419631][ T7974] usb 2-1: config 0 descriptor?? [ 248.436280][ T7974] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 248.622777][ T8866] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 248.635261][ T8866] ath9k_htc: Failed to initialize the device [ 248.670300][ T4596] usb 3-1: ath9k_htc: USB layer deinitialized [ 248.843785][ T7974] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 248.856831][ T7974] sq905c 2-1:0.0: Reading version command failed [ 248.872561][ T7974] sq905c: probe of 2-1:0.0 failed with error -71 [ 248.898806][ T7974] usb 2-1: USB disconnect, device number 14 [ 249.062626][ T32] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 249.163435][T14756] loop4: detected capacity change from 0 to 32768 [ 249.176120][T14750] loop5: detected capacity change from 0 to 32768 [ 249.209118][T14750] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.3086 (14750) [ 249.240577][T14785] loop2: detected capacity change from 0 to 4096 [ 249.249563][T14756] XFS (loop4): Mounting V5 Filesystem [ 249.272219][ T32] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 249.278245][T14750] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 249.286494][ T32] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 249.301402][T14750] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 249.313472][T14785] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 249.326991][T14750] BTRFS info (device loop5): force zlib compression, level 3 [ 249.334997][T14750] BTRFS info (device loop5): force clearing of disk cache [ 249.342151][T14750] BTRFS info (device loop5): setting nodatasum [ 249.349018][T14750] BTRFS info (device loop5): allowing degraded mounts [ 249.356002][T14750] BTRFS info (device loop5): enabling disk space caching [ 249.363226][T14750] BTRFS info (device loop5): disk space caching is enabled [ 249.426964][ T32] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 249.462719][ T32] usb 1-1: config 220 has no interface number 2 [ 249.469172][ T32] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 249.488276][ T32] usb 1-1: config 220 interface 0 has no altsetting 0 [ 249.495421][ T32] usb 1-1: config 220 interface 76 has no altsetting 0 [ 249.502379][ T32] usb 1-1: config 220 interface 1 has no altsetting 0 [ 249.516531][T14756] XFS (loop4): Ending clean mount [ 249.524572][ T32] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 249.542595][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.560948][ T32] usb 1-1: Product: syz [ 249.565459][ T32] usb 1-1: Manufacturer: syz [ 249.568999][T14756] XFS (loop4): Quotacheck needed: Please wait. [ 249.572737][ T32] usb 1-1: SerialNumber: syz [ 249.707100][T14756] XFS (loop4): Quotacheck: Done. [ 249.721946][T14750] BTRFS info (device loop5): rebuilding free space tree [ 249.770363][T14750] BTRFS info (device loop5): disabling free space tree [ 249.798623][T14750] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 249.828154][ T32] usb 1-1: selecting invalid altsetting 0 [ 249.859230][ T32] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 249.872528][ T32] usb 1-1: No valid video chain found. [ 249.872570][T14750] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 249.917958][ T32] usb 1-1: selecting invalid altsetting 0 [ 249.937955][ T32] usbtest: probe of 1-1:220.1 failed with error -22 [ 249.958284][ T32] usb 1-1: USB disconnect, device number 9 [ 249.977966][ T4252] XFS (loop4): Unmounting Filesystem [ 250.073767][T14750] BTRFS info (device loop5): balance: start -sprofiles=system|metadata|single|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=7,devid=0,drange=36028797018963968..70368744177664 [ 250.112735][T14750] BTRFS info (device loop5): balance: ended with status: 0 [ 250.128174][T14837] xt_CT: No such helper "syz0" [ 250.215834][ T4716] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 250.345986][ T4501] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 13 /dev/loop5 scanned by udevd (4501) [ 250.835234][T14874] trusted_key: encrypted_key: keylen parameter is missing [ 250.882787][ T7975] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 250.954917][T14848] loop2: detected capacity change from 0 to 32768 [ 251.047486][T14848] syz.2.3099: attempt to access beyond end of device [ 251.047486][T14848] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 251.065439][T14848] metapage_write_end_io: I/O error [ 251.104058][ T7975] usb 1-1: Using ep0 maxpacket: 16 [ 251.113799][ T7975] usb 1-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 251.140511][T14848] blkno = 8ed2c, nblocks = 1 [ 251.157469][T14848] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 251.157469][T14848] [ 251.176410][ T7975] usb 1-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 251.227634][T14848] ERROR: (device loop2): remounting filesystem as read-only [ 251.243086][ T7975] usb 1-1: config 1 interface 0 altsetting 235 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.282354][T14848] UFO tlock:0xffffc9000288a0d8 [ 251.301497][ T7975] usb 1-1: config 1 interface 0 has no altsetting 0 [ 251.331456][ T7975] usb 1-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 251.364313][ T7975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.392587][ T7975] usb 1-1: Product: syz [ 251.398708][T14901] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3113'. [ 251.411789][ T7975] usb 1-1: Manufacturer: syz [ 251.416703][ T7975] usb 1-1: SerialNumber: syz [ 