last executing test programs: 4m40.883145904s ago: executing program 1 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m40.278753974s ago: executing program 1 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x14, 0x4, 0x8, 0x101}, 0x14}}, 0x0) 4m39.98681202s ago: executing program 1 (id=1124): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x221488e, &(0x7f0000000240)={[{@map_off}, {@check_relaxed, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@block={'block', 0x3d, 0x600}}, {@mode={'mode', 0x3d, 0x6}}, {@gid, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@sbsector={'sbsector', 0x3d, 0xd280}}, {@map_acorn}, {@overriderock}, {@gid}]}, 0xfd, 0x6b1, &(0x7f0000000840)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 4m39.427542729s ago: executing program 1 (id=1128): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 4m38.937550977s ago: executing program 1 (id=1134): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 4m38.302903118s ago: executing program 1 (id=1141): syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2c001) 4m37.970128433s ago: executing program 32 (id=1141): syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2c001) 4m37.077905458s ago: executing program 2 (id=1153): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) 4m35.647803043s ago: executing program 2 (id=1167): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f00000000c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d312c696f636861727365743d69736f383835392d31332c636865636b3d7374726963742c726f6469722c757466383d302c73686f72746e616d653d6c6f7765722c636f6465706167653d3836302c73686f72746e616d653d6c6f7765722c757466383d312c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d3030303030303030303030303030303030303030756e695f786c6174653d302c696f636861727365743d63703835352c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d7461696c3d312c757466383d312c73686f72746e616d653d6d697865642c757466383d312c757466383d302c73686f72746e616d653d6d697865642c646566636f6e746578743d756e636f6e66696e65645f752c001b81b7ba8315ccbf96b8365ab64fd4399a9b80af7997534bd3d3c8994114e31fb70c4ca48026edb33178e915b5adf987f8ab09f0f28c4bb25c7220491145e9b5b5d10a2bea0fe4ff33a05c9ef324aa8e34ac4b085ea0dadf2c8fd0f90b7b3c691e00000000"], 0x6, 0x2d4, &(0x7f0000000a40)="$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") syz_usb_connect(0x2, 0x2ca, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 4m29.594617965s ago: executing program 2 (id=1186): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@local, 0x2000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {0x7, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x49}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x180}}, @tfcpad={0x8, 0x16, 0x80}]}, 0x144}}, 0x0) 4m27.969471262s ago: executing program 2 (id=1177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 4m27.410085522s ago: executing program 2 (id=1189): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getegid() 4m26.682666324s ago: executing program 2 (id=1198): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x8000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0xfffffffc, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x1, 0x3}}) 4m26.172921302s ago: executing program 33 (id=1198): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x8000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0xfffffffc, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x1, 0x3}}) 2m29.425191025s ago: executing program 5 (id=2696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000009100003806269746d61703a706f72740005000400000000000900020073797a30000a0000050005000000000005000100060000001c000780080006409effff7d06000440fe200000060005"], 0x64}}, 0x0) 2m29.202466259s ago: executing program 5 (id=2700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x80) 2m29.030233542s ago: executing program 5 (id=2701): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0xc, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0xffffffff, 0x0, 0x34324258, 0x0, 0x0, [{}, {0x1, 0x66}, {}, {0xfffffffe}]}}) 2m28.775960446s ago: executing program 5 (id=2705): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) 2m28.490424911s ago: executing program 5 (id=2709): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m27.428154489s ago: executing program 5 (id=2721): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001400)={0x9, @vbi={0x0, 0x0, 0x34565348, 0x0, [0x2], [0x0, 0x7]}}) 2m12.343662074s ago: executing program 34 (id=2721): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001400)={0x9, @vbi={0x0, 0x0, 0x34565348, 0x0, [0x2], [0x0, 0x7]}}) 1m2.818560449s ago: executing program 6 (id=3836): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x1, 0x7fffffff}) 1m2.432902855s ago: executing program 6 (id=3841): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) 1m2.186863759s ago: executing program 6 (id=3844): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@migrate={0x138, 0x21, 0x1, 0x70bd2a, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x4e24, 0x1, 0x7, 0x0, 0xa, 0x80, 0x80, 0x3b}, 0x6e6baf, 0x1}, [@migrate={0xe8, 0x11, [{@in=@rand_addr=0x64010100, @in=@broadcast, @in=@multicast1, @in6=@remote, 0xff, 0x4, 0x0, 0x3505, 0xa, 0x8}, {@in=@local, @in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x6c, 0x0, 0x0, 0x0, 0x2, 0xf}, {@in=@rand_addr=0x64010100, @in=@private=0xa010102, @in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2b, 0x4, 0x0, 0x3504, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 1m1.928751763s ago: executing program 6 (id=3846): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@nouid32}, {@grpid}, {@bsdgroups}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000f80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 1m1.217020546s ago: executing program 6 (id=3851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) 1m0.482807288s ago: executing program 6 (id=3859): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@remote}, 0x14) 59.908811328s ago: executing program 35 (id=3859): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@remote}, 0x14) 3.214844795s ago: executing program 8 (id=4505): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000001c0)={'ipvlan1\x00', @random="2fde6ab0fc20"}) 2.9893265s ago: executing program 8 (id=4509): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f00000088c0)="$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") mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x100002b, &(0x7f0000000340)='heartbeat=none') 2.099555564s ago: executing program 7 (id=4522): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x808, &(0x7f00000003c0)=ANY=[], 0x1, 0x1c0, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x0, 0x0) 1.842519849s ago: executing program 3 (id=4524): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.548791224s ago: executing program 0 (id=4527): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000000c0)={0x10, 0xd96, {0x56, 0xfff, 0x9, {0x1, 0x3}, {0x5, 0x1}, @period={0x59, 0x6887, 0x1, 0x3, 0x60, {0x0, 0x5, 0x52, 0x401}, 0x0, 0x0}}, {0x53, 0xc5, 0x200, {0x5, 0xe8f}, {0x3}, @rumble={0x8, 0x1}}}) 1.362804337s ago: executing program 4 (id=4528): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x3eb}, [], {0x14, 0x3ea}}, 0x28}, 0x1, 0x0, 0x0, 0x6000}, 0x800) 1.298521418s ago: executing program 0 (id=4529): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x10d, 0xb, &(0x7f0000000080)=0x4, 0x4) 1.030950933s ago: executing program 0 (id=4530): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f026, 0x200000b}) 1.030693253s ago: executing program 4 (id=4531): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6800000007140100"], 0x68}}, 0x0) 1.005925053s ago: executing program 7 (id=4532): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x28, 0xb, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 987.863263ms ago: executing program 3 (id=4533): r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x3) 933.908514ms ago: executing program 8 (id=4534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x12}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0) 884.283205ms ago: executing program 0 (id=4535): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000480001ffffffe000000000000a00806e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) 806.755487ms ago: executing program 4 (id=4536): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x39, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) 718.849298ms ago: executing program 3 (id=4537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) 704.114978ms ago: executing program 7 (id=4538): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x10, 0x6}}) 681.423959ms ago: executing program 8 (id=4539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6c000000000201040000000000000000020000050400028014000180080001000000000008000200ac1e00010c0002800500010000000000300003"], 0x6c}}, 0x0) 548.900911ms ago: executing program 4 (id=4540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 547.852091ms ago: executing program 0 (id=4541): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) 509.531691ms ago: executing program 3 (id=4542): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, &(0x7f0000000780)="82734b7244c539ac", 0x8, 0x8005, 0x0, 0x0) 449.894492ms ago: executing program 7 (id=4543): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) 338.925434ms ago: executing program 0 (id=4544): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 338.640294ms ago: executing program 8 (id=4545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) 324.680105ms ago: executing program 4 (id=4546): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000030000000300000f04000000060000719e0600000d00000079cf00000400000001040000040000000000000c0000000000000061"], &(0x7f0000000f80)=""/4115, 0x4d, 0x1013, 0x1}, 0x28) 244.685826ms ago: executing program 3 (id=4547): r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r0, 0x6a, 0x3, 0x0, 0x0) 190.983837ms ago: executing program 7 (id=4548): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x100c]}) 107.551209ms ago: executing program 4 (id=4549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c000280080014000000000008000700", @ANYRES32=0x0, @ANYBLOB="08001e00", @ANYRES32=0x0, @ANYBLOB="050006"], 0x6c}, 0x1, 0xba01}, 0x0) 68.715759ms ago: executing program 8 (id=4550): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1200008, &(0x7f0000002140)={[{@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlateno}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_mixed}, {@shortname_win95}, {@shortname_winnt}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24) 68.285859ms ago: executing program 3 (id=4551): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x0, 0xa0) 0s ago: executing program 7 (id=4552): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x15, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 SD] (nlink == 1) not found (pos 2) [ 304.295770][T11104] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 304.931533][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2868'. [ 305.364475][T11149] affs: No valid root block on device nullb0 [ 305.742650][T11160] loop6: detected capacity change from 0 to 128 [ 305.945525][T11164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2883'. [ 305.975163][T11166] loop4: detected capacity change from 0 to 1024 [ 306.035582][T11166] hfsplus: failed to load root directory [ 306.370956][T11177] loop3: detected capacity change from 0 to 128 [ 306.723994][T11187] loop3: detected capacity change from 0 to 512 [ 306.794785][T11187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 306.814394][T11187] ext4 filesystem being mounted at /607/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.883871][T11192] loop4: detected capacity change from 0 to 64 [ 307.067824][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 307.364503][T11205] loop6: detected capacity change from 0 to 64 [ 307.666286][T11213] netlink: 'syz.6.2904': attribute type 5 has an invalid length. [ 308.035998][T11225] loop6: detected capacity change from 0 to 256 [ 308.388769][T11238] device batadv1 entered promiscuous mode [ 308.700957][T11248] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2921'. [ 309.970427][T11300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2947'. [ 310.077083][T11304] loop6: detected capacity change from 0 to 256 [ 310.097757][T11304] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.158009][T11304] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 310.205250][T11304] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 310.229815][T11309] sctp: [Deprecated]: syz.0.2951 (pid 11309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.229815][T11309] Use struct sctp_sack_info instead [ 310.736162][T11321] netlink: 'syz.3.2958': attribute type 1 has an invalid length. [ 310.918372][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.930279][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.940841][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.949461][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.957730][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 310.965461][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.059087][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 311.059103][ T26] audit: type=1326 audit(1753343573.342:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11331 comm="syz.6.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 311.108402][T11334] xt_SECMARK: invalid mode: 2 [ 311.167356][ T26] audit: type=1326 audit(1753343573.372:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11331 comm="syz.6.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 311.208026][ T26] audit: type=1326 audit(1753343573.372:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11331 comm="syz.6.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 311.295925][ T26] audit: type=1326 audit(1753343573.372:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11331 comm="syz.6.