last executing test programs: 2m10.34802458s ago: executing program 0 (id=8318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 2m10.186052293s ago: executing program 0 (id=8328): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000200)=0xffff0000, 0x4) 2m10.035746778s ago: executing program 0 (id=8323): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x18, '\x00', @buffer={"f335f2a95f2639f01c13d5007fbb7424b5e5c361de6d9c57c7b5b0bc0dc4a01f", 0x20}, 0x7a7ce1c2}, {0x9, '\x00', @data=0x7, 0x8}, {0x13, '\x00', @buffer={"638391fa1b5e124b43175553975a2561ead98593e9060ad61456e06afea3cd65", 0x20}, 0x7ff}]}) 2m9.960119125s ago: executing program 0 (id=8325): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$eJzs3N9u29YZAPBDx441FwsGFGvSNEDZNBfZRRxJXhwY3UU0mrLZSqJA0kVyNRSL0wWzu2HZgDV3udlWYMOudj30dk+wJ9jTrM+QgfqT2JZjLU0XZcDvB8Q81Pl4zncY4hyIEBkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBAl281mKwq9bLAXluIXSraLvP/i6nja3j+PbY5Zef73X/+OQojqf6HRCJfG9Zfefh77w/rP1XBxvHcxNOpNIzx+650ffPT28lJ94EoUhTMSei0effn4l58dHOz/ZtGJLMhOOsjKPOt3vhdCKPN4a3OzeXO3W8bdrJeW98oq7cdJkXaqvIivJ3dCCFsbcbp+L98b7Gx3eml8PflR3Nraun2j3Wxuxh+vD9NOUeaDmx+vl8lu1utlg51RTF19o/1+uF1fiJ9kVVylnX4cP3h4sL8xL8k6qPXfBLXnBbWb7Xar1W63Nm9t3brdbDYmV+uzD5abJ4SThywv/qLltTs/uVBGO9M57vx3OY/Dt/E0+euiUwAAAAD+x6LRPfZodF/+0qjUzXpp81jM02hh6QEAAADfgdFX+4uTGwAhXArR7Pd/AAAA4P/bn858xi5EUSiHq9H0UZXh3WvRYacudQ7PjT86d7LFqns5ujBpZLTZXJ7sJemV6N1x0LvT6G8mmwfz8oiKYiV68moJhD+Hy+OYy/fH2/vTmnEva92sl64n+c3lEDqdC0tVerf63RcPfx9CUTw999WgfyEKDx4e7K///FcH90e5PKlbeXI4+YXE2tm5rIYjufz22XOPkxHfOT7ildGNmHrUXw36a+N+m0fHvzQ+fOklxv+H8N445r1JpmvHx9+o+2ytf9SaGf3RLFrDu9dWJ51NRz7zE5Ezs7gyjrly/cN68+H1Sc3KkSza87JoHz3/3+pcnJJF48S52JiXxcYrZgGwKA9OrkIz6//Mujua3q6tzDR1xiw3Z3Wvl/C5q/svXtDL+fB8Rv9gHPPB5eXnK9KJGb05b0ZvnrKun7a6hXD6WP8Rrv79byHshavT4BetsXW/fzm2qkaHX9cHfD3T7/RJ87LXjuqdc6uHvw7vPPry8Y2Hh599vv/5/hft9sZm88fN5q12WBkNY7Kx9gBwirT4Jlqr/hgVRTb8WWtrq9WpdtO4yJNP4iLb3knjbFClRbLbGeyk8bDIqzzJe3Xh02w7LeNybzjMiyru5kU8zMvs7ujNL/Hk1S9l2u8Mqiwph720U6Zxkg+qTlLF21mZxMO9n/aycjctRgeXwzTJulnSqbJ8EJf5XpGk63FcpumRwGw7HVRZN6uLg3hYZP1OcS/+NO/t9dN4Oy2TIhtW+bjBaV/ZoJsX/VGz64s+2QDwhngUJm+we/Yqu5cuhMacmEWPEQA47uQqvbrohAAAAAAAAAAAAAAAgBlHH9f7yeTFZa/8ROBiC3feOq3q/cUndrQQQlh+iaOm/13Hq4aLHsWCz+Fr7KvxZgx5+tats4PrqNOrohDC/L6+X8csaEICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDP8JwAA///H8oyP") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 2m9.595767754s ago: executing program 0 (id=8331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x470bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d5f, 0x104}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x800) 2m9.160083441s ago: executing program 0 (id=8338): r0 = socket$inet(0x2, 0x3, 0x5) write$binfmt_elf64(r0, 0x0, 0xfffffd61) 2m8.871083652s ago: executing program 32 (id=8338): r0 = socket$inet(0x2, 0x3, 0x5) write$binfmt_elf64(r0, 0x0, 0xfffffd61) 2m0.2919108s ago: executing program 2 (id=8392): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x1, {0x1, 0x3, 0x1, 0x401}, {0x4, 0x2, 0x4, 0xf790}, {0xa47, 0x5}}) 2m0.133364843s ago: executing program 2 (id=8394): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000001600), 0x42fffffe) 1m59.951851482s ago: executing program 2 (id=8396): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0xa00004, &(0x7f0000000500)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@mode={'mode', 0x3d, 0x8}}, {}, {@adinicb}, {@gid_forget}, {@uid_forget}, {@umask}, {@anchor={'anchor', 0x3d, 0x906}}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1m59.511158068s ago: executing program 2 (id=8402): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$eJzs3N9u29YZAPBDx441FwsGFGvSNEDZNBfZRRxJXhwY3UU0mrLZSqJA0kVyNRSL0wWzu2HZgDV3udlWYMOudj30dk+wJ9jTrM+QgfqT2JZjLU0XZcDvB8Q81Pl4zncY4hyIEBkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBAl281mKwq9bLAXluIXSraLvP/i6nja3j+PbY5Zef73X/+OQojqf6HRCJfG9Zfefh77w/rP1XBxvHcxNOpNIzx+650ffPT28lJ94EoUhTMSei0effn4l58dHOz/ZtGJLMhOOsjKPOt3vhdCKPN4a3OzeXO3W8bdrJeW98oq7cdJkXaqvIivJ3dCCFsbcbp+L98b7Gx3eml8PflR3Nraun2j3Wxuxh+vD9NOUeaDmx+vl8lu1utlg51RTF19o/1+uF1fiJ9kVVylnX4cP3h4sL8xL8k6qPXfBLXnBbWb7Xar1W63Nm9t3brdbDYmV+uzD5abJ4SThywv/qLltTs/uVBGO9M57vx3OY/Dt/E0+euiUwAAAAD+x6LRPfZodF/+0qjUzXpp81jM02hh6QEAAADfgdFX+4uTGwAhXArR7Pd/AAAA4P/bn858xi5EUSiHq9H0UZXh3WvRYacudQ7PjT86d7LFqns5ujBpZLTZXJ7sJemV6N1x0LvT6G8mmwfz8oiKYiV68moJhD+Hy+OYy/fH2/vTmnEva92sl64n+c3lEDqdC0tVerf63RcPfx9CUTw999WgfyEKDx4e7K///FcH90e5PKlbeXI4+YXE2tm5rIYjufz22XOPkxHfOT7ildGNmHrUXw36a+N+m0fHvzQ+fOklxv+H8N445r1JpmvHx9+o+2ytf9SaGf3RLFrDu9dWJ51NRz7zE5Ezs7gyjrly/cN68+H1Sc3KkSza87JoHz3/3+pcnJJF48S52JiXxcYrZgGwKA9OrkIz6//Mujua3q6tzDR1xiw3Z3Wvl/C5q/svXtDL+fB8Rv9gHPPB5eXnK9KJGb05b0ZvnrKun7a6hXD6WP8Rrv79byHshavT4BetsXW/fzm2qkaHX9cHfD3T7/RJ87LXjuqdc6uHvw7vPPry8Y2Hh599vv/5/hft9sZm88fN5q12WBkNY7Kx9gBwirT4Jlqr/hgVRTb8WWtrq9WpdtO4yJNP4iLb3knjbFClRbLbGeyk8bDIqzzJe3Xh02w7LeNybzjMiyru5kU8zMvs7ujNL/Hk1S9l2u8Mqiwph720U6Zxkg+qTlLF21mZxMO9n/aycjctRgeXwzTJulnSqbJ8EJf5XpGk63FcpumRwGw7HVRZN6uLg3hYZP1OcS/+NO/t9dN4Oy2TIhtW+bjBaV/ZoJsX/VGz64s+2QDwhngUJm+we/Yqu5cuhMacmEWPEQA47uQqvbrohAAAAAAAAAAAAAAAgBlHH9f7yeTFZa/8ROBiC3feOq3q/cUndrQQQlh+iaOm/13Hq4aLHsWCz+Fr7KvxZgx5+tats4PrqNOrohDC/L6+X8csaEICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDP8JwAA///H8oyP") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 1m58.893730594s ago: executing program 2 (id=8406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0x1, 0xffffffff}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f00000001c0)="1adf"}, 0x20) 1m58.295847774s ago: executing program 2 (id=8413): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x7, 0xfffffff9}) 1m57.890177066s ago: executing program 33 (id=8413): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x7, 0xfffffff9}) 4.069902945s ago: executing program 1 (id=9964): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x800, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a7ddf8a69ea917ded5ba193b3e7772fd29f35239d2", "530bf65043114b2e53000006000000000010e200", [0x1000000000]}}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402010202"], 0x0) 2.428890429s ago: executing program 1 (id=9986): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 2.236074037s ago: executing program 1 (id=9989): r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x6, 0x0, 0x44) 2.104904664s ago: executing program 1 (id=9991): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 941.471079ms ago: executing program 5 (id=10008): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 785.013212ms ago: executing program 3 (id=10010): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) landlock_restrict_self(0xffffffffffffffff, 0x0) 784.353612ms ago: executing program 4 (id=10011): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) 713.24298ms ago: executing program 5 (id=10012): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 663.017772ms ago: executing program 4 (id=10013): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, 0x0, &(0x7f0000000280)) 630.726077ms ago: executing program 3 (id=10014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 557.441924ms ago: executing program 4 (id=10015): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000002c0)=""/151, 0x97}, {0x0}], 0x2) 545.552972ms ago: executing program 5 (id=10016): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) 528.926479ms ago: executing program 3 (id=10017): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 432.794563ms ago: executing program 5 (id=10018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x4, 0x4, 0xfe5f}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20) 417.256501ms ago: executing program 4 (id=10019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)={0x20, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x4, 0x17}]}, 0x20}], 0x1}, 0x0) 335.742907ms ago: executing program 4 (id=10020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) 278.379797ms ago: executing program 3 (id=10021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 277.904507ms ago: executing program 5 (id=10022): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 202.290825ms ago: executing program 3 (id=10023): r0 = signalfd(0xffffffffffffffff, &(0x7f00000006c0)={[0x2]}, 0x8) setns(r0, 0x4000000) 149.464635ms ago: executing program 4 (id=10024): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000200)={[{@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@bsdgroups}, {@quota}, {@grpjquota}, {@orlov}, {@abort}, {@jqfmt_vfsv1}, {@nojournal_checksum}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 148.762725ms ago: executing program 1 (id=10025): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 99.870677ms ago: executing program 5 (id=10026): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000840)='./file0\x00', 0x1810002, &(0x7f00000030c0)=ANY=[], 0x1, 0x1f0, &(0x7f0000000640)="$eJzs28tO1GAYxvHn6xwKeD5tXJm40I1THSZRdnIB3oA7ApUQixpxAyERNt6Hl+HOO3HlDhK5gpoeSO0wPUxLp+Pw/yXAS+nT7yXhLd80IABX1u3wvZFRL6x83//6SNLbN5K6udH+TBoE0BjfREOf0kvK/vjXIksTUgD+O50/k4/bmQP+47ywiu8Cv6s3BqBhp+udcB/w00i/zg43T84OTbQzOCq1fzhdt6RO/EmUD9/60lKp/HG03MOudPJP3lb6AiajHf97lH+idH65VPfJ+itj+ZWiYPCSKXBshR+ePk7nr0m6LumGpJuSbsWvte5Iujth/a2x9R+U7B+oI/jpG6SO5I7thScCYX6Qk7Dz1w+m592O5z4vajRDL86/qJjvx/lhzfxqxbwd5webH72tzLNeV7w6kM+6MP/TKZz/TMnjwzrz351i/nsV1wAW1d7+wfsNz3M/T19YlVIFRXA/udQLzmNhNBdtNFycbySDI8Ftujj1rfWeL68w0lHeOcutd1hQtHxjAtA458vuJ2dv/+DZzu7GtrvtfhiO1l6NVoejl2tOuC936uzOAcyz5Jd+ufPz/yQIAAAAAAAAAAAAAAC04Z6k+203AQAAAGAmZvHvRG1/jwAAAAAAAAAAAAAAAAAAAMCi+BsAAP//YQk0jg==") symlink(&(0x7f0000000100)='./bus/\x00', &(0x7f0000000140)='./bus\x00') 52.233069ms ago: executing program 3 (id=10027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x40}}, 0x0) 0s ago: executing program 1 (id=10028): r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xb}}) kernel console output (not intermixed with test programs): c 0x0c03 length: 249 > 1 [ 1057.060045][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1057.068676][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1057.078956][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1057.093299][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1057.110274][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1057.172190][ T5849] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1057.229074][T24893] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1057.470714][T25205] chnl_net:caif_netlink_parms(): no params data found [ 1057.675002][T25205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.682732][T25205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.690132][T25205] bridge_slave_0: entered allmulticast mode [ 1057.691401][T25205] bridge_slave_0: entered promiscuous mode [ 1057.705714][T25205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.713035][T25205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.720486][T25205] bridge_slave_1: entered allmulticast mode [ 1057.728245][T25205] bridge_slave_1: entered promiscuous mode [ 1057.737156][T25227] loop1: detected capacity change from 0 to 1024 [ 1057.758875][T25227] EXT4-fs: Ignoring removed mblk_io_submit option [ 1057.760355][T25205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.788909][T25205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.799603][T25227] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1057.853197][T25205] team0: Port device team_slave_0 added [ 1057.856712][T25227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.867309][T25205] team0: Port device team_slave_1 added [ 1057.882308][T25232] netlink: 'syz.4.8425': attribute type 1 has an invalid length. [ 1057.963808][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.069218][T25235] netlink: 'syz.4.8427': attribute type 5 has an invalid length. [ 1058.119074][T25205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.149016][T25205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.214154][T25205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.233761][T25205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.250346][T25205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.276969][T25205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.315074][T25241] netlink: 'syz.1.8429': attribute type 21 has an invalid length. [ 1058.323543][T25241] IPv6: NLM_F_CREATE should be specified when creating new route [ 1058.332440][T25241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8429'. [ 1058.557488][T25205] hsr_slave_0: entered promiscuous mode [ 1058.576105][T25205] hsr_slave_1: entered promiscuous mode [ 1058.585604][T25205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.623050][T25205] Cannot create hsr debugfs directory [ 1059.073558][T25261] netlink: 'syz.3.8437': attribute type 13 has an invalid length. [ 1059.101017][T25261] netlink: 'syz.3.8437': attribute type 12 has an invalid length. [ 1059.315437][T25274] loop4: detected capacity change from 0 to 136 [ 1059.328139][T19292] Bluetooth: hci0: command tx timeout [ 1059.397726][T25274] Attempt to read inode for relocated directory [ 1059.847976][T25292] loop1: detected capacity change from 0 to 64 [ 1059.858078][T25292] hfs: bad allocation block size 0 [ 1059.960310][T25301] IPVS: length: 218 != 24 [ 1060.534754][T25205] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1060.565033][T25205] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1060.730064][T25205] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1060.798499][T25333] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1060.816677][T25205] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1060.824873][T25333] No such timeout policy "syz0" [ 1061.047098][T25341] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8466'. [ 1061.189145][ T79] hsr_slave_0: left promiscuous mode [ 1061.193333][T25347] sctp: [Deprecated]: syz.1.8469 (pid 25347) Use of int in max_burst socket option deprecated. [ 1061.193333][T25347] Use struct sctp_assoc_value instead [ 1061.267161][ T79] hsr_slave_1: left promiscuous mode [ 1061.276076][ T79] bridge_slave_1: left allmulticast mode [ 1061.294438][ T79] bridge_slave_1: left promiscuous mode [ 1061.300460][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.360546][ T79] bridge_slave_0: left allmulticast mode [ 1061.366265][ T79] bridge_slave_0: left promiscuous mode [ 1061.431710][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.524089][ T79] veth1_macvtap: left promiscuous mode [ 1061.540983][ T79] veth0_macvtap: left promiscuous mode [ 1061.546669][ T79] veth1_vlan: left promiscuous mode [ 1061.553728][T19292] Bluetooth: hci0: command tx timeout [ 1061.571054][ T79] veth0_vlan: left promiscuous mode [ 1062.174441][T25362] loop1: detected capacity change from 0 to 32768 [ 1062.194490][T25362] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.8475 (25362) [ 1062.238513][T25362] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1062.267477][T25362] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1062.281658][T25362] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1062.305823][T25362] BTRFS info (device loop1): use lzo compression, level 0 [ 1062.314241][T25362] BTRFS info (device loop1): max_inline at 0 [ 1062.334568][T25358] loop4: detected capacity change from 0 to 32768 [ 1062.338402][T25362] BTRFS info (device loop1): using free space tree [ 1062.413228][T25358] jfs_lookup: iget failed on inum 4 [ 1062.559202][T25393] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1062.591921][T25362] BTRFS info (device loop1): enabling ssd optimizations [ 1062.601090][T25362] BTRFS info (device loop1): auto enabling async discard [ 1062.728523][T25362] BTRFS error (device loop1: state M): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿ0x0000000000000000ÿÿ18446744073709551615' [ 1062.820525][ T28] audit: type=1326 audit(2000007437.610:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25398 comm="syz.4.8480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e99c799 code=0x7ffc0000 [ 1062.875732][ T5846] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1062.885422][ T28] audit: type=1326 audit(2000007437.638:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25398 comm="syz.4.8480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e99c799 code=0x7ffc0000 [ 1062.949724][ T28] audit: type=1326 audit(2000007437.638:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25398 comm="syz.4.8480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fb01e99c799 code=0x7ffc0000 [ 1063.007286][ T28] audit: type=1326 audit(2000007437.638:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25398 comm="syz.4.8480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e99c799 code=0x7ffc0000 [ 1063.105772][ T28] audit: type=1326 audit(2000007437.638:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25398 comm="syz.4.8480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e99c799 code=0x7ffc0000 [ 1063.248573][T25404] Illegal XDP return value 14 on prog (id 538) dev N/A, expect packet loss! [ 1063.781805][T19292] Bluetooth: hci0: command tx timeout [ 1063.917399][ T79] team0 (unregistering): Port device team_slave_1 removed [ 1063.981690][ T79] team0 (unregistering): Port device team_slave_0 removed [ 1064.039460][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.098994][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.461058][ T79] bond0 (unregistering): Released all slaves [ 1064.817391][T25205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.871483][T25205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.934891][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.942132][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.057846][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.065009][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.177562][T25441] usb usb8: usbfs: process 25441 (syz.3.8496) did not claim interface 0 before use [ 1065.660983][T25466] loop4: detected capacity change from 0 to 64 [ 1065.840099][T25473] loop3: detected capacity change from 0 to 256 [ 1065.915186][T25205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.016772][T19292] Bluetooth: hci0: command tx timeout [ 1067.047048][T25205] veth0_vlan: entered promiscuous mode [ 1067.094056][T25205] veth1_vlan: entered promiscuous mode [ 1067.169992][T25205] veth0_macvtap: entered promiscuous mode [ 1067.185622][T25205] veth1_macvtap: entered promiscuous mode [ 1067.234665][T25205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.261133][T23159] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1067.268552][T25535] loop1: detected capacity change from 0 to 512 [ 1067.276519][T25205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.304526][T25205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.339924][T25205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.369860][T25205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.404946][T25205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.425427][T25205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.446419][T25205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.483052][T23159] usb 4-1: config 0 has no interfaces? [ 1067.493062][T25205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.498558][T23159] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1067.527258][T23159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.533298][T25205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.560499][T23159] usb 4-1: Product: syz [ 1067.564728][T23159] usb 4-1: Manufacturer: syz [ 1067.592145][T25205] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.603431][T23159] usb 4-1: SerialNumber: syz [ 1067.619903][T23159] r8152-cfgselector 4-1: config 0 descriptor?? [ 1067.630937][T25205] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.659514][T25205] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.685615][T25205] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.800692][T25550] loop4: detected capacity change from 0 to 164 [ 1067.844607][T25550] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1067.896418][T23159] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1067.922701][ T1109] usb 4-1: config 0 descriptor?? [ 1067.983450][T22635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.003172][T22635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.118427][T22635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.144375][T22635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.152530][T25560] syz.4.8532 uses obsolete (PF_INET,SOCK_PACKET) [ 1068.200180][T25553] usb 4-1: USB disconnect, device number 25 [ 1068.210707][ T1109] usb 4-1: can't set config #0, error -71 [ 1068.322180][T25563] loop1: detected capacity change from 0 to 1024 [ 1068.637888][T25571] loop4: detected capacity change from 0 to 128 [ 1069.019163][T25590] CIFS mount error: No usable UNC path provided in device string! [ 1069.019163][T25590] [ 1069.030866][T25590] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1069.289978][ T8] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 1069.540359][ T8] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1069.567172][ T8] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1069.569843][T25616] loop5: detected capacity change from 0 to 1024 [ 1069.575322][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1069.575362][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1069.575394][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1069.599531][T25616] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1069.722754][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1069.753489][T25616] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #3: block 1: comm syz.5.8552: lblock 1 mapped to illegal pblock 1 (length 1) [ 1069.803528][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1069.837867][T25616] Quota error (device loop5): write_blk: dquota write failed [ 1069.868294][T25616] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1069.874420][ T8] usb 5-1: string descriptor 0 read error: -22 [ 1069.885289][ T8] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1069.894280][T25616] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.8552: Failed to acquire dquot type 0 [ 1069.897335][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.920791][T25616] EXT4-fs error (device loop5): ext4_free_blocks:6690: comm syz.5.8552: Freeing blocks not in datazone - block = 0, count = 4096 [ 1069.926361][ T8] usb 5-1: config 0 descriptor?? [ 1069.946783][T25616] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.8552: Invalid inode bitmap blk 0 in block_group 0 [ 1069.964597][T25616] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 1069.975139][ T11] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1069.992044][T25616] EXT4-fs (loop5): 1 orphan inode deleted [ 1069.992078][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 1070.023794][T25616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.036431][ T8] hub: probe of 5-1:0.0 failed with error -5 [ 1070.048312][ T8] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input57 [ 1070.061975][T25630] smb3: Unexpected value for 'rdma' [ 1070.067730][ T11] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1070.109561][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6985: comm kworker/u4:0: Failed to release dquot type 0 [ 1070.210016][T25616] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1070.335220][ T5839] usb 5-1: USB disconnect, device number 2 [ 1070.361872][T25205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.409724][T25681] loop5: detected capacity change from 0 to 128 [ 1071.498996][T25681] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1071.568528][T25681] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.679911][T25681] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 1071.948351][T25205] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1072.292008][T25715] loop4: detected capacity change from 0 to 512 [ 1072.670481][T25732] loop1: detected capacity change from 0 to 256 [ 1072.741014][T25732] FAT-fs (loop1): Directory bread(block 64) failed [ 1072.756246][T25739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8594'. [ 1072.774494][T25732] FAT-fs (loop1): Directory bread(block 65) failed [ 1072.787403][T25732] FAT-fs (loop1): Directory bread(block 66) failed [ 1072.821148][T25732] FAT-fs (loop1): Directory bread(block 67) failed [ 1072.829316][T25732] FAT-fs (loop1): Directory bread(block 68) failed [ 1072.855405][T25732] FAT-fs (loop1): Directory bread(block 69) failed [ 1072.881811][T25732] FAT-fs (loop1): Directory bread(block 70) failed [ 1072.897785][T25732] FAT-fs (loop1): Directory bread(block 71) failed [ 1072.913793][T25732] FAT-fs (loop1): Directory bread(block 72) failed [ 1072.920416][T25732] FAT-fs (loop1): Directory bread(block 73) failed [ 1073.170413][T25751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8599'. [ 1073.298331][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1073.524124][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1073.526408][ T8] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1073.526435][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.528149][ T8] usb 6-1: config 0 descriptor?? [ 1073.531545][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1073.998881][ T8] gspca_sunplus: reg_w_riv err -71 [ 1074.008199][ T8] sunplus: probe of 6-1:0.0 failed with error -71 [ 1074.031318][ T8] usb 6-1: USB disconnect, device number 2 [ 1074.053048][T25790] qrtr: Invalid version 15 [ 1074.426224][T25805] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.467692][T25805] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.499148][T25805] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.515550][T25805] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.531611][T25805] geneve2: entered promiscuous mode [ 1075.332405][T25850] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1075.561755][T25856] 9pnet_fd: p9_fd_create_tcp (25856): problem connecting socket to 127.0.0.1 [ 1075.777961][T25868] loop1: detected capacity change from 0 to 256 [ 1075.814110][T25833] loop3: detected capacity change from 0 to 32768 [ 1075.823807][T25833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8627 (25833) [ 1075.876615][T25868] FAT-fs (loop1): Directory bread(block 64) failed [ 1075.883201][T25868] FAT-fs (loop1): Directory bread(block 65) failed [ 1075.902141][T25833] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1075.946407][T25833] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1075.949665][T25868] FAT-fs (loop1): Directory bread(block 66) failed [ 1075.988593][T25833] BTRFS info (device loop3): using free space tree [ 1076.021855][T25868] FAT-fs (loop1): Directory bread(block 67) failed [ 1076.047470][T25868] FAT-fs (loop1): Directory bread(block 68) failed [ 1076.054096][T25868] FAT-fs (loop1): Directory bread(block 69) failed [ 1076.110176][T25868] FAT-fs (loop1): Directory bread(block 70) failed [ 1076.116763][T25868] FAT-fs (loop1): Directory bread(block 71) failed [ 1076.123967][T25868] FAT-fs (loop1): Directory bread(block 72) failed [ 1076.130538][T25868] FAT-fs (loop1): Directory bread(block 73) failed [ 1076.148676][T25868] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1076.282010][T25833] BTRFS info (device loop3): enabling ssd optimizations [ 1076.310403][T25833] BTRFS info (device loop3): auto enabling async discard [ 1076.621970][ T5849] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1076.908950][T24251] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (24251) [ 1077.000162][T25919] loop4: detected capacity change from 0 to 2048 [ 1077.054411][T25919] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1077.165185][T25926] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1077.235256][T25928] xt_TCPMSS: Only works on TCP SYN packets [ 1077.419512][ T28] audit: type=1326 audit(2000007451.266:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.3.