251.441974][T14860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.452230][ T7975] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 251.454877][T14901] netlink: zone id is out of range [ 251.471690][ T106] blkno = 8ed2c, nblocks = 4 [ 251.476638][ T106] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 251.476638][ T106] [ 251.520510][ T4257] syz-executor: attempt to access beyond end of device [ 251.520510][ T4257] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 251.572550][ T4257] metapage_write_end_io: I/O error [ 251.577969][ T4257] JFS: metapage_get_blocks failed [ 251.588671][ T4257] JFS: metapage_get_blocks failed [ 251.606083][ T4257] JFS: metapage_get_blocks failed [ 251.611458][ T4257] JFS: metapage_get_blocks failed [ 251.690996][ T4596] usb 1-1: USB disconnect, device number 10 [ 251.830917][T14932] ufs: You didn't specify the type of your ufs filesystem [ 251.830917][T14932] [ 251.830917][T14932] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 251.830917][T14932] [ 251.830917][T14932] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 251.862111][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.922911][T14932] ufs: ufstype=old is supported read-only [ 251.932015][T14932] ufs: ufs_fill_super(): bad magic number [ 251.934795][T14939] device bridge_slave_1 left promiscuous mode [ 251.948478][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.992110][T14939] device bridge_slave_0 left promiscuous mode [ 251.999821][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.291943][T14961] loop5: detected capacity change from 0 to 128 [ 252.370394][T14961] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 252.434407][T14961] ext4 filesystem being mounted at /590/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.502668][T14961] EXT4-fs (loop5): resizing filesystem from 64 to 1 blocks [ 252.509960][T14961] EXT4-fs warning (device loop5): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 252.651455][ T4716] EXT4-fs (loop5): unmounting filesystem. [ 252.871865][T14995] loop5: detected capacity change from 0 to 4096 [ 252.892701][T14995] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 253.332388][T15031] loop1: detected capacity change from 0 to 1024 [ 253.450625][T15031] syz.1.3149: attempt to access beyond end of device [ 253.450625][T15031] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 253.664980][T15054] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 253.680803][T15054] bond0: (slave lo): Error: Device can not be enslaved while up [ 253.737543][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3157'. [ 253.754069][T15059] netlink: 'syz.0.3158': attribute type 10 has an invalid length. [ 253.780568][T15059] device macvlan0 entered promiscuous mode [ 253.844375][T15059] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 253.872316][T15062] netlink: 'syz.4.3159': attribute type 24 has an invalid length. [ 254.233570][T15089] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3168'. [ 254.280598][T15089] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3168'. [ 254.323743][T15089] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3168'. [ 254.329952][T15099] ax25_connect(): syz.0.3172 uses autobind, please contact jreuter@yaina.de [ 254.633255][ T7975] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 254.743413][T15129] xt_TCPMSS: Only works on TCP SYN packets [ 254.766451][T15133] netlink: 'syz.5.3184': attribute type 1 has an invalid length. [ 254.770437][T15134] loop1: detected capacity change from 0 to 512 [ 254.822791][ T7975] usb 3-1: Using ep0 maxpacket: 16 [ 254.830083][ T7975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.847841][T15134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.854631][ T7975] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 254.872589][ T7975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.881225][ T7975] usb 3-1: Product: syz [ 254.885888][ T7975] usb 3-1: Manufacturer: syz [ 254.890583][ T7975] usb 3-1: SerialNumber: syz [ 254.898053][ T7975] usb 3-1: config 0 descriptor?? [ 254.907136][ T7975] hub 3-1:0.0: bad descriptor, ignoring hub [ 254.913367][ T7975] hub: probe of 3-1:0.0 failed with error -5 [ 254.927542][ T7975] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 254.949776][T15134] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.3182: Unimplemented hash flags: 0x0001 [ 254.969356][T15134] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3182: Corrupt directory, running e2fsck is recommended [ 255.103418][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 255.505893][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.512317][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.612803][T15153] loop5: detected capacity change from 0 to 32768 [ 255.639314][T15153] (syz.5.3187,15153,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 255.653788][T15153] (syz.5.3187,15153,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 255.694223][T15153] JBD2: Ignoring recovery information on journal [ 255.752888][T15153] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 256.048901][ T4716] ocfs2: Unmounting device (7,5) on (node local) [ 256.268244][T15187] netlink: 'syz.0.3197': attribute type 21 has an invalid length. [ 256.282812][T15187] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3197'. [ 256.780778][T15224] loop5: detected capacity change from 0 to 1024 [ 256.851256][T15224] syz.5.3207: attempt to access beyond end of device [ 