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 311.422785][ T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 311.456497][T11347] xt_l2tp: missing protocol rule (udp|l2tpip) [ 311.590936][T11327] chnl_net:caif_netlink_parms(): no params data found [ 311.610307][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 311.619487][ T14] usb 1-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02 [ 311.678650][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.718366][ T14] usb 1-1: config 0 descriptor?? [ 311.866206][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.875758][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.885883][T11327] device bridge_slave_0 entered promiscuous mode [ 311.895857][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.903361][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.912415][T11327] device bridge_slave_1 entered promiscuous mode [ 311.932309][ T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 311.986546][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.077901][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.129358][T11327] team0: Port device team_slave_0 added [ 312.139927][T11327] team0: Port device team_slave_1 added [ 312.147009][ T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 312.175990][ T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 312.195015][ T14] asix: probe of 1-1:0.0 failed with error -71 [ 312.211832][ T14] usb 1-1: USB disconnect, device number 11 [ 312.275003][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.283341][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.309762][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.348596][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.367667][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.414900][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.482230][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2980'. [ 312.579860][T11327] device hsr_slave_0 entered promiscuous mode [ 312.606408][T11327] device hsr_slave_1 entered promiscuous mode [ 312.683224][T11327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.704698][T11327] Cannot create hsr debugfs directory [ 312.977818][ T4258] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 313.017437][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 313.187342][ T4258] usb 5-1: Using ep0 maxpacket: 8 [ 313.194399][ T4258] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 313.219957][T11327] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 313.227063][ T4258] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 313.259560][ T4258] usb 5-1: config 0 interface 0 has no altsetting 0 [ 313.286901][T11327] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.289682][ T4258] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 313.322294][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.328936][T11327] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 313.361389][ T4258] usb 5-1: Product: syz [ 313.371526][ T4258] usb 5-1: Manufacturer: syz [ 313.375700][T11406] loop6: detected capacity change from 0 to 128 [ 313.376429][ T4258] usb 5-1: SerialNumber: syz [ 313.392294][T11327] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 313.430978][ T4258] usb 5-1: config 0 descriptor?? [ 313.440133][T11409] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 313.462815][ T4258] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 313.482759][T11406] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 313.554381][T11406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.672021][ T4258] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 313.700365][ T4258] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 313.740335][ T4258] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 313.829456][T11327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.885378][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.896214][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.948947][T11327] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.976343][ T4258] usb 5-1: USB disconnect, device number 12 [ 313.985516][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.008802][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.047227][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.054442][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.098220][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.128416][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.146356][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.183834][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.191074][ T6827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.226350][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.265066][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.276178][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.295621][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.330260][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.345035][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.356739][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.379996][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.395866][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.415987][T11327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.439209][T11434] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 314.448782][T11327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.498564][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.508426][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.935755][T11453] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 315.018305][T11453] netlink: 'syz.4.3013': attribute type 2 has an invalid length. [ 315.098383][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 315.277934][T11462] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 315.312562][T11462] Error parsing options; rc = [-22] [ 315.360848][T11327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.370751][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.380777][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.582298][T11502] loop4: detected capacity change from 0 to 512 [ 316.613955][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.635453][T11502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 316.648245][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.668127][T11505] loop3: detected capacity change from 0 to 164 [ 316.696645][T11327] device veth0_vlan entered promiscuous mode [ 316.704424][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.752185][T11505] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 316.778610][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.789810][T11502] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 316.802670][T11502] ext4 filesystem being remounted at /650/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.856234][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.879144][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.933991][T11327] device veth1_vlan entered promiscuous mode [ 316.993383][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 317.045443][T11327] device veth0_macvtap entered promiscuous mode [ 317.073065][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 317.118170][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 317.152993][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.180345][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.181347][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 317.186723][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.204221][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.273800][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 317.308752][T11327] device veth1_macvtap entered promiscuous mode [ 317.416798][T11327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.477294][T11327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.480828][ T26] audit: type=1400 audit(1753343579.762:4045): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=11528 comm="syz.4.3046" [ 317.487153][T11327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.487171][T11327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.498214][T11327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.617168][T11327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.660627][T11327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.686746][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.718169][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.753193][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.805384][T11327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.832583][T11327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.863385][T11327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.895033][T11327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.920190][T11327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.951278][T11327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.994726][T11327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.015211][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.034700][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.069738][T11327] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.079301][ T4351] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 318.104704][T11327] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.115082][T11327] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.137731][T11327] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.278282][ T4351] usb 7-1: Using ep0 maxpacket: 32 [ 318.289948][ T4351] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.334123][ T4351] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 318.363461][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.370529][ T4351] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 318.398578][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.431480][ T4351] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.463791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 318.480289][ T4351] usb 7-1: Product: syz [ 318.484963][ T4351] usb 7-1: Manufacturer: syz [ 318.506150][ T4351] usb 7-1: SerialNumber: syz [ 318.507626][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.527165][ T4351] usb 7-1: config 0 descriptor?? [ 318.547427][T11553] netlink: 'syz.4.3058': attribute type 1 has an invalid length. [ 318.556176][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.596562][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 318.765804][ T4351] snd-usb-6fire 7-1:0.0: unable to receive device firmware state. [ 318.785544][ T4351] snd-usb-6fire: probe of 7-1:0.0 failed with error -71 [ 318.821312][ T4351] usb 7-1: USB disconnect, device number 5 [ 318.910085][T11561] netlink: 288 bytes leftover after parsing attributes in process `syz.7.2952'. [ 319.257469][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 319.454788][T11575] loop3: detected capacity change from 0 to 64 [ 319.469011][ T4330] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 319.599040][T11577] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3069'. [ 319.634329][T11573] loop6: detected capacity change from 0 to 8192 [ 319.677742][ T4330] usb 5-1: Using ep0 maxpacket: 32 [ 319.686538][T11573] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 319.698503][ T4330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.711840][T11573] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 319.737626][T11573] REISERFS (device loop6): using ordered data mode [ 319.787317][T11573] reiserfs: using flush barriers [ 319.794444][ T4330] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 319.855235][T11573] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 319.873191][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.896944][T11586] netlink: 'syz.3.3072': attribute type 1 has an invalid length. [ 319.908349][T11573] REISERFS (device loop6): checking transaction log (loop6) [ 319.925556][ T4330] usb 5-1: config 0 descriptor?? [ 319.940460][T11573] REISERFS (device loop6): Using r5 hash to sort names [ 319.953748][ T4330] usb 5-1: bad CDC descriptors [ 319.959386][T11586] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3072'. [ 319.970879][T11573] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 320.179169][ T4330] usb 5-1: USB disconnect, device number 13 [ 320.752870][T11613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'. [ 320.878202][ T26] audit: type=1326 audit(1753343583.162:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.6.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 320.919625][T11619] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3089'. [ 321.007599][ T26] audit: type=1326 audit(1753343583.162:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.6.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 321.107407][ T26] audit: type=1326 audit(1753343583.182:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.6.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 321.152094][T11625] loop7: detected capacity change from 0 to 256 [ 321.182915][T11625] exfat: Deprecated parameter 'namecase' [ 321.214183][ T26] audit: type=1326 audit(1753343583.182:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.6.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 321.265440][T11625] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 321.333330][ T26] audit: type=1326 audit(1753343583.182:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.6.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 321.723383][T11644] netlink: 'syz.7.3102': attribute type 25 has an invalid length. [ 321.735228][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3102'. [ 321.959442][T11653] netlink: 'syz.7.3106': attribute type 2 has an invalid length. [ 322.254141][T11630] loop6: detected capacity change from 0 to 32768 [ 322.345402][T11663] program syz.0.3110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.423068][T11630] XFS (loop6): Mounting V5 Filesystem [ 322.550953][T11630] XFS (loop6): Ending clean mount [ 322.770397][ T7090] XFS (loop6): Unmounting Filesystem [ 322.961245][T11680] loop4: detected capacity change from 0 to 8192 [ 323.028841][T11680] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 323.094930][T11680] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 323.130995][T11680] REISERFS (device loop4): using ordered data mode [ 323.167369][T11680] reiserfs: using flush barriers [ 323.242538][T11680] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 323.356324][T11680] REISERFS (device loop4): checking transaction log (loop4) [ 323.402229][T11693] device batadv1 entered promiscuous mode [ 323.420608][T11680] REISERFS (device loop4): Using r5 hash to sort names [ 323.461147][T11680] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 323.515874][T11680] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 323.811218][T11699] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3118'. [ 323.845829][T11699] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3118'. [ 323.996233][T11684] loop3: detected capacity change from 0 to 32768 [ 324.159296][T11684] syz.3.3116: attempt to access beyond end of device [ 324.159296][T11684] loop3: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 324.230431][T11684] metapage_write_end_io: I/O error [ 324.270418][T11684] ERROR: (device loop3): diWrite: ixpxd invalid [ 324.270418][T11684] [ 324.312812][T11684] ERROR: (device loop3): remounting filesystem as read-only [ 324.343837][T11684] ERROR: (device loop3): txCommit: [ 324.343837][T11684] [ 324.426298][T11684] blkno = 8f7c0, nblocks = 1 [ 324.445423][T11684] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 324.445423][T11684] [ 324.517769][T11684] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 324.517769][T11684] [ 324.581084][T11684] ialloc: diAlloc returned -5! [ 324.592256][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3135'. [ 324.767877][ T4269] syz-executor: attempt to access beyond end of device [ 324.767877][ T4269] loop3: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 324.827314][ T4269] metapage_write_end_io: I/O error [ 324.848613][T11726] device wg0 entered promiscuous mode [ 326.028596][T11761] netlink: 'syz.7.3153': attribute type 15 has an invalid length. [ 326.591388][T11778] loop4: detected capacity change from 0 to 736 [ 326.704345][T11778] rock: directory entry would overflow storage [ 326.737643][T11778] rock: sig=0x3b10, size=4, remaining=3 [ 326.773130][T11752] loop6: detected capacity change from 0 to 32768 [ 326.915222][T11752] syz.6.3150: attempt to access beyond end of device [ 326.915222][T11752] loop6: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 327.018147][T11752] metapage_write_end_io: I/O error [ 327.023435][T11752] ERROR: (device loop6): diWrite: ixpxd invalid [ 327.023435][T11752] [ 327.097704][T11752] ERROR: (device loop6): remounting filesystem as read-only [ 327.117934][T11752] ERROR: (device loop6): txCommit: [ 327.117934][T11752] [ 327.146478][T11752] blkno = 8f7c0, nblocks = 1 [ 327.152237][T11752] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 327.152237][T11752] [ 327.222408][T11752] ERROR: (device loop6): dbAllocNext: Corrupt dmap page [ 327.222408][T11752] [ 327.267851][T11752] ialloc: diAlloc returned -5! [ 327.397522][ T7090] syz-executor: attempt to access beyond end of device [ 327.397522][ T7090] loop6: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 327.422474][ T7090] metapage_write_end_io: I/O error [ 328.507451][ T127] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 328.717369][ T127] usb 7-1: Using ep0 maxpacket: 8 [ 328.725343][ T127] usb 7-1: config 0 has an invalid interface number: 37 but max is 2 [ 328.755033][ T127] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 328.787911][ T127] usb 7-1: config 0 has no interface number 1 [ 328.821907][ T127] usb 7-1: New USB device found, idVendor=087d, idProduct=5704, bcdDevice=be.0e [ 328.842068][ T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.860056][ T127] usb 7-1: Product: syz [ 328.868762][T11847] autofs4:pid:11847:autofs_fill_super: called with bogus options [ 328.877315][ T127] usb 7-1: Manufacturer: syz [ 328.877342][ T127] usb 7-1: SerialNumber: syz [ 