last executing test programs: 4m36.454544254s ago: executing program 3 (id=20): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) 4m36.300250098s ago: executing program 3 (id=23): r0 = fanotify_init(0x10, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000044c0)='stat\x00') fanotify_mark(r0, 0x11, 0x8000013, r1, 0x0) preadv2(r1, &(0x7f0000001d00)=[{&(0x7f0000000500)=""/247, 0xf7}, {0x0}], 0x2, 0x7e2b, 0x5, 0x1) 4m36.104834553s ago: executing program 3 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 4m35.906911648s ago: executing program 3 (id=29): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 4m35.582087446s ago: executing program 3 (id=31): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000001480)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_win95}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@nfs}, {@utf8no}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@uni_xlate}, {@numtail}, {@numtail}, {@numtail}, {@shortname_win95}, {@shortname_win95}]}, 0x2, 0x28c, &(0x7f0000001780)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, 0x0, 0x0) 4m34.520948563s ago: executing program 3 (id=34): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) 4m34.311482208s ago: executing program 32 (id=34): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) 3.295069736s ago: executing program 0 (id=2728): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08ab8531477e6c4901dbc5160f8f0cff4e3eb3409e3faa4e4590250305910e9291d83b16aa196415bea965c08c021fa50fa14c580b49123f84d0723c7540050fe9d87c54ef", 0x45}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x7, 0x0, 0x0) 2.506950827s ago: executing program 0 (id=2732): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x3acd}]}}]}, 0x48}}, 0x0) 2.018365949s ago: executing program 0 (id=2736): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESOCT], 0x5, 0xa51, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x7) 1.896841922s ago: executing program 2 (id=2738): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xff) 1.680113757s ago: executing program 0 (id=2741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd=r0, 0x100000000, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 1.467245103s ago: executing program 0 (id=2744): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) 1.093407382s ago: executing program 1 (id=2749): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x1, &(0x7f0000000400)="c2", 0xb, 0x1, 0xb57, 0x5df, 0x8b, 0x1, 0x9, 'syz1\x00'}) 1.042486004s ago: executing program 4 (id=2750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) 957.257335ms ago: executing program 2 (id=2751): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2009}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x8) 854.515858ms ago: executing program 1 (id=2752): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0x16) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 821.157399ms ago: executing program 4 (id=2753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x3ff, 0x3, 0x8, 0x7, 0x3, 0x3, 0x75c]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008c8c}, 0x4004040) 743.959701ms ago: executing program 2 (id=2754): ioperm(0x4, 0x6, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000566000/0x4000)=nil, &(0x7f00001e3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00002ca000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000148000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 680.449213ms ago: executing program 1 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcf14}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}]}]}, 0x38}}, 0x800) 651.612863ms ago: executing program 4 (id=2756): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000300)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@noblock_validity}], [{@hash}, {@dont_measure}, {@dont_appraise}, {@appraise_type}, {@fsname={'fsname', 0x3d, ',!\\'}}, {@fsname={'fsname', 0x3d, '!'}}, {@smackfshat={'smackfshat', 0x3d, '*'}}, {@fsname={'fsname', 0x3d, 'jqfmt=vfsv1'}}, {@dont_hash}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[], [], 0x2f}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 589.953804ms ago: executing program 2 (id=2757): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, @fallback=0x68afcc069f96e8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r2}, 0xc) 513.848247ms ago: executing program 1 (id=2758): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x11, 0x2, {0xd, "00db0500000000000001fb4bc81700"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 455.125368ms ago: executing program 0 (id=2759): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x8b, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xbd32}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000700)=0x8) 315.829622ms ago: executing program 4 (id=2760): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r1, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) 301.860262ms ago: executing program 1 (id=2761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, r1, 0x1, 0xfffbff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x48}}, 0x4080) 282.496302ms ago: executing program 2 (id=2762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setuid(0xee01) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2502"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 155.872186ms ago: executing program 1 (id=2763): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 152.579516ms ago: executing program 4 (id=2764): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='!~', 0x2) 90.770977ms ago: executing program 2 (id=2765): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x0, 0x1, 0x4, 0x0, 0xfffffff9, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x48, 0x3, 0x7}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x496000}) 0s ago: executing program 4 (id=2766): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0xcd, 0x6a31, 0x7f7, 0x3, "bd31c267a000002000002000", 0x10, 0x200008}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) kernel console output (not intermixed with test programs): [ 240.595750][ T5836] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 240.615117][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.623120][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.665392][ T5836] usb 5-1: Product: syz [ 240.669729][ T5836] usb 5-1: Manufacturer: syz [ 240.675255][ T5836] usb 5-1: SerialNumber: syz [ 240.938710][ T5836] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 240.962170][ T5836] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 240.984662][ T5836] hub 5-1:1.2: Invalid hub with more than one config or interface [ 240.993146][ T5836] hub: probe of 5-1:1.2 failed with error -22 [ 241.027032][ T5836] usb 5-1: USB disconnect, device number 11 [ 241.215264][ T9898] loop0: detected capacity change from 0 to 64 [ 242.036276][ T9904] set_capacity_and_notify: 1 callbacks suppressed [ 242.036292][ T9904] loop0: detected capacity change from 0 to 32768 [ 242.105035][ T9904] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 242.105035][ T9904] [ 242.122286][ T9904] xtLookup: xtSearch returned -5 [ 242.135399][ T9904] free_index: error reading directory table [ 242.585464][ T5836] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 242.745973][ T7825] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 242.788960][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 242.815979][ T5836] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 242.834466][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.856996][ T5836] usb 3-1: config 0 descriptor?? [ 242.866089][ T5836] gspca_main: sq930x-2.14.0 probing 041e:403c [ 242.959295][ T7825] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 242.985047][ T7825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.015206][ T7825] usb 1-1: config 0 descriptor?? [ 243.032991][ T7825] cp210x 1-1:0.0: cp210x converter detected [ 243.208929][ T9945] loop1: detected capacity change from 0 to 32768 [ 243.262179][ T9945] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 243.262179][ T9945] [ 243.272911][ T9945] xtLookup: xtSearch returned -5 [ 243.279386][ T9945] free_index: error reading directory table [ 243.450766][ T7825] usb 1-1: cp210x converter now attached to ttyUSB0 [ 243.458014][ T5778] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 243.485665][ T9953] loop1: detected capacity change from 0 to 256 [ 243.511141][ T9953] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 243.673845][ T7825] usb 1-1: USB disconnect, device number 14 [ 243.705897][ T5778] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 243.719629][ T7825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.734131][ T5778] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.754422][ T5836] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 243.775820][ T7825] cp210x 1-1:0.0: device disconnected [ 243.789865][ T5778] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 243.799802][ T5778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.817447][ T5778] usb 5-1: config 0 descriptor?? [ 243.836223][ T5836] sq930x: probe of 3-1:0.0 failed with error -71 [ 243.844779][ T5836] usb 3-1: USB disconnect, device number 16 [ 244.114527][ T790] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 244.309761][ T5778] input: HID 0458:500f as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:500F.0009/input/input17 [ 244.323764][ T790] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.342131][ T790] usb 2-1: config 0 has no interface number 0 [ 244.360398][ T790] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 244.371744][ T790] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 244.402649][ T790] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.416665][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.440909][ T790] usb 2-1: config 0 descriptor?? [ 244.457094][ T9959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.475275][ T790] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 244.510467][ T5778] input: HID 0458:500f as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:500F.0009/input/input18 [ 244.621915][ T5778] kye 0003:0458:500F.0009: input,hiddev1,hidraw0: USB HID v0.09 Device [HID 0458:500f] on usb-dummy_hcd.4-1/input0 [ 244.653956][ T5778] usb 5-1: USB disconnect, device number 12 [ 244.766808][ T5814] usb 2-1: USB disconnect, device number 12 [ 245.311136][ T9986] program syz.0.1542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.408020][ T9989] loop2: detected capacity change from 0 to 4096 [ 245.490136][ T9992] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.989763][T10009] program syz.0.1552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.105171][T10013] loop1: detected capacity change from 0 to 2048 [ 246.145722][T10013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.234192][T10013] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.378702][T10013] fs-verity (loop1, inode 13): Unknown hash algorithm number: 3 [ 246.425922][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 246.517753][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.835068][T10041] loop1: detected capacity change from 0 to 256 [ 246.886495][T10041] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.946539][ T27] audit: type=1800 audit(1787833279.320:34): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1565" name="bus" dev="loop1" ino=1048632 res=0 errno=0 [ 247.055187][T10041] Invalid ELF header magic: != ELF [ 247.443695][ T27] audit: type=1326 audit(1787833279.810:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.2.1572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd035f9e0d9 code=0x0 [ 247.615465][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 247.837047][T10068] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 247.837047][T10068] The task syz.4.1575 (10068) triggered the difference, watch for misbehavior. [ 247.935897][T10072] loop0: detected capacity change from 0 to 512 [ 247.962701][T10072] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 248.019091][T10072] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1579: bg 0: block 104: invalid block bitmap [ 248.078222][T10072] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 248.109611][T10072] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1579: invalid indirect mapped block 1 (level 1) [ 248.158580][T10072] EXT4-fs (loop0): 1 truncate cleaned up [ 248.168036][T10072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.252335][T10072] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 248.350348][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.352101][T10079] loop2: detected capacity change from 0 to 512 [ 248.389823][T10079] EXT4-fs: Ignoring removed oldalloc option [ 248.414933][ T790] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 248.427982][T10079] EXT4-fs: Ignoring removed i_version option [ 248.455288][T10079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.491022][T10079] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1581: invalid block [ 248.542793][T10079] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1581: invalid indirect mapped block 4294967295 (level 1) [ 248.563744][T10079] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1581: invalid indirect mapped block 4294967295 (level 1) [ 248.588675][T10079] EXT4-fs (loop2): 2 truncates cleaned up [ 248.596004][T10079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.616796][ T790] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.634466][ T790] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.654710][ T790] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 248.673981][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.697519][ T790] hub 2-1:4.0: USB hub found [ 248.729246][T10079] jffs2: notice: (10079) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 248.796561][ T7622] EXT4-fs error (device loop2): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 248.813094][ T7622] EXT4-fs error (device loop2): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 248.902626][ T790] hub 2-1:4.0: 2 ports detected [ 248.909493][ T790] usb 2-1: selecting invalid altsetting 1 [ 248.924319][ T790] hub 2-1:4.0: Using single TT (err -22) [ 249.133088][T10093] loop4: detected capacity change from 0 to 512 [ 249.157969][ T7622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.168534][T10093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.198317][T10093] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1587: bad orphan inode 131083 [ 249.228366][ T3537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.269167][T10093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.332390][ T790] usb 2-1: USB disconnect, device number 13 [ 249.410703][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.499105][ T3537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.678605][ T3537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.821222][ T3537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.860914][T10097] loop0: detected capacity change from 0 to 4096 [ 249.930681][T10100] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.578579][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.590832][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.601693][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.610199][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.618827][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 250.627738][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.004782][T10126] loop1: detected capacity change from 0 to 8 [ 251.053257][T10126] SQUASHFS error: lzo decompression failed, data probably corrupt [ 251.084138][T10126] SQUASHFS error: Failed to read block 0x95: -5 [ 251.092288][T10126] SQUASHFS error: Unable to read metadata cache entry [93] [ 251.099841][ T5814] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 251.118336][T10126] SQUASHFS error: Unable to read inode 0x400a7 [ 251.136579][T10126] SQUASHFS error: Unable to read metadata cache entry [93] [ 251.159870][T10126] SQUASHFS error: Unable to read inode 0x40087 [ 251.288337][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 251.319982][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.339209][ T5814] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 251.365915][ T5814] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 251.402975][ T5814] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 251.457946][ T5814] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 251.498582][ T5814] usb 1-1: config 1 interface 1 has no altsetting 0 [ 251.531950][T10136] loop1: detected capacity change from 0 to 4096 [ 251.549436][ T5814] usb 1-1: string descriptor 0 read error: -22 [ 251.563063][ T5814] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 251.587662][T10136] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 251.600833][T10136] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 251.614947][T10136] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 251.631678][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.659686][T10136] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 251.672934][T10136] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 251.697741][T10136] ntfs: volume version 3.1. [ 251.706385][T10136] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 251.717663][T10136] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 251.746230][T10136] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 252.265109][T10113] chnl_net:caif_netlink_parms(): no params data found [ 252.552574][ T3537] hsr_slave_0: left promiscuous mode [ 252.568436][ T3537] hsr_slave_1: left promiscuous mode [ 252.595711][ T5814] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 252.625874][ T5814] usb 1-1: USB disconnect, device number 15 [ 252.632897][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.676029][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.707558][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.716854][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.727205][T10167] loop4: detected capacity change from 0 to 128 [ 252.735355][ T5772] Bluetooth: hci0: command tx timeout [ 252.768027][ T3537] bridge_slave_1: left allmulticast mode [ 252.784599][ T3537] bridge_slave_1: left promiscuous mode [ 252.796300][T10167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 252.804437][T10167] System zones: 1-3, 19-19, 35-36 [ 252.811162][T10167] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 252.819868][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.842786][T10167] ext4 filesystem being mounted at /408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 252.920170][ T3537] bridge_slave_0: left allmulticast mode [ 252.934508][ T3537] bridge_slave_0: left promiscuous mode [ 252.940405][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.976420][T10167] EXT4-fs warning (device loop4): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 253.042245][ T5928] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.052385][ T3537] veth1_macvtap: left promiscuous mode [ 253.059507][ T3537] veth0_macvtap: left promiscuous mode [ 253.065351][ T3537] veth1_vlan: left promiscuous mode [ 253.070677][ T3537] veth0_vlan: left promiscuous mode [ 253.709436][T10197] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1616'. [ 253.728672][T10197] netlink: 528 bytes leftover after parsing attributes in process `syz.0.1616'. [ 253.900845][T10203] loop1: detected capacity change from 0 to 512 [ 253.918361][T10203] EXT4-fs: Ignoring removed orlov option [ 253.924714][T10203] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.985739][T10203] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.1619: corrupted in-inode xattr: e_value size too large [ 254.017902][T10201] loop0: detected capacity change from 0 to 4096 [ 254.026060][T10203] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1619: couldn't read orphan inode 15 (err -117) [ 254.062064][T10201] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 254.073061][T10203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.229835][T10201] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 254.241342][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.771044][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 254.818029][ T5772] Bluetooth: hci0: command tx timeout [ 254.916915][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 254.926741][T10218] ima: Unable to open file: /e (-2) [ 254.931781][T10217] ima: policy update failed [ 254.962463][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 254.962475][ T27] audit: type=1802 audit(1787833287.330:36): pid=10217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1626" res=0 errno=0 [ 255.013703][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.135365][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.189980][T10222] loop1: detected capacity change from 0 to 8192 [ 255.233861][T10222] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 255.247863][T10222] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 255.257246][T10222] REISERFS (device loop1): using ordered data mode [ 255.263922][T10222] reiserfs: using flush barriers [ 255.273780][T10222] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 255.330208][T10222] REISERFS (device loop1): checking transaction log (loop1) [ 255.398981][T10222] REISERFS (device loop1): Using r5 hash to sort names [ 255.415251][T10222] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 255.779281][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779674][T10230] loop1: detected capacity change from 0 to 256 [ 255.785838][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.828116][T10230] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 255.842600][ T3537] bond0 (unregistering): Released all slaves [ 256.115844][T10113] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.146493][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.153740][T10113] bridge_slave_0: entered allmulticast mode [ 256.192904][T10113] bridge_slave_0: entered promiscuous mode [ 256.216000][T10113] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.227728][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.240599][T10113] bridge_slave_1: entered allmulticast mode [ 256.255830][T10113] bridge_slave_1: entered promiscuous mode [ 256.331413][T10242] loop4: detected capacity change from 0 to 128 [ 256.382635][T10242] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.434579][T10242] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.460010][T10113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.513433][T10113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.571507][T10113] team0: Port device team_slave_0 added [ 256.581712][T10113] team0: Port device team_slave_1 added [ 256.597536][T10250] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1639'. [ 256.674088][T10113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.705084][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.718479][ T5928] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.760549][T10113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.777334][T10113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.858650][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.903688][ T5772] Bluetooth: hci0: command tx timeout [ 256.935213][T10113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.006124][T10113] hsr_slave_0: entered promiscuous mode [ 257.014123][T10262] loop4: detected capacity change from 0 to 512 [ 257.021180][T10113] hsr_slave_1: entered promiscuous mode [ 257.133476][T10262] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 257.161410][T10262] EXT4-fs (loop4): orphan cleanup on readonly fs [ 257.174129][T10262] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 257.194969][T10262] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.218555][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 257.258561][T10262] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 257.276040][T10272] IPVS: Error joining to the multicast group [ 257.289097][T10262] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #16: comm syz.4.1642: inode has both inline data and extents flags [ 257.338327][T10262] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1642: couldn't read orphan inode 16 (err -117) [ 257.386041][T10262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.524664][T10262] CacheFiles: Failed to register: -30 [ 257.653384][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.686166][T10283] loop0: detected capacity change from 0 to 24 [ 257.693358][T10283] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 257.810692][T10287] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 257.838933][T10283] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 257.882704][T10289] program syz.4.1648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.024001][ T27] audit: type=1400 audit(1787833290.390:37): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10290 comm="syz.1.1650" name="p" offset=58 [ 258.271946][T10303] program syz.4.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.671509][T10113] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.732790][T10113] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.780894][T10113] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.816590][T10113] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.977233][ T5772] Bluetooth: hci0: command tx timeout [ 259.219642][T10113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.322740][T10113] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.375959][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.383135][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.420018][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.427245][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.042052][T10113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.147547][T10113] veth0_vlan: entered promiscuous mode [ 260.180277][T10113] veth1_vlan: entered promiscuous mode [ 260.264529][T10113] veth0_macvtap: entered promiscuous mode [ 260.279359][T10113] veth1_macvtap: entered promiscuous mode [ 260.317020][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.394464][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.410890][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.457836][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.480721][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.524440][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.567012][T10113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.615626][T10374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.630406][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.674773][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.714433][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.757897][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.786226][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.820074][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.838660][T10113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.873401][T10113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.898024][T10384] loop0: detected capacity change from 0 to 256 [ 260.902593][T10113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.934770][T10384] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 260.956827][T10113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.975041][T10113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.174591][ T5778] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 261.267949][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.291643][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.354242][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.378440][ T5778] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 261.380149][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.397873][ T5778] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 261.413836][T10401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1681'. [ 261.423585][ T5778] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 261.457982][ T5778] usb 2-1: config 220 has no interface number 2 [ 261.464316][ T5778] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 261.517918][ T5778] usb 2-1: config 220 interface 0 has no altsetting 0 [ 261.540473][ T5778] usb 2-1: config 220 interface 76 has no altsetting 0 [ 261.563575][ T5778] usb 2-1: config 220 interface 1 has no altsetting 0 [ 261.585274][ T5778] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 261.606830][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.624444][ T5778] usb 2-1: Product: syz [ 261.634476][ T5778] usb 2-1: Manufacturer: syz [ 261.644984][ T5778] usb 2-1: SerialNumber: syz [ 261.959078][ T5778] usb 2-1: selecting invalid altsetting 0 [ 261.980520][ T5778] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 261.991783][ T5778] usb 2-1: No valid video chain found. [ 262.015893][T10414] program syz.0.1684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.040040][ T5778] usb 2-1: selecting invalid altsetting 0 [ 262.054540][ T5778] usbtest: probe