256.851256][T15224] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 256.864807][ T7974] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 257.023237][T15241] loop5: detected capacity change from 0 to 256 [ 257.050490][T15241] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.067951][ T7974] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 257.082513][ T7974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.102142][ T7974] usb 5-1: Product: syz [ 257.123217][ T7974] usb 5-1: Manufacturer: syz [ 257.127882][ T7974] usb 5-1: SerialNumber: syz [ 257.179635][ T7974] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 257.251949][ T7974] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.488515][ C1] usb 5-1: ath: unknown panic pattern! [ 257.708427][ T8866] usb 5-1: USB disconnect, device number 12 [ 258.303049][ T7974] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 258.310088][ T7974] ath9k_htc: Failed to initialize the device [ 258.333720][ T8866] usb 5-1: ath9k_htc: USB layer deinitialized [ 258.629319][T15354] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 258.764580][T15360] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 259.140167][T15390] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3262'. [ 259.421164][T15408] loop4: detected capacity change from 0 to 256 [ 259.626833][ T7975] usb 3-1: USB disconnect, device number 12 [ 259.639079][T15422] tmpfs: Bad value for 'mpol' [ 259.652367][T15425] netlink: 'syz.5.3274': attribute type 10 has an invalid length. [ 259.813966][T15425] device veth0_vlan left promiscuous mode [ 259.821227][T15425] device veth0_vlan entered promiscuous mode [ 259.861457][T15425] team0: Device veth0_vlan failed to register rx_handler [ 260.231957][T15454] loop2: detected capacity change from 0 to 4096 [ 260.256032][T15454] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 260.308503][T15454] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 260.346870][T15473] xt_cgroup: invalid path, errno=-2 [ 260.528713][ T4257] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 260.548678][T15481] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3291'. [ 260.576542][T15480] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 260.940582][T15504] trusted_key: encrypted_key: insufficient parameters specified [ 260.954053][T15509] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 261.458497][T15540] loop1: detected capacity change from 0 to 128 [ 261.498709][T15540] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.840867][T15564] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3318'. [ 261.850201][ T4596] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 261.887427][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'. [ 262.049671][ T4596] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 262.076030][ T4596] usb 2-1: config 0 has no interface number 0 [ 262.101565][ T4596] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 262.137484][ T4596] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 262.188677][ T4596] usb 2-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 262.204870][T15583] loop4: detected capacity change from 0 to 64 [ 262.213712][ T4596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.232001][ T4596] usb 2-1: Product: syz [ 262.242713][ T4596] usb 2-1: Manufacturer: syz [ 262.249274][ T4596] usb 2-1: SerialNumber: syz [ 262.268600][ T4596] usb 2-1: config 0 descriptor?? [ 262.278427][ T4596] usb 2-1: Interface #216 referenced by multiple IADs [ 262.359184][ T4596] snd-usb-audio: probe of 2-1:0.216 failed with error -2 [ 262.411435][ T4416] udevd[4416]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.529813][ T7968] usb 2-1: USB disconnect, device number 15 [ 262.599074][T15627] netlink: 'syz.0.3333': attribute type 9 has an invalid length. [ 262.642974][ T4603] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 262.645353][T15627] netlink: 'syz.0.3333': attribute type 6 has an invalid length. [ 262.718125][T15634] x_tables: duplicate underflow at hook 2 [ 262.834675][ T4603] usb 6-1: unable to get BOS descriptor or descriptor too short [ 262.856143][ T4603] usb 6-1: not running at top speed; connect to a high speed hub [ 262.903646][ T4603] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.919198][ T4603] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 262.940132][ T4603] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 262.950485][ T4603] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 262.975544][ T4603] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 262.999946][ T4603] usb 6-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 263.019468][ T4603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.042545][ T4603] usb 6-1: Product: syz [ 263.049795][ T4603] usb 6-1: Manufacturer: syz [ 263.070029][ T4603] usb 6-1: SerialNumber: syz [ 263.091734][ T4603] ipaq 6-1:1.0: PocketPC PDA converter detected [ 263.300266][ T4603] usb 6-1: PocketPC PDA converter now attached to ttyUSB0 [ 263.557529][ T8866] usb 6-1: USB disconnect, device number 7 [ 263.577915][ T8866] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 263.610303][ T8866] ipaq 6-1:1.0: device disconnected [ 263.791693][ T26] audit: type=1326 audit(1751064179.606:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fc98e929 code=0x7ffc0000 [ 263.793075][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'. [ 263.817088][ T26] audit: type=1326 audit(1751064179.606:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fc98e929 code=0x7ffc0000 [ 263.832558][ T7975] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.876275][ T26] audit: type=1326 audit(1751064179.676:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe4fc98e929 code=0x7ffc0000 [ 263.939747][ T26] audit: type=1326 audit(1751064179.686:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fc98e929 code=0x7ffc0000 [ 263.962980][ T26] audit: type=1326 audit(1751064179.686:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.4.