328.890479][ T127] usb 7-1: config 0 descriptor?? [ 329.063269][T11831] loop4: detected capacity change from 0 to 32768 [ 329.133782][ T127] kaweth 7-1:0.37: Firmware present in device. [ 329.178892][T11831] syz.4.3184: attempt to access beyond end of device [ 329.178892][T11831] loop4: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 329.235522][T11831] metapage_write_end_io: I/O error [ 329.273434][T11831] ERROR: (device loop4): diWrite: ixpxd invalid [ 329.273434][T11831] [ 329.317502][ T127] kaweth 7-1:0.37: Error reading configuration (-71), no net device created [ 329.341497][T11831] ERROR: (device loop4): remounting filesystem as read-only [ 329.346841][ T127] kaweth: probe of 7-1:0.37 failed with error -5 [ 329.389526][ T127] kaweth 7-1:0.0: Firmware present in device. [ 329.395320][T11831] ERROR: (device loop4): txCommit: [ 329.395320][T11831] [ 329.398990][ T127] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 329.412117][ T127] kaweth: probe of 7-1:0.0 failed with error -5 [ 329.431759][ T127] usb 7-1: USB disconnect, device number 6 [ 329.462344][T11831] blkno = 8f7c0, nblocks = 1 [ 329.467016][T11831] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 329.467016][T11831] [ 329.500339][T11831] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 329.500339][T11831] [ 329.517476][ T4258] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 329.518651][T11831] ialloc: diAlloc returned -5! [ 329.692240][ T4272] syz-executor: attempt to access beyond end of device [ 329.692240][ T4272] loop4: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 329.716082][ T4272] metapage_write_end_io: I/O error [ 329.737331][ T4258] usb 4-1: Using ep0 maxpacket: 32 [ 329.744592][ T4258] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.782541][ T4258] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 329.810701][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.857981][ T4258] usb 4-1: config 0 descriptor?? [ 329.890663][ T4258] usb 4-1: bad CDC descriptors [ 330.046828][T11851] loop7: detected capacity change from 0 to 32768 [ 330.085685][T11851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.3195 (11851) [ 330.128290][T11851] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 330.134059][ T4351] usb 4-1: USB disconnect, device number 13 [ 330.167329][T11860] nft_compat: unsupported protocol 0 [ 330.184182][T11851] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 330.247441][T11851] BTRFS info (device loop7): force clearing of disk cache [ 330.254691][T11851] BTRFS info (device loop7): metadata ratio 0 [ 330.325574][T11851] BTRFS info (device loop7): enabling ssd optimizations [ 330.373487][T11851] BTRFS info (device loop7): using spread ssd allocation scheme [ 330.450422][T11851] BTRFS info (device loop7): using free space tree [ 330.555090][T11877] usb usb1: usbfs: process 11877 (syz.0.3205) did not claim interface 0 before use [ 330.738735][T11851] BTRFS info (device loop7): rebuilding free space tree [ 330.894426][T11896] QAT: Stopping all acceleration devices. [ 331.065633][T11327] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.125672][T11902] loop3: detected capacity change from 0 to 8 [ 331.144565][T11901] loop4: detected capacity change from 0 to 8 [ 331.200935][T11901] SQUASHFS error: lzo decompression failed, data probably corrupt [ 331.257286][T11901] SQUASHFS error: Failed to read block 0x91: -5 [ 331.279917][T11901] SQUASHFS error: Unable to read metadata cache entry [8f] [ 331.305125][T11901] SQUASHFS error: Unable to read inode 0x11f [ 331.681057][T11908] netlink: 'syz.7.3213': attribute type 3 has an invalid length. [ 331.711167][T11873] loop6: detected capacity change from 0 to 32768 [ 331.733903][T11908] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3213'. [ 331.751448][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3212'. [ 331.801839][T11912] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 331.846142][T11873] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 331.887296][ T6769] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 331.930147][T11873] (syz.6.3204,11873,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 332.045589][T11873] (syz.6.3204,11873,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 332.077338][ T6769] usb 5-1: Using ep0 maxpacket: 16 [ 332.082839][T11873] (syz.6.3204,11873,0):ocfs2_mknod:298 ERROR: status = -2 [ 332.095163][ T6769] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 332.107637][T11873] (syz.6.3204,11873,1):ocfs2_mknod:502 ERROR: status = -2 [ 332.129858][ T6769] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 332.165157][ T6769] usb 5-1: config 0 has no interface number 0 [ 332.170858][T11873] (syz.6.3204,11873,1):ocfs2_create:676 ERROR: status = -2 [ 332.201340][ T6769] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 332.250495][ T6769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.274385][T11920] cgroup: Unknown subsys name 'pcr' [ 332.279745][ T6769] usb 5-1: Product: syz [ 332.279767][ T6769] usb 5-1: Manufacturer: syz [ 332.279784][ T6769] usb 5-1: SerialNumber: syz [ 332.284770][ T6769] usb 5-1: config 0 descriptor?? [ 332.311098][ T7090] ocfs2: Unmounting device (7,6) on (node local) [ 332.323162][ T6769] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 332.373231][ T6769] usb 5-1: No valid video chain found. [ 332.540799][ T6769] usb 5-1: USB disconnect, device number 14 [ 333.039220][T11940] loop3: detected capacity change from 0 to 8 [ 333.402362][T11953] dlm: plock device version mismatch: kernel (1.2.0), user (1.16121856.0) [ 333.505793][T11952] loop3: detected capacity change from 0 to 4096 [ 333.600404][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 333.638320][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 333.638364][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 333.638405][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 333.638441][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 333.638475][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 333.638512][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 333.638549][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 333.638586][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 333.638620][T11952] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 334.349099][T11979] loop3: detected capacity change from 0 to 8 [ 334.432484][T11979] SQUASHFS error: lzo decompression failed, data probably corrupt [ 334.507409][T11979] SQUASHFS error: Failed to read block 0x91: -5 [ 334.513933][T11979] SQUASHFS error: Unable to read metadata cache entry [8f] [ 334.563320][T11979] SQUASHFS error: Unable to read inode 0x11f [ 334.860216][T11995] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3255'. [ 334.967056][T11993] loop3: detected capacity change from 0 to 4096 [ 335.033094][T11993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 335.123488][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 335.200567][T12003] loop6: detected capacity change from 0 to 64 [ 335.336194][T12003] hfs: request for non-existent node 16777216 in B*Tree [ 335.388811][T11976] loop7: detected capacity change from 0 to 32768 [ 335.416425][T12003] hfs: request for non-existent node 16777216 in B*Tree [ 335.451412][T12003] hfs: request for non-existent node 16777216 in B*Tree [ 335.472370][T11976] Dev loop7 SGI disklabel: csum bad, label corrupted [ 335.518541][T12003] hfs: request for non-existent node 16777216 in B*Tree [ 335.559659][T12003] hfs: request for non-existent node 16777216 in B*Tree [ 335.598896][T12003] hfs: request for non-existent node 16777216 in B*Tree [ 335.727026][T12013] loop4: detected capacity change from 0 to 4096 [ 335.759858][T12013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 335.875516][T12013] EXT4-fs error (device loop4): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.4.3264: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 335.959594][T12013] EXT4-fs (loop4): Remounting filesystem read-only [ 335.966190][T12013] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: comm syz.4.3264: directory missing '..' [ 336.064323][T12013] EXT4-fs (loop4): Remounting filesystem read-only [ 336.158803][ T26] audit: type=1326 audit(1753343598.442:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 336.210074][T12025] loop3: detected capacity change from 0 to 4096 [ 336.254530][ T26] audit: type=1326 audit(1753343598.472:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe01038e9a9 code=0x7ffc0000 [ 336.275356][T12025] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 336.290393][T12027] loop6: detected capacity change from 0 to 2048 [ 336.314163][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 336.395104][ T26] audit: type=1326 audit(1753343598.472:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe01038e9e3 code=0x7ffc0000 [ 336.442790][T12027] Alternate GPT is invalid, using primary GPT. [ 336.480074][T12027] loop6: p2 p3 p7 [ 336.502099][ T26] audit: type=1326 audit(1753343598.512:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe01038d45f code=0x7ffc0000 [ 336.677293][ T26] audit: type=1326 audit(1753343598.572:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe01038ea37 code=0x7ffc0000 [ 336.830960][ T26] audit: type=1326 audit(1753343598.572:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe01038d310 code=0x7ffc0000 [ 336.947964][ T26] audit: type=1326 audit(1753343598.572:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe01038e5ab code=0x7ffc0000 [ 336.987484][T12043] netlink: 'syz.6.3276': attribute type 8 has an invalid length. [ 337.057544][ T26] audit: type=1326 audit(1753343598.642:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe01038d60a code=0x7ffc0000 [ 337.072104][ T4424] udevd[4424]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 337.085491][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 337.105732][ T6757] udevd[6757]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 337.193681][ T26] audit: type=1326 audit(1753343598.642:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe01038e5ab code=0x7ffc0000 [ 337.298929][ T26] audit: type=1326 audit(1753343598.652:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe01038e5ab code=0x7ffc0000 [ 337.306541][ T4424] udevd[4424]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 337.343874][ T6254] udevd[6254]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 337.361609][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 337.946003][T12076] printk: syz.3.3291 (12076): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 337.994144][T12077] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3292'. [ 338.137808][ T7811] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 338.347456][ T7811] usb 5-1: Using ep0 maxpacket: 16 [ 338.357833][ T7811] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 338.397802][ T7811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.405863][ T7811] usb 5-1: Product: syz [ 338.437525][ T7811] usb 5-1: Manufacturer: syz [ 338.452487][ T7811] usb 5-1: SerialNumber: syz [ 338.469559][ T7811] usb 5-1: config 0 descriptor?? [ 338.489243][ T7811] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 338.504744][T12091] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.557820][T12091] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.588790][T12091] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.606747][T12091] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 338.717333][ T7811] usb 5-1: USB disconnect, device number 15 [ 338.844150][T12101] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3303'. [ 338.860991][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3303'. [ 338.870065][T11906] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 338.905595][T12079] loop6: detected capacity change from 0 to 32768 [ 339.015870][T12079] XFS (loop6): Mounting V5 Filesystem [ 339.057368][T11906] usb 1-1: Using ep0 maxpacket: 16 [ 339.082246][T11906] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 339.100770][T11906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.110339][T11906] usb 1-1: Product: syz [ 339.114576][T11906] usb 1-1: Manufacturer: syz [ 339.119369][T11906] usb 1-1: SerialNumber: syz [ 339.130033][T11906] usb 1-1: config 0 descriptor?? [ 339.255685][T12079] XFS (loop6): Ending clean mount [ 339.305833][T12079] XFS (loop6): Quotacheck needed: Please wait. [ 339.356886][T11906] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 339.380445][T11906] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 339.452464][T12079] XFS (loop6): Quotacheck: Done. [ 339.474272][T12121] loop7: detected capacity change from 0 to 2048 [ 339.546616][T12121] Alternate GPT is invalid, using primary GPT. [ 339.557605][T12121] loop7: p2 p3 p7 [ 339.568516][T11906] usb 1-1: USB disconnect, device number 12 [ 339.723788][ T7090] XFS (loop6): Unmounting Filesystem [ 339.984007][ T4424] udevd[4424]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 340.001919][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 340.016741][ T6254] udevd[6254]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 340.091059][T12127] loop7: detected capacity change from 0 to 512 [ 340.125346][ T6254] udevd[6254]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 340.182964][T12127] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 340.505435][T11327] EXT4-fs (loop7): unmounting filesystem. [ 340.768426][T12150] loop6: detected capacity change from 0 to 64 [ 340.771909][T12149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3321'. [ 340.986279][T12153] netlink: 'syz.4.3323': attribute type 10 has an invalid length. [ 341.074576][T12153] bridge0: port 1(team0) entered blocking state [ 341.092700][T12153] bridge0: port 1(team0) entered disabled state [ 341.135802][T12153] device team0 entered promiscuous mode [ 341.379855][T12166] loop3: detected capacity change from 0 to 256 [ 341.420102][T12168] openvswitch: netlink: Unknown key attributes 1 [ 341.431316][T12166] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d) [ 341.998063][T12186] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 342.130223][T12190] netlink: 'syz.3.3341': attribute type 10 has an invalid length. [ 342.155126][T12190] bridge0: port 3(team0) entered blocking state [ 342.169171][T12190] bridge0: port 3(team0) entered disabled state [ 342.177768][T12190] device team0 entered promiscuous mode [ 342.183542][T12190] device team_slave_1 entered promiscuous mode [ 342.216009][T12190] bridge0: port 3(team0) entered blocking state [ 342.222542][T12190] bridge0: port 3(team0) entered forwarding state [ 342.407422][ T127] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 342.597417][ T127] usb 8-1: Using ep0 maxpacket: 32 [ 342.608662][ T127] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 342.616810][ T127] usb 8-1: config 0 has no interface number 0 [ 342.651768][ T127] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 342.687361][ T127] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 342.731590][ T127] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 342.747669][ T127] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.803955][ T127] usb 8-1: Product: syz [ 342.839042][ T127] usb 8-1: Manufacturer: syz [ 342.843721][ T127] usb 8-1: SerialNumber: syz [ 342.880271][ T127] usb 8-1: config 0 descriptor?? [ 343.308556][ T127] radio-si470x 8-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 343.328501][ T127] radio-si470x: probe of 8-1:0.35 failed with error -5 [ 343.372899][T12229] loop3: detected capacity change from 0 to 1764 [ 343.387828][ T127] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 343.417632][ T127] usb 8-1: USB disconnect, device number 2 [ 343.950970][T12249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 343.998618][T12251] overlayfs: unrecognized mount option "\n" or missing value [ 344.116911][T12255] tmpfs: Bad value for 'mpol' [ 344.383823][T12265] loop4: detected capacity change from 0 to 1024 [ 344.842238][T12280] netlink: 'syz.6.3384': attribute type 32 has an invalid length. [ 344.962052][T12279] team0: Port device team_slave_0 removed [ 