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c639c799 code=0x7ffc0000 [ 1077.551636][ T28] audit: type=1326 audit(2000007451.266:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.3.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c639c799 code=0x7ffc0000 [ 1077.655650][ T28] audit: type=1326 audit(2000007451.313:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.3.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f24c639c799 code=0x7ffc0000 [ 1077.761954][ T28] audit: type=1326 audit(2000007451.313:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.3.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c639c799 code=0x7ffc0000 [ 1077.884459][ T28] audit: type=1326 audit(2000007451.313:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.3.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c639c799 code=0x7ffc0000 [ 1078.252000][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8672'. [ 1078.458777][T25977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8676'. [ 1078.490004][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8676'. [ 1078.566232][T25985] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1079.017570][ T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1079.254800][ T787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1079.269109][ T787] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1079.298149][ T787] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1079.328273][T23159] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1079.339277][ T787] usb 5-1: string descriptor 0 read error: -22 [ 1079.346181][ T787] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1079.377260][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.490795][T26026] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.8694'. [ 1079.564956][T23159] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1079.579391][T23159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.645094][T23159] usb 4-1: config 0 descriptor?? [ 1079.879026][ T787] usb 5-1: Can't set UAC3 power state to 1 for id 10 [ 1079.906022][ T787] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 1079.932028][ T787] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1080.127904][T23159] ath6kl: Failed to submit usb control message: -71 [ 1080.149866][ T787] usb 5-1: USB disconnect, device number 3 [ 1080.160854][T23159] ath6kl: unable to send the bmi data to the device: -71 [ 1080.190526][T23159] ath6kl: Unable to send get target info: -71 [ 1080.235033][T23159] ath6kl: Failed to init ath6kl core: -71 [ 1080.265069][T23159] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 1080.313624][T23159] usb 4-1: USB disconnect, device number 26 [ 1080.885207][T26081] loop4: detected capacity change from 0 to 512 [ 1080.970285][T26081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.017032][T26081] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.056644][T26090] loop3: detected capacity change from 0 to 256 [ 1081.181113][T26081] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 1081.225952][T26081] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1081.267785][T26081] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.8711: Failed to acquire dquot type 0 [ 1081.314994][T26098] loop5: detected capacity change from 0 to 2048 [ 1081.357034][T26098] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1081.422182][T26107] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1081.515413][T24893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.527385][T26098] NILFS error (device loop5): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1081.666826][T26098] Remounting filesystem read-only [ 1081.945460][T26116] loop1: detected capacity change from 0 to 4096 [ 1081.961388][T26121] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1082.085151][T26116] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1082.131344][T26116] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1082.708191][T26152] loop1: detected capacity change from 0 to 16 [ 1082.741681][T26152] erofs: (device loop1): mounted with root inode @ nid 36. [ 1083.523009][T26184] loop3: detected capacity change from 0 to 512 [ 1083.554287][T26184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1083.609589][T26184] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1083.649433][T26184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1083.678971][T26184] System zones: 0-1, 15-15, 18-18, 34-34 [ 1083.691072][T26184] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1083.705662][T26184] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1083.728628][T26184] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1083.767353][T26184] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1083.777404][T26184] EXT4-fs (loop3): 1 truncate cleaned up [ 1083.784298][T26184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1083.914787][T26184] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 1083.978912][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.194831][T26174] loop1: detected capacity change from 0 to 32768 [ 1084.239817][T26174] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1084.253084][T26173] loop4: detected capacity change from 0 to 32768 [ 1084.356449][T26173] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1084.389601][T26174] XFS (loop1): Ending clean mount [ 1084.406464][T26174] XFS (loop1): Quotacheck needed: Please wait. [ 1084.481641][T26174] XFS (loop1): Quotacheck: Done. [ 1084.575315][T26173] XFS (loop4): Ending clean mount [ 1084.665573][T26173] XFS (loop4): Quotacheck needed: Please wait. [ 1084.789723][T26173] XFS (loop4): Quotacheck: Done. [ 1084.796292][ T5846] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1085.047874][T24893] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1085.667978][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1085.897061][ T23] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1085.913078][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.924024][ T6159] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1085.956782][ T23] usb 2-1: Product: syz [ 1085.961002][ T23] usb 2-1: Manufacturer: syz [ 1085.977181][ T23] usb 2-1: SerialNumber: syz [ 1085.996375][ T23] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1086.082671][ T23] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1086.175155][ T6159] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1086.206430][ T6159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.226149][ T6159] usb 5-1: Product: syz [ 1086.240752][ T6159] usb 5-1: Manufacturer: syz [ 1086.265920][ T6159] usb 5-1: SerialNumber: syz [ 1086.286788][ T6159] r8152-cfgselector 5-1: config 0 descriptor?? [ 1086.329221][T26275] netlink: 'syz.5.8765': attribute type 2 has an invalid length. [ 1086.350834][T26275] netlink: 'syz.5.8765': attribute type 3 has an invalid length. [ 1086.374510][T26275] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8765'. [ 1086.561438][T26282] loop5: detected capacity change from 0 to 1024 [ 1086.632360][T26282] hfsplus: keylen 65060 too large [ 1086.649434][T26282] hfsplus: keylen 65060 too large [ 1086.653520][ T5881] usb 2-1: USB disconnect, device number 16 [ 1086.739545][T26285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8768'. [ 1086.784816][ T6159] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1086.825065][ T6159] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 1087.215916][ T23] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1087.236567][T26302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8773'. [ 1087.243651][ T23] ath9k_htc: Failed to initialize the device [ 1087.290200][ T5881] usb 2-1: ath9k_htc: USB layer deinitialized [ 1087.318672][T26307] loop3: detected capacity change from 0 to 256 [ 1087.400022][T26307] FAT-fs (loop3): Directory bread(block 64) failed [ 1087.422389][T26307] FAT-fs (loop3): Directory bread(block 65) failed [ 1087.429064][T26307] FAT-fs (loop3): Directory bread(block 66) failed [ 1087.508777][T26307] FAT-fs (loop3): Directory bread(block 67) failed [ 1087.527897][T26307] FAT-fs (loop3): Directory bread(block 68) failed [ 1087.534479][T26307] FAT-fs (loop3): Directory bread(block 69) failed [ 1087.574649][T26307] FAT-fs (loop3): Directory bread(block 70) failed [ 1087.597798][T26307] FAT-fs (loop3): Directory bread(block 71) failed [ 1087.623699][T26307] FAT-fs (loop3): Directory bread(block 72) failed [ 1087.630278][T26307] FAT-fs (loop3): Directory bread(block 73) failed [ 1087.719485][T26316] loop1: detected capacity change from 0 to 4096 [ 1087.821934][T26307] syz.3.8774: attempt to access beyond end of device [ 1087.821934][T26307] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1087.855872][T26327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1087.870348][T26324] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1087.991332][T26316] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 1088.057103][T26316] Remounting filesystem read-only [ 1088.667311][T26350] netlink: 'syz.1.8794': attribute type 10 has an invalid length. [ 1088.851972][T26350] team0 (unregistering): Port device team_slave_0 removed [ 1088.887681][T26350] team0 (unregistering): Port device team_slave_1 removed [ 1088.961027][T26333] loop3: detected capacity change from 0 to 40427 [ 1088.986750][T26333] F2FS-fs (loop3): invalid crc value [ 1088.995070][T26333] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1089.131747][T26333] F2FS-fs (loop3): Start checkpoint disabled! [ 1089.177449][T26333] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1089.408620][T26366] loop1: detected capacity change from 0 to 4096 [ 1089.442677][T26366] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1089.555609][T26366] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1089.991429][T26389] netlink: 'syz.5.8810': attribute type 10 has an invalid length. [ 1090.012415][T26392] loop1: detected capacity change from 0 to 164 [ 1090.079747][T26389] team0 (unregistering): Port device team_slave_0 removed [ 1090.111206][T26389] team0 (unregistering): Port device team_slave_1 removed [ 1090.221058][T26394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1090.257730][T26394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1090.273946][T26394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1090.862908][T26418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8825'. [ 1091.051271][T26422] geneve2: entered allmulticast mode [ 1092.231427][T26478] netlink: 'syz.3.8853': attribute type 10 has an invalid length. [ 1092.286246][T26452] loop5: detected capacity change from 0 to 32768 [ 1092.358173][T26452] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1092.370327][ T5881] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1092.427986][T26478] team0 (unregistering): Port device team_slave_0 removed [ 1092.494159][T26452] XFS (loop5): Ending clean mount [ 1092.501669][T26478] team0 (unregistering): Port device team_slave_1 removed [ 1092.527672][T26452] XFS (loop5): Quotacheck needed: Please wait. [ 1092.552358][T26492] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1092.580007][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 1092.609008][ T5881] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1092.622739][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.630868][T26452] XFS (loop5): Quotacheck: Done. [ 1092.662247][ T5881] usb 2-1: Product: syz [ 1092.680559][ T5881] usb 2-1: Manufacturer: syz [ 1092.685215][ T5881] usb 2-1: SerialNumber: syz [ 1092.714290][ T5881] usb 2-1: config 0 descriptor?? [ 1092.734555][ T5881] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1092.834058][T25205] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1093.010350][ T6159] usb 2-1: USB disconnect, device number 17 [ 1094.311554][T26552] loop1: detected capacity change from 0 to 2048 [ 1094.386689][T26552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1094.666399][T26560] loop3: detected capacity change from 0 to 4096 [ 1094.691218][T26560] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1094.770386][T26569] netlink: 'syz.1.8890': attribute type 5 has an invalid length. [ 1094.812831][T26560] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1094.887886][T26573] warning: `syz.5.8891' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1095.340087][T26592] loop5: detected capacity change from 0 to 256 [ 1095.422318][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1095.429477][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1095.546408][T26598] geneve3: entered allmulticast mode [ 1095.965724][T26616] netlink: 'syz.3.8908': attribute type 1 has an invalid length. [ 1095.998287][T26616] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8908'. [ 1096.280774][T26594] loop4: detected capacity change from 0 to 32768 [ 1096.333389][T26594] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1096.381126][T26594] XFS (loop4): Ending clean mount [ 1096.397046][T26594] XFS (loop4): Quotacheck needed: Please wait. [ 1096.477536][T26594] XFS (loop4): Quotacheck: Done. [ 1096.586237][T24893] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1096.697044][T26643] geneve0: entered allmulticast mode [ 1096.836888][T26652] netlink: 