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fc98e929 code=0x7ffc0000 [ 264.005469][T15732] netlink: 'syz.4.3362': attribute type 10 has an invalid length. [ 264.076668][ T7975] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 264.114258][ T7975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.131417][ T7975] usb 3-1: config 0 descriptor?? [ 264.154156][ T7975] cp210x 3-1:0.0: cp210x converter detected [ 264.524460][T15767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.568333][ T7975] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 264.592024][ T7975] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 264.610018][ T7975] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 264.639616][ T7975] usb 3-1: cp210x converter now attached to ttyUSB0 [ 264.676906][ T7975] usb 3-1: USB disconnect, device number 13 [ 264.677852][T15783] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1 ©üU–¿Çxƒì' [ 264.722632][ T7975] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 264.732991][ T7975] cp210x 3-1:0.0: device disconnected [ 265.062719][ T8866] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 265.120572][T15770] loop1: detected capacity change from 0 to 32768 [ 265.182162][T15770] JBD2: Ignoring recovery information on journal [ 265.202613][ T4603] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 265.258554][ T8866] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 265.283390][ T8866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.344802][ T8866] usb 6-1: config 0 descriptor?? [ 265.352008][T15770] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 265.387724][T15830] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3387'. [ 265.400380][ T4603] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 265.420019][ T4603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.440418][ T4603] usb 1-1: Product: syz [ 265.460442][ T4603] usb 1-1: Manufacturer: syz [ 265.480597][ T4603] usb 1-1: SerialNumber: syz [ 265.488359][ T4251] ocfs2: Unmounting device (7,1) on (node local) [ 265.498596][ T4603] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 265.576242][ T4603] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 265.758997][ T8866] usb 6-1: Cannot set MAC address [ 265.765188][ T8866] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 265.823773][ T8866] usb 6-1: USB disconnect, device number 8 [ 265.998169][ T4596] usb 1-1: USB disconnect, device number 11 [ 266.162709][ T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.372591][ T14] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 266.393171][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.401207][ T14] usb 3-1: Product: syz [ 266.423590][ T14] usb 3-1: Manufacturer: syz [ 266.436728][ T14] usb 3-1: SerialNumber: syz [ 266.459483][ T14] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 266.520770][ T14] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 266.622737][ T4603] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 266.629849][ T4603] ath9k_htc: Failed to initialize the device [ 266.668180][ T4596] usb 1-1: ath9k_htc: USB layer deinitialized [ 266.711994][T15892] loop1: detected capacity change from 0 to 32768 [ 266.755921][T15892] (syz.1.3401,15892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 266.810546][T15892] (syz.1.3401,15892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 266.890237][T15892] JBD2: Ignoring recovery information on journal [ 266.949012][ T7975] usb 3-1: USB disconnect, device number 14 [ 266.987650][T15892] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 267.017777][T15892] ocfs2: Unmounting device (7,1) on (node local) [ 267.133448][T15943] netlink: 'syz.5.3415': attribute type 10 has an invalid length. [ 267.193237][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.200679][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.288968][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.296510][T15943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.306489][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.313726][T15943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.381206][T15943] team0: Port device bridge0 added [ 267.582868][ T14] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 267.589898][ T14] ath9k_htc: Failed to initialize the device [ 267.605610][T15967] netlink: 'syz.1.3424': attribute type 10 has an invalid length. [ 267.609174][T15968] loop2: detected capacity change from 0 to 512 [ 267.647210][ T7975] usb 3-1: ath9k_htc: USB layer deinitialized [ 267.659511][T15968] EXT4-fs: Ignoring removed i_version option [ 267.670572][T15968] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.728671][T15968] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.3422: inode #13: comm syz.2.3422: iget: illegal inode # [ 267.771881][T15967] team0: Device veth0_vlan failed to register rx_handler [ 267.785966][T15979] block device autoloading is deprecated and will be