of 2-1:220.1 failed with error -22 [ 262.073475][ T5778] usb 2-1: USB disconnect, device number 14 [ 262.394240][T10431] netlink: 'syz.4.1689': attribute type 32 has an invalid length. [ 262.444829][T10431] bond1: Setting coupled_control to off (0) [ 262.452691][T10431] bond1: entered promiscuous mode [ 262.542301][T10439] block2mtd: error: cannot open device /dev [ 263.100695][T10459] loop4: detected capacity change from 0 to 512 [ 263.147886][T10461] loop2: detected capacity change from 0 to 512 [ 263.206474][T10459] EXT4-fs: Ignoring removed nobh option [ 263.263259][T10461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.298308][T10461] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.353511][T10459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.474540][T10459] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.485290][ T27] audit: type=1800 audit(1787833295.830:38): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1700" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 263.563867][T10459] Quota error (device loop4): do_check_range: Getting block 1280 out of range 0-5 [ 263.687755][T10113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.706380][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.832254][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1707'. [ 264.106070][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 264.136659][T10502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1710'. [ 264.172448][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 264.207106][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1710'. [ 264.367218][T10511] program syz.0.1713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.447291][T10517] input: syz1 as /devices/virtual/input/input19 [ 264.453678][T10517] input: failed to attach handler leds to device input19, error: -6 [ 264.607274][T10519] loop4: detected capacity change from 0 to 2048 [ 264.669569][T10519] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.782117][T10526] bond0: entered promiscuous mode [ 264.808379][T10526] bond_slave_0: entered promiscuous mode [ 264.822570][T10526] bond_slave_1: entered promiscuous mode [ 264.839521][T10526] bond0: left promiscuous mode [ 264.847448][T10526] bond_slave_0: left promiscuous mode [ 264.866390][T10526] bond_slave_1: left promiscuous mode [ 265.222979][T10543] loop0: detected capacity change from 0 to 64 [ 265.307799][T10545] loop1: detected capacity change from 0 to 128 [ 265.753491][ T3537] kworker/u4:8: attempt to access beyond end of device [ 265.753491][ T3537] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 265.813140][T10558] loop4: detected capacity change from 0 to 512 [ 265.882449][T10558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.961855][T10558] ext4 filesystem being mounted at /438/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.111995][T10558] EXT4-fs error (device loop4): ext4_get_first_dir_block:3584: inode #12: comm syz.4.1730: Attempting to read directory block (0) that is past i_size (3) [ 266.327605][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.249349][T10601] loop4: detected capacity change from 0 to 1024 [ 267.275567][T10601] EXT4-fs: Ignoring removed bh option [ 267.308714][T10601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.352188][T10604] loop2: detected capacity change from 0 to 2048 [ 267.424911][T10609] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.485209][ T5836] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 267.582644][T10609] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 267.617788][T10609] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 267.663384][T10609] Remounting filesystem read-only [ 267.709031][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.727754][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.727765][T10113] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 267.739198][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.764622][T10113] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 267.768236][ T5836] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 267.771824][T10113] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 267.807015][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.824511][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.833408][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.868720][ T5836] usb 2-1: config 0 descriptor?? [ 267.870621][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.914909][T10113] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 267.921644][T10113] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 267.938960][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.951096][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.983558][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.998403][T10113] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 268.034481][T10113] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 268.052111][T10113] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 268.069880][T10113] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 268.082808][T10113] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 268.095880][T10113] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 268.103433][T10113] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 268.112668][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.124736][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.133732][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.145338][T10113] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 268.152149][T10113] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 268.162286][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.171661][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.195219][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.211120][T10113] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 268.237724][T10113] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 268.254802][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.263769][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.284759][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.294006][T10113] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 268.298516][T10619] loop4: detected capacity change from 0 to 4096 [ 268.324687][T10113] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 268.332066][T10113] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 268.347235][T10113] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 268.358459][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.369333][T10113] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 268.380229][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.392079][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.413358][T10113] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 268.448941][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.460460][T10619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.491202][T10113] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 268.514053][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.533860][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.553777][T10113] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 268.570573][T10113] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.667037][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.735206][ T5836] hid-led: probe of 0003:27B8:01ED.000A failed with error -71 [ 268.765158][ T5836] usb 2-1: USB disconnect, device number 15 [ 268.892544][T10629] loop4: detected capacity change from 0 to 512 [ 268.938043][T10629] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1757: invalid indirect mapped block 4294967295 (level 1) [ 268.967136][T10629] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1757: invalid indirect mapped block 4294967295 (level 1) [ 268.989630][T10629] EXT4-fs (loop4): 2 truncates cleaned up [ 269.028249][T10629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.129168][T10629] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.4.1757: path /446/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 269.169635][T10637] loop0: detected capacity change from 0 to 2048 [ 269.183700][T10637] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 269.198136][T10637] UDF-fs: Scanning with blocksize 512 failed [ 269.226239][T10637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.301131][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.691927][T10656] bridge_slave_0: left promiscuous mode [ 269.701938][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.745403][T10656] bridge_slave_1: left allmulticast mode [ 269.763142][T10656] bridge_slave_1: left promiscuous mode [ 269.799328][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.840102][T10656] bond0: (slave bond_slave_0): Releasing backup interface [ 269.874052][T10656] bond0: (slave bond_slave_1): Releasing backup interface [ 269.965107][T10656] team0: Port device team_slave_0 removed [ 270.008684][T10656] team0: Port device team_slave_1 removed [ 270.015908][T10656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.023414][T10656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.034022][T10656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.041825][T10656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.074144][T10666] netlink: 'syz.2.1773': attribute type 12 has an invalid length. [ 270.090220][T10666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1773'. [ 270.341004][T10672] loop1: detected capacity change from 0 to 2048 [ 270.380275][T10672] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 270.413066][T10672] UDF-fs: Scanning with blocksize 512 failed [ 270.478138][T10672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.610009][T10684] loop4: detected capacity change from 0 to 512 [ 270.702573][T10684] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1781: inode has both inline data and extents flags [ 270.737258][T10684] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1781: couldn't read orphan inode 15 (err -117) [ 270.826865][T10684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.839280][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 271.036737][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.174835][T10704] Bluetooth: MGMT ver 1.22 [ 271.437637][T10712] loop2: detected capacity change from 0 to 4096 [ 271.495650][T10712] NILFS (loop2): invalid segment: Checksum error in segment payload [ 271.529424][T10712] NILFS (loop2): trying rollback from an earlier position [ 271.582006][T10712] NILFS (loop2): recovery complete [ 271.615601][T10723] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.747386][ T5834] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 271.857956][T10729] loop0: detected capacity change from 0 to 256 [ 271.878863][T10729] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 271.919923][ T5774] block nbd0: Receive control failed (result -32) [ 271.919923][ T5772] block nbd0: Receive control failed (result -32) [ 271.944661][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 271.978762][ T5834] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 272.003010][ T49] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 272.033344][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 272.062757][ T5834] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 272.095140][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.129121][ T5834] usb 2-1: config 0 descriptor?? [ 272.262004][T10738] loop4: detected capacity change from 0 to 1024 [ 272.304337][T10738] EXT4-fs (loop4): stripe (15220) is not aligned with cluster size (16), stripe is disabled [ 272.319126][T10740] Bluetooth: MGMT ver 1.22 [ 272.338883][T10738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.500622][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.586560][ T5834] ntrig 0003:1B96:000A.000B: unknown global tag 0xd [ 272.607224][ T5834] ntrig 0003:1B96:000A.000B: item 0 1 1 13 parsing failed [ 272.622185][ T5834] ntrig 0003:1B96:000A.000B: parse failed [ 272.628739][ T5834] ntrig: probe of 0003:1B96:000A.000B failed with error -22 [ 272.860010][ T5834] usb 2-1: USB disconnect, device number 16 [ 273.047785][T10751] loop2: detected capacity change from 0 to 256 [ 273.068896][T10751] exfat: Deprecated parameter 'namecase' [ 273.089490][T10751] exfat: Deprecated parameter 'namecase' [ 273.104720][T10751] exfat: Deprecated parameter 'namecase' [ 273.163214][T10751] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 273.352394][T10745] loop4: detected capacity change from 0 to 40427 [ 273.394529][T10745] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 273.419060][T10745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 273.494681][T10745] F2FS-fs (loop4): invalid crc value [ 273.522220][T10745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 273.720156][T10760] loop1: detected capacity change from 0 to 256 [ 273.730194][T10745] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 273.745819][T10745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 273.927207][T10745] syz.4.1809: attempt to access beyond end of device [ 273.927207][T10745] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 273.954535][ T5836] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 273.982702][T10745] syz.4.1809: attempt to access beyond end of device [ 273.982702][T10745] loop4: rw=2049, sector=45112, nr_sectors = 16 limit=40427 [ 274.036316][T10745] syz.4.1809: attempt to access beyond end of device [ 274.036316][T10745] loop4: rw=2049, sector=45160, nr_sectors = 32 limit=40427 [ 274.058122][T10745] syz.4.1809: attempt to access beyond end of device [ 274.058122][T10745] loop4: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 274.085054][T10745] syz.4.1809: attempt to access beyond end of device [ 274.085054][T10745] loop4: rw=2049, sector=45240, nr_sectors = 24 limit=40427 [ 274.110785][T10745] syz.4.1809: attempt to access beyond end of device [ 274.110785][T10745] loop4: rw=2049, sector=45280, nr_sectors = 16 limit=40427 [ 274.166264][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 274.177262][ T5928] syz-executor: attempt to access beyond end of device [ 274.177262][ T5928] loop4: rw=2049, sector=45296, nr_sectors = 8 limit=40427 [ 274.188822][ T5836] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 274.214096][ T5928] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 274.214435][ T5836] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 274.239211][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 274.247834][ T5836] usb 3-1: Product: syz [ 274.252069][ T5836] usb 3-1: Manufacturer: syz [ 274.258105][ T5836] usb 3-1: SerialNumber: syz [ 274.268874][ T5836] usb 3-1: config 0 descriptor?? [ 274.274671][T10758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 274.305435][ T5836] hub 3-1:0.0: bad descriptor, ignoring hub [ 274.311430][ T5836] hub: probe of 3-1:0.0 failed with error -5 [ 274.502028][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 274.733423][T10773] loop1: detected capacity change from 0 to 4096 [ 274.748093][T10773] ext4: Unknown parameter 'obj_role' [ 275.031074][T10777] rnbd_client L127: Can't parse path ip:: -22 [ 275.292199][T10783] loop4: detected capacity change from 0 to 4096 [ 275.309991][T10783] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 276.119987][T10792] loop1: detected capacity change from 0 to 1024 [ 276.130890][T10792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.195157][T10792] EXT4-fs (loop1): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 276.235846][T10792] ext4 filesystem being mounted at /495/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.400718][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 276.625238][T10805] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 276.639868][T10805] syzkaller1: linktype set to 826 [ 276.854621][T10811] loop0: detected capacity change from 0 to 2048 [ 276.876987][T10801] loop4: detected capacity change from 0 to 32768 [ 276.958067][T10811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.976531][ T5836] usb 3-1: USB disconnect, device number 17 [ 277.062992][T10801] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.072313][T10811] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.276831][T10811] fs-verity: sha512 using implementation "sha512-avx2" [ 277.304490][T10811] fs-verity (loop0, inode 13): Unsupported log_blocksize: 13 [ 277.421466][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.434798][T10801] XFS (loop4): Ending clean mount [ 277.700290][ T5928] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.884842][ T5778] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 277.983707][T10837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1845'. [ 278.094705][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 278.102568][ T5778] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 278.118482][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.143249][ T5778] usb 1-1: config 0 descriptor?? [ 278.361721][T10849] loop2: detected capacity change from 0 to 1024 [ 278.387777][ T5778] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 278.395600][T10849] EXT4-fs (loop2): stripe (15220) is not aligned with cluster size (16), stripe is disabled [ 278.410786][ T5778] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.426673][ T5778] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 278.434835][ T5778] usb 1-1: media controller created [ 278.464095][ T5778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.470368][T10849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.592554][ T5778] az6027: usb out operation failed. (-71) [ 278.594179][T10113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.598900][ T5778] az6027: usb out operation failed. (-71) [ 278.613806][ T5778] stb0899_attach: Driver disabled by Kconfig [ 278.620207][ T5778] az6027: no front-end attached [ 278.620207][ T5778] [ 278.628987][ T5778] az6027: usb out operation failed. (-71) [ 278.635043][ T5778] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 278.644091][ T5778] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 278.672061][ T5778] dvb-usb: schedule remote query interval to 400 msecs. [ 278.684650][ T5778] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 278.712328][ T5778] usb 1-1: USB disconnect, device number 16 [ 278.774490][ T5815] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 278.806295][ T5778] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 278.967972][ T5815] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 278.978570][ T5815] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 278.990365][ T5815] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 279.004705][ T5815] usb 2-1: config 1 interface 0 has no altsetting 0 [ 279.011350][ T5815] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 279.023762][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.041627][ T5815] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 279.268842][ T5815] scsi host1: usb-storage 2-1:1.0 [ 279.308207][T10864] loop2: detected capacity change from 0 to 32768 [ 279.340588][T10864] JBD2: Ignoring recovery information on journal [ 279.400129][T10864] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 279.516051][ T5507] usb 2-1: USB disconnect, device number 17 [ 279.569730][T10113] ocfs2: Unmounting device (7,2) on (node local) [ 279.832599][T10880] loop0: detected capacity change from 0 to 4096 [ 279.851160][T10880] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 279.922887][T10880] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 279.986642][T10880] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 280.000944][T10880] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 280.009962][T10880] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 280.029739][T10880] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 280.093848][T10880] ntfs: volume version 3.1. [ 280.115347][T10880] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 280.136143][T10880] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 280.296411][T10880] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp932. You might want to try to use the mount option nls=utf8. [ 280.339083][T10880] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 280.671203][T10899] loop4: detected capacity change from 0 to 512 [ 280.718011][T10899] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 280.774220][T10899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 280.784723][T10903] loop1: detected capacity change from 0 to 1024 [ 280.798205][T10899] EXT4-fs (loop4): orphan cleanup on readonly fs [ 280.805699][T10899] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1869: bad orphan inode 3 [ 280.818819][T10899] EXT4-fs (loop4): Remounting filesystem read-only [ 280.827230][T10899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 280.837157][T10903] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 280.859461][T10899] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1869: dx entry: limit 0 != root limit 125 [ 280.872006][T10899] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1869: Corrupt directory, running e2fsck is recommended [ 281.036521][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 281.765748][T10908] loop2: detected capacity change from 0 to 40427 [ 281.796167][T10908] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 281.812298][T10908] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 281.837411][T10908] F2FS-fs (loop2): invalid crc value [ 281.860439][T10908] F2FS-fs (loop2): Found nat_bits in checkpoint [ 281.992375][T10908] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 282.022899][T10908] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 282.164972][T10908] syz.2.1873: attempt to access beyond end of device [ 282.164972][T10908] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.247072][T10927] syz.2.1873: attempt to access beyond end of device [ 282.247072][T10927] loop2: rw=2049, sector=45120, nr_sectors = 32 limit=40427 [ 282.285739][T10927] syz.2.1873: attempt to access beyond end of device [ 282.285739][T10927] loop2: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 282.324737][T10927] syz.2.1873: attempt to access beyond end of device [ 282.324737][T10927] loop2: rw=2049, sector=45200, nr_sectors = 16 limit=40427 [ 282.371191][T10927] syz.2.1873: attempt to access beyond end of device [ 282.371191][T10927] loop2: rw=2049, sector=45232, nr_sectors = 24 limit=40427 [ 282.420123][T10927] syz.2.1873: attempt to access beyond end of device [ 282.420123][T10927] loop2: rw=2049, sector=45272, nr_sectors = 8 limit=40427 [ 282.453919][T10931] loop1: detected capacity change from 0 to 128 [ 282.458023][T10927] syz.2.1873: attempt to access beyond end of device [ 282.458023][T10927] loop2: rw=2049, sector=45288, nr_sectors = 8 limit=40427 [ 282.471820][T10931] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 282.514086][T10113] syz-executor: attempt to access beyond end of device [ 282.514086][T10113] loop2: rw=2049, sector=45296, nr_sectors = 8 limit=40427 [ 282.538160][T10931] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 282.555444][T10113] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 282.645156][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 283.266580][T10946] TCP: tcp_parse_options: Illegal window scaling value 173 > 14 received [ 283.586209][T10950] team0: entered allmulticast mode [ 283.591395][T10950] team_slave_0: entered allmulticast mode [ 283.629700][T10950] team_slave_1: entered allmulticast mode [ 283.645911][T10950] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 283.893586][ T5774] block nbd1: Receive control failed (result -32) [ 283.893586][ T5772] block nbd1: Receive control failed (result -32) [ 284.404588][T10982] input: syz1 as /devices/virtual/input/input21 [ 284.423969][T10986] loop0: detected capacity change from 0 to 64 [ 284.742802][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 284.990000][ T5772] block nbd2: Receive control failed (result -32) [ 285.001740][ T5774] block nbd2: Receive control failed (result -32) [ 285.373744][T11020] input: syz0 as /devices/virtual/input/input22 [ 285.717047][T11034] rt1711h 0-0004: check vid/pid fail [ 285.723074][T11034] rt1711h: probe of 0-0004 failed with error -5 [ 285.738986][T11034] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 285.942650][ T5772] block nbd3: Receive control failed (result -32) [ 285.942650][ T5774] block nbd3: Receive control failed (result -32) [ 286.374680][ T5507] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 286.558428][ T5507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.584123][ T5507] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.612332][T11066] loop4: detected capacity change from 0 to 256 [ 286.619119][ T5507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.631402][ T5507] usb 1-1: config 0 descriptor?? [ 286.729079][T11066] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.894934][ T5507] usbhid 1-1:0.0: can't add hid device: -71 [ 286.925334][ T5507] usbhid: probe of 1-1:0.0 failed with error -71 [ 286.949661][ T5507] usb 1-1: USB disconnect, device number 17 [ 287.071531][T11073] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1948'. [ 287.235239][T11078] loop1: detected capacity change from 0 to 256 [ 287.266296][T11078] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.312734][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1952'. [ 287.314609][T11078] FAT-fs (loop1): Filesystem has been set read-only [ 287.339946][T11078] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.359969][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.360443][T11078] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.409078][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 287.409089][ T27] audit: type=1800 audit(1787833575.778:41): pid=11078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1951" name=CD dev="loop1" ino=1048642 res=0 errno=0 [ 287.535452][ T5507] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 287.645049][T11092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1957'. [ 287.744878][ T5507] usb 1-1: Using ep0 maxpacket: 16 [ 287.760047][ T5507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.800817][ T5507] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 287.821657][ T5507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.859568][ T5507] usb 1-1: config 0 descriptor?? [ 288.298893][ T5507] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 288.328026][ T5507] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 288.380590][ C0] powermate: config urb returned -71 [ 288.386460][ C0] powermate: config urb returned -71 [ 288.391974][ C0] powermate: config urb returned -71 [ 288.400544][ C0] powermate: config urb returned -71 [ 288.409881][ T5507] usb 1-1: USB disconnect, device number 18 [ 288.416383][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 288.538053][T11111] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1967'. [ 289.165458][ T5507] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 289.360901][ T5507] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7 [ 289.373356][ T5507] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 172, changing to 7 [ 289.405801][ T5507] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.424532][ T5507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.440189][ T5507] usb 2-1: Product: syz [ 289.447017][ T5507] usb 2-1: Manufacturer: syz [ 289.451671][ T5507] usb 2-1: SerialNumber: syz [ 289.569252][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 289.697940][ T5507] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 289.726505][ T5507] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 289.775486][ T5507] usb 2-1: USB disconnect, device number 18 [ 289.815284][T11147] loop4: detected capacity change from 0 to 2048 [ 289.888822][T11147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 290.051327][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 290.189656][T11160] loop2: detected capacity change from 0 to 256 [ 290.266464][T11160] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 290.349758][T11162] loop4: detected capacity change from 0 to 512 [ 290.392720][T11162] EXT4-fs (loop4): 1 truncate cleaned up [ 290.405534][T11162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.480677][T11165] loop1: detected capacity change from 0 to 512 [ 290.549316][T11155] loop0: detected capacity change from 0 to 32768 [ 290.615388][T11165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.699903][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.785714][T11169] loop2: detected capacity change from 0 to 512 [ 290.836712][T11169] EXT4-fs: Ignoring removed oldalloc option [ 290.875640][T11169] EXT4-fs (loop2): Test dummy encryption mode enabled [ 290.899430][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.998850][T11169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.288333][T10113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.817376][T11199] loop1: detected capacity change from 0 to 2048 [ 