'syz.1.8917': attribute type 3 has an invalid length. [ 1096.856659][T26652] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8917'. [ 1097.234522][T26667] netlink: 'syz.4.8912': attribute type 10 has an invalid length. [ 1097.520602][T26667] team0 (unregistering): Port device team_slave_0 removed [ 1097.550568][T26667] team0 (unregistering): Port device team_slave_1 removed [ 1097.934904][T26664] loop5: detected capacity change from 0 to 32768 [ 1097.958734][T26664] XFS: noikeep mount option is deprecated. [ 1098.113306][T26664] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1098.212083][T26706] ip6gre1: entered promiscuous mode [ 1098.372942][T26664] XFS (loop5): Ending clean mount [ 1098.413446][T26664] XFS (loop5): Quotacheck needed: Please wait. [ 1098.461038][T26664] XFS (loop5): Quotacheck: Done. [ 1098.693196][T26719] ieee802154 phy0 wpan0: encryption failed: -90 [ 1098.700327][T26716] netlink: 'syz.1.8934': attribute type 11 has an invalid length. [ 1098.750416][T25205] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1099.885819][T26767] netlink: 'syz.3.8950': attribute type 1 has an invalid length. [ 1099.911083][T26767] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8950'. [ 1100.417580][T26788] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8958'. [ 1100.487544][T26788] gretap0: entered promiscuous mode [ 1100.515100][T26788] netlink: 'syz.1.8958': attribute type 1 has an invalid length. [ 1100.542066][T26788] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8958'. [ 1100.971167][T26814] netlink: 'syz.5.8968': attribute type 3 has an invalid length. [ 1101.005327][T26814] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.8968'. [ 1101.228264][T26821] Cannot find del_set index 286 as target [ 1102.256613][T26826] loop3: detected capacity change from 0 to 32768 [ 1102.346633][T26826] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1102.387759][T26826] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1102.401977][T26829] loop5: detected capacity change from 0 to 32768 [ 1102.433103][T26826] BTRFS info (device loop3): using free space tree [ 1102.469969][T26829] JBD2: Ignoring recovery information on journal [ 1102.663481][T26826] BTRFS info (device loop3): enabling ssd optimizations [ 1102.671427][T26826] BTRFS info (device loop3): auto enabling async discard [ 1102.722762][T26886] tmpfs: User quota inode hardlimit too large. [ 1102.743730][T26829] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1102.980696][T26829] (syz.5.8973,26829,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=7755761508285415489, rec_len=30044, name_len=0 [ 1103.001357][ T5849] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1103.009694][T26829] (syz.5.8973,26829,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1103.025876][T26829] (syz.5.8973,26829,0):ocfs2_mknod:298 ERROR: status = -2 [ 1103.033286][T26829] (syz.5.8973,26829,0):ocfs2_mknod:502 ERROR: status = -2 [ 1103.048863][T26829] (syz.5.8973,26829,0):ocfs2_create:676 ERROR: status = -2 [ 1103.424941][T25205] ocfs2: Unmounting device (7,5) on (node local) [ 1103.630284][T26908] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 1104.040336][T26892] loop1: detected capacity change from 0 to 32768 [ 1104.115199][T26892] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1104.338342][T26892] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1104.414114][T26892] XFS (loop1): Starting recovery (logdev: internal) [ 1104.443711][T26892] XFS (loop1): Ending recovery (logdev: internal) [ 1104.493344][T26892] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1104.501326][T26892] XFS (loop1): Failed to initialize disk quotas. [ 1104.722759][T26892] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1104.919495][ T5846] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1105.274365][T26969] loop4: detected capacity change from 0 to 256 [ 1105.592245][T26980] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1105.835214][T26989] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9017'. [ 1105.884332][T26991] sctp: [Deprecated]: syz.4.9019 (pid 26991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1105.884332][T26991] Use struct sctp_sack_info instead [ 1105.926374][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9020'. [ 1105.949814][T26993] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9020'. [ 1106.011506][T26996] comedi comedi1: driver 'ni_daq_700' does not support attach using comedi_config [ 1107.171131][T27035] loop1: detected capacity change from 0 to 512 [ 1107.201756][T27035] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1107.329555][T27035] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1107.855611][T27051] loop1: detected capacity change from 0 to 4096 [ 1107.885383][T27051] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1108.047605][T27037] loop4: detected capacity change from 0 to 32768 [ 1108.125252][T27037] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1108.232800][T27037] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1108.267634][T27037] XFS (loop4): Starting recovery (logdev: internal) [ 1108.317072][T27037] XFS (loop4): Ending recovery (logdev: internal) [ 1108.370325][T27037] XFS (loop4): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1108.395526][T27037] XFS (loop4): Failed to initialize disk quotas. [ 1108.550543][T27037] XFS (loop4): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1108.579043][T27080] netlink: 'syz.5.9057': attribute type 2 has an invalid length. [ 1108.599071][T27080] netlink: 'syz.5.9057': attribute type 1 has an invalid length. [ 1108.629620][T24893] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1109.001883][T27087] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1109.009199][T27073] loop3: detected capacity change from 0 to 32768 [ 1109.083471][ T5881] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1109.109617][T27073] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1109.261134][T27073] XFS (loop3): Ending clean mount [ 1109.318391][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.342981][ T5881] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1109.378871][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.400343][ T5881] usb 2-1: config 0 descriptor?? [ 1109.416587][ T5881] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1109.609755][ T5849] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1109.648733][ T787] usb 2-1: USB disconnect, device number 18 [ 1110.526475][T27107] loop5: detected capacity change from 0 to 32768 [ 1110.617940][T27107] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1110.629900][ T6159] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1110.746290][T27145] vlan1: entered allmulticast mode [ 1110.758733][T27145] veth0_vlan: entered allmulticast mode [ 1110.772645][T27107] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1110.816885][T27107] XFS (loop5): Starting recovery (logdev: internal) [ 1110.834668][ T6159] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 1110.853801][ T6159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.886245][ T6159] usb 2-1: config 0 has no interface number 0 [ 1110.903261][ T6159] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1110.916952][T27107] XFS (loop5): Ending recovery (logdev: internal) [ 1110.925824][ T6159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.936808][T27107] XFS (loop5): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1110.953891][ T6159] usb 2-1: config 0 descriptor?? [ 1110.959265][T27107] XFS (loop5): Failed to initialize disk quotas. [ 1110.979069][ T6159] ttusbir 2-1:0.83: cannot find expected altsetting [ 1111.050731][T27149] loop4: detected capacity change from 0 to 4096 [ 1111.072031][T27149] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1111.098891][T27107] XFS (loop5): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 1111.193258][T25205] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1111.267549][ T23] usb 2-1: USB disconnect, device number 19 [ 1111.659291][T27162] netlink: 'syz.4.9089': attribute type 1 has an invalid length. [ 1111.968580][T27174] loop5: detected capacity change from 0 to 4096 [ 1112.006017][T27174] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1112.036900][T27174] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 1112.236966][T27184] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9098'. [ 1112.448595][ T28] audit: type=1326 audit(2000007484.034:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27188 comm="syz.5.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1112.476220][ T28] audit: type=1326 audit(2000007484.062:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27188 comm="syz.5.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1112.588628][ T28] audit: type=1326 audit(2000007484.062:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27188 comm="syz.5.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1112.701665][ T28] audit: type=1326 audit(2000007484.062:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27188 comm="syz.5.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1112.762263][ T28] audit: type=1326 audit(2000007484.090:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27188 comm="syz.5.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1112.796568][ T28] audit: type=1326 audit(2000007484.090:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27188 comm="syz.5.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1112.846644][ T28] audit: type=1326 audit(2000007484.090:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27188 comm="syz.5.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1112.862607][T27177] loop1: detected capacity change from 0 to 40427 [ 1112.902739][ T28] audit: type=1326 audit(2000007484.090:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27188 comm="syz.5.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1112.943660][T27177] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1112.953302][ T28] audit: type=1326 audit(2000007484.090:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27188 comm="syz.5.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1112.992128][T27177] F2FS-fs (loop1): invalid crc value [ 1112.995031][T27205] loop3: detected capacity change from 0 to 256 [ 1113.010550][T27177] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1113.122513][T27209] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1113.144543][T27177] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1113.186165][T27211] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1113.205326][T27211] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1113.462127][T27218] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~¢)–„VÌ' [ 1113.494819][T27218] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 1113.527377][T27218] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 1113.550001][T27218] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 1113.580626][T27218] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 1113.589029][T27218] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 1113.641248][T27218] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 1113.655310][T27218] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 1113.667662][T27218] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 1113.687175][T27218] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 1113.695546][T27218] ALSA: mixer_oss: invalid OSS volume 'î[' [ 1113.712585][T27218] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 1113.741052][T27218] ALSA: mixer_oss: invalid OSS volume '·$ffff888050096000(4096) [ 1131.534748][T27850] cramfs: bad data blocksize 3221485902 [ 1131.540371][T27850] cramfs: bad data blocksize 4294967270 [ 1131.568076][ T28] audit: type=1800 audit(2000007501.919:114): pid=27850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9409" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1131.876473][T27872] netlink: 'syz.1.9419': attribute type 3 has an invalid length. [ 1131.911240][T27872] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9419'. [ 1132.122031][T27881] loop5: detected capacity change from 0 to 2048 [ 1132.153781][T27888] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1132.232752][T27881] NILFS (loop5): failed to count free inodes: err=-34 [ 1132.486818][T27897] netlink: 'syz.3.9432': attribute type 1 has an invalid length. [ 1132.493043][T25205] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 1132.515444][T25205] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1132.542780][T25205] Remounting filesystem read-only [ 1132.551503][T25205] NILFS (loop5): error -5 truncating bmap (ino=16) [ 1132.569558][T25205] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 1132.590940][T25205] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 1132.597672][T25205] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 1132.609752][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1132.647902][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1132.703989][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1132.749425][T25205] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 1132.777137][T25205] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 1132.798177][T25205] NILFS (loop5): discard dirty block: blocknr=36, size=1024 [ 1132.823653][T25205] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 1132.830994][T25205] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 1132.866234][T25205] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 1132.873260][T25205] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 