removed. [ 267.824325][T15968] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3422: couldn't read orphan inode 13 (err -117) [ 267.837662][T15968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 267.949636][T15968] EXT4-fs error (device loop2): __ext4_remount:6623: comm syz.2.3422: Abort forced by user [ 267.992894][T15968] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 268.081684][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 268.286470][T16003] loop5: detected capacity change from 0 to 256 [ 268.309942][T16003] exfat: Deprecated parameter 'utf8' [ 268.332567][T16003] exfat: Deprecated parameter 'namecase' [ 268.342423][T16003] exfat: Deprecated parameter 'utf8' [ 268.378040][T16003] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 268.520210][T15981] loop4: detected capacity change from 0 to 32768 [ 268.635864][T15981] JBD2: Ignoring recovery information on journal [ 268.692603][ T7975] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 268.784290][T15981] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 268.885881][ T26] audit: type=1800 audit(1751064184.706:1802): pid=15981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3426" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 268.914491][ T7975] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 268.942593][ T7975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.971740][ T7975] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 268.985938][T16029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3438'. [ 268.996104][ T7975] usb 3-1: config 1 has no interface number 1 [ 269.012545][ T7975] usb 3-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 269.042639][ T7975] usb 3-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 269.076347][ T7975] usb 3-1: config 1 interface 2 has no altsetting 1 [ 269.089319][ T7975] usb 3-1: string descriptor 0 read error: -22 [ 269.106783][ T7975] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.132552][ T7975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.154064][ T4252] ocfs2: Unmounting device (7,4) on (node local) [ 269.164361][ T7975] usb 3-1: MIDIStreaming interface descriptor not found [ 269.355620][T16050] netlink: 'syz.0.3441': attribute type 10 has an invalid length. [ 269.364642][ T7975] usb 3-1: USB disconnect, device number 15 [ 269.548508][T16027] loop5: detected capacity change from 0 to 32768 [ 269.565412][T16050] device veth0_vlan left promiscuous mode [ 269.594944][T16050] device veth0_vlan entered promiscuous mode [ 269.636670][T16027] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 269.668280][T16050] team0: Device veth0_vlan failed to register rx_handler [ 269.836968][T16083] netlink: 'syz.4.3445': attribute type 32 has an invalid length. [ 269.849347][ T4716] ocfs2: Unmounting device (7,5) on (node local) [ 270.131699][T16098] netlink: 'syz.4.3450': attribute type 5 has an invalid length. [ 270.579430][T16126] afs: Unknown parameter 'dont_hash' [ 270.764150][T16125] loop5: detected capacity change from 0 to 4096 [ 270.807683][T16125] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 270.952274][T16125] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 271.140998][ T4716] ntfs3: loop5: ntfs_evict_inode r=1e failed, -22. [ 271.179758][ T4716] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 271.429064][T16179] ip6t_REJECT: ECHOREPLY is not supported [ 272.228348][T16191] loop2: detected capacity change from 0 to 32768 [ 272.263765][T16191] (syz.2.3482,16191,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.309312][T16191] (syz.2.3482,16191,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.451376][T16191] JBD2: Ignoring recovery information on journal [ 272.567443][T16191] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 272.637070][T16191] [ 272.639527][T16191] ====================================================== [ 272.646550][T16191] WARNING: possible circular locking dependency detected [ 272.653586][T16191] 6.1.142-syzkaller #0 Not tainted [ 272.658709][T16191] ------------------------------------------------------ [ 272.665750][T16191] syz.2.3482/16191 is trying to acquire lock: [ 272.671818][T16191] ffff8880716694a0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 272.682732][T16191] [ 272.682732][T16191] but task is already holding lock: [ 272.690103][T16191] ffff888071669808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 272.700984][T16206] loop1: detected capacity change from 0 to 32768 [ 272.702637][T16191] [ 272.702637][T16191] which lock already depends on the new lock. [ 272.702637][T16191] [ 272.702663][T16191] [ 272.702663][T16191] the existing dependency chain (in reverse order) is: [ 272.702669][T16191] [ 272.702669][T16191] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8 [ 272.710313][T16206] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 13 [ 272.719464][T16191] ){+.+.