344.977888][T12279] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 345.999221][T12325] loop3: detected capacity change from 0 to 16 [ 346.070843][T12325] erofs: (device loop3): mounted with root inode @ nid 36. [ 346.134659][T12325] syz.3.3406: attempt to access beyond end of device [ 346.134659][T12325] loop3: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 346.217835][T12325] syz.3.3406: attempt to access beyond end of device [ 346.217835][T12325] loop3: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 346.283041][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 346.283056][ T26] audit: type=1800 audit(1753343608.562:4103): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3406" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 346.606342][T12339] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 346.680593][T12343] loop6: detected capacity change from 0 to 1024 [ 346.687508][ T4330] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 346.768186][T12343] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 346.829824][T12347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.882731][ T4330] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 346.902214][ T4330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.922106][ T4330] usb 8-1: Product: syz [ 346.936552][ T4330] usb 8-1: Manufacturer: syz [ 346.937555][ T6768] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 346.958953][ T4330] usb 8-1: SerialNumber: syz [ 346.992453][ T4330] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 347.056205][ T4330] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 347.080988][T12351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3420'. [ 347.147560][ T6768] usb 1-1: Using ep0 maxpacket: 16 [ 347.156046][ T6768] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.200422][ T6768] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 347.247392][ T6768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.265795][ T6768] usb 1-1: Product: syz [ 347.302368][ T6768] usb 1-1: Manufacturer: syz [ 347.307077][ T6768] usb 1-1: SerialNumber: syz [ 347.348120][ T6768] usb 1-1: config 0 descriptor?? [ 347.354720][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3422'. [ 347.378282][ T6768] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 347.384601][ T6768] gspca_stv06xx: st6422 sensor detected [ 347.394613][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3422'. [ 347.484398][ T4258] usb 8-1: USB disconnect, device number 3 [ 347.588541][T12363] loop4: detected capacity change from 0 to 128 [ 347.877078][ T6768] STV06xx: probe of 1-1:0.0 failed with error -71 [ 347.899864][ T6768] usb 1-1: USB disconnect, device number 13 [ 347.910655][T12373] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 348.137629][ T4330] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 348.147439][ T4330] ath9k_htc: Failed to initialize the device [ 348.154031][ T4258] usb 8-1: ath9k_htc: USB layer deinitialized [ 348.654035][T12393] loop6: detected capacity change from 0 to 4096 [ 348.779286][T12393] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 349.029741][ T7090] EXT4-fs (loop6): unmounting filesystem. [ 349.141573][T12379] loop7: detected capacity change from 0 to 32768 [ 349.310363][T12379] XFS (loop7): Mounting V5 Filesystem [ 349.422917][T12379] XFS (loop7): Ending clean mount [ 349.445417][T12379] XFS (loop7): Quotacheck needed: Please wait. [ 349.605148][T12379] XFS (loop7): Quotacheck: Done. [ 349.793410][T11327] XFS (loop7): Unmounting Filesystem [ 350.488973][T12447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.525835][T12447] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 350.544012][T12447] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 350.566382][T12447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.624373][T12447] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 350.655832][T12447] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 350.702859][T12447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.727585][T12447] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 350.750823][T12447] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 350.771027][T12447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 350.787628][T12447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 350.793750][T12447] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 350.831719][T12447] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 350.842944][T12439] loop4: detected capacity change from 0 to 32768 [ 350.849969][T12447] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 350.856112][T12447] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 350.993815][T12439] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 351.057941][T12439] XFS (loop4): Mounting V5 Filesystem [ 351.135377][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3470'. [ 351.157371][ T4258] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 351.216283][T12439] XFS (loop4): Ending clean mount [ 351.291221][T12439] XFS (loop4): Quotacheck needed: Please wait. [ 351.391824][ T4258] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 351.400940][ T4258] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.411585][ T4258] usb 1-1: config 0 has no interface number 0 [ 351.420187][T12486] loop7: detected capacity change from 0 to 16 [ 351.427680][T12439] XFS (loop4): Quotacheck: Done. [ 351.435730][ T4258] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 351.455294][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.487884][ T4258] usb 1-1: Product: syz [ 351.503854][T12486] erofs: (device loop7): mounted with root inode @ nid 36. [ 351.520296][ T4258] usb 1-1: Manufacturer: syz [ 351.549609][ T4258] usb 1-1: SerialNumber: syz [ 351.559295][ T4258] usb 1-1: config 0 descriptor?? [ 351.645571][T12486] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 351.655461][ T4272] XFS (loop4): Unmounting Filesystem [ 351.819201][ T4258] usb 1-1: USB disconnect, device number 14 [ 352.170299][T12501] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3485'. [ 352.196178][T12501] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3485'. [ 352.268866][T12504] netlink: 'syz.6.3486': attribute type 1 has an invalid length. [ 352.387778][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.425394][T12510] loop3: detected capacity change from 0 to 512 [ 352.532938][T12510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 352.557080][T12510] ext4 filesystem being mounted at /758/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.617520][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 352.657397][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 352.777574][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 352.783731][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 352.857457][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 353.102622][T12528] netlink: 'syz.0.3496': attribute type 1 has an invalid length. [ 353.436766][T12506] loop7: detected capacity change from 0 to 40427 [ 353.481500][T12506] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x1f10) [ 353.517745][T12506] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 353.551912][T12506] F2FS-fs (loop7): invalid crc value [ 353.653063][T12506] F2FS-fs (loop7): Found nat_bits in checkpoint [ 353.872663][T12506] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 353.912375][T12506] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 354.199850][T12565] loop4: detected capacity change from 0 to 64 [ 354.406659][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3515'. [ 354.467435][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 354.697479][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 354.734635][T12579] loop4: detected capacity change from 0 to 1024 [ 354.857782][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 354.863864][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 354.937655][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 355.115302][ T6827] hfsplus: b-tree write err: -5, ino 4 [ 355.450664][T12608] loop7: detected capacity change from 0 to 256 [ 355.538246][T12608] FAT-fs (loop7): Directory bread(block 64) failed [ 355.565011][T12608] FAT-fs (loop7): Directory bread(block 65) failed [ 355.597485][T12608] FAT-fs (loop7): Directory bread(block 66) failed [ 355.623884][T12608] FAT-fs (loop7): Directory bread(block 67) failed [ 355.652385][T12608] FAT-fs (loop7): Directory bread(block 68) failed [ 355.681484][T12608] FAT-fs (loop7): Directory bread(block 69) failed [ 355.701865][T12608] FAT-fs (loop7): Directory bread(block 70) failed [ 355.726109][T12608] FAT-fs (loop7): Directory bread(block 71) failed [ 355.753504][T12608] FAT-fs (loop7): Directory bread(block 72) failed [ 355.807568][T12608] FAT-fs (loop7): Directory bread(block 73) failed [ 356.181170][T12628] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3543'. [ 356.322846][T12631] usb usb8: usbfs: process 12631 (syz.7.3544) did not claim interface 8 before use [ 358.336444][T12702] loop3: detected capacity change from 0 to 4096 [ 358.382551][T12706] netlink: 'syz.7.3580': attribute type 2 has an invalid length. [ 358.421206][T12706] netlink: 'syz.7.3580': attribute type 8 has an invalid length. [ 358.440721][T12706] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3580'. [ 359.099795][T12722] sctp: [Deprecated]: syz.3.3588 (pid 12722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.099795][T12722] Use struct sctp_sack_info instead [ 359.263852][T12694] loop4: detected capacity change from 0 to 40427 [ 359.366973][T12694] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 359.379583][T12694] F2FS-fs (loop4): invalid crc value [ 359.390240][T12694] F2FS-fs (loop4): Found nat_bits in checkpoint [ 359.511741][T12694] F2FS-fs (loop4): recover fsync data on readonly fs [ 359.554530][T12694] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 359.591008][T12694] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 359.625627][T12694] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 359.838383][T12694] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 360.061571][T12756] libceph: resolve '0' (ret=-3): failed [ 360.317015][T12763] loop7: detected capacity change from 0 to 256 [ 360.774696][T12772] loop7: detected capacity change from 0 to 4096 [ 360.786822][T12778] loop4: detected capacity change from 0 to 1024 [ 360.868088][T12779] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.947019][T12772] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 361.037374][T12772] Remounting filesystem read-only [ 361.633268][T12804] sctp: [Deprecated]: syz.4.3624 (pid 12804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.633268][T12804] Use struct sctp_sack_info instead [ 362.327752][T12830] netlink: 'syz.0.3637': attribute type 11 has an invalid length. [ 362.335638][T12830] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3637'. [ 362.421792][T12834] x_tables: ip_tables: osf match: only valid for protocol 6 [ 362.679854][T12843] loop4: detected capacity change from 0 to 16 [ 362.753684][T12843] erofs: (device loop4): mounted with root inode @ nid 36. [ 363.899757][T12841] loop7: detected capacity change from 0 to 32768 [ 363.919485][T12839] loop6: detected capacity change from 0 to 32768 [ 363.969007][T12841] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.3642 (12841) [ 364.026165][T12839] overlayfs: missing 'lowerdir' [ 364.094307][T12841] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 364.199488][T12841] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 364.240086][T12841] BTRFS info (device loop7): enabling disk space caching [ 364.273259][T12841] BTRFS info (device loop7): doing ref verification [ 364.317630][T12841] BTRFS info (device loop7): use zlib compression, level 3 [ 364.324929][T12841] BTRFS info (device loop7): force clearing of disk cache [ 364.397825][T12841] BTRFS info (device loop7): doing ref verification [ 364.404899][T12841] BTRFS info (device loop7): disk space caching is enabled [ 364.458094][T12887] comedi comedi1: pcl812: I/O port conflict (0x3,16) [ 364.774591][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3663'. [ 364.787652][ T4330] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 364.808081][T12841] BTRFS info (device loop7): rebuilding free space tree [ 364.919002][T12841] BTRFS info (device loop7): disabling free space tree [ 364.926009][T12841] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 364.962537][T12841] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 364.977473][ T4330] usb 5-1: Using ep0 maxpacket: 32 [ 364.991952][ T4330] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 365.033569][ T4330] usb 5-1: config 0 has no interface number 0 [ 365.062252][ T4330] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=66.ee [ 365.107219][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.146325][ T4330] usb 5-1: Product: syz [ 365.156471][ T4330] usb 5-1: Manufacturer: syz [ 365.190377][ T4330] usb 5-1: SerialNumber: syz [ 365.217312][ T4330] usb 5-1: config 0 descriptor?? [ 365.334760][T11327] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 365.443978][ T4330] speedtch 5-1:0.15: speedtch_bind: wrong device class 42 [ 365.461992][ T4330] speedtch 5-1:0.15: usbatm_usb_probe: bind failed: -19! [ 365.504520][ T4424] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop7 scanned by udevd (4424) [ 365.677104][ T6766] usb 5-1: USB disconnect, device number 16 [ 365.845692][T12939] loop6: detected capacity change from 0 to 1024 [ 365.979277][T12939] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 366.007421][T11906] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 366.107982][T12939] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #11: comm syz.6.3676: directory missing '..' [ 366.199413][T11906] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 366.243342][T11906] usb 4-1: config 0 has no interface number 0 [ 366.277275][T11906] usb 4-1: config 0 interface 29 has no altsetting 0 [ 366.323852][T11906] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 366.357240][T11906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.386147][T11906] usb 4-1: Product: syz [ 366.396133][T11906] usb 4-1: Manufacturer: syz [ 366.406601][T11906] usb 4-1: SerialNumber: syz [ 366.427945][T11906] usb 4-1: config 0 descriptor?? [ 366.435578][ T7090] EXT4-fs (loop6): unmounting filesystem. [ 366.604330][T12957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 366.639871][T11906] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 366.851770][T11906] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 366.877942][T11906] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 366.968108][T11906] peak_usb: probe of 4-1:0.29 failed with error -71 [ 367.010147][T11906] usb 4-1: USB disconnect, device number 14 [ 367.023812][T12949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 367.048293][T12949] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 367.076379][T12949] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 367.096755][T12949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 367.113714][T12949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 367.142828][T12949] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 367.161453][T12949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.171607][T12949] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 367.190716][T12949] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 367.214198][T12949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 367.230895][T12949] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 367.236944][T12949] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 367.257585][T12949] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 367.272449][T12977] loop4: detected capacity change from 0 to 64 [ 367.287457][T12949] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 367.294610][T12949] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 367.587372][ T7808] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 367.779386][ T7808] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 367.817272][ T7808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.866732][ T7808] usb 8-1: config 0 descriptor?? [ 367.912870][ T7808] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 368.265272][T12970] loop6: detected capacity change from 0 to 40427 [ 368.306615][T12970] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 368.319170][ T7808] gspca_stv06xx: I2C: Read error writing address: -71 [ 368.343918][ T7808] usb 8-1: USB disconnect, device number 4 [ 368.389361][T12970] F2FS-fs (loop6): invalid crc value [ 368.437303][T12970] F2FS-fs (loop6): Found nat_bits in checkpoint [ 368.457457][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.554665][T12970] F2FS-fs (loop6): recover fsync data on readonly fs [ 368.593349][T12970] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 368.609095][T12970] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 368.626713][T12970] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 368.730866][T12970] F2FS-fs (loop6): Try to recover all the superblocks, ret: 0 [ 368.745358][T12970] F2FS-fs (loop6): Unrecognized mount option "ÿÿÿÿ01777777777777777777777±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Ç0177777777777777777777718446744073709551615ÿ%S€P ×b«cÆÊÁú‡W(´‘G ¼Dz#äû…ݪd½š¾;«ŒÎš|¾n\~CˆÓ 3ÄñÎ8HŽFù·#ƒ”楞Žn²ëf.