291.911533][T11199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.098077][T11211] netem: change failed [ 292.359432][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.544486][ T5834] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 292.744942][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 292.760720][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.782905][ T5834] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 292.807791][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.848878][ T5834] usb 3-1: config 0 descriptor?? [ 292.944773][T11236] loop1: detected capacity change from 0 to 2048 [ 293.008899][T11236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 293.067654][ T5834] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 293.120546][T11242] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.127769][T11242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.173525][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 293.202649][T11226] loop0: detected capacity change from 0 to 32768 [ 293.253571][T11226] JBD2: Ignoring recovery information on journal [ 293.438099][T11226] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 293.573317][ T5778] usb 3-1: USB disconnect, device number 18 [ 293.818217][T11262] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 293.853233][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 293.904513][ T5815] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 293.935663][T11264] vhci_hcd: not connected 4 [ 294.108735][T11268] loop4: detected capacity change from 0 to 128 [ 294.115765][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 294.129847][ T5815] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 294.142729][T11268] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 294.158704][ T5815] usb 2-1: config 0 has no interface number 0 [ 294.187619][T11270] : renamed from vlan0 (while UP) [ 294.193487][ T5815] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 294.214177][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.235483][ T5815] usb 2-1: Product: syz [ 294.239679][ T5815] usb 2-1: Manufacturer: syz [ 294.254028][ T27] audit: type=1800 audit(1787833582.618:42): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2036" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 294.278711][ T5815] usb 2-1: SerialNumber: syz [ 294.299138][ T5815] usb 2-1: config 0 descriptor?? [ 294.312686][ T5815] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 294.322744][T11268] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 294.520435][ T5815] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 294.565507][ T5815] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 294.763201][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 294.848692][T11286] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000 [ 294.965280][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 294.965656][ T5836] usb 2-1: USB disconnect, device number 19 [ 295.004306][ T5836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 295.043135][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 295.076288][ T5836] quatech2 2-1:0.51: device disconnected [ 295.171695][T11276] loop0: detected capacity change from 0 to 40427 [ 295.188256][T11276] F2FS-fs (loop0): invalid crc value [ 295.205152][T11276] F2FS-fs (loop0): Found nat_bits in checkpoint [ 295.278490][T11276] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 295.485214][T11298] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2046'. [ 295.589975][T11300] loop6: detected capacity change from 0 to 7 [ 295.632484][T11300] Dev loop6: unable to read RDB block 7 [ 295.656716][T11300] loop6: unable to read partition table [ 295.662649][T11300] loop6: partition table beyond EOD, truncated [ 295.680171][T11300] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 296.239967][T11323] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 296.374773][T11331] loop1: detected capacity change from 0 to 256 [ 296.451203][T11331] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 296.531111][T11338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2063'. [ 297.211529][T11353] loop4: detected capacity change from 0 to 2048 [ 297.271149][T11353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.305090][T11353] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 297.338789][T11353] EXT4-fs (loop4): Remounting filesystem read-only [ 297.403924][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.733935][T11367] loop4: detected capacity change from 0 to 256 [ 297.813131][T11367] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 297.904700][ T5815] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 298.025674][T11377] loop4: detected capacity change from 0 to 2048 [ 298.062679][T11377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.155277][ T5815] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.209327][ T5815] usb 3-1: config 0 interface 0 has no altsetting 0 [ 298.242877][ T5815] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 298.275348][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.306018][ T5815] usb 3-1: config 0 descriptor?? [ 298.358976][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.610071][T11383] loop1: detected capacity change from 0 to 32768 [ 298.633801][T11383] JBD2: Ignoring recovery information on journal [ 298.704981][T11383] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 298.730802][ T5815] steelseries 0003:1038:1410.000C: unknown main item tag 0x0 [ 298.744507][ T5815] steelseries 0003:1038:1410.000C: unknown main item tag 0x0 [ 298.751934][ T5815] steelseries 0003:1038:1410.000C: item fetching failed at offset 2/40 [ 298.763437][ T5815] steelseries 0003:1038:1410.000C: parse failed [ 298.774669][ T5815] steelseries: probe of 0003:1038:1410.000C failed with error -22 [ 298.861501][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 298.992084][ T790] usb 3-1: USB disconnect, device number 19 [ 299.628563][T11409] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2093'. [ 299.680262][T11410] loop2: detected capacity change from 0 to 2048 [ 299.732796][T11410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.883578][T11421] loop4: detected capacity change from 0 to 512 [ 299.897320][T11421] EXT4-fs: Ignoring removed nobh option [ 299.913195][T11421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 299.921072][T10113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.950929][T11421] EXT4-fs (loop4): 1 truncate cleaned up [ 299.977871][T11421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.152550][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.351243][T11435] loop1: detected capacity change from 0 to 1024 [ 300.365750][T11435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.413345][T11435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.551772][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.844270][T11429] loop2: detected capacity change from 0 to 32768 [ 300.965194][T11450] program syz.4.2109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.437840][T11466] futex_wake_op: syz.2.2116 tries to shift op by 144; fix this program [ 301.453672][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2117'. [ 301.466086][T11466] futex_wake_op: syz.2.2116 tries to shift op by 144; fix this program [ 301.662335][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2120'. [ 301.675619][T11472] loop1: detected capacity change from 0 to 2048 [ 301.766073][T11472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.815007][T11478] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 301.830944][T11472] EXT4-fs error (device loop1): ext4_ext_precache:639: inode #2: comm syz.1.2119: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 301.865980][T11472] EXT4-fs (loop1): Remounting filesystem read-only [ 301.913404][T11478] EXT4-fs (loop1): Remounting filesystem read-only [ 301.961918][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.207669][T11462] loop4: detected capacity change from 0 to 32768 [ 302.301699][T11462] read_mapping_page failed! [ 302.313422][T11462] ERROR: (device loop4): txCommit: [ 302.313422][T11462] [ 302.869584][T11511] loop4: detected capacity change from 0 to 1024 [ 302.901061][T11511] EXT4-fs: Ignoring removed orlov option [ 302.951761][T11511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.181919][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.650416][T11539] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2147'. [ 303.723403][T11524] loop2: detected capacity change from 0 to 32768 [ 303.772753][T11524] JBD2: Ignoring recovery information on journal [ 303.904719][ T5836] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 303.958572][T11524] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 303.976003][T11552] loop4: detected capacity change from 0 to 512 [ 303.983388][T11552] EXT4-fs: Ignoring removed bh option [ 304.032597][T11552] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 304.102875][T10113] ocfs2: Unmounting device (7,2) on (node local) [ 304.147097][ T5836] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.151684][T11552] EXT4-fs (loop4): 1 truncate cleaned up [ 304.163333][T11552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.194437][ T5836] usb 2-1: config 0 has no interface number 0 [ 304.224113][ T5836] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 304.266731][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.289246][ T5836] usb 2-1: Product: syz [ 304.293572][ T5836] usb 2-1: Manufacturer: syz [ 304.315746][ T5836] usb 2-1: SerialNumber: syz [ 304.336297][ T5836] usb 2-1: config 0 descriptor?? [ 304.384454][ T27] audit: type=1800 audit(1787833592.738:43): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2150" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 304.581550][ T5836] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 304.584639][T11550] loop0: detected capacity change from 0 to 32768 [ 304.626133][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.629272][ T5836] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 304.676789][ T5836] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 304.716063][T11550] find_entry called with index >= next_index [ 304.724177][ T5836] usb 2-1: media controller created [ 304.754005][T11550] find_entry called with index >= next_index [ 304.771797][T11550] find_entry called with index >= next_index [ 304.776983][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.790132][T11550] find_entry called with index >= next_index [ 304.803116][T11550] find_entry called with index >= next_index [ 304.814132][T11550] add_index: next_index = 0. Resetting! [ 304.822702][T11550] find_entry called with index >= next_index [ 304.862171][T11550] find_entry called with index >= next_index [ 304.875203][T11550] find_entry called with index >= next_index [ 304.889104][ T5836] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 304.925272][T11550] non-latin1 character 0x3ff found in JFS file name [ 304.950207][T11550] mount with iocharset=utf8 to access [ 305.108292][ T5836] usb 2-1: USB disconnect, device number 20 [ 305.216626][T11572] loop5: detected capacity change from 0 to 7 [ 305.258798][T11572] Dev loop5: unable to read RDB block 7 [ 305.265443][T11572] loop5: unable to read partition table [ 305.271413][T11572] loop5: partition table beyond EOD, truncated [ 305.278552][T11572] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 305.302942][ T60] loop: Write error at byte offset 8, length 3584. [ 305.310694][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 305.320197][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 305.500137][T11578] ima: policy update failed [ 305.504929][ T27] audit: type=1802 audit(1787833593.878:44): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2164" res=0 errno=0 [ 305.608224][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2166'. [ 305.662753][T11585] loop2: detected capacity change from 0 to 128 [ 305.698142][T11585] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 305.755240][T11585] hpfs: filesystem error: improperly stopped [ 305.761314][T11585] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 305.797714][T11585] hpfs: You really don't want any checks? You are crazy... [ 305.835701][T11585] hpfs: hpfs_map_sector(): read error [ 305.841129][T11585] hpfs: code page support is disabled [ 305.854138][T11585] hpfs: hpfs_map_4sectors(): unaligned read [ 305.885603][T11585] hpfs: hpfs_map_4sectors(): unaligned read [ 305.892194][T11585] hpfs: filesystem error: unable to find root dir [ 305.943048][T11585] hpfs: hpfs_map_4sectors(): unaligned read [ 305.955449][T11585] hpfs: hpfs_map_sector(): read error [ 306.046986][T11599] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.077745][ T27] audit: type=1400 audit(1787833594.448:45): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=11600 comm="syz.4.2173" [ 306.444532][ T5836] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 306.657918][ T5836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 306.668121][ T5836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.688852][ T5836] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 306.714948][ T5836] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 306.744720][ T5836] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 306.769688][ T5836] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 306.787478][ T5836] usb 1-1: config 1 interface 1 has no altsetting 0 [ 306.800454][ T5836] usb 1-1: string descriptor 0 read error: -22 [ 306.818130][ T5836] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 306.842231][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.075456][ T5836] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 307.306109][ T5836] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 307.363055][ T5836] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 307.406431][ T5836] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 307.439961][T11650] loop1: detected capacity change from 0 to 1024 [ 307.457221][ T5836] usb 1-1: USB disconnect, device number 19 [ 307.543048][T11650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 307.591743][T11650] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.701303][T11650] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.2195: Freeing blocks not in datazone - block = 0, count = 16 [ 307.769618][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 307.874244][T11648] loop4: detected capacity change from 0 to 32768 [ 307.942108][T11644] loop2: detected capacity change from 0 to 32768 [ 308.012002][T11644] JBD2: Ignoring recovery information on journal [ 308.167644][T11644] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 308.267486][ T27] audit: type=1800 audit(1787833596.638:46): pid=11665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2199" name="mode" dev="configfs" ino=28129 res=0 errno=0 [ 308.496182][T11671] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2204'. [ 308.552222][T10113] ocfs2: Unmounting device (7,2) on (node local) [ 308.989746][T11685] loop2: detected capacity change from 0 to 2048 [ 309.078740][T11692] loop1: detected capacity change from 0 to 512 [ 309.122239][T11685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.138147][T11692] EXT4-fs (loop1): Test dummy encryption mode enabled [ 309.185446][T11692] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2214: inode has both inline data and extents flags [ 309.224064][T11692] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2214: couldn't read orphan inode 15 (err -117) [ 309.293339][T11692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.412744][T10113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.575766][T11704] bonding: no command found in bonding_masters - use +ifname or -ifname [ 309.613116][T11692] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 309.632266][ T27] audit: type=1800 audit(1787833597.998:47): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2214" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 309.702515][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.849325][T11715] program syz.4.2221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.953404][T11717] sd 0:0:1:0: PR command failed: 1026 [ 309.974541][T11717] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 309.990080][T11717] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 310.028999][T11690] loop0: detected capacity change from 0 to 40427 [ 310.049536][T11690] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 310.064709][T11690] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 310.095249][T11690] F2FS-fs (loop0): heap/no_heap options were deprecated [ 310.123023][T11690] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7ffff [ 310.167137][T11690] F2FS-fs (loop0): invalid crc value [ 310.222981][T11690] F2FS-fs (loop0): Found nat_bits in checkpoint [ 310.427762][T11690] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 310.454298][T11690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 310.645929][ T5769] syz-executor: attempt to access beyond end of device [ 310.645929][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.682413][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 311.001855][T11746] program syz.1.2235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.085769][T11748] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 311.541588][T11760] loop1: detected capacity change from 0 to 256 [ 311.583937][T11764] loop0: detected capacity change from 0 to 1024 [ 311.605758][T11764] EXT4-fs: Ignoring removed bh option [ 311.658239][T11764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.684843][T11764] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2242'. [ 311.753285][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.832604][ T27] audit: type=1326 audit(1787833600.198:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 311.842198][T11771] loop1: detected capacity change from 0 to 256 [ 311.886530][T11771] exfat: Deprecated parameter 'utf8' [ 311.900757][T11771] exfat: Deprecated parameter 'utf8' [ 311.901983][ T27] audit: type=1326 audit(1787833600.198:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 311.908585][T11771] exfat: Deprecated parameter 'utf8' [ 311.942793][ T27] audit: type=1326 audit(1787833600.198:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 311.950273][T11771] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x117c3960, utbl_chksum : 0xe619d30d) [ 311.968859][ T27] audit: type=1326 audit(1787833600.198:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 312.020442][ T27] audit: type=1326 audit(1787833600.198:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc669b9de42 code=0x7ffc0000 [ 312.064092][ T27] audit: type=1326 audit(1787833600.198:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 312.184571][ T27] audit: type=1326 audit(1787833600.198:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc669b5e90e code=0x7ffc0000 [ 312.240208][ T27] audit: type=1326 audit(1787833600.198:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc669b9df07 code=0x7ffc0000 [ 312.293998][ T27] audit: type=1326 audit(1787833600.198:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.2245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc669b5e90e code=0x7ffc0000 [ 312.538049][T11786] loop2: detected capacity change from 0 to 128 [ 312.621072][T11786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 312.702344][T11786] System zones: 1-3, 19-19, 35-36 [ 312.736036][T11786] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 312.889144][T10113] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.284301][T11795] loop0: detected capacity change from 0 to 32768 [ 313.294859][ T5834] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 313.365693][T11795] JBD2: Ignoring recovery information on journal [ 313.403959][T11809] sctp: [Deprecated]: syz.4.2261 (pid 11809) Use of int in max_burst socket option deprecated. [ 313.403959][T11809] Use struct sctp_assoc_value instead [ 313.494472][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 313.503967][T11795] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 313.507776][ T5834] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 313.541913][ T5834] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.581322][ T5834] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.612407][ T5834] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.632704][ T5834] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.652307][ T5834] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.661828][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.847487][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 313.901884][ T5834] usb 3-1: GET_CAPABILITIES returned 0 [ 313.927009][ T5834] usbtmc 3-1:16.0: can't read capabilities [ 314.176258][ T790] usb 3-1: USB disconnect, device number 20 [ 314.274899][ T5778] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 314.485267][ T5778] usb 2-1: Using ep0 maxpacket: 16 [ 314.516858][ T5778] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.545644][ T5778] usb 2-1: config 0 interface 0 has no altsetting 0 [ 314.552660][ T5778] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 314.553773][T11841] loop4: detected capacity change from 0 to 1024 [ 314.566862][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.594865][ T5778] usb 2-1: config 0 descriptor?? [ 314.833505][ T5778] usbhid 2-1:0.0: can't add hid device: -71 [ 314.864585][ T5778] usbhid: probe of 2-1:0.0 failed with error -71 [ 314.884857][ T5778] usb 2-1: USB disconnect, device number 21 [ 314.947837][T11848] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 315.341577][T11844] loop0: detected capacity change from 0 to 32768 [ 315.374780][T11854] loop4: detected capacity change from 0 to 4096 [ 315.395993][T11844] (syz.0.2277,11844,1):ocfs2_journal_addressable:1991 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2 [ 315.396031][T11844] (syz.0.2277,11844,1):ocfs2_check_volume:2486 ERROR: status = -27 [ 315.421492][T11854] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 315.438615][T11844] (syz.0.2277,11844,0):ocfs2_mount_volume:1820 ERROR: status = -27 [ 315.538309][T11844] (syz.0.2277,11844,0):ocfs2_fill_super:1178 ERROR: status = -27 [ 315.904449][T11854] ntfs3: loop4: failed to convert "c46c" to macturkish [ 316.075435][T11866] loop1: detected capacity change from 0 to 4096 [ 316.106893][T11866] EXT4-fs: inline encryption not supported [ 316.162963][T11866] EXT4-fs (loop1): Test dummy encryption mode enabled [ 316.208832][T11866] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 316.274723][T11866] System zones: 0-5 [ 316.343926][T11866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.370779][T11870] loop4: detected capacity change from 0 to 1764 [ 316.549845][ T5834] smpboot: CPU 1 is now offline [ 316.590121][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.599129][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.657595][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.814180][T11877] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 317.570608][T11895] loop0: detected capacity change from 0 to 4096 [ 318.299931][T11913] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2309'. [ 318.314084][T11915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2310'. [ 318.943400][T11899] loop2: detected capacity change from 0 to 32768 [ 319.242104][T11899] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 319.374131][T11899] XFS (loop2): Ending clean mount [ 319.390056][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 319.447876][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 319.786476][T10113] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 319.833026][T11956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2325'. [ 320.077474][T11962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.085347][T11962] IPv6: NLM_F_CREATE should be set when creating new route [ 320.092594][T11962] IPv6: NLM_F_CREATE should be set when creating new route [ 320.183921][T11962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.832956][T11982] bond0: option slaves: invalid value (-veth0) [ 321.019170][T11989] sda1: Can't mount, would change RO state [ 321.471892][T12008] loop4: detected capacity change from 0 to 256 [ 321.500682][T12008] exfat: Deprecated parameter 'namecase' [ 321.544553][T12008] exfat: Deprecated parameter 'namecase' [ 321.578816][T12008] exfat: Deprecated parameter 'utf8' [ 321.618009][T12008] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 321.811853][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 321.902221][T12016] loop4: detected capacity change from 0 to 512 [ 321.928119][T12016] EXT4-fs: Ignoring removed orlov option [ 321.966964][T12016] EXT4-fs (loop4): 1 truncate cleaned up [ 321.996738][T12016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.363951][T12028] loop0: detected capacity change from 0 to 4096 [ 322.828014][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.333813][T12030] loop1: detected capacity change from 0 to 32768 [ 323.493486][T12030] syz.1.2361: attempt to access beyond end of device [ 323.493486][T12030] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 323.569790][T12048] loop0: detected capacity change from 0 to 4096 [ 323.588930][T12048] EXT4-fs: inline encryption not supported [ 323.604308][T12030] lbmIODone: I/O error in JFS log [ 323.656047][T12030] *** Log Format Error ! *** [ 323.669195][T12048] EXT4-fs (loop0): Test dummy encryption mode enabled [ 323.690827][T12030] lmLogInit: exit(-22) [ 323.722937][T12024] loop2: detected capacity change from 0 to 40427 [ 323.730544][T12048] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 323.752690][T12030] lmLogOpen: exit(-22) [ 323.798624][T12048] System zones: 0-5 [ 323.819984][T12048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.846047][T12024] F2FS-fs (loop2): invalid crc value [ 323.925782][T12030] ERROR: (device loop1): jfs_link: read-only filesystem [ 323.925782][T12030] [ 323.980509][T12024] F2FS-fs (loop2): Found nat_bits in checkpoint [ 324.060065][T12030] ERROR: (device loop1): remounting filesystem as read-only [ 324.103015][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.277977][T12024] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 324.308994][T12058] bond2: option ad_user_port_key: invalid value (65535) [ 324.337837][T12058] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 324.369983][T12058] bond2 (unregistering): Released all slaves [ 324.542988][T12024] syz.2.2357: attempt to access beyond end of device [ 324.542988][T12024] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 324.769341][T10113] syz-executor: attempt to access beyond end of device [ 324.769341][T10113] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 324.950936][T10113] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 325.365763][T12086] loop0: detected capacity change from 0 to 64 [ 325.413609][T12086] hfs: request for non-existent node 131072 in B*Tree [ 325.447289][T12086] hfs: request for non-existent node 131072 in B*Tree [ 325.815249][T12092] loop0: detected capacity change from 0 to 2048 [ 325.847122][T12092] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 325.867553][T12075] loop1: detected capacity change from 0 to 40427 [ 325.898627][T12092] UDF-fs: Scanning with blocksize 512 failed [ 325.951570][T12075] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 325.973958][T12092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.999224][T12075] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 326.077217][T12075] F2FS-fs (loop1): heap/no_heap options were deprecated [ 326.129109][T12075] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7ffff [ 326.234646][T12075] F2FS-fs (loop1): invalid crc value [ 326.274659][T12075] F2FS-fs (loop1): Found nat_bits in checkpoint [ 326.501973][T12075] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 326.538889][T12075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 326.729268][ T5834] kernel write not supported for file bpf-map (pid: 5834 comm: kworker/0:7) [ 326.869022][ T5771] syz-executor: attempt to access beyond end of device [ 326.869022][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 327.000823][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 327.130508][T12126] netlink: 'syz.4.2404': attribute type 5 has an invalid length. [ 327.362477][T12131] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 327.482083][T12136] loop4: detected capacity change from 0 to 128 [ 327.526717][T12136] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.608227][T12136] ext4 filesystem being mounted at /640/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 327.846773][ T5928] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.984064][T12140] loop4: detected capacity change from 0 to 128 [ 328.040996][T12140] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.110305][T12140] ext4 filesystem being mounted at /641/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.274020][ T5928] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.480342][T12151] vxcan0: tx address claim with