}-{3:3}: [ 272.719482][T16191] down_write+0x36/0x60 [ 272.719505][T16191] ocfs2_lock_global_qf+0x1c7/0x270 [ 272.719523][T16191] ocfs2_acquire_dquot+0x2a0/0xb10 [ 272.767668][T16191] dqget+0x778/0xeb0 [ 272.772132][T16191] dquot_set_dqblk+0x27/0xf90 [ 272.777328][T16191] quota_setquota+0x4ac/0x530 [ 272.782512][T16191] __se_sys_quotactl+0x295/0x6b0 [ 272.787960][T16191] do_syscall_64+0x4c/0xa0 [ 272.792895][T16191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.799480][T16191] [ 272.799480][T16191] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 272.807117][T16191] __mutex_lock+0x120/0xaf0 [ 272.812130][T16191] dquot_commit+0x5a/0x410 [ 272.817051][T16191] ext4_write_dquot+0x1f0/0x360 [ 272.822418][T16191] mark_all_dquot_dirty+0xf9/0x400 [ 272.828036][T16191] __dquot_alloc_space+0x5fc/0xe60 [ 272.833666][T16191] ext4_mb_new_blocks+0xf74/0x4720 [ 272.839300][T16191] ext4_ext_map_blocks+0x143c/0x66d0 [ 272.845103][T16191] ext4_map_blocks+0x9d1/0x1b60 [ 272.850462][T16191] ext4_getblk+0x1ab/0x6d0 [ 272.855392][T16191] ext4_bread+0x26/0x170 [ 272.860142][T16191] ext4_append+0x2c3/0x560 [ 272.865071][T16191] ext4_init_new_dir+0x2b8/0x570 [ 272.870513][T16191] ext4_mkdir+0x47d/0xc50 [ 272.875346][T16191] vfs_mkdir+0x387/0x570 [ 272.880096][T16191] do_mkdirat+0x1d0/0x430 [ 272.884931][T16191] __x64_sys_mkdirat+0x85/0x90 [ 272.890207][T16191] do_syscall_64+0x4c/0xa0 [ 272.895133][T16191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.901541][T16191] [ 272.901541][T16191] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 272.909171][T16191] down_write+0x36/0x60 [ 272.913835][T16191] ext4_truncate+0x987/0x1230 [ 272.919025][T16191] ext4_setattr+0x10cb/0x19f0 [ 272.924208][T16191] notify_change+0xc74/0xf40 [ 272.929308][T16191] do_truncate+0x197/0x220 [ 272.934231][T16191] do_sys_ftruncate+0x312/0x3c0 [ 272.939587][T16191] do_syscall_64+0x4c/0xa0 [ 272.944508][T16191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.950914][T16191] [ 272.950914][T16191] -> #3 (jbd2_handle){++++}-{0:0}: [ 272.958200][T16191] start_this_handle+0x1f49/0x2150 [ 272.963814][T16191] jbd2__journal_start+0x2b7/0x5a0 [ 272.969427][T16191] jbd2_journal_start+0x26/0x30 [ 272.974782][T16191] ocfs2_start_trans+0x372/0x6c0 [ 272.980224][T16191] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 272.986452][T16191] ocfs2_dismount_volume+0x1fc/0x930 [ 272.992244][T16191] generic_shutdown_super+0x130/0x340 [ 272.998130][T16191] kill_block_super+0x7c/0xe0 [ 273.003318][T16191] deactivate_locked_super+0x93/0xf0 [ 273.009124][T16191] cleanup_mnt+0x463/0x4f0 [ 273.014055][T16191] task_work_run+0x1ca/0x250 [ 273.019157][T16191] exit_to_user_mode_loop+0xe6/0x110 [ 273.024957][T16191] exit_to_user_mode_prepare+0xb1/0x140 [ 273.031015][T16191] syscall_exit_to_user_mode+0x16/0x40 [ 273.036987][T16191] do_syscall_64+0x58/0xa0 [ 273.041918][T16191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.048325][T16191] [ 273.048325][T16191] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 273.056914][T16191] down_read+0x42/0x2d0 [ 273.061580][T16191] ocfs2_start_trans+0x366/0x6c0 [ 273.067027][T16191] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 273.073258][T16191] ocfs2_dismount_volume+0x1fc/0x930 [ 273.079049][T16191] generic_shutdown_super+0x130/0x340 [ 273.084926][T16191] kill_block_super+0x7c/0xe0 [ 273.090107][T16191] deactivate_locked_super+0x93/0xf0 [ 273.095902][T16191] cleanup_mnt+0x463/0x4f0 [ 273.100827][T16191] task_work_run+0x1ca/0x250 [ 273.105925][T16191] exit_to_user_mode_loop+0xe6/0x110 [ 273.111719][T16191] exit_to_user_mode_prepare+0xb1/0x140 [ 273.117775][T16191] syscall_exit_to_user_mode+0x16/0x40 [ 273.123746][T16191] do_syscall_64+0x58/0xa0 [ 273.128671][T16191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.135076][T16191] [ 273.135076][T16191] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 273.142536][T16191] ocfs2_start_trans+0x267/0x6c0 [ 273.147983][T16191] ocfs2_write_info+0x117/0x350 [ 273.153343][T16191] dquot_set_dqinfo+0x459/0x6c0 [ 273.158700][T16191] quota_setinfo+0x2a4/0x2b0 [ 273.163808][T16191] __se_sys_quotactl+0x295/0x6b0 [ 273.169264][T16191] do_syscall_64+0x4c/0xa0 [ 273.174203][T16191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.180622][T16191] [ 273.180622][T16191] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 273.189568][T16191] __lock_acquire+0x2cf8/0x7c50 [ 273.194935][T16191] lock_acquire+0x1b4/0x490 [ 273.199949][T16191] down_write+0x36/0x60 [ 273.204614][T16191] ocfs2_lock_global_qf+0x1e5/0x270 [ 273.210670][T16191] ocfs2_acquire_dquot+0x2a0/0xb10 [ 273.216286][T16191] dqget+0x778/0xeb0 [ 273.220688][T16191] dquot_set_dqblk+0x27/0xf90 [ 273.225871][T16191] quota_setquota+0x4ac/0x530 [ 273.231054][T16191] __se_sys_quotactl+0x295/0x6b0 [ 273.236503][T16191] do_syscall_64+0x4c/0xa0 [ 273.241425][T16191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.247829][T16191] [ 273.247829][T16191] other info that might help us debug this: [ 273.247829][T16191] [ 273.258036][T16191] Chain exists of: [ 273.258036][T16191] &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8 [ 273.258036][T16191] [ 273.275142][T16191] Possible unsafe locking scenario: [ 273.275142][T16191] [ 273.282575][T16191] CPU0 CPU1 [ 273.287919][T16191] ---- ---- [ 273.293266][T16191] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 273.300890][T16191] lock(&dquot->dq_lock); [ 273.307819][T16191] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 273.317607][T16191] lock(&ocfs2_quota_ip_alloc_sem_key); [ 273.323226][T16191] [ 273.323226][T16191] *** DEADLOCK *** [ 273.323226][T16191] [ 273.331348][T16191] 3 locks held by syz.2.3482/16191: [ 273.336525][T16191] #0: ffff888056fde0e0 (&type->s_umount_key#84){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 273.346695][T16191] #1: ffff8880505ec0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 273.356682][T16191] #2: ffff888071669808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 273.369624][T16191] [ 273.369624][T16191] stack backtrace: [ 