&½S`>ïÕË»à½"zuHòjåŒãhV-Mô(»" or missing value [ 368.842814][ T6766] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 369.027479][ T6766] usb 4-1: Using ep0 maxpacket: 16 [ 369.036635][ T6766] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 369.078755][ T6766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.090712][ T6766] usb 4-1: Product: syz [ 369.094928][ T6766] usb 4-1: Manufacturer: syz [ 369.100066][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 369.107519][ T6766] usb 4-1: SerialNumber: syz [ 369.126804][ T6766] usb 4-1: config 0 descriptor?? [ 369.143213][ T6766] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 369.177371][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 369.257571][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 369.337444][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 369.471319][T13036] loop7: detected capacity change from 0 to 512 [ 369.484844][T13036] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 369.493519][T13034] netlink: 'syz.4.3709': attribute type 11 has an invalid length. [ 369.533045][T13036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 369.537584][T13034] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3709'. [ 369.576384][ T6766] gspca_sn9c2028: read1 error -71 [ 369.583664][ T6766] gspca_sn9c2028: read1 error -71 [ 369.602651][ T6766] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 369.620442][ T6766] usb 4-1: USB disconnect, device number 15 [ 369.636820][T13036] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.3712: corrupted in-inode xattr [ 369.668329][T13036] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3712: couldn't read orphan inode 15 (err -117) [ 369.695076][T13036] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 369.720703][T13042] netlink: 'syz.0.3713': attribute type 1 has an invalid length. [ 369.899612][T11327] EXT4-fs (loop7): unmounting filesystem. [ 370.288941][T13056] ALSA: mixer_oss: invalid OSS volume '' [ 370.537554][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 370.731164][T13075] xt_l2tp: invalid flags combination: 8 [ 371.177355][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 371.257423][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 371.337566][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 371.417321][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 371.597909][T13109] loop3: detected capacity change from 0 to 1024 [ 371.868255][T13120] netlink: 'syz.7.3747': attribute type 5 has an invalid length. [ 372.117387][ T6768] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 372.310090][ T6768] usb 1-1: unable to get BOS descriptor or descriptor too short [ 372.334464][ T6768] usb 1-1: not running at top speed; connect to a high speed hub [ 372.364469][ T6768] usb 1-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 372.392313][ T6768] usb 1-1: config 219 interface 0 has no altsetting 0 [ 372.427381][ T6768] usb 1-1: config 219 interface 0 has no altsetting 1 [ 372.458855][ T6768] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 372.485511][ T6768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.512016][ T6768] usb 1-1: Product: syz [ 372.517112][ T6768] usb 1-1: Manufacturer: syz [ 372.567412][ T6768] usb 1-1: SerialNumber: syz [ 372.854953][ T6768] usb 1-1: selecting invalid altsetting 0 [ 372.939562][T13150] loop7: detected capacity change from 0 to 512 [ 373.000917][T13150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.086630][T13150] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 373.103884][ T6768] snd-usb-audio: probe of 1-1:219.0 failed with error -22 [ 373.115218][ T6768] usb 1-1: USB disconnect, device number 15 [ 373.158271][T13150] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 373.193622][T13157] loop4: detected capacity change from 0 to 256 [ 373.257683][T13150] System zones: 0-1, 15-15, 18-18, 34-34 [ 373.264656][T13150] EXT4-fs (loop7): orphan cleanup on readonly fs [ 373.322822][T13150] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.3760: casefold flag without casefold feature [ 373.390650][T13150] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3760: couldn't read orphan inode 16 (err -117) [ 373.402863][T13114] loop6: detected capacity change from 0 to 32768 [ 373.411155][ T6757] udevd[6757]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.467062][T13150] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 373.490840][T13114] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 373.553213][T13114] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 373.589805][T13150] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 373.621532][T13114] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 373.643212][T13150] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 373.895760][T11327] EXT4-fs (loop7): unmounting filesystem. [ 373.907505][T13114] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 374.249166][T13179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3770'. [ 374.413272][T13184] xt_bpf: check failed: parse error [ 374.518689][T13187] loop6: detected capacity change from 0 to 512 [ 374.556977][T13187] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 374.729602][T13187] EXT4-fs (loop6): 1 truncate cleaned up [ 374.735330][T13187] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 374.979124][ T7090] EXT4-fs (loop6): unmounting filesystem. [ 375.019249][ T26] audit: type=1326 audit(1753343637.302:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.7.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001e78e9a9 code=0x7ffc0000 [ 375.120935][ T26] audit: type=1326 audit(1753343637.302:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.7.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f001e78e9a9 code=0x7ffc0000 [ 375.216306][ T26] audit: type=1326 audit(1753343637.302:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.7.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001e78e9a9 code=0x7ffc0000 [ 375.337387][ T26] audit: type=1326 audit(1753343637.302:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.7.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001e78e9a9 code=0x7ffc0000 [ 375.428243][T13207] device netdevsim0 entered promiscuous mode [ 375.462326][T13209] loop6: detected capacity change from 0 to 1024 [ 375.463804][T13207] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 376.914823][T13265] device netdevsim0 entered promiscuous mode [ 377.117748][ T7799] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 377.327619][ T7799] usb 5-1: Using ep0 maxpacket: 32 [ 377.344754][ T7799] usb 5-1: unable to get BOS descriptor or descriptor too short [ 377.373532][ T7799] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 377.401588][ T7799] usb 5-1: config 7 has no interface number 0 [ 377.422530][ T7799] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 377.454216][ T7799] usb 5-1: config 7 interface 187 has no altsetting 0 [ 377.544295][ T7799] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 377.557314][ T6769] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 377.565630][ T7799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.594801][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3812'. [ 377.605541][ T7799] usb 5-1: Product: syz [ 377.608348][T13286] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3811'. [ 377.615700][ T7799] usb 5-1: Manufacturer: syz [ 377.644261][ T7799] usb 5-1: SerialNumber: syz [ 377.656324][T13262] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.669955][T13286] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3811'. [ 377.692231][T13288] loop6: detected capacity change from 0 to 256 [ 377.747465][ T6769] usb 1-1: Using ep0 maxpacket: 32 [ 377.762853][ T6769] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.787559][T13288] FAT-fs (loop6): Directory bread(block 64) failed [ 377.804077][ T6769] usb 1-1: config 0 has no interface number 0 [ 377.810860][T13288] FAT-fs (loop6): Directory bread(block 65) failed [ 377.830273][ T6769] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 377.842205][T13288] FAT-fs (loop6): Directory bread(block 66) failed [ 377.877687][ T6769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.886831][T13288] FAT-fs (loop6): Directory bread(block 67) failed [ 377.904503][ T6769] usb 1-1: Product: syz [ 377.914186][ T6769] usb 1-1: Manufacturer: syz [ 377.917671][T13288] FAT-fs (loop6): Directory bread(block 68) failed [ 377.925787][T13288] FAT-fs (loop6): Directory bread(block 69) failed [ 377.940863][ T6769] usb 1-1: SerialNumber: syz [ 377.946898][T13288] FAT-fs (loop6): Directory bread(block 70) failed [ 377.954654][ T7799] usb 5-1: Limiting number of CPorts to U8_MAX [ 377.964301][ T7799] usb 5-1: Unknown endpoint type found, address 0x07 [ 377.970644][ T6769] usb 1-1: config 0 descriptor?? [ 377.989997][T13288] FAT-fs (loop6): Directory bread(block 71) failed [ 378.001773][ T6769] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 378.006939][ T7799] usb 5-1: Not enough endpoints found in device, aborting! [ 378.026551][T13288] FAT-fs (loop6): Directory bread(block 72) failed [ 378.040513][T13288] FAT-fs (loop6): Directory bread(block 73) failed [ 378.050435][ T6769] usb 1-1: selecting invalid altsetting 1 [ 378.086747][ T6769] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 378.127066][ T6769] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 378.180329][ T6769] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 378.236670][ T6769] usb 1-1: media controller created [ 378.258800][ T7808] usb 5-1: USB disconnect, device number 17 [ 378.336012][ T6769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.351502][T13296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.620360][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.626787][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.700615][ T6769] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 378.743147][T13306] loop6: detected capacity change from 0 to 512 [ 378.771066][ T6769] usb 1-1: USB disconnect, device number 16 [ 378.854234][T13306] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 378.885737][T13306] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 378.908546][T13306] EXT4-fs (loop6): 1 truncate cleaned up [ 378.944794][T13306] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 378.971095][T13310] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3823'. [ 379.028487][T13306] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 379.170667][ T7090] EXT4-fs (loop6): unmounting filesystem. [ 379.322742][T13320] loop6: detected capacity change from 0 to 128 [ 379.430873][T13320] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 379.460546][T13320] ext4 filesystem being mounted at /493/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.500880][T13327] Mount JFS Failure: -22 [ 379.505368][T13327] jfs_mount failed w/return code = -22 [ 379.636527][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3831'. [ 379.735515][ T7090] EXT4-fs (loop6): unmounting filesystem. [ 380.087467][ T6768] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 380.279827][ T6768] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 380.295275][ T6768] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.338147][ T6768] usb 8-1: config 0 descriptor?? [ 380.412680][T13356] loop3: detected capacity change from 0 to 256 [ 380.449652][T13356] exfat: Deprecated parameter 'utf8' [ 380.455033][T13356] exfat: Deprecated parameter 'utf8' [ 380.591014][T13356] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 380.643097][T13360] netlink: 'syz.0.3845': attribute type 5 has an invalid length. [ 380.743765][T13356] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 380.752522][ T6768] usb 8-1: Cannot set MAC address [ 380.781881][ T6768] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 380.799379][T13363] loop6: detected capacity change from 0 to 512 [ 380.832610][ T6768] usb 8-1: USB disconnect, device number 5 [ 380.915344][T13363] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.3846: bad orphan inode 15 [ 380.974302][T13363] ext4_test_bit(bit=14, block=5) = 0 [ 381.053614][T13363] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 381.117493][T13371] netlink: 'syz.3.3848': attribute type 32 has an invalid length. [ 381.304486][ T7090] EXT4-fs error (device loop6): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extra_isize 255 (inode size 256) [ 381.372220][ T7090] EXT4-fs error (device loop6): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extra_isize 255 (inode size 256) [ 381.525544][T13352] loop4: detected capacity change from 0 to 32768 [ 381.857083][ T7090] EXT4-fs (loop6): unmounting filesystem. [ 381.969974][T13352] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 382.172536][ T2969] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.249343][T13352] (syz.4.3840,13352,0):ocfs2_mknod:502 ERROR: status = -2 [ 382.337366][T13352] (syz.4.3840,13352,0):ocfs2_create:676 ERROR: status = -2 [ 382.454052][ T2969] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.527415][ T7811] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 382.552969][ T4272] (syz-executor,4272,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 382.593616][ T2969] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.615046][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 382.759983][ T7811] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 382.787275][ T7811] usb 1-1: config 220 has an invalid descriptor of length 127, skipping remainder of the config [ 382.827266][ T7811] usb 1-1: config 220 has no interface number 2 [ 382.844000][ T7811] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 382.908735][ T7811] usb 1-1: config 220 interface 0 has no altsetting 0 [ 382.915573][ T7811] usb 1-1: config 220 interface 76 has no altsetting 0 [ 382.963565][ T7811] usb 1-1: config 220 interface 1 has no altsetting 0 [ 382.999162][ T7811] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 383.009662][ T2969] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.040637][ T7811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.076549][ T7811] usb 1-1: Product: syz [ 383.087210][ T7811] usb 1-1: Manufacturer: syz [ 383.102155][ T7811] usb 1-1: SerialNumber: syz [ 383.351218][ T7811] usb 1-1: selecting invalid altsetting 0 [ 383.368202][ T7811] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 383.374622][ T7811] usb 1-1: No valid video chain found. [ 383.480748][ T7811] usb 1-1: selecting invalid altsetting 0 [ 383.486574][ T7811] usbtest: probe of 1-1:220.1 failed with error -22 [ 383.561434][ T7811] usb 1-1: USB disconnect, device number 17 [ 383.596706][T13420] loop3: detected capacity change from 0 to 256 [ 383.667971][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.672212][T13420] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 