1132.893468][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1132.915405][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1132.947696][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1132.970935][T25205] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 1132.994543][T25205] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 1133.001888][T25205] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 1133.030259][T25205] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 1133.056675][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.074018][T25205] NILFS (loop5): discard dirty page: offset=163840, ino=3 [ 1133.082666][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.085796][T27914] vti0: entered promiscuous mode [ 1133.093805][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.108719][T25205] NILFS (loop5): discard dirty block: blocknr=47, size=1024 [ 1133.110099][T27893] loop4: detected capacity change from 0 to 32768 [ 1133.118712][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.136683][T25205] NILFS (loop5): discard dirty page: offset=196608, ino=3 [ 1133.143908][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.157223][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.166368][T25205] NILFS (loop5): discard dirty block: blocknr=49, size=1024 [ 1133.173703][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.188172][T25205] NILFS (loop5): discard dirty page: offset=229376, ino=3 [ 1133.195981][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.216251][T27893] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1133.242524][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.253721][T27893] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1133.265429][T25205] NILFS (loop5): discard dirty block: blocknr=50, size=1024 [ 1133.308703][T25205] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1133.447196][T27893] XFS (loop4): Ending clean mount [ 1133.479493][T27893] XFS (loop4): Quotacheck needed: Please wait. [ 1133.554138][T27893] XFS (loop4): Quotacheck: Done. [ 1133.668845][ T28] audit: type=1326 audit(2000007503.892:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27937 comm="syz.1.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc199c799 code=0x7ffc0000 [ 1133.703420][T24893] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1133.739832][ T28] audit: type=1326 audit(2000007503.911:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27937 comm="syz.1.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc199c799 code=0x7ffc0000 [ 1133.762187][ C1] vkms_vblank_simulate: vblank timer overrun [ 1133.801621][ T28] audit: type=1326 audit(2000007503.920:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27937 comm="syz.1.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f9cc199c799 code=0x7ffc0000 [ 1133.841541][ T28] audit: type=1326 audit(2000007503.920:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27937 comm="syz.1.9447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc199c799 code=0x7ffc0000 [ 1134.031155][T27952] loop1: detected capacity change from 0 to 1024 [ 1134.273208][T27952] syz.1.9455: attempt to access beyond end of device [ 1134.273208][T27952] loop1: rw=0, sector=4294967564, nr_sectors = 2 limit=1024 [ 1134.436456][ T79] hfsplus: b-tree write err: -5, ino 25 [ 1134.456501][ T79] hfsplus: b-tree write err: -5, ino 4 [ 1134.476315][ T79] hfsplus: b-tree write err: -5, ino 2 [ 1134.512648][ T79] hfsplus: b-tree write err: -5, ino 20 [ 1134.881927][T27984] x_tables: duplicate underflow at hook 4 [ 1135.498648][T28006] loop3: detected capacity change from 0 to 2048 [ 1135.539394][T28010] ip6t_REJECT: ECHOREPLY is not supported [ 1135.551605][T28006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.639414][T28006] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1135.736654][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.900922][T27990] loop4: detected capacity change from 0 to 32768 [ 1135.945585][T27990] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1135.977446][ T787] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1136.017297][T27990] XFS (loop4): Ending clean mount [ 1136.173772][T24893] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1136.197194][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 1136.210324][ T787] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1136.225430][ T787] usb 2-1: config 179 has no interface number 0 [ 1136.231832][ T787] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1136.244489][ T787] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1136.265905][ T787] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1136.278259][ T787] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1136.294435][ T787] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1136.308140][ T787] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1136.315736][ T787] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1136.325694][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.360240][ T787] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input61 [ 1136.439285][ T5125] input input61: unable to receive magic message: -110 [ 1136.538126][ T5125] input input61: unable to receive magic message: -32 [ 1136.573209][T24162] input input61: unable to receive magic message: -32 [ 1136.672090][ T5125] input input61: unable to receive magic message: -32 [ 1136.735358][ T5125] input input61: unable to receive magic message: -32 [ 1136.775856][T28045] unsupported nlmsg_type 40 [ 1136.922252][T28035] loop3: detected capacity change from 0 to 32768 [ 1136.941362][T23159] usb 2-1: USB disconnect, device number 21 [ 1136.947346][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1136.991818][T23159] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1137.483863][T28068] loop5: detected capacity change from 0 to 512 [ 1137.626297][T28068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.708105][T28068] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.760164][T28075] netlink: 'syz.1.9506': attribute type 7 has an invalid length. [ 1137.808891][T28075] netlink: 'syz.1.9506': attribute type 8 has an invalid length. [ 1137.967118][T28084] loop4: detected capacity change from 0 to 256 [ 1137.990781][T25205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.073586][T28084] FAT-fs (loop4): Directory bread(block 64) failed [ 1138.083080][T28084] FAT-fs (loop4): Directory bread(block 65) failed [ 1138.104864][T28084] FAT-fs (loop4): Directory bread(block 66) failed [ 1138.111456][T28084] FAT-fs (loop4): Directory bread(block 67) failed [ 1138.140192][T28084] FAT-fs (loop4): Directory bread(block 68) failed [ 1138.146792][T28084] FAT-fs (loop4): Directory bread(block 69) failed [ 1138.154594][T28084] FAT-fs (loop4): Directory bread(block 70) failed [ 1138.163219][T28084] FAT-fs (loop4): Directory bread(block 71) failed [ 1138.170234][T28084] FAT-fs (loop4): Directory bread(block 72) failed [ 1138.200773][T28084] FAT-fs (loop4): Directory bread(block 73) failed [ 1138.424778][T28093] loop1: detected capacity change from 0 to 8192 [ 1138.450771][T28093] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1138.597534][ T787] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1138.656258][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9521'. [ 1138.845762][ T787] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 1138.870320][ T787] usb 4-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 1138.892271][ T787] usb 4-1: config 0 has no interface number 0 [ 1138.921308][ T787] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1138.951587][ T787] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1138.969644][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.999469][ T787] usb 4-1: Product: syz [ 1139.004875][ T787] usb 4-1: Manufacturer: syz [ 1139.009504][ T787] usb 4-1: SerialNumber: syz [ 1139.047860][ T787] usb 4-1: config 0 descriptor?? [ 1139.053639][T28095] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1139.061770][T28095] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1139.119086][ T787] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1139.317822][ T787] usb 4-1: USB disconnect, device number 30 [ 1139.326374][T28131] netlink: 'syz.5.9533': attribute type 5 has an invalid length. [ 1139.777440][T28154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1140.152585][T28169] x_tables: duplicate underflow at hook 3 [ 1140.365384][T28182] loop1: detected capacity change from 0 to 64 [ 1140.582909][T28190] netlink: 'syz.3.9561': attribute type 13 has an invalid length. [ 1140.666375][T28194] loop5: detected capacity change from 0 to 128 [ 1141.017827][T28209] loop5: detected capacity change from 0 to 256 [ 1141.054357][T28212] QAT: failed to copy from user. [ 1141.136564][T28209] FAT-fs (loop5): Directory bread(block 64) failed [ 1141.145954][T28209] FAT-fs (loop5): Directory bread(block 65) failed [ 1141.161258][T28209] FAT-fs (loop5): Directory bread(block 66) failed [ 1141.179100][T28209] FAT-fs (loop5): Directory bread(block 67) failed [ 1141.194317][T28209] FAT-fs (loop5): Directory bread(block 68) failed [ 1141.215509][T28209] FAT-fs (loop5): Directory bread(block 69) failed [ 1141.222183][T28209] FAT-fs (loop5): Directory bread(block 70) failed [ 1141.234094][T28209] FAT-fs (loop5): Directory bread(block 71) failed [ 1141.241606][T28209] FAT-fs (loop5): Directory bread(block 72) failed [ 1141.248974][T28209] FAT-fs (loop5): Directory bread(block 73) failed [ 1141.272985][T28218] IPv6: sit1: Disabled Multicast RS [ 1141.304510][T23159] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1141.558525][T23159] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1141.581431][T23159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.601099][T28228] i2c i2c-0: Invalid block read size 255 [ 1141.614996][T23159] usb 2-1: config 0 descriptor?? [ 1141.852406][T23159] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1141.878823][T23159] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1141.920062][T28240] loop3: detected capacity change from 0 to 512 [ 1141.963056][T28240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1141.987530][T28240] ext4 filesystem being mounted at /2363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.069754][T23159] [drm:udl_init] *ERROR* Selecting channel failed [ 1142.143398][T23159] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1142.170812][T23159] [drm] Initialized udl on minor 2 [ 1142.192465][T23159] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1142.208205][T28249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1142.231612][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.232740][T23159] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1142.276104][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1142.303524][T23159] usb 2-1: USB disconnect, device number 22 [ 1142.318483][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1142.454692][T28242] loop5: detected capacity change from 0 to 32768 [ 1142.475733][T28242] JBD2: Ignoring recovery information on journal [ 1142.563385][T28242] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1142.735985][T28263] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9595'. [ 1142.764702][T28263] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1142.877262][T28267] loop1: detected capacity change from 0 to 1024 [ 1142.920920][T25205] ocfs2: Unmounting device (7,5) on (node local) [ 1143.000999][T28269] loop4: detected capacity change from 0 to 512 [ 1143.089885][ T79] hfsplus: b-tree write err: -5, ino 25 [ 1143.096128][T28269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.126328][ T79] hfsplus: b-tree write err: -5, ino 4 [ 1143.132261][ T79] hfsplus: b-tree write err: -5, ino 2 [ 1143.137800][ T79] hfsplus: b-tree write err: -5, ino 20 [ 1143.140172][T28269] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.422218][T24893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.994144][T28301] loop4: detected capacity change from 0 to 2048 [ 1144.062548][T28301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.064193][T28279] loop3: detected capacity change from 0 to 32768 [ 1144.077407][T28301] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.098051][T28279] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.9602 (28279) [ 1144.112631][T28307] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9615'. [ 1144.125780][T28279] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1144.147058][T28279] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1144.209193][T28279] BTRFS info (device loop3): enabling auto defrag [ 1144.215814][T28279] BTRFS info (device loop3): use no compression [ 1144.222212][T28279] BTRFS info (device loop3): force clearing of disk cache [ 1144.229522][T28279] BTRFS info (device loop3): max_inline at 4096 [ 1144.236185][T28279] BTRFS info (device loop3): disabling free space tree [ 1144.241349][T28301] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.9613: bg 0: block 345: padding at end of block bitmap is not set [ 1144.301104][T28301] EXT4-fs (loop4): Remounting filesystem read-only [ 1144.309926][T28301] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.4.9613: cleanup dec ref error -117 [ 1144.358329][T28313] loop1: detected capacity change from 0 to 512 [ 1144.382555][T28313] EXT4-fs: Ignoring removed i_version option [ 1144.429274][T24893] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.438411][T28279] BTRFS info (device loop3): enabling ssd optimizations [ 1144.461740][T28313] EXT4-fs error (device loop1): __ext4_iget:5071: inode #11: block 1: comm syz.1.9617: invalid block [ 1144.475475][T28279] BTRFS info (device loop3): auto enabling async discard [ 1144.560929][T28279] BTRFS info (device loop3): rebuilding free space tree [ 1144.583345][T28313] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.9617: couldn't read orphan inode 11 (err -117) [ 1144.625215][T28313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.678675][T28279] BTRFS info (device loop3): disabling free space tree [ 1144.702891][T28279] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1144.741075][T28279] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1144.843619][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.036109][T28340] EXT4-fs: inline encryption not supported [ 1145.075452][T28340] EXT4-fs: Ignoring removed bh option [ 1145.132694][T28340] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1145.201460][T28340] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1145.255110][T28340] EXT4-fs error (device loop1): ext4_quota_enable:7140: comm syz.1.9622: inode #2304: comm syz.1.9622: iget: illegal inode # [ 1145.302328][T28340] EXT4-fs (loop1): Remounting filesystem read-only [ 1145.308894][T28340] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1145.326199][T28340] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1145.338250][T28340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1145.462689][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.468160][ T5849] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1145.860944][T28353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.136787][T28360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9625'. [ 1146.296531][T28366] usb usb8: usbfs: process 28366 (syz.3.9635) did not claim interface 0 before use [ 1146.363272][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1146.585262][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1146.607955][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1146.621489][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1146.644501][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.655076][T28377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9648'. [ 1146.667626][ T8] usb 6-1: Product: syz [ 1146.670696][T28362] set_capacity_and_notify: 2 callbacks suppressed [ 1146.670709][T28362] loop4: detected capacity change from 0 to 32768 [ 1146.672186][ T8] usb 6-1: Manufacturer: syz [ 1146.672204][ T8] usb 6-1: SerialNumber: syz [ 1146.705942][T28362] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.9633 (28362) [ 1146.740810][T28362] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1146.771968][T28362] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1146.787345][T28362] BTRFS info (device loop4): enabling auto defrag [ 1146.804693][T28362] BTRFS info (device loop4): use no compression [ 1146.817614][T28362] BTRFS info (device loop4): force clearing of disk cache [ 1146.834936][T28362] BTRFS info (device loop4): max_inline at 4096 [ 1146.858197][T28362] BTRFS info (device loop4): disabling free space tree [ 1146.933522][ T8] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1146.943700][T28362] BTRFS info (device loop4): enabling ssd optimizations [ 1146.946160][ T8] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1146.963714][T28362] BTRFS info (device loop4): auto enabling async discard [ 1146.966406][ T8] usb 6-1: 3:0: failed to get current value for ch 0 (-22) [ 1146.981600][T28362] BTRFS info (device loop4): rebuilding free space tree [ 1146.988240][ T8] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1147.001401][ T8] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1147.009972][T21798] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1147.023377][ T8] usb 6-1: 3:0: cannot get min/max values for control 4 (id 3) [ 1147.035221][T28362] BTRFS info (device loop4): disabling free space tree [ 1147.042226][ T8] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1147.046675][ T8] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1147.061229][T28362] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1147.067265][ T8] usb 6-1: USB disconnect, device number 4 [ 1147.090463][T28362] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1147.124525][T24251] udevd[24251]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1147.180990][ T5881] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1147.202571][T21798] usb 4-1: Using ep0 maxpacket: 8 [ 1147.214609][T21798] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1147.245099][T21798] usb 4-1: config 179 has no interface number 0 [ 1147.251998][T21798] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1147.268327][T21798] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1147.283572][T21798] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1147.295530][T21798] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1147.307395][T21798] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1147.330935][T21798] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1147.344732][T21798] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1147.360850][T21798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.370520][T24893] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1147.396038][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 1147.422457][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1147.432605][T21798] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input62 [ 1147.460357][ T5881] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1147.490927][ T5881] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1147.499601][ T5881] usb 2-1: Product: syz [ 1147.506024][ T5881] usb 2-1: Manufacturer: syz [ 1147.510756][ T5881] usb 2-1: SerialNumber: syz [ 1147.519884][ T5125] input input62: unable to receive magic message: -110 [ 1147.569864][ T5125] input input62: unable to receive magic message: -32 [ 1147.622930][ T5125] input input62: unable to receive magic message: -32 [ 1147.732016][ T5125] input input62: unable to receive magic message: -32 [ 1147.752975][ T5881] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1147.782111][ T5881] usb 2-1: Handspring Visor / Palm OS: port 106, is for unknown use [ 1147.804155][ T5881] usb 2-1: Handspring Visor / Palm OS: port 214, is for Remote File System use [ 1147.829850][ T5881] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1147.965554][ T6159] usb 4-1: USB disconnect, device number 31 [ 1147.971547][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1147.980416][ T5881] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1148.004256][ T5881] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1148.015650][ T6159] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1148.026699][ T5881] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1148.079744][ T5881] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1148.109793][ T5881] usb 2-1: USB disconnect, device number 23 [ 1148.156073][ T5881] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1148.194087][ T5881] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1148.213749][ T5881] visor 2-1:1.0: device disconnected [ 1148.748660][T28429] loop3: detected capacity change from 0 to 256 [ 1148.830767][T28429] FAT-fs (loop3): Directory bread(block 64) failed [ 1148.846801][T28429] FAT-fs (loop3): Directory bread(block 65) failed [ 1148.876077][T28429] FAT-fs (loop3): Directory bread(block 66) failed [ 1148.893338][T28429] FAT-fs (loop3): Directory bread(block 67) failed [ 1148.910122][T28429] FAT-fs (loop3): Directory bread(block 68) failed [ 1148.933443][T28429] FAT-fs (loop3): Directory bread(block 69) failed [ 1148.951109][T28429] FAT-fs (loop3): Directory bread(block 70) failed [ 1148.969254][T28429] FAT-fs (loop3): Directory bread(block 71) failed [ 1148.993154][T28429] FAT-fs (loop3): Directory bread(block 72) failed [ 1149.011677][T28429] FAT-fs (loop3): Directory bread(block 73) failed [ 1149.055844][T28429] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1149.460602][T28455] netlink: 'syz.4.9670': attribute type 28 has an invalid length. [ 1149.603494][T28459] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1149.761228][T28468] loop5: detected capacity change from 0 to 4096 [ 1149.769120][T28468] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1149.816868][T28468] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1149.884986][T28468] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1149.915939][T28473] loop1: detected capacity change from 0 to 256 [ 1149.936133][T28468] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1149.981295][T28468] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1150.024553][T28468] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1150.077029][T28468] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1150.110855][T28473] FAT-fs (loop1): Directory bread(block 64) failed [ 1150.117434][T28473] FAT-fs (loop1): Directory bread(block 65) failed [ 1150.129438][T28468] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1150.152783][T28473] FAT-fs (loop1): Directory bread(block 66) failed [ 1150.160491][T28473] FAT-fs (loop1): Directory bread(block 67) failed [ 1150.192581][T28468] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1150.209480][T28473] FAT-fs (loop1): Directory bread(block 68) failed [ 1150.211033][T28468] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1150.216483][T28473] FAT-fs (loop1): Directory bread(block 69) failed [ 1150.254824][T28468] ntfs: volume version 3.1. [ 1150.287169][T28473] FAT-fs (loop1): Directory bread(block 70) failed [ 1150.313372][T28473] FAT-fs (loop1): Directory bread(block 71) failed [ 1150.345723][T28473] FAT-fs (loop1): Directory bread(block 72) failed [ 1150.352311][T28473] FAT-fs (loop1): Directory bread(block 73) failed [ 1150.397746][T28473] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1150.505799][T28483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9683'. [ 1150.539854][T28483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9683'. [ 1150.745374][T28477] loop3: detected capacity change from 0 to 32768 [ 1150.779838][T28477] JBD2: Ignoring recovery information on journal [ 1150.901554][T28496] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9689'. [ 1150.910791][T28496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9689'. [ 1150.919997][T28496] tc_dump_action: action bad kind [ 1150.937917][T28477] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1151.110635][T28503] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1151.345235][ T5849] ocfs2: Unmounting device (7,3) on (node local) [ 1151.425606][T28512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9697'. [ 1151.618429][T28516] loop5: detected capacity change from 0 to 512 [ 1151.769926][T28516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1151.829777][T28505] loop4: detected capacity change from 0 to 32768 [ 1151.838069][T28516] ext4 filesystem being mounted at /313/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.922788][T28505] ialloc: diAlloc returned -5! [ 1151.953321][T28516] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.9699: Failed to acquire dquot type 0 [ 1152.094844][T25205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1152.104514][T28528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1152.573818][T28549] netlink: 'syz.4.9713': attribute type 1 has an invalid length. [ 1152.577506][T28548] set match dimension is over the limit! [ 1152.830803][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9719'. [ 1152.837694][T28554] loop3: detected capacity change from 0 to 4096 [ 1152.915881][T28554] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1152.960270][T28554] ntfs3: loop3: Failed to load $Extend (-22). [ 1152.974119][T28564] __vm_enough_memory: pid: 28564, comm: syz.1.9720, not enough memory for the allocation [ 1152.996863][T28554] ntfs3: loop3: Failed to initialize $Extend. [ 1153.476516][T28584] loop3: detected capacity change from 0 to 128 [ 1153.548906][T28584] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1153.578651][T28584] FAT-fs (loop3): Filesystem has been set read-only [ 1154.118895][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9728'. [ 1154.298985][T28591] loop1: detected capacity change from 0 to 32768 [ 1154.355236][T28591] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1154.362839][T28612] loop3: detected capacity change from 0 to 1024 [ 1154.456006][T28591] XFS (loop1): Ending clean mount [ 1154.617070][T28620] loop3: detected capacity change from 0 to 512 [ 1154.649043][T28620] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.9736: Failed to acquire dquot type 0 [ 1154.665788][ T5846] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1154.669546][T28620] EXT4-fs (loop3): Remounting filesystem read-only [ 1154.682136][T28620] EXT4-fs (loop3): 1 orphan inode deleted [ 1154.720998][T28620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.743488][T28620] ext4 filesystem being mounted at /2388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.957351][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.076574][T28630] loop4: detected capacity change from 0 to 64 [ 1156.122306][T28644] loop4: detected capacity change from 0 to 32768 [ 1156.147923][T28644] (syz.4.9746,28644,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 1156.182475][T28644] (syz.4.9746,28644,1):ocfs2_mount_volume:1807 ERROR: status = -22 [ 1156.215724][T28644] (syz.4.9746,28644,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1156.262805][T28673] netlink: 'syz.3.9762': attribute type 1 has an invalid length. [ 1156.329627][T28644] NILFS (loop4): couldn't find nilfs on the device [ 1156.603386][T28683] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9766'. [ 1156.775570][T28690] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 28690 comm: syz.3.9769) [ 