273.375517][T16191] CPU: 0 PID: 16191 Comm: syz.2.3482 Not tainted 6.1.142-syzkaller #0 [ 273.383658][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.393706][T16191] Call Trace: [ 273.396973][T16191] [ 273.399891][T16191] dump_stack_lvl+0x168/0x22e [ 273.404561][T16191] ? load_image+0x3b0/0x3b0 [ 273.409047][T16191] ? show_regs_print_info+0x12/0x12 [ 273.414241][T16191] ? print_circular_bug+0x12b/0x1a0 [ 273.419427][T16191] check_noncircular+0x274/0x310 [ 273.424357][T16191] ? add_chain_block+0x940/0x940 [ 273.429282][T16191] ? lockdep_lock+0xdc/0x1e0 [ 273.433858][T16191] ? lockdep_unlock+0x133/0x2d0 [ 273.438696][T16191] ? lockdep_lock+0x1e0/0x1e0 [ 273.443360][T16191] ? _find_first_zero_bit+0xcf/0x100 [ 273.448638][T16191] __lock_acquire+0x2cf8/0x7c50 [ 273.453484][T16191] ? verify_lock_unused+0x140/0x140 [ 273.458710][T16191] ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20 [ 273.464860][T16191] lock_acquire+0x1b4/0x490 [ 273.469353][T16191] ? ocfs2_lock_global_qf+0x1e5/0x270 [ 273.474711][T16191] ? __might_sleep+0xd0/0xd0 [ 273.479291][T16191] ? preempt_count_add+0x8d/0x190 [ 273.484298][T16191] ? read_lock_is_recursive+0x10/0x10 [ 273.489660][T16191] ? rwsem_write_trylock+0x12f/0x1b0 [ 273.494929][T16191] ? clear_nonspinnable+0x60/0x60 [ 273.499940][T16191] ? __rwlock_init+0x140/0x140 [ 273.504695][T16191] down_write+0x36/0x60 [ 273.508837][T16191] ? ocfs2_lock_global_qf+0x1e5/0x270 [ 273.514207][T16191] ocfs2_lock_global_qf+0x1e5/0x270 [ 273.519404][T16191] ? lock_buffer+0x80/0x80 [ 273.523811][T16191] ? trace_contention_end+0x5f/0x170 [ 273.529090][T16191] ocfs2_acquire_dquot+0x2a0/0xb10 [ 273.534194][T16191] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 273.539818][T16191] ? from_kgid+0x159/0x680 [ 273.544225][T16191] ? ocfs2_destroy_dquot+0x40/0x40 [ 273.549413][T16191] dqget+0x778/0xeb0 [ 273.553305][T16191] dquot_set_dqblk+0x27/0xf90 [ 273.557972][T16191] quota_setquota+0x4ac/0x530 [ 273.562638][T16191] ? quota_getnextquota+0x450/0x450 [ 273.567832][T16191] ? bpf_lsm_capable+0x5/0x10 [ 273.572503][T16191] ? do_quotactl+0x4f3/0x710 [ 273.577103][T16191] __se_sys_quotactl+0x295/0x6b0 [ 273.582030][T16191] ? __x64_sys_quotactl+0xa0/0xa0 [ 273.587041][T16191] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 273.593012][T16191] ? lock_chain_count+0x20/0x20 [ 273.597850][T16191] ? lockdep_hardirqs_on+0x94/0x140 [ 273.603035][T16191] do_syscall_64+0x4c/0xa0 [ 273.607439][T16191] ? clear_bhb_loop+0x60/0xb0 [ 273.612097][T16191] ? clear_bhb_loop+0x60/0xb0 [ 273.616758][T16191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.622642][T16191] RIP: 0033:0x7fd3cc18e929 [ 273.627054][T16191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.646661][T16191] RSP: 002b:00007fd3ccf85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 273.655065][T16191] RAX: ffffffffffffffda RBX: 00007fd3cc3b5fa0 RCX: 00007fd3cc18e929 [ 273.663025][T16191] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000801 [ 273.670988][T16191] RBP: 00007fd3cc210b39 R08: 0000000000000000 R09: 0000000000000000 [ 273.678949][T16191] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 273.686907][T16191] R13: 0000000000000000 R14: 00007fd3cc3b5fa0 R15: 00007ffc8dadb458 [ 273.694958][T16191] [ 273.955912][ T4416] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 13 [ 274.007992][ T4257] ocfs2: Unmounting device (7,2) on (node local) [ 274.256673][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.353866][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.486735][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.545741][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.228716][ T46] bond0: (slave wlan1): Releasing backup interface [ 275.376690][ T46] device hsr_slave_0 left promiscuous mode [ 275.386008][ T46] device hsr_slave_1 left promiscuous mode [ 275.392275][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.401168][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.409683][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.418374][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.426412][ T46] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 275.434805][ T46] batman_adv: batadv0: Removing interface: virt_wifi0 [ 275.442034][ T46] device bridge_slave_1 left promiscuous mode [ 275.448828][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.458055][ T46] device bridge_slave_0 left promiscuous mode [ 275.465015][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.476082][ T46] device veth1_macvtap left promiscuous mode [ 275.482103][ T46] device veth0_macvtap left promiscuous mode [ 275.488686][ T46] device veth1_vlan left promiscuous mode [ 275.708907][ T46] team0 (unregistering): Port device team_slave_1 removed [ 275.731128][ T46] team0 (unregistering): Port device team_slave_0 removed [ 275.754050][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.799864][ T46] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 275.808858][ T46] bond0 (unregistering): Released all slaves [ 