383.689421][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.727004][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.753830][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.763430][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 383.771058][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.168250][T13458] bond0: Error: Cannot enslave bond to itself. [ 385.469353][T13421] chnl_net:caif_netlink_parms(): no params data found [ 385.505322][T13473] loop7: detected capacity change from 0 to 128 [ 385.570042][T13473] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 385.649078][T13473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.817501][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 386.087221][T13491] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 386.220769][T13421] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.247540][T13421] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.278201][T13421] device bridge_slave_0 entered promiscuous mode [ 386.743335][T13421] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.770914][T13421] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.785343][T13421] device bridge_slave_1 entered promiscuous mode [ 386.931249][T13515] ipt_CLUSTERIP: bad num_local_nodes 32 [ 387.041896][T13421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.251444][T13525] loop3: detected capacity change from 0 to 256 [ 387.336155][T13525] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 387.519603][T13421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.661669][ T2969] device hsr_slave_0 left promiscuous mode [ 387.677657][T13534] netlink: 'syz.3.3915': attribute type 1 has an invalid length. [ 387.685660][ T2969] device hsr_slave_1 left promiscuous mode [ 387.767486][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.791389][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.828384][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.848468][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.857772][ T2969] device bridge_slave_1 left promiscuous mode [ 387.886859][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.897485][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 387.996809][ T2969] device bridge_slave_0 left promiscuous mode [ 388.017078][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.138847][ T2969] device veth1_macvtap left promiscuous mode [ 388.144981][ T2969] device veth0_macvtap left promiscuous mode [ 388.170197][ T2969] device veth1_vlan left promiscuous mode [ 388.196561][ T2969] device veth0_vlan left promiscuous mode [ 388.693189][ T2969] bond2 (unregistering): Released all slaves [ 389.360402][ T2969] bond1 (unregistering): Released all slaves [ 389.977629][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 390.215318][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 390.363020][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 390.421645][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 390.484233][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.545947][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.195345][ T2969] bond0 (unregistering): Released all slaves [ 391.281514][T13421] team0: Port device team_slave_0 added [ 391.303740][T13421] team0: Port device team_slave_1 added [ 391.391006][T13589] loop7: detected capacity change from 0 to 256 [ 391.519357][T13421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.526369][T13421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.717259][T13421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.779626][T13421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.786625][T13421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.840568][T13421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.016677][T13421] device hsr_slave_0 entered promiscuous mode [ 392.027367][ T7799] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 392.038769][T13421] device hsr_slave_1 entered promiscuous mode [ 392.057597][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 392.075717][T13421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.106106][T13421] Cannot create hsr debugfs directory [ 392.141636][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 392.211348][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 392.240601][ T7799] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 392.257704][T13608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 392.265275][ T7799] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.293726][ T7799] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 392.349351][ T7799] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.367780][ T7799] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.406947][ T7799] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 392.457545][ T7799] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 392.475883][ T7799] usb 8-1: Product: syz [ 392.486009][ T7799] usb 8-1: Manufacturer: syz [ 392.520545][ T7799] cdc_wdm 8-1:1.0: skipping garbage [ 392.525833][ T7799] cdc_wdm 8-1:1.0: skipping garbage [ 392.566666][ T7799] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 392.615594][ T7799] cdc_wdm 8-1:1.0: Unknown control protocol [ 392.765799][T13600] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 392.805325][ T7799] usb 8-1: USB disconnect, device number 6 [ 393.177425][T13637] delete_channel: no stack [ 393.292017][T13421] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 393.356890][T13421] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 393.437942][T13421] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 393.470883][T13646] netlink: 'syz.4.3953': attribute type 1 has an invalid length. [ 393.515207][T13421] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 393.548609][T13646] netlink: 'syz.4.3953': attribute type 2 has an invalid length. [ 393.556978][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3953'. [ 393.889137][T13666] loop7: detected capacity change from 0 to 64 [ 394.287995][T13421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.384462][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.408434][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.481678][T13421] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.596586][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 394.666721][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.691967][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.699227][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.717489][ T6766] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 394.768031][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.841521][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.858760][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.898297][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.905496][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.924096][ T6766] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.953096][ T6766] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 394.981324][ T6766] usb 5-1: can't read configurations, error -71 [ 394.988549][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 395.026595][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 395.061245][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 395.107638][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 395.132957][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 395.186752][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 395.230348][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 395.254702][T13696] SET target dimension over the limit! [ 395.290507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.308157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.347882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.385340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.429709][T13421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 395.705357][T13708] loop7: detected capacity change from 0 to 512 [ 395.736568][T13708] EXT4-fs: inline encryption not supported [ 395.771300][T13713] loop3: detected capacity change from 0 to 256 [ 395.825141][T13713] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 395.880064][T13708] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 395.899893][T13708] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.039841][T11327] EXT4-fs (loop7): unmounting filesystem. [ 396.277280][ T7799] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 396.469423][ T7799] usb 4-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 396.490158][ T7799] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.544967][ T7799] usb 4-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 396.583937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 396.591014][ T7799] usb 4-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 396.597621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.633762][ T7799] usb 4-1: config 1 interface 1 has no altsetting 0 [ 396.646146][T13421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.671567][ T7799] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.725661][ T7799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.757844][ T7799] usb 4-1: Product: syz [ 396.765891][ T7799] usb 4-1: Manufacturer: syz [ 396.794118][ T7799] usb 4-1: SerialNumber: syz [ 396.839330][ T7799] usb 4-1: selecting invalid altsetting 0 [ 396.845249][ T7799] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 397.043521][ T7799] usb 4-1: selecting invalid altsetting 0 [ 397.057261][ T7799] usbtest: probe of 4-1:1.1 failed with error -22 [ 397.086602][ T7799] usb 4-1: USB disconnect, device number 16 [ 398.198594][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.209909][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.278868][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4002'. [ 398.289325][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.300283][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.315029][T13778] loop7: detected capacity change from 0 to 4096 [ 398.325788][T13421] device veth0_vlan entered promiscuous mode [ 398.336877][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.351524][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.407380][T13778] NILFS (loop7): invalid segment: Checksum error in segment payload [ 398.416209][T13778] NILFS (loop7): trying rollback from an earlier position [ 398.419356][T13421] device veth1_vlan entered promiscuous mode [ 398.495589][T13778] NILFS (loop7): norecovery option specified, skipping roll-forward recovery [ 398.588414][T13778] NILFS (loop7): couldn't remount because the filesystem is in an incomplete recovery state [ 398.639772][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.657296][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 398.724542][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.779706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.816604][T13421] device veth0_macvtap entered promiscuous mode [ 398.854027][T13421] device veth1_macvtap entered promiscuous mode [ 398.913845][T13798] xt_addrtype: ipv6 does not support BROADCAST matching [ 398.958049][T13421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.996275][T13421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.025933][T13421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.097883][T13421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.147283][T13421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.187304][T13421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.218800][T13421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.249607][T13801] netlink: 'syz.0.4010': attribute type 10 has an invalid length. [ 399.321690][T13801] team0: Port device macvlan0 added [ 399.341335][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.368383][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.398387][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.444946][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.491870][T13421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.530451][T13818] ntfs3: nbd4: try to read out of volume at offset 0x0 [ 399.567401][T13421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.607323][T13421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.637262][T13421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.672790][T13421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.708386][T13421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.748265][T13421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.768444][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.791534][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.837666][T13421] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.865228][T13421] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.904878][T13421] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.929963][T13421] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.208872][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.232294][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4019'. [ 400.243136][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.292961][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.307304][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.349901][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.427209][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 400.802849][T13815] loop3: detected capacity change from 0 to 32768 [ 400.841573][T13815] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.4014 (13815) [ 400.913678][T13815] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 400.965191][T13815] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 401.013106][T13815] BTRFS info (device loop3): force zlib compression, level 3 [ 401.046232][T13815] BTRFS info (device loop3): force clearing of disk cache [ 401.076179][T13815] BTRFS info (device loop3): setting nodatasum [ 401.095300][T13815] BTRFS info (device loop3): doing ref verification [ 401.128737][T13815] BTRFS info (device loop3): allowing degraded mounts [ 401.135681][T13815] BTRFS info (device loop3): enabling disk space caching [ 401.163300][T13815] BTRFS info (device loop3): disk space caching is enabled [ 401.375387][T13815] BTRFS info (device loop3): enabling ssd optimizations [ 401.415467][T13815] BTRFS info (device loop3): rebuilding free space tree [ 401.473817][T13815] BTRFS info (device loop3): disabling free space tree [ 401.481662][T13815] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 401.497664][T13815] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 401.950290][ T4269] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 403.500213][T13939] overlayfs: conflicting options: userxattr,redirect_dir=on [ 403.707355][ T7801] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 403.909297][ T7801] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.937703][ T7801] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.960382][T13950] loop7: detected capacity change from 0 to 256 [ 403.991853][ T7801] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 404.002500][ T7801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.022021][ T7801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.033918][T13950] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.090722][ T7801] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 404.128140][ T7801] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 404.166732][ T7801] usb 4-1: Product: syz [ 404.208186][ T7801] usb 4-1: Manufacturer: syz [ 404.236677][ T7801] cdc_wdm 4-1:1.0: skipping garbage [ 404.247272][ T7801] cdc_wdm 4-1:1.0: skipping garbage [ 404.269188][ T7801] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 404.308018][ T7801] cdc_wdm 4-1:1.0: Unknown control protocol [ 404.384796][T13963] netlink: 'syz.7.4063': attribute type 1 has an invalid length. [ 404.437326][T13963] netlink: 'syz.7.4063': attribute type 2 has an invalid length. [ 404.480637][T13936] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 404.527611][T11906] usb 4-1: USB disconnect, device number 17 [ 405.108556][T13983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.618349][T14000] loop4: detected capacity change from 0 to 256 [ 405.680561][T14000] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.755131][T14000] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 405.809895][T14000] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 406.020109][T14011] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4082'. [ 406.091545][T14011] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4082'. [ 406.127386][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4082'. [ 406.371989][T14016] loop4: detected capacity change from 0 to 2048 [ 406.430660][T14016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.905110][T14033] device netdevsim0 entered promiscuous mode [ 406.970743][T14033] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 407.214646][T14047] netlink: 'syz.4.4095': attribute type 13 has an invalid length. [ 407.287249][T14047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4095'. [ 407.329895][T14047] syz_tun: refused to change device tx_queue_len [ 407.336360][T14047] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 407.555241][T14054] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 407.638444][T14054] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 407.719139][T14054] overlayfs: missing 'lowerdir' [ 408.232174][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 408.318053][T14085] ptrace attach of "./syz-executor exec"[4272] was attempted by ""[14085] [ 408.326167][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.352369][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.082363][T14110] xt_hashlimit: size too large, truncated to 1048576 [ 409.178274][T14110] xt_hashlimit: invalid rate [ 409.226211][T14115] Unsupported ieee802154 address type: 0 [ 410.529944][T14150] loop4: detected capacity change from 0 to 22 [ 410.564623][T14150] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 410.667311][T14150] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 411.753174][T14183] libceph: resolve '40.' (ret=-3): failed [ 412.848265][ T26] audit: type=1326 audit(1753343675.132:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.8.