dest, not broadcast [ 328.786042][T12161] loop4: detected capacity change from 0 to 8 [ 328.859111][T12161] SQUASHFS error: Failed to read block 0x26067d: -5 [ 328.890150][T12161] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 328.913200][T12164] program syz.2.2417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.922782][T12161] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 328.938325][ T5834] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 328.948857][ T5834] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 328.966910][ T5834] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 328.983557][ T5834] lpc_ich 0000:00:00.0: No MFD cells added [ 329.007832][ T5834] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 329.035827][ T5834] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 329.060667][ T5834] lpc_ich 0000:00:01.0: I/O space for GPIO uninitialized [ 329.077455][T12167] loop4: detected capacity change from 0 to 512 [ 329.083865][ T5834] lpc_ich 0000:00:01.0: No MFD cells added [ 329.091585][ T5834] lpc_ich 0000:00:01.3: RCBA is disabled by hardware/BIOS, device disabled [ 329.103632][T12167] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 329.129180][ T5834] lpc_ich 0000:00:01.3: I/O space for GPIO uninitialized [ 329.148899][T12167] EXT4-fs (loop4): 1 truncate cleaned up [ 329.161263][ T5834] lpc_ich 0000:00:01.3: No MFD cells added [ 329.181987][T12167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.207216][ T5507] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 329.216893][ T5507] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 329.250998][ T5507] lpc_ich 0000:00:05.0: I/O space for GPIO uninitialized [ 329.270042][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 329.270051][ T27] audit: type=1800 audit(1787833873.627:81): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2419" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 329.321155][ T5507] lpc_ich 0000:00:05.0: No MFD cells added [ 329.376935][ T5772] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 329.383663][ T5774] Bluetooth: hci4: command 0x1003 tx timeout [ 329.446053][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.675745][T12176] block2mtd: illegal erase size [ 329.833324][T12178] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 329.901693][T12178] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 329.942946][T12178] i2c-slave-eeprom: probe of 0-0001 failed with error -22 [ 330.008999][T12178] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 330.784791][ T5507] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 330.849827][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2442'. [ 330.877535][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2442'. [ 330.915475][T12220] erspan0: entered promiscuous mode [ 330.953426][T12220] gretap0: entered promiscuous mode [ 330.994443][ T5507] usb 5-1: Using ep0 maxpacket: 32 [ 331.004331][ T5507] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 126, using maximum allowed: 30 [ 331.063412][ T5507] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.104630][T12224] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 331.112518][ T5507] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 331.143675][T12224] netlink: 'syz.1.2444': attribute type 2 has an invalid length. [ 331.159023][ T5507] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.197479][ T5507] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 331.207969][T12225] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 331.249673][ T5507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.258377][T12225] netlink: 'syz.1.2444': attribute type 2 has an invalid length. [ 331.278667][T12227] bonding: no command found in bonding_masters - use +ifname or -ifname [ 331.291180][ T5507] usb 5-1: config 0 descriptor?? [ 331.335008][T12229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2445'. [ 331.752515][ T5507] logitech 0003:046D:C286.000D: ignoring exceeding usage max [ 331.801040][ T5507] logitech 0003:046D:C286.000D: hidraw0: USB HID v0.01 Device [HID 046d:c286] on usb-dummy_hcd.4-1/input0 [ 331.888398][ T5507] logitech 0003:046D:C286.000D: no inputs found [ 331.984992][T12245] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2453'. [ 332.051037][ T5507] usb 5-1: USB disconnect, device number 13 [ 332.468513][T12233] loop1: detected capacity change from 0 to 40427 [ 332.508418][T12233] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 332.559996][T12233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 332.622879][T12233] F2FS-fs (loop1): invalid crc value [ 332.676567][T12233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 332.768636][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2461'. [ 332.850457][T12233] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 332.889972][T12233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 333.369026][ T5771] syz-executor: attempt to access beyond end of device [ 333.369026][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 333.462548][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 334.211060][T12298] loop4: detected capacity change from 0 to 512 [ 334.253956][T12298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.337490][T12298] ext4 filesystem being mounted at /660/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.577126][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.084529][ T5834] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 335.287194][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 335.313955][ T5834] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 335.353505][ T5834] usb 2-1: config 179 has no interface number 0 [ 335.371931][ T5834] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 335.388297][ T5834] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 335.410508][ T5834] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.459696][ T5834] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 335.533093][ T5834] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 335.617091][ T5834] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.666760][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.730212][T12315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 335.744138][T12346] loop0: detected capacity change from 0 to 512 [ 335.848203][T12346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.945702][T12346] ext4 filesystem being mounted at /606/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.397993][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.527695][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input24 [ 337.063441][ T5834] usb 2-1: USB disconnect, device number 22 [ 337.063477][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 337.077658][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 337.086036][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.093137][ T5834] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 338.449884][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 338.791392][T12406] bond0: no command found in arp_ip_targets file - use + or - [ 339.628453][T12425] loop1: detected capacity change from 0 to 512 [ 339.664865][ T5507] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 339.730048][T12411] loop0: detected capacity change from 0 to 32768 [ 339.745041][T12427] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2532'. [ 339.810780][T12411] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 339.885621][ T5507] usb 3-1: Using ep0 maxpacket: 32 [ 339.918766][ T5507] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 339.983027][ T5507] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 340.021659][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 340.050110][ T5507] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 340.061469][T12411] XFS (loop0): Ending clean mount [ 340.099085][ T5507] usb 3-1: config 1 has no interface number 0 [ 340.123519][ T5507] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.165734][T12411] XFS (loop0): Quotacheck needed: Please wait. [ 340.186135][ T5507] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 340.268526][ T5507] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 340.289600][T12411] XFS (loop0): Quotacheck: Done. [ 340.319720][ T5507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.408338][ T5507] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 340.626234][ T5507] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 340.861512][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 341.125295][T12453] block2mtd: illegal erase size [ 341.180652][ T9] usb 3-1: USB disconnect, device number 21 [ 341.207639][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 341.906377][T12480] bond_slave_0: entered promiscuous mode [ 341.912591][T12480] bond_slave_1: entered promiscuous mode [ 342.008257][T12480] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 342.113150][T12480] bond_slave_0: left promiscuous mode [ 342.118650][T12480] bond_slave_1: left promiscuous mode [ 342.337418][T12488] MTRR 0 not used [ 342.645911][T12498] zero sized request [ 342.953910][T12509] sd 0:0:1:0: PR command failed: 1026 [ 342.970941][T12508] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 342.980942][T12509] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 342.989185][T12511] loop0: detected capacity change from 0 to 256 [ 342.998593][T12508] pim6reg1: group set to 0 [ 343.010594][T12509] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 343.451836][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'. [ 343.486575][T12521] jffs2: notice: (12521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 343.557075][T12522] gretap0: entered promiscuous mode [ 343.562951][T12522] macvlan2: entered allmulticast mode [ 343.618283][T12522] gretap0: entered allmulticast mode [ 343.639977][T12526] loop2: detected capacity change from 0 to 256 [ 343.752761][ T9191] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.127525][T12541] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2578'. [ 344.504334][T12550] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 344.564245][T12550] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 345.060755][T12570] i2c i2c-0: delete_device: Can't parse I2C address [ 345.145183][ T5834] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 345.281869][ T27] audit: type=1326 audit(1787833889.647:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 345.372821][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.410898][ T27] audit: type=1326 audit(1787833889.677:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 345.463655][ T5834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.514477][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.531548][ T5834] usb 5-1: Product: syz [ 345.551461][ T27] audit: type=1326 audit(1787833889.677:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 345.579719][ T5834] usb 5-1: Manufacturer: syz [ 345.584329][ T5834] usb 5-1: SerialNumber: syz [ 345.711626][ T27] audit: type=1326 audit(1787833889.687:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 345.800767][ T27] audit: type=1326 audit(1787833889.687:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 346.164809][ T27] audit: type=1326 audit(1787833889.687:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 346.189490][T12592] loop0: detected capacity change from 0 to 512 [ 346.211760][T12592] EXT4-fs: Ignoring removed mblk_io_submit option [ 346.274884][T12592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 346.310274][ T27] audit: type=1326 audit(1787833889.687:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 346.391337][T12592] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 346.427622][T12592] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 346.439606][ T27] audit: type=1326 audit(1787833889.687:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc669b9e0d9 code=0x7ffc0000 [ 346.475759][T12601] loop1: detected capacity change from 0 to 256 [ 346.490934][T12592] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2604: Failed to acquire dquot type 0 [ 346.567324][T12592] EXT4-fs (loop0): Remounting filesystem read-only [ 346.574138][T12592] EXT4-fs (loop0): 1 orphan inode deleted [ 346.613953][T12592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.669874][T12603] netlink: 844 bytes leftover after parsing attributes in process `syz.2.2608'. [ 346.679791][T12592] ext4 filesystem being mounted at /631/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.740549][ T5834] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 346.749708][ T5834] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 346.807457][ T5834] cdc_ncm 5-1:1.0: bind() failure [ 346.849512][ T5834] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 346.871971][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.902175][ T5834] cdc_ncm 5-1:1.1: bind() failure [ 346.970560][ T5834] usb 5-1: USB disconnect, device number 14 [ 348.318727][T12623] loop2: detected capacity change from 0 to 32768 [ 348.405112][T12623] [ 348.405112][T12623] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 348.405112][T12623] [ 348.611517][T12655] loop4: detected capacity change from 0 to 4096 [ 348.641270][T10113] [ 348.641270][T10113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 348.641270][T10113] [ 348.692436][T12658] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.769844][T10113] [ 348.769844][T10113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 348.769844][T10113] [ 348.814291][T12655] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 348.977709][T12662] loop1: detected capacity change from 0 to 2048 [ 349.025170][T12662] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 349.090704][T12662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.414063][T12668] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 350.097576][T12694] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 350.113946][T12696] loop2: detected capacity change from 0 to 512 [ 350.143505][T12696] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2652: Invalid inode bitmap blk 4 in block_group 0 [ 350.191877][T12696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.302226][T12699] loop4: detected capacity change from 0 to 1024 [ 350.358662][T10113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.368269][T12699] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 351.019202][T12719] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.289223][T12766] loop2: detected capacity change from 0 to 256 [ 352.603288][T12774] loop4: detected capacity change from 0 to 512 [ 352.614471][ T5507] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 352.640432][T12774] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 352.700589][T12774] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 352.774478][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 352.793587][ T60] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 352.804549][ T5507] usb 2-1: Using ep0 maxpacket: 16 [ 352.830925][T12760] loop0: detected capacity change from 0 to 40427 [ 352.843697][ T5507] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 352.863587][ T5507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.876060][ T5507] usb 2-1: Product: syz [ 352.887034][ T5507] usb 2-1: Manufacturer: syz [ 352.903419][ T5507] usb 2-1: SerialNumber: syz [ 352.940897][T12760] F2FS-fs (loop0): Found nat_bits in checkpoint [ 352.957561][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 352.988206][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 353.022874][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.061806][ T9] usb 3-1: Product: syz [ 353.074712][ T9] usb 3-1: Manufacturer: syz [ 353.091390][ T9] usb 3-1: SerialNumber: syz [ 353.130822][ T5507] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 353.167114][T12760] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 353.185997][ T5507] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 353.224793][ T5507] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 353.249112][ T5507] usb 2-1: media controller created [ 353.295120][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 353.295134][ T27] audit: type=1800 audit(1787833897.667:101): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2682" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 353.344842][T12784] loop4: detected capacity change from 0 to 128 [ 353.359396][ T5507] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.368696][T12760] syz.0.2682: attempt to access beyond end of device [ 353.368696][T12760] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 353.385142][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 353.394118][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 353.404219][T12784] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 353.443784][T12784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.477843][ T9] usb 3-1: USB disconnect, device number 22 [ 353.513943][ T5769] syz-executor: attempt to access beyond end of device [ 353.513943][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 353.546193][ T5507] zl10353_read_register: readreg error (reg=127, ret==-71) [ 353.608314][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 353.696331][ T5507] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 353.724880][ T5507] usb 2-1: USB disconnect, device number 23 [ 353.878330][T12788] loop4: detected capacity change from 0 to 2048 [ 353.939626][ T3489] wlan1: Trigger new scan to find an IBSS to join [ 353.947273][T12788] loop4: p1 < > p4 [ 353.947273][T12788] p4: [ 353.976517][T12788] loop4: p4 size 722688 extends beyond EOD, truncated [ 354.014828][T12788] loop4: p6 start 262464109 is beyond EOD, truncated [ 354.021963][T12788] loop4: p7 size 2304 extends beyond EOD, truncated [ 354.340496][T12794] loop1: detected capacity change from 0 to 1764 [ 354.444460][T12794] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 354.729146][T12806] loop0: detected capacity change from 0 to 512 [ 354.788628][T12806] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2702: invalid indirect mapped block 256 (level 2) [ 354.867114][T12806] EXT4-fs (loop0): 2 truncates cleaned up [ 354.902659][T12806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.033329][T12806] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.2702: bg 0: block 5: invalid block bitmap [ 355.120214][T12816] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 355.163490][T12806] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 355.193899][T12816] EXT4-fs (loop0): This should not happen!! Data will be lost [ 355.193899][T12816] [ 355.235191][T12806] EXT4-fs (loop0): This should not happen!! Data will be lost [ 355.235191][T12806] [ 355.261661][T12816] EXT4-fs (loop0): Total free blocks count 0 [ 355.285206][T12806] EXT4-fs (loop0): Total free blocks count 0 [ 355.314572][T12816] EXT4-fs (loop0): Free/Dirty block details [ 355.335304][T12806] EXT4-fs (loop0): Free/Dirty block details [ 355.363172][T12816] EXT4-fs (loop0): free_blocks=0 [ 355.846039][T12841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2715'. [ 356.780978][T12853] loop0: detected capacity change from 0 to 32768 [ 356.852394][T12853] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 356.969234][T12853] XFS (loop0): Ending clean mount [ 356.975258][ T12] wlan1: Trigger new scan to find an IBSS to join [ 357.084406][ T27] audit: type=1800 audit(1787833901.447:102): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2721" name="file1" dev="loop0" ino=5766 res=0 errno=0 [ 357.220727][ T5769] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 357.737584][T12864] loop2: detected capacity change from 0 to 40427 [ 357.758699][T12883] loop0: detected capacity change from 0 to 1024 [ 357.772518][T12864] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 357.789091][T12864] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 357.815078][T12885] loop4: detected capacity change from 0 to 256 [ 357.821709][T12864] F2FS-fs (loop2): invalid crc value [ 357.836035][T12883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.882723][T12885] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 357.950670][ T3489] wlan1: Creating new IBSS network, BSSID da:ae:1e:f1:82:82 [ 358.014212][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.166344][T12864] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 358.202668][T12864] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 358.303728][T12864] syz.2.2726: attempt to access beyond end of device [ 358.303728][T12864] loop2: rw=2049, sector=53248, nr_sectors = 72 limit=40427 [ 358.323845][T12898] loop1: detected capacity change from 0 to 164 [ 358.381114][T12900] loop4: detected capacity change from 0 to 1024 [ 358.584546][T10113] syz-executor: attempt to access beyond end of device [ 358.584546][T10113] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 358.618420][T12904] ip_tables: iptables: counters copy to user failed while replacing table [ 358.633846][T12903] loop0: detected capacity change from 0 to 1764 [ 358.652171][T10113] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 359.422689][T12928] loop6: detected capacity change from 0 to 524288000 [ 359.581240][ T5815] hid-generic 0005:0B57:05DF.000E: item fetching failed at offset 0/1 [ 359.632776][ T5815] hid-generic: probe of 0005:0B57:05DF.000E failed with error -22 [ 359.945845][T12945] loop4: detected capacity change from 0 to 512 [ 359.975029][T12945] EXT4-fs: inline encryption not supported [ 360.014836][T12945] ext4: Unknown parameter 'hash' [ 360.105406][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 360.317450][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'. [ 360.632473][T12967] ================================================================== [ 360.632483][T12967] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0 [ 360.632500][T12967] Write of size 4 at addr ffffc90003da9000 by task syz.4.2766/12967 [ 360.632510][T12967] [ 360.632519][T12967] CPU: 0 PID: 12967 Comm: syz.4.2766 Not tainted syzkaller #0 [ 360.632530][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.632542][T12967] Call Trace: [ 360.632548][T12967] [ 360.632553][T12967] dump_stack_lvl+0x18c/0x250 [ 360.632567][T12967] ? sys_imageblit+0x1bac/0x25d0 [ 360.632577][T12967] ? show_regs_print_info+0x20/0x20 [ 360.632589][T12967] ? load_image+0x420/0x420 [ 360.632599][T12967] ? mark_lock+0x94/0x320 [ 360.632614][T12967] print_report+0xa8/0x210 [ 360.632625][T12967] ? sys_imageblit+0x1bac/0x25d0 [ 360.632634][T12967] kasan_report+0x117/0x150 [ 360.632647][T12967] ? sys_imageblit+0x1bac/0x25d0 [ 360.632659][T12967] sys_imageblit+0x1bac/0x25d0 [ 360.632672][T12967] ? sys_copyarea+0x2530/0x2530 [ 360.632685][T12967] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 360.632701][T12967] soft_cursor+0xa01/0xc30 [ 360.632717][T12967] bit_cursor+0x16dd/0x1f60 [ 360.632736][T12967] ? bit_clear_margins+0x550/0x550 [ 360.632751][T12967] ? get_color+0x2e8/0x4d0 [ 360.632763][T12967] ? bit_clear_margins+0x550/0x550 [ 360.632777][T12967] ? fbcon_cursor+0x430/0x640 [ 360.632789][T12967] ? add_softcursor+0x8c/0x440 [ 360.632802][T12967] con_flush_chars+0x1fa/0x280 [ 360.632815][T12967] con_write+0x2e/0x40 [ 360.632827][T12967] do_output_char+0x64a/0x960 [ 360.632842][T12967] __process_echoes+0x2e0/0x9f0 [ 360.632858][T12967] n_tty_receive_buf_common+0xc81/0x1380 [ 360.632879][T12967] ? paste_selection+0x1cb/0x4d0 [ 360.632893][T12967] paste_selection+0x329/0x4d0 [ 360.632909][T12967] ? set_selection_kernel+0x17b0/0x17b0 [ 360.632924][T12967] ? do_task_dead+0xd0/0xd0 [ 360.632934][T12967] ? __might_fault+0xaa/0x120 [ 360.632945][T12967] ? __might_fault+0xc6/0x120 [ 360.632954][T12967] ? __might_fault+0xaa/0x120 [ 360.632965][T12967] ? tioclinux+0x34e/0x450 [ 360.632977][T12967] vt_ioctl+0x813/0x1f20 [ 360.632992][T12967] ? __vt_event_wait+0x260/0x260 [ 360.633008][T12967] ? __fget_files+0x28/0x460 [ 360.633022][T12967] ? tty_jobctrl_ioctl+0x378/0xba0 [ 360.633035][T12967] tty_ioctl+0x91e/0xdc0 [ 360.633046][T12967] ? tty_get_icount+0xb0/0xb0 [ 360.633058][T12967] __se_sys_ioctl+0xfd/0x170 [ 360.633072][T12967] do_syscall_64+0x55/0xb0 [ 360.633083][T12967] ? clear_bhb_loop+0x40/0x90 [ 360.633094][T12967] ? clear_bhb_loop+0x40/0x90 [ 360.633106][T12967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.633122][T12967] RIP: 0033:0x7fb42299e0d9 [ 360.633136][T12967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.633145][T12967] RSP: 002b:00007fb423931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.633157][T12967] RAX: ffffffffffffffda RBX: 00007fb422c25fa0 RCX: 00007fb42299e0d9 [ 360.633166][T12967] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 360.633174][T12967] RBP: 00007fb422a35024 R08: 0000000000000000 R09: 0000000000000000 [ 360.633180][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.633193][T12967] R13: 00007fb422c26038 R14: 00007fb422c25fa0 R15: 00007ffe09b7f948 [ 360.633205][T12967] [ 360.633209][T12967] [ 360.633211][T12967] The buggy address belongs to a 768-page vmalloc region starting at 0xffffc90003aa9000 allocated at drm_fbdev_generic_helper_fb_probe+0x247/0x520 [ 360.633235][T12967] Memory state around the buggy address: [ 360.633240][T12967] ffffc90003da8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.633247][T12967] ffffc90003da8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 360.633254][T12967] >ffffc90003da9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 360.633258][T12967] ^ [ 360.633264][T12967] ffffc90003da9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 360.633270][T12967] ffffc90003da9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 360.633275][T12967] ================================================================== [ 360.635661][T12967] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 360.635674][T12967] CPU: 0 PID: 12967 Comm: syz.4.2766 Not tainted syzkaller #0 [ 360.635694][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.635705][T12967] Call Trace: [ 360.635712][T12967] [ 360.635720][T12967] dump_stack_lvl+0x18c/0x250 [ 360.635748][T12967] ? show_regs_print_info+0x20/0x20 [ 360.635771][T12967] ? load_image+0x420/0x420 [ 360.635795][T12967] panic+0x2ca/0x720 [ 360.635823][T12967] ? bpf_jit_dump+0xd0/0xd0 [ 360.635850][T12967] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 360.635870][T12967] ? _raw_spin_unlock+0x40/0x40 [ 360.635886][T12967] ? print_memory_metadata+0x314/0x400 [ 360.635908][T12967] ? sys_imageblit+0x1bac/0x25d0 [ 360.635925][T12967] check_panic_on_warn+0x84/0xa0 [ 360.635950][T12967] ? sys_imageblit+0x1bac/0x25d0 [ 360.635966][T12967] end_report+0x6f/0x130 [ 360.635989][T12967] kasan_report+0x128/0x150 [ 360.636013][T12967] ? sys_imageblit+0x1bac/0x25d0 [ 360.636034][T12967] sys_imageblit+0x1bac/0x25d0 [ 360.636059][T12967] ? sys_copyarea+0x2530/0x2530 [ 360.636083][T12967] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 360.636110][T12967] soft_cursor+0xa01/0xc30 [ 360.636139][T12967] bit_cursor+0x16dd/0x1f60 [ 360.636174][T12967] ? bit_clear_margins+0x550/0x550 [ 360.636210][T12967] ? get_color+0x2e8/0x4d0 [ 360.636232][T12967] ? bit_clear_margins+0x550/0x550 [ 360.636258][T12967] ? fbcon_cursor+0x430/0x640 [ 360.636280][T12967] ? add_softcursor+0x8c/0x440 [ 360.636304][T12967] con_flush_chars+0x1fa/0x280 [ 360.636328][T12967] con_write+0x2e/0x40 [ 360.636354][T12967] do_output_char+0x64a/0x960 [ 360.636381][T12967] __process_echoes+0x2e0/0x9f0 [ 360.636412][T12967] n_tty_receive_buf_common+0xc81/0x1380 [ 360.636453][T12967] ? paste_selection+0x1cb/0x4d0 [ 360.636481][T12967] paste_selection+0x329/0x4d0 [ 360.636512][T12967] ? set_selection_kernel+0x17b0/0x17b0 [ 360.636540][T12967] ? do_task_dead+0xd0/0xd0 [ 360.636560][T12967] ? __might_fault+0xaa/0x120 [ 360.636580][T12967] ? __might_fault+0xc6/0x120 [ 360.636598][T12967] ? __might_fault+0xaa/0x120 [ 360.636618][T12967] ? tioclinux+0x34e/0x450 [ 360.636641][T12967] vt_ioctl+0x813/0x1f20 [ 360.636669][T12967] ? __vt_event_wait+0x260/0x260 [ 360.636700][T12967] ? __fget_files+0x28/0x460 [ 360.636727][T12967] ? tty_jobctrl_ioctl+0x378/0xba0 [ 360.636752][T12967] tty_ioctl+0x91e/0xdc0 [ 360.636775][T12967] ? tty_get_icount+0xb0/0xb0 [ 360.636797][T12967] __se_sys_ioctl+0xfd/0x170 [ 360.636822][T12967] do_syscall_64+0x55/0xb0 [ 360.636843][T12967] ? clear_bhb_loop+0x40/0x90 [ 360.636865][T12967] ? clear_bhb_loop+0x40/0x90 [ 360.636887][T12967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.636910][T12967] RIP: 0033:0x7fb42299e0d9 [ 360.636926][T12967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.636944][T12967] RSP: 002b:00007fb423931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.636966][T12967] RAX: ffffffffffffffda RBX: 00007fb422c25fa0 RCX: 00007fb42299e0d9 [ 360.636981][T12967] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 360.636995][T12967] RBP: 00007fb422a35024 R08: 0000000000000000 R09: 0000000000000000 [ 360.637008][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.637020][T12967] R13: 00007fb422c26038 R14: 00007fb422c25fa0 R15: 00007ffe09b7f948 [ 360.637042][T12967] [ 360.637282][T12967] Kernel Offset: disabled