276.304799][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.367191][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.416253][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.463744][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.538532][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.577846][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.637447][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.697183][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.786388][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.827309][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.888392][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.956369][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.104559][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.137752][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.197725][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.227468][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.149326][ T46] team0: Port device wlan1 removed [ 278.303756][ T46] team0: Port device wlan1 removed [ 278.579130][ T46] team0: Port device wlan1 removed [ 278.930342][ T46] device hsr_slave_0 left promiscuous mode [ 278.937062][ T46] device hsr_slave_1 left promiscuous mode [ 278.944046][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.951434][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.959897][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.967417][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.975080][ T46] device bridge_slave_1 left promiscuous mode [ 278.981237][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.989044][ T46] device bridge_slave_0 left promiscuous mode [ 278.995246][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.004620][ T46] device hsr_slave_0 left promiscuous mode [ 279.010666][ T46] device hsr_slave_1 left promiscuous mode [ 279.016920][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.024428][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.031858][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.039380][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.048504][ T46] device hsr_slave_0 left promiscuous mode [ 279.054836][ T46] device hsr_slave_1 left promiscuous mode [ 279.060950][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.068423][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.076316][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.083770][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.091176][ T46] device dummy0 left promiscuous mode [ 279.096719][ T46] bridge0: port 3(dummy0) entered disabled state [ 279.103811][ T46] device bridge_slave_1 left promiscuous mode [ 279.109914][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.117714][ T46] device bridge_slave_0 left promiscuous mode [ 279.123954][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.135175][ T46] device hsr_slave_0 left promiscuous mode [ 279.141247][ T46] device hsr_slave_1 left promiscuous mode [ 279.147494][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.154936][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.162659][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.170095][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.178090][ T46] device bridge_slave_1 left promiscuous mode [ 279.184364][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.192048][ T46] device bridge_slave_0 left promiscuous mode [ 279.198383][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.208946][ T46] device veth1_macvtap left promiscuous mode [ 279.215012][ T46] device veth0_macvtap left promiscuous mode [ 279.221595][ T46] device veth0_macvtap left promiscuous mode [ 279.227700][ T46] device veth0_vlan left promiscuous mode [ 279.233885][ T46] device veth1_macvtap left promiscuous mode [ 279.239857][ T46] device veth0_macvtap left promiscuous mode [ 279.246095][ T46] device veth1_vlan left promiscuous mode [ 279.252325][ T46] device veth1_macvtap left promiscuous mode [ 279.258603][ T46] device veth0_macvtap left promiscuous mode [ 279.264748][ T46] device veth1_vlan left promiscuous mode [ 279.400422][ T46] infiniband syz1: set down [ 279.575500][ T46] team0 (unregistering): Port device team_slave_1 removed [ 279.598502][ T46] team0 (unregistering): Port device team_slave_0 removed [ 279.621174][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.645152][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.674399][ T46] team0 (unregistering): Port device bridge0 removed [ 279.694243][ T46] bond0 (unregistering): Released all slaves [ 279.857704][ T46] team0 (unregistering): Port device team_slave_1 removed [ 279.880626][ T46] team0 (unregistering): Port device team_slave_0 removed [ 279.903597][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.975538][ T46] bond0 (unregistering): Released all slaves [ 280.104562][ T46] team0 (unregistering): Port device team_slave_1 removed [ 280.127841][ T46] team0 (unregistering): Port device team_slave_0 removed [ 280.138378][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.149992][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.270549][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 280.290501][ T46] bond0 (unregistering): Released all slaves [ 280.595838][ T46] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 280.700627][ T46] team0 (unregistering): Port device team_slave_1 removed [ 280.722080][ T46] team0 (unregistering): Port device team_slave_0 removed [ 280.743925][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.768715][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.888704][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 280.907309][ T37] smc: removing ib device syz1 [ 280.907320][ T46] bond0 (unregistering): Released all slaves [ 280.963021][ T4603] bond0 speed is unknown, defaulting to 1000 [ 280.969057][ T7981] infiniband syz1: ib_query_port failed (-19)