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f238e9a9 code=0x7ffc0000 [ 412.877659][ T7808] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 412.924421][ T26] audit: type=1326 audit(1753343675.172:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.8.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f06f238e9a9 code=0x7ffc0000 [ 412.994199][ T26] audit: type=1326 audit(1753343675.252:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.8.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f238e9a9 code=0x7ffc0000 [ 413.070372][ T7808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.107300][ T26] audit: type=1326 audit(1753343675.252:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14219 comm="syz.8.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f238e9a9 code=0x7ffc0000 [ 413.113499][ T7808] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.273471][ T7808] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 413.306898][ T7808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.349338][ T7808] usb 5-1: config 0 descriptor?? [ 413.584577][ T7808] usb 5-1: USB disconnect, device number 20 [ 413.643978][T14240] cgroup: Invalid name [ 413.878922][ T4485] udevd[4485]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.895014][ T7806] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 414.103672][ T7806] usb 9-1: Using ep0 maxpacket: 32 [ 414.113132][ T7806] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 414.142324][ T7806] usb 9-1: config 0 has no interface number 0 [ 414.163196][ T7806] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 414.195341][ T7806] usb 9-1: config 0 interface 196 has no altsetting 0 [ 414.249874][ T7806] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 414.267723][ T7806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.284523][ T7806] usb 9-1: Product: syz [ 414.297607][ T7806] usb 9-1: Manufacturer: syz [ 414.302373][ T7806] usb 9-1: SerialNumber: syz [ 414.314265][ T7806] usb 9-1: config 0 descriptor?? [ 414.320946][T14238] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 414.546927][ T7806] ipheth 9-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 414.564806][ T7806] ipheth: probe of 9-1:0.196 failed with error -71 [ 414.586058][ T7806] usb 9-1: USB disconnect, device number 2 [ 415.655756][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4181'. [ 416.087558][T14278] netlink: 'syz.3.4187': attribute type 1 has an invalid length. [ 416.142155][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4189'. [ 416.818616][T14301] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4200'. [ 416.848900][T14302] device netdevsim0 entered promiscuous mode [ 416.855764][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4199'. [ 417.007512][T14305] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4201'. [ 417.170235][T14312] netlink: 'syz.7.4204': attribute type 1 has an invalid length. [ 417.273385][T14314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4206'. [ 417.322705][T14314] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4206'. [ 419.686978][ T26] audit: type=1326 audit(1753343681.962:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14409 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee3d8e9a9 code=0x7ffc0000 [ 419.752544][ T26] audit: type=1326 audit(1753343681.962:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14409 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5ee3d8e9a9 code=0x7ffc0000 [ 419.858100][ T26] audit: type=1326 audit(1753343681.962:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14409 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee3d8e9a9 code=0x7ffc0000 [ 419.955489][ T26] audit: type=1326 audit(1753343681.962:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14409 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee3d8e9a9 code=0x7ffc0000 [ 420.027394][T14421] sctp: [Deprecated]: syz.4.4251 (pid 14421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.027394][T14421] Use struct sctp_sack_info instead [ 420.028439][ T26] audit: type=1326 audit(1753343682.002:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13538e9a9 code=0x7ffc0000 [ 420.119459][ T26] audit: type=1326 audit(1753343682.002:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13538e9a9 code=0x7ffc0000 [ 420.142298][ T26] audit: type=1326 audit(1753343682.002:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe13538e9a9 code=0x7ffc0000 [ 420.165460][ T26] audit: type=1326 audit(1753343682.332:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13538e9a9 code=0x7ffc0000 [ 420.186506][T14388] loop7: detected capacity change from 0 to 32768 [ 420.254125][ T26] audit: type=1326 audit(1753343682.332:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13538e9a9 code=0x7ffc0000 [ 420.310034][T14388] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 420.310034][T14388] [ 420.578055][ T6880] read_mapping_page failed! [ 420.583248][ T6880] ERROR: (device loop7): txCommit: [ 420.583248][ T6880] [ 420.669646][ T6880] jfs_write_inode: jfs_commit_inode failed! [ 420.717443][T14433] delete_channel: no stack [ 421.027714][T14443] device wlan0 entered promiscuous mode [ 421.055854][T14443] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 421.370957][T14459] loop7: detected capacity change from 0 to 256 [ 421.650641][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4273'. [ 421.973334][T14476] loop3: detected capacity change from 0 to 1024 [ 422.035037][T14473] loop4: detected capacity change from 0 to 4096 [ 422.074085][T14476] fuse: Bad value for 'fd' [ 422.258831][T14473] ntfs3: loop4: Failed to load $Extend. [ 422.268925][ T2969] hfsplus: b-tree write err: -5, ino 4 [ 422.420767][T14486] loop7: detected capacity change from 0 to 1024 [ 422.527882][T14486] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 422.577915][T14486] EXT4-fs error (device loop7): ext4_get_first_dir_block:3605: inode #11: comm syz.7.4281: directory missing '..' [ 422.744059][T14499] sctp: [Deprecated]: syz.8.4284 (pid 14499) Use of int in max_burst socket option deprecated. [ 422.744059][T14499] Use struct sctp_assoc_value instead [ 422.854860][T11327] EXT4-fs (loop7): unmounting filesystem. [ 423.299189][T14511] loop7: detected capacity change from 0 to 4096 [ 423.306448][T14511] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 423.437065][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4294'. [ 423.548457][T14511] ntfs: volume version 3.1. [ 423.866028][T14539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4300'. [ 424.002376][T14541] loop7: detected capacity change from 0 to 256 [ 424.332963][T14552] xt_l2tp: v2 sid > 0xffff: 262144 [ 424.504558][T14560] netlink: 'syz.4.4309': attribute type 1 has an invalid length. [ 424.617306][ T7806] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 424.764799][T14568] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4312'. [ 424.809894][ T7806] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 424.847316][ T7806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.894396][T14571] loop4: detected capacity change from 0 to 256 [ 424.896685][ T7806] usb 4-1: config 0 descriptor?? [ 424.929477][ T7806] gspca_main: mars-2.14.0 probing 093a:050f [ 424.957871][T14571] exfat: Deprecated parameter 'utf8' [ 424.963337][T14571] exfat: Deprecated parameter 'utf8' [ 425.043943][T14571] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 425.151085][ T6769] usb 4-1: USB disconnect, device number 18 [ 425.340890][T14582] usb usb1: check_ctrlrecip: process 14582 (syz.7.4317) requesting ep 01 but needs 81 [ 425.391247][T14582] usb usb1: usbfs: process 14582 (syz.7.4317) did not claim interface 0 before use [ 426.113916][T14607] netlink: 'syz.8.4327': attribute type 39 has an invalid length. [ 426.326870][T14609] loop4: detected capacity change from 0 to 8192 [ 426.346533][T14609] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 426.369019][T14609] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 426.396034][T14609] REISERFS (device loop4): using ordered data mode [ 426.406909][T14609] reiserfs: using flush barriers [ 426.442191][T14609] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 426.561372][T14609] REISERFS (device loop4): checking transaction log (loop4) [ 426.753789][T14623] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 426.927454][T14609] REISERFS (device loop4): Using tea hash to sort names [ 426.972662][T14609] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 426.991453][T14628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4335'. [ 427.417293][ T6768] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 427.617265][ T6768] usb 8-1: Using ep0 maxpacket: 16 [ 427.651320][ T6768] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 427.704250][ T6768] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.751647][ T6768] usb 8-1: Product: syz [ 427.761081][T14649] loop4: detected capacity change from 0 to 256 [ 427.767712][ T6768] usb 8-1: Manufacturer: syz [ 427.772360][ T6768] usb 8-1: SerialNumber: syz [ 427.798133][T14649] exfat: Deprecated parameter 'namecase' [ 427.805522][T14649] exfat: Deprecated parameter 'utf8' [ 427.832887][ T6768] usb 8-1: config 0 descriptor?? [ 427.850860][ T6768] visor 8-1:0.0: Sony Clie 3.5 converter detected [ 427.875104][T14651] loop3: detected capacity change from 0 to 8 [ 427.884283][T14649] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 428.133315][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 428.133331][ T26] audit: type=1800 audit(1753343690.412:4125): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4343" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 428.252957][ T6768] usb 8-1: clie_3_5_startup: get interface number failed: -71 [ 428.279273][ T6768] visor: probe of 8-1:0.0 failed with error -71 [ 428.316263][ T6768] usb 8-1: USB disconnect, device number 7 [ 428.567934][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'. [ 429.092439][T14689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4358'. [ 429.260705][T14693] netlink: 'syz.8.4360': attribute type 10 has an invalid length. [ 429.338518][T14693] team0: Device hsr_slave_0 failed to register rx_handler [ 429.600653][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4364'. [ 429.950175][T14721] tc_dump_action: action bad kind [ 430.229105][T14727] loop4: detected capacity change from 0 to 1764 [ 430.291537][T14727] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 431.370495][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4392'. [ 431.827999][T14792] netlink: 'syz.7.4401': attribute type 5 has an invalid length. [ 432.146383][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4407'. [ 432.273103][ T26] audit: type=1326 audit(1753343694.552:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.7.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001e78e9a9 code=0x7ffc0000 [ 432.367349][ T26] audit: type=1326 audit(1753343694.552:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.7.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001e78e9a9 code=0x7ffc0000 [ 432.461561][ T26] audit: type=1326 audit(1753343694.572:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.7.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f001e78e9a9 code=0x7ffc0000 [ 432.557540][ T26] audit: type=1326 audit(1753343694.582:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.7.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001e78e9a9 code=0x7ffc0000 [ 432.672044][ T26] audit: type=1326 audit(1753343694.582:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.7.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001e78e9a9 code=0x7ffc0000 [ 432.744492][T14825] loop4: detected capacity change from 0 to 1024 [ 432.899845][T14828] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4416'. [ 432.983393][ T49] hfsplus: b-tree write err: -5, ino 4 [ 433.212005][T14836] loop3: detected capacity change from 0 to 1024 [ 433.890642][T14858] loop7: detected capacity change from 0 to 16 [ 433.937578][T14858] erofs: (device loop7): mounted with root inode @ nid 36. [ 433.998085][T14858] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 434.054904][T14858] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 434.085805][T14858] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 434.584058][T14884] netlink: 'syz.4.4439': attribute type 21 has an invalid length. [ 434.755610][T14894] loop3: detected capacity change from 0 to 512 [ 434.806610][T14894] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 434.860415][T14894] EXT4-fs (loop3): Test dummy encryption mode enabled [ 434.948189][T14894] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 434.975666][T14894] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.4442: attempt to clear invalid blocks 2 len 1 [ 435.128772][T14894] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 435.168635][T14894] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4442: invalid indirect mapped block 1819239214 (level 0) [ 435.184447][T14910] loop7: detected capacity change from 0 to 128 [ 435.239913][T14894] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4442: invalid indirect mapped block 1819239214 (level 1) [ 435.300614][T14910] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 435.329803][T14894] EXT4-fs (loop3): 1 truncate cleaned up [ 435.357661][T14894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 435.507775][T14894] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 435.575145][T14894] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 435.798699][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 435.961071][T14934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4460'. [ 436.018881][T14942] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 437.017386][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 437.388751][ T93] block nbd7: Attempted send on invalid socket [ 437.395232][ T93] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 437.717472][T15001] netlink: 'syz.7.4485': attribute type 5 has an invalid length. [ 437.756686][T15001] netlink: 'syz.7.4485': attribute type 11 has an invalid length. [ 438.112295][ T7806] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 438.165730][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4492'. [ 438.292714][ T6768] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 438.307534][ T7806] usb 1-1: Using ep0 maxpacket: 32 [ 438.313309][T15026] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 438.325359][ T7806] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 438.350598][ T7806] usb 1-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 438.362400][ T7806] usb 1-1: config 0 has no interface number 0 [ 438.377988][T15030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.381496][ T7806] usb 1-1: config 0 interface 114 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.385261][T15030] IPv6: NLM_F_CREATE should be set when creating new route [ 438.405852][T15030] IPv6: NLM_F_CREATE should be set when creating new route [ 438.415612][ T7806] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff03, bcdDevice=43.ff [ 438.442624][ T7806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.468220][ T7806] usb 1-1: Product: syz [ 438.477069][ T7806] usb 1-1: Manufacturer: syz [ 438.493849][ T7806] usb 1-1: SerialNumber: syz [ 438.507338][ T6768] usb 5-1: Using ep0 maxpacket: 8 [ 438.509073][ T7806] usb 1-1: config 0 descriptor?? [ 438.520829][ T6768] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 438.532485][ T7806] cdc_ether 1-1:0.114: invalid descriptor buffer length [ 438.537296][ T6768] usb 5-1: config 0 has no interface number 0 [ 438.547354][ T7806] usb 1-1: bad CDC descriptors [ 438.565647][ T6768] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 438.582111][ T6768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.613764][ T6768] usb 5-1: Product: syz [ 438.631950][ T6768] usb 5-1: Manufacturer: syz [ 438.637011][ T6768] usb 5-1: SerialNumber: syz [ 438.676163][ T6768] usb 5-1: config 0 descriptor?? [ 438.798724][ T7806] usb 1-1: USB disconnect, device number 18 [ 438.907277][ T6768] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 438.913752][ T6768] usb 5-1: Failed to initialize entity for entity 6 [ 438.931994][ T6768] usb 5-1: Failed to register entities (-22). [ 438.941334][ T26] audit: type=1107 audit(1753343701.212:4131): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 439.095791][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4502'. [ 439.137373][ T6769] usb 5-1: USB disconnect, device number 21 [ 439.712417][T15072] netlink: 'syz.3.4510': attribute type 6 has an invalid length. [ 439.951040][T15077] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.4513'. [ 439.992964][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4514'. [ 440.060874][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.067334][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.309483][T15089] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 440.641631][T15100] loop7: detected capacity change from 0 to 16 [ 440.676500][T15096] fuse: Bad value for 'fd' [ 440.684509][T15100] erofs: (device loop7): mounted with root inode @ nid 36. [ 440.743686][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 440.792581][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 440.822405][T15103] netlink: 'syz.3.4524': attribute type 39 has an invalid length. [ 440.838163][ T4277] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 440.877570][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 440.976593][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 441.047397][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 441.095987][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 441.145566][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 441.176258][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 441.277316][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 441.307621][T15100] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 441.331875][T15100] erofs: (device loop7): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 441.343278][T15100] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 441.357869][ T26] audit: type=1800 audit(1753343703.642:4132): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4522" name="file3" dev="loop7" ino=89 res=0 errno=0 [ 441.549027][T15124] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4531'. [ 441.828950][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4535'. [ 441.941358][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4539'. [ 442.253566][T15152] netlink: 'syz.0.4544': attribute type 39 has an invalid length. [ 442.534336][T15162] netlink: 'syz.4.4549': attribute type 30 has an invalid length. [ 442.568796][T15162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4549'. [ 442.615197][T15168] loop3: detected capacity change from 0 to 512 [ 442.621806][ T27] INFO: task syz-executor:6835 blocked for more than 143 seconds. [ 442.629953][T15162] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 442.641860][ T27] Not tainted 6.1.147-syzkaller #0 [ 442.663471][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.667250][T15162] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 442.723854][ T27] task:syz-executor state:D stack:22144 pid:6835 ppid:1 flags:0x00004004 [ 442.760481][ T27] Call Trace: [ 442.765325][T15168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 442.794597][T15168] ext4 filesystem being mounted at /990/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 442.822808][ T27] [ 442.825913][ T27] __schedule+0x10ec/0x40b0 [ 442.830780][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 442.836793][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 442.843102][ T27] ? lock_chain_count+0x20/0x20 [ 442.848209][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 442.853500][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 442.859151][ T27] schedule+0xb9/0x180 [ 442.863360][ T27] io_schedule+0x7c/0xd0 [ 442.867771][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 442.873203][ T27] ? folio_wait_bit+0x30/0x30 [ 442.878052][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 442.884436][ T27] ? folio_mapping+0x1ba/0x4d0 [ 442.889812][ T27] truncate_inode_pages_range+0x9a2/0xff0 [ 442.896000][ T27] ? mapping_evict_folio+0x520/0x520 [ 442.902898][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 442.909356][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 442.914846][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 442.922181][ T27] evict+0x498/0x870 [ 442.926495][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 442.943210][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 442.957423][ T27] ? _raw_spin_unlock+0x24/0x40 [ 442.963560][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 442.973429][ T27] evict_inodes+0x604/0x690 [ 442.981499][ T27] ? clear_inode+0x150/0x150 [ 442.996915][ T27] ? dput+0x1c9/0x1d0 [ 443.001121][ T27] ? sync_filesystem+0x103/0x220 [ 443.006659][ T27] generic_shutdown_super+0x93/0x340 [ 443.012110][ T27] kill_block_super+0x7c/0xe0 [ 443.016916][ T27] deactivate_locked_super+0x93/0xf0 [ 443.026523][ T27] cleanup_mnt+0x463/0x4f0 [ 443.032286][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 443.037758][ T27] task_work_run+0x1ca/0x250 [ 443.042486][ T27] ? task_work_cancel+0x230/0x230 [ 443.047774][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 443.053311][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 443.058705][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 443.064290][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 443.069887][ T27] do_syscall_64+0x58/0xa0 [ 443.074427][ T27] ? clear_bhb_loop+0x60/0xb0 [ 443.079199][ T27] ? clear_bhb_loop+0x60/0xb0 [ 443.083909][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.090004][ T27] RIP: 0033:0x7f474018fcd7 [ 443.094464][ T27] RSP: 002b:00007ffc0865f928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 443.104143][ T27] RAX: 0000000000000000 RBX: 00007f4740210b55 RCX: 00007f474018fcd7 [ 443.112745][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0865f9e0 [ 443.120891][ T27] RBP: 00007ffc0865f9e0 R08: 0000000000000000 R09: 0000000000000000 [ 443.129230][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc08660a70 [ 443.137485][ T27] R13: 00007f4740210b55 R14: 0000000000048028 R15: 00007ffc08660ab0 [ 443.145518][ T27] [ 443.148785][ T27] [ 443.148785][ T27] Showing all locks held in the system: [ 443.152314][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 443.156511][ T27] 1 lock held by rcu_tasks_kthre/12: [ 443.174226][ T27] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 443.185191][ T27] 1 lock held by rcu_tasks_trace/13: [ 443.190986][ T27] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 443.202298][ T27] 1 lock held by khungtaskd/27: [ 443.208273][ T27] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 443.220524][ T27] 3 locks held by kworker/u4:2/33: [ 443.225703][ T27] 2 locks held by getty/4031: [ 443.240828][ T27] #0: ffff888030a49098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 443.253050][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 443.271652][ T27] 3 locks held by kworker/0:3/4273: [ 443.276937][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 443.287594][ T27] #1: ffffc90003da7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 443.300168][ T27] #2: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 443.312364][ T27] 2 locks held by kworker/0:17/6769: [ 443.317798][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 443.328368][ T27] #1: ffffc9000565fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 443.340643][ T27] 1 lock held by syz-executor/6835: [ 443.345965][ T27] #0: ffff8880196fc0e0 (&type->s_umount_key#63){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 443.356286][ T27] 2 locks held by dhcpcd/15174: [ 443.361372][ T27] #0: ffff888055b46130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 443.371306][ T27] #1: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 443.382322][ T27] [ 443.384682][ T27] ============================================= [ 443.384682][ T27] [ 443.393212][ T27] NMI backtrace for cpu 1 [ 443.397594][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.147-syzkaller #0 [ 443.405694][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.415771][ T27] Call Trace: [ 443.419069][ T27] [ 443.422037][ T27] dump_stack_lvl+0x168/0x22e [ 443.426758][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 443.432256][ T27] ? show_regs_print_info+0x12/0x12 [ 443.437486][ T27] ? load_image+0x3b0/0x3b0 [ 443.442044][ T27] ? vprintk_emit+0x571/0x680 [ 443.446763][ T27] ? printk_sprint+0x460/0x460 [ 443.451561][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 443.456523][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 443.462688][ T27] ? _printk+0xcc/0x110 [ 443.466861][ T27] ? load_image+0x3b0/0x3b0 [ 443.471388][ T27] ? load_image+0x3b0/0x3b0 [ 443.475932][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 443.482013][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 443.488008][ T27] watchdog+0xeee/0xf30 [ 443.492186][ T27] ? watchdog+0x1ed/0xf30 [ 443.496534][ T27] kthread+0x29d/0x330 [ 443.500630][ T27] ? hungtask_pm_notify+0x40/0x40 [ 443.505701][ T27] ? kthread_blkcg+0xd0/0xd0 [ 443.510311][ T27] ret_from_fork+0x1f/0x30 [ 443.514767][ T27] [ 443.518676][ T27] Sending NMI from CPU 1 to CPUs 0: [ 443.524212][ C0] NMI backtrace for cpu 0 [ 443.524223][ C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted 6.1.147-syzkaller #0 [ 443.524240][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.524250][ C0] Workqueue: phy8 ieee80211_iface_work [ 443.524275][ C0] RIP: 0010:kasan_check_range+0xf/0x290 [ 443.524301][ C0] Code: 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 41 56 <53> 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f 41 81 [ 443.524316][ C0] RSP: 0018:ffffc90000ba7448 EFLAGS: 00000002 [ 443.524328][ C0] RAX: 0000000000000001 RBX: 000000000000002c RCX: ffffffff8162f432 [ 443.524346][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90add240 [ 443.524357][ C0] RBP: ffffc90000ba76b0 R08: dffffc0000000000 R09: 0000000000000000 [ 443.524369][ C0] R10: fffffbfff1c3e976 R11: 1ffffffff1c3e975 R12: ffff88801e6f1dc0 [ 443.524381][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000002c [ 443.524391][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 443.524405][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.524416][ C0] CR2: 0000556a89754660 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 443.524431][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 443.524440][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 443.524450][ C0] Call Trace: [ 443.524455][ C0] [ 443.524461][ C0] __lock_acquire+0x532/0x7c50 [ 443.524487][ C0] ? mark_lock+0x94/0x320 [ 443.524516][ C0] ? verify_lock_unused+0x140/0x140 [ 443.524542][ C0] ? verify_lock_unused+0x140/0x140 [ 443.524565][ C0] ? verify_lock_unused+0x140/0x140 [ 443.524588][ C0] lock_acquire+0x1b4/0x490 [ 443.524608][ C0] ? ieee80211_vif_get_shift+0x1a/0x290 [ 443.524638][ C0] ? read_lock_is_recursive+0x10/0x10 [ 443.524662][ C0] ? sta_info_get+0x4b/0x2a0 [ 443.524680][ C0] ? ieee80211_vif_get_shift+0x1a/0x290 [ 443.524706][ C0] ieee80211_vif_get_shift+0x36/0x290 [ 443.524731][ C0] ? ieee80211_vif_get_shift+0x1a/0x290 [ 443.524756][ C0] ieee80211_sta_get_rates+0xf5/0x6b0 [ 443.524773][ C0] ? sta_info_get+0x4b/0x2a0 [ 443.524791][ C0] ? sta_info_get+0x4b/0x2a0 [ 443.524808][ C0] ? sta_info_get+0x4b/0x2a0 [ 443.524827][ C0] ? sta_info_get+0x289/0x2a0 [ 443.524846][ C0] ieee80211_ibss_rx_queued_mgmt+0xff9/0x2b10 [ 443.524871][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xdad/0x2b10 [ 443.524892][ C0] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 443.524908][ C0] ? mark_lock+0x94/0x320 [ 443.524933][ C0] ? mark_lock+0x94/0x320 [ 443.524955][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 443.524978][ C0] ? lock_chain_count+0x20/0x20 [ 443.524998][ C0] ? __rwlock_init+0x140/0x140 [ 443.525024][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 443.525046][ C0] ? skb_dequeue+0x10a/0x140 [ 443.525069][ C0] ieee80211_iface_work+0x726/0xc80 [ 443.525090][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 443.525114][ C0] ? process_one_work+0x7a1/0x1160 [ 443.525132][ C0] process_one_work+0x898/0x1160 [ 443.525154][ C0] ? worker_detach_from_pool+0x240/0x240 [ 443.525173][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 443.525195][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 443.525218][ C0] ? kthread_data+0x4b/0xc0 [ 443.525241][ C0] worker_thread+0xaa2/0x1250 [ 443.525269][ C0] kthread+0x29d/0x330 [ 443.525291][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 443.525308][ C0] ? kthread_blkcg+0xd0/0xd0 [ 443.525338][ C0] ret_from_fork+0x1f/0x30 [ 443.525366][ C0] [ 443.536477][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 443.536496][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.147-syzkaller #0 [ 443.536517][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.536532][ T27] Call Trace: [ 443.536541][ T27] [ 443.536549][ T27] dump_stack_lvl+0x168/0x22e [ 443.536578][ T27] ? memcpy+0x3c/0x60 [ 443.536614][ T27] ? show_regs_print_info+0x12/0x12 [ 443.536638][ T27] ? load_image+0x3b0/0x3b0 [ 443.536681][ T27] panic+0x2c9/0x710 [ 443.536707][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 443.536737][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 443.536763][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 443.536800][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 443.536826][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 443.536853][ T27] watchdog+0xf2d/0xf30 [ 443.536884][ T27] ? watchdog+0x1ed/0xf30 [ 443.536913][ T27] kthread+0x29d/0x330 [ 443.536944][ T27] ? hungtask_pm_notify+0x40/0x40 [ 443.536967][ T27] ? kthread_blkcg+0xd0/0xd0 [ 443.537001][ T27] ret_from_fork+0x1f/0x30 [ 443.537041][ T27] [ 443.539949][ T27] Kernel Offset: disabled [ 443.992000][ T27] Rebooting in 86400 seconds..