1156.791122][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1156.791136][ T28] audit: type=1800 audit(2000007525.510:125): pid=28690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9769" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=71960 res=0 errno=0 [ 1156.912614][T28694] loop4: detected capacity change from 0 to 128 [ 1156.970577][T28694] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1156.998625][T28694] FAT-fs (loop4): Filesystem has been set read-only [ 1157.138254][T28675] loop1: detected capacity change from 0 to 32768 [ 1157.177390][T28675] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.9761 (28675) [ 1157.226839][T28702] loop5: detected capacity change from 0 to 1024 [ 1157.250221][T28675] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1157.287892][T28675] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1157.312637][T28675] BTRFS info (device loop1): enabling auto defrag [ 1157.337622][T28675] BTRFS info (device loop1): use no compression [ 1157.372542][T28675] BTRFS info (device loop1): force clearing of disk cache [ 1157.408033][T28675] BTRFS info (device loop1): max_inline at 4096 [ 1157.422793][T28675] BTRFS info (device loop1): disabling free space tree [ 1157.637301][T28675] BTRFS info (device loop1): enabling ssd optimizations [ 1157.644303][T28675] BTRFS info (device loop1): auto enabling async discard [ 1157.690281][T28675] BTRFS info (device loop1): rebuilding free space tree [ 1157.695153][T28727] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9780'. [ 1157.730340][T28675] BTRFS info (device loop1): disabling free space tree [ 1157.748073][T28675] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1157.761074][T28675] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1158.076120][ T5846] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1159.292243][T28765] loop3: detected capacity change from 0 to 512 [ 1159.354046][T28765] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1159.417681][T28765] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1159.435475][T28772] ip6t_srh: unknown srh match flags 4000 [ 1159.479300][T28765] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.9796: bad orphan inode 13 [ 1159.481151][T28776] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9801'. [ 1159.501686][T28776] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9801'. [ 1159.540920][T28765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.735573][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.190713][T28766] loop5: detected capacity change from 0 to 32768 [ 1160.219132][T28766] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.9795 (28766) [ 1160.247774][T28766] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1160.262921][T28766] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1160.292755][T28766] BTRFS info (device loop5): enabling auto defrag [ 1160.304359][T28766] BTRFS info (device loop5): use no compression [ 1160.321080][T28766] BTRFS info (device loop5): force clearing of disk cache [ 1160.339763][T28766] BTRFS info (device loop5): max_inline at 4096 [ 1160.366182][T28766] BTRFS info (device loop5): disabling free space tree [ 1160.457226][T28803] loop3: detected capacity change from 0 to 256 [ 1160.483417][T28782] loop4: detected capacity change from 0 to 32768 [ 1160.519052][T28766] BTRFS info (device loop5): enabling ssd optimizations [ 1160.555814][T28766] BTRFS info (device loop5): auto enabling async discard [ 1160.570366][T28766] BTRFS info (device loop5): rebuilding free space tree [ 1160.587159][T28782] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1160.655650][T28766] BTRFS info (device loop5): disabling free space tree [ 1160.677886][T28803] FAT-fs (loop3): Directory bread(block 64) failed [ 1160.685257][T28766] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1160.695175][T28766] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1160.712063][T28803] FAT-fs (loop3): Directory bread(block 65) failed [ 1160.719354][T28803] FAT-fs (loop3): Directory bread(block 66) failed [ 1160.726020][T28803] FAT-fs (loop3): Directory bread(block 67) failed [ 1160.733211][T28803] FAT-fs (loop3): Directory bread(block 68) failed [ 1160.739856][T28803] FAT-fs (loop3): Directory bread(block 69) failed [ 1160.746573][T28803] FAT-fs (loop3): Directory bread(block 70) failed [ 1160.753225][T28803] FAT-fs (loop3): Directory bread(block 71) failed [ 1160.759949][T28803] FAT-fs (loop3): Directory bread(block 72) failed [ 1160.766488][T28803] FAT-fs (loop3): Directory bread(block 73) failed [ 1160.780482][T28782] XFS (loop4): Ending clean mount [ 1160.826589][T28782] XFS (loop4): Quotacheck needed: Please wait. [ 1160.951874][T28830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9817'. [ 1160.968087][T28782] XFS (loop4): Quotacheck: Done. [ 1161.104539][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1161.112033][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1161.128591][T25205] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1161.150528][T24893] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1161.733952][T28845] netlink: 'syz.4.9820': attribute type 10 has an invalid length. [ 1162.217900][T28863] loop5: detected capacity change from 0 to 1024 [ 1162.260750][T28863] EXT4-fs: inline encryption not supported [ 1162.342722][T28863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.561594][T28879] loop3: detected capacity change from 0 to 1024 [ 1162.572704][T28879] EXT4-fs: inline encryption not supported [ 1162.582449][T25205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.628916][T28879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1162.735239][T28879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.755472][T28888] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9841'. [ 1162.909289][T28894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9844'. [ 1162.910326][T28879] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.9837: Directory hole found for htree leaf block 0 [ 1162.945026][T28879] EXT4-fs (loop3): Remounting filesystem read-only [ 1163.049775][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.967645][T28933] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1163.988328][T28933] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1164.007563][T28933] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1164.018059][T28933] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1164.061721][T28933] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1164.073831][T28933] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1164.081349][T28933] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1164.115954][T28933] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1164.129244][T28951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9872'. [ 1164.138359][T28951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9872'. [ 1164.328394][T28956] IPv6: sit1: Disabled Multicast RS [ 1164.395482][T28959] netlink: 'syz.3.9876': attribute type 3 has an invalid length. [ 1164.435352][T28961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9877'. [ 1164.467624][T28961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9877'. [ 1164.755242][T28965] loop1: detected capacity change from 0 to 8192 [ 1164.780879][T28977] trusted_key: encrypted_key: master key parameter is missing [ 1164.937179][T28981] netlink: 'syz.5.9887': attribute type 30 has an invalid length. [ 1165.455842][T28975] loop4: detected capacity change from 0 to 32768 [ 1165.532928][T28975] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1165.569914][T29002] tmpfs: Bad value for 'mpol' [ 1165.718540][T28975] XFS (loop4): Ending clean mount [ 1165.907141][T28989] loop1: detected capacity change from 0 to 32768 [ 1165.929820][T24893] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1166.005506][T28989] JBD2: Ignoring recovery information on journal [ 1166.124147][T29018] loop3: detected capacity change from 0 to 4096 [ 1166.138133][T29020] netlink: 'syz.5.9902': attribute type 10 has an invalid length. [ 1166.147130][T19292] Bluetooth: hci1: command 0x0c1a tx timeout [ 1166.150917][T28989] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1166.153317][T19292] Bluetooth: hci3: command 0x0406 tx timeout [ 1166.169082][T19292] Bluetooth: hci2: command 0x0406 tx timeout [ 1166.231703][T29022] Bluetooth: hci0: command 0x0c1a tx timeout [ 1166.411441][T29024] netlink: 444 bytes leftover after parsing attributes in process `syz.5.9903'. [ 1166.478063][ T5846] ocfs2: Unmounting device (7,1) on (node local) [ 1166.925782][T29034] xt_TCPMSS: Only works on TCP SYN packets [ 1167.127789][T29043] "syz.5.9911" (29043) uses obsolete ecb(arc4) skcipher [ 1167.560132][T29058] netlink: 'syz.4.9918': attribute type 3 has an invalid length. [ 1167.583318][T29059] loop1: detected capacity change from 0 to 256 [ 1167.684281][T29059] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 1167.698819][T29063] xt_ecn: cannot match TCP bits for non-tcp packets [ 1167.989312][T29074] IPv6: sit2: Disabled Multicast RS [ 1168.017869][T29073] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9926'. [ 1168.048082][T29073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9926'. [ 1168.347730][ T28] audit: type=1326 audit(2000007536.323:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29087 comm="syz.5.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1168.381581][T29022] Bluetooth: hci1: command 0x0c1a tx timeout [ 1168.413677][ T28] audit: type=1326 audit(2000007536.351:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29087 comm="syz.5.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1168.439011][T29092] loop4: detected capacity change from 0 to 8 [ 1168.445199][ T28] audit: type=1326 audit(2000007536.360:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29087 comm="syz.5.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1168.469033][T29022] Bluetooth: hci0: command 0x0c1a tx timeout [ 1168.475167][ T28] audit: type=1326 audit(2000007536.360:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29087 comm="syz.5.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1168.498003][ T28] audit: type=1326 audit(2000007536.360:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29087 comm="syz.5.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb9c799 code=0x7ffc0000 [ 1168.539571][T29092] SQUASHFS error: Failed to read block 0x6fc: -5 [ 1168.559020][T29092] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 1168.566099][T29095] netlink: 'syz.3.9936': attribute type 25 has an invalid length. [ 1168.752403][T29101] IPv6: sit1: Disabled Multicast RS [ 1169.345954][T29131] loop4: detected capacity change from 0 to 1024 [ 1169.390471][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9955'. [ 1169.746563][T29148] loop1: detected capacity change from 0 to 4096 [ 1169.761230][T29148] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1169.772840][T29148] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1169.782628][T29148] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1169.796311][T29148] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1169.840993][T29148] ntfs: volume version 3.1. [ 1169.881197][T29148] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1170.047159][T29127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1170.053951][T29127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1170.060467][T29127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1170.066634][T29127] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1170.379551][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1170.387534][T23159] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1170.614710][T23159] usb 2-1: Using ep0 maxpacket: 16 [ 1170.622401][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.636374][T23159] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1170.644581][T23159] usb 2-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 1170.676014][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1170.687733][T23159] usb 2-1: config 0 has no interface number 0 [ 1170.698936][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 32768, setting to 1024 [ 1170.710383][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1170.727055][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1170.736487][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.745874][T23159] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1170.786914][T23159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.795050][T23159] usb 2-1: Product: syz [ 1170.800467][ T8] usb 5-1: config 0 descriptor?? [ 1170.814707][T23159] usb 2-1: Manufacturer: syz [ 1170.828615][T23159] usb 2-1: SerialNumber: syz [ 1170.840068][T23159] usb 2-1: config 0 descriptor?? [ 1170.930324][T29187] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9980'. [ 1171.062247][ T8] usb 5-1: USB disconnect, device number 7 [ 1171.086573][T23159] usb 2-1: USB disconnect, device number 24 [ 1171.114560][T29192] loop5: detected capacity change from 0 to 8 [ 1171.166372][T29192] SQUASHFS error: Failed to read block 0x6fc: -5 [ 1171.189510][T29192] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 1171.356272][T29185] loop3: detected capacity change from 0 to 40427 [ 1171.370039][T29185] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1171.379692][T29185] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1171.392624][T29185] F2FS-fs (loop3): invalid crc value [ 1171.404296][T29185] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1171.448698][T29022] Bluetooth: hci2: command 0x0406 tx timeout [ 1171.481222][T29185] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1171.488440][T29185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1171.641151][ T5839] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1171.858044][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 1171.879622][ T5839] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1171.900147][ T5839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1171.923928][ T5839] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1171.941624][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.971161][ T5839] usb 6-1: Product: syz [ 1171.975557][ T5839] usb 6-1: Manufacturer: syz [ 1171.980217][ T5839] usb 6-1: SerialNumber: syz [ 1172.134201][T29213] delete_channel: no stack [ 1172.218434][T29022] Bluetooth: hci0: command 0x0c1a tx timeout [ 1172.224588][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1172.225029][T19292] Bluetooth: hci3: command 0x0406 tx timeout [ 1172.242394][ T5839] usb 6-1: 0:2 : does not exist [ 1172.247384][ T5839] usb 6-1: unit 9 not found! [ 1172.266067][ T5839] usb 6-1: USB disconnect, device number 5 [ 1172.358023][ T6159] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1172.575465][T29231] loop3: detected capacity change from 0 to 1764 [ 1172.575941][ T6159] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1172.604205][ T6159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.612462][ T6159] usb 2-1: Product: syz [ 1172.644619][ T6159] usb 2-1: Manufacturer: syz [ 1172.651829][ T6159] usb 2-1: SerialNumber: syz [ 1172.664381][ T6159] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1172.718035][T21798] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1173.062939][T29244] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50292 out of range (51000000..2150000000) [ 1173.074042][T29247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10005'. [ 1173.295221][ T8] usb 2-1: USB disconnect, device number 25 [ 1173.487804][T29264] x_tables: unsorted entry at hook 2 [ 1174.018467][T29287] loop4: detected capacity change from 0 to 512 [ 1174.048474][T29287] EXT4-fs: Ignoring removed orlov option [ 1174.081330][T29287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1174.102371][T29292] loop5: detected capacity change from 0 to 64 [ 1174.112677][T29287] ================================================================== [ 1174.120860][T29287] BUG: KASAN: slab-use-after-free in __ext4_iget+0x2c0/0x3f40 [ 1174.128340][T29287] Read of size 8 at addr ffff88805c5399b0 by task syz.4.10024/29287 [ 1174.136329][T29287] [ 1174.138662][T29287] CPU: 0 PID: 29287 Comm: syz.4.10024 Not tainted syzkaller #0 [ 1174.146213][T29287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1174.156282][T29287] Call Trace: [ 1174.159571][T29287] [ 1174.162512][T29287] dump_stack_lvl+0x18c/0x250 [ 1174.167212][T29287] ? __lock_acquire+0x7d40/0x7d40 [ 1174.171536][T29292] syz.5.10026: attempt to access beyond end of device [ 1174.171536][T29292] loop5: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1174.172246][T29287] ? show_regs_print_info+0x20/0x20 [ 1174.172277][T29287] ? load_image+0x400/0x400 [ 1174.172301][T29287] ? __virt_addr_valid+0x469/0x540 [ 1174.172323][T29287] print_report+0xa8/0x210 [ 1174.172342][T29287] ? __ext4_iget+0x2c0/0x3f40 [ 1174.186967][T21798] usb 2-1: Service connection timeout for: 256 [ 1174.191431][T29287] kasan_report+0x117/0x150 [ 1174.191456][T29287] ? do_raw_spin_unlock+0x121/0x230 [ 1174.191479][T29287] ? __ext4_iget+0x2c0/0x3f40 [ 1174.208590][T21798] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1174.210140][T29287] __ext4_iget+0x2c0/0x3f40 [ 1174.210174][T29287] ? free_unref_page+0x190/0x2e0 [ 1174.219718][T21798] ath9k_htc: Failed to initialize the device [ 1174.220814][T29287] ? apply_workqueue_attrs+0x180/0x180 [ 1174.220841][T29287] ? ext4_get_projid+0x140/0x140 [ 1174.233875][T29292] Buffer I/O error on dev loop5, logical block 8388608, async page read [ 1174.238492][T29287] ? mb_cache_create+0x433/0x530 [ 1174.238527][T29287] ext4_fill_super+0x5020/0x6790 [ 1174.238557][T29287] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1174.258643][T29292] syz.5.10026: attempt to access beyond end of device [ 1174.258643][T29292] loop5: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1174.259419][T29287] ? __might_sleep+0xe0/0xe0 [ 1174.259447][T29287] ? read_lock_is_recursive+0x20/0x20 [ 1174.259466][T29287] ? snprintf+0xe9/0x140 [ 1174.259490][T29287] ? down_read_killable+0x340/0x340 [ 1174.259509][T29287] ? setup_bdev_super+0x56b/0x660 [ 1174.259529][T29287] get_tree_bdev+0x3f3/0x520 [ 1174.259545][T29287] ? vfs_parse_fs_string+0x170/0x170 [ 1174.259564][T29287] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1174.259585][T29287] ? setup_bdev_super+0x660/0x660 [ 1174.259602][T29287] ? apparmor_capable+0x137/0x1a0 [ 1174.259620][T29287] ? bpf_lsm_capable+0x9/0x10 [ 1174.259641][T29287] ? security_capable+0x89/0xb0 [ 1174.259662][T29287] vfs_get_tree+0x8c/0x280 [ 1174.259679][T29287] do_new_mount+0x24b/0xa40 [ 1174.259701][T29287] __se_sys_mount+0x2e7/0x3d0 [ 1174.259739][T29287] ? __x64_sys_mount+0xc0/0xc0 [ 1174.259759][T29287] ? lockdep_hardirqs_on+0x98/0x150 [ 1174.259778][T29287] ? __x64_sys_mount+0x20/0xc0 [ 1174.259795][T29287] do_syscall_64+0x55/0xa0 [ 1174.259816][T29287] ? clear_bhb_loop+0x40/0x90 [ 1174.259835][T29287] ? clear_bhb_loop+0x40/0x90 [ 1174.259854][T29287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1174.259872][T29287] RIP: 0033:0x7fb01e99da0a [ 1174.259889][T29287] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.259904][T29287] RSP: 002b:00007fb01cbf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1174.259924][T29287] RAX: ffffffffffffffda RBX: 00007fb01cbf5ee0 RCX: 00007fb01e99da0a [ 1174.259937][T29287] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007fb01cbf5ea0 [ 1174.259949][T29287] RBP: 0000200000000000 R08: 00007fb01cbf5ee0 R09: 0000000000000041 [ 1174.259962][T29287] R10: 0000000000000041 R11: 0000000000000246 R12: 00002000000001c0 [ 1174.259973][T29287] R13: 00007fb01cbf5ea0 R14: 000000000000050a R15: 0000200000000200 [ 1174.259993][T29287] [ 1174.260000][T29287] [ 1174.260004][T29287] Allocated by task 12389: [ 1174.260012][T29287] kasan_set_track+0x4e/0x70 [ 1174.260029][T29287] __kasan_slab_alloc+0x6c/0x80 [ 1174.260046][T29287] slab_post_alloc_hook+0x6e/0x4b0 [ 1174.260065][T29287] kmem_cache_alloc_lru+0x111/0x2d0 [ 1174.260083][T29287] reiserfs_alloc_inode+0x2a/0xc0 [ 1174.260109][T29287] iget5_locked+0xa2/0x260 [ 1174.260123][T29287] reiserfs_fill_super+0x11d7/0x23b0 [ 1174.260138][T29287] mount_bdev+0x221/0x2d0 [ 1174.260155][T29287] legacy_get_tree+0xea/0x180 [ 1174.260175][T29287] vfs_get_tree+0x8c/0x280 [ 1174.260190][T29287] do_new_mount+0x24b/0xa40 [ 1174.260204][T29287] __se_sys_mount+0x2e7/0x3d0 [ 1174.260217][T29287] do_syscall_64+0x55/0xa0 [ 1174.260236][T29287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1174.260253][T29287] [ 1174.260258][T29287] Last potentially related work creation: [ 1174.260264][T29287] kasan_save_stack+0x3e/0x60 [ 1174.260278][T29287] __kasan_record_aux_stack+0xaf/0xc0 [ 1174.270428][T29292] Buffer I/O error on dev loop5, logical block 8388608, async page read [ 1174.273514][T29287] call_rcu+0x153/0x950 [ 1174.273540][T29287] evict+0x835/0x8d0 [ 1174.273555][T29287] __dentry_kill+0x431/0x650 [ 1174.273573][T29287] dentry_kill+0xb8/0x290 [ 1174.273591][T29287] dput+0xfe/0x1e0 [ 1174.273607][T29287] reiserfs_fill_super+0x14be/0x23b0 [ 1174.273625][T29287] mount_bdev+0x221/0x2d0 [ 1174.273638][T29287] legacy_get_tree+0xea/0x180 [ 1174.273654][T29287] vfs_get_tree+0x8c/0x280 [ 1174.273667][T29287] do_new_mount+0x24b/0xa40 [ 1174.273680][T29287] __se_sys_mount+0x2e7/0x3d0 [ 1174.273693][T29287] do_syscall_64+0x55/0xa0 [ 1174.273714][T29287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1174.273730][T29287] [ 1174.273734][T29287] The buggy address belongs to the object at ffff88805c5393e0 [ 1174.273734][T29287] which belongs to the cache reiser_inode_cache of size 1568 [ 1174.273748][T29287] The buggy address is located 1488 bytes inside of [ 1174.273748][T29287] freed 1568-byte region [ffff88805c5393e0, ffff88805c539a00) [ 1174.273764][T29287] [ 1174.273768][T29287] The buggy address belongs to the physical page: [ 1174.273788][T29287] page:ffffea0001714e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805c53d620 pfn:0x5c538 [ 1174.273808][T29287] head:ffffea0001714e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1174.273822][T29287] memcg:ffff8880249df001 [ 1174.273828][T29287] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1174.273848][T29287] page_type: 0xffffffff() [ 1174.273863][T29287] raw: 00fff00000000840 ffff8881400f9c80 dead000000000122 0000000000000000 [ 1174.273877][T29287] raw: ffff88805c53d620 0000000080130007 00000001ffffffff ffff8880249df001 [ 1174.273884][T29287] page dumped because: kasan: bad access detected [ 1174.273897][T29287] page_owner tracks the page as allocated [ 1174.273902][T29287] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 8713, tgid 8712 (syz.2.1253), ts 226557967562, free_ts 157980753369 [ 1174.273931][T29287] post_alloc_hook+0x1c1/0x200 [ 1174.273951][T29287] get_page_from_freelist+0x1951/0x19e0 [ 1174.788567][T29287] __alloc_pages+0x1f0/0x460 [ 1174.793146][T29287] alloc_slab_page+0x5d/0x160 [ 1174.797806][T29287] new_slab+0x87/0x2d0 [ 1174.801881][T29287] ___slab_alloc+0xc5d/0x12f0 [ 1174.806554][T29287] kmem_cache_alloc_lru+0x1aa/0x2d0 [ 1174.811755][T29287] reiserfs_alloc_inode+0x2a/0xc0 [ 1174.816775][T29287] iget5_locked+0xa2/0x260 [ 1174.821171][T29287] reiserfs_fill_super+0x11d7/0x23b0 [ 1174.826439][T29287] mount_bdev+0x221/0x2d0 [ 1174.830752][T29287] legacy_get_tree+0xea/0x180 [ 1174.835412][T29287] vfs_get_tree+0x8c/0x280 [ 1174.839807][T29287] do_new_mount+0x24b/0xa40 [ 1174.844293][T29287] __se_sys_mount+0x2e7/0x3d0 [ 1174.849035][T29287] do_syscall_64+0x55/0xa0 [ 1174.853437][T29287] page last free stack trace: [ 1174.858090][T29287] free_unref_page_prepare+0x7b2/0x8c0 [ 1174.863535][T29287] free_unref_page+0x32/0x2e0 [ 1174.868200][T29287] __slab_free+0x35a/0x400 [ 1174.872598][T29287] qlist_free_all+0x75/0xd0 [ 1174.877087][T29287] kasan_quarantine_reduce+0x143/0x160 [ 1174.882534][T29287] __kasan_slab_alloc+0x22/0x80 [ 1174.887377][T29287] slab_post_alloc_hook+0x6e/0x4b0 [ 1174.892475][T29287] kmem_cache_alloc+0x11a/0x2d0 [ 1174.897311][T29287] getname_flags+0xbb/0x500 [ 1174.901819][T29287] __x64_sys_unlinkat+0xae/0xe0 [ 1174.906651][T29287] do_syscall_64+0x55/0xa0 [ 1174.911057][T29287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1174.916944][T29287] [ 1174.919269][T29287] Memory state around the buggy address: [ 1174.924886][T29287] ffff88805c539880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1174.932929][T29287] ffff88805c539900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1174.940986][T29287] >ffff88805c539980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1174.949040][T29287] ^ [ 1174.954652][T29287] ffff88805c539a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1174.962702][T29287] ffff88805c539a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1174.970753][T29287] ================================================================== [ 1174.981014][ T8] usb 2-1: ath9k_htc: USB layer deinitialized [ 1174.989342][T29287] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1174.996578][T29287] CPU: 1 PID: 29287 Comm: syz.4.10024 Not tainted syzkaller #0 [ 1175.004125][T29287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1175.014176][T29287] Call Trace: [ 1175.017461][T29287] [ 1175.020393][T29287] dump_stack_lvl+0x18c/0x250 [ 1175.025081][T29287] ? show_regs_print_info+0x20/0x20 [ 1175.030289][T29287] ? load_image+0x400/0x400 [ 1175.034799][T29287] panic+0x2dc/0x730 [ 1175.038683][T29287] ? bpf_jit_dump+0xd0/0xd0 [ 1175.043266][T29287] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1175.049265][T29287] ? _raw_spin_unlock+0x40/0x40 [ 1175.054130][T29287] ? print_memory_metadata+0x314/0x400 [ 1175.059608][T29287] ? __ext4_iget+0x2c0/0x3f40 [ 1175.064324][T29287] check_panic_on_warn+0x84/0xa0 [ 1175.069272][T29287] ? __ext4_iget+0x2c0/0x3f40 [ 1175.073936][T29287] end_report+0x6f/0x130 [ 1175.078179][T29287] kasan_report+0x128/0x150 [ 1175.082691][T29287] ? do_raw_spin_unlock+0x121/0x230 [ 1175.087876][T29287] ? __ext4_iget+0x2c0/0x3f40 [ 1175.092538][T29287] __ext4_iget+0x2c0/0x3f40 [ 1175.097042][T29287] ? free_unref_page+0x190/0x2e0 [ 1175.101984][T29287] ? apply_workqueue_attrs+0x180/0x180 [ 1175.107423][T29287] ? ext4_get_projid+0x140/0x140 [ 1175.112344][T29287] ? mb_cache_create+0x433/0x530 [ 1175.117263][T29287] ext4_fill_super+0x5020/0x6790 [ 1175.122184][T29287] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1175.128404][T29287] ? __might_sleep+0xe0/0xe0 [ 1175.132973][T29287] ? read_lock_is_recursive+0x20/0x20 [ 1175.138323][T29287] ? snprintf+0xe9/0x140 [ 1175.142553][T29287] ? down_read_killable+0x340/0x340 [ 1175.147754][T29287] ? setup_bdev_super+0x56b/0x660 [ 1175.152789][T29287] get_tree_bdev+0x3f3/0x520 [ 1175.157390][T29287] ? vfs_parse_fs_string+0x170/0x170 [ 1175.162682][T29287] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1175.168909][T29287] ? setup_bdev_super+0x660/0x660 [ 1175.173911][T29287] ? apparmor_capable+0x137/0x1a0 [ 1175.178913][T29287] ? bpf_lsm_capable+0x9/0x10 [ 1175.183571][T29287] ? security_capable+0x89/0xb0 [ 1175.188402][T29287] vfs_get_tree+0x8c/0x280 [ 1175.192799][T29287] do_new_mount+0x24b/0xa40 [ 1175.197282][T29287] __se_sys_mount+0x2e7/0x3d0 [ 1175.201954][T29287] ? __x64_sys_mount+0xc0/0xc0 [ 1175.206729][T29287] ? lockdep_hardirqs_on+0x98/0x150 [ 1175.211931][T29287] ? __x64_sys_mount+0x20/0xc0 [ 1175.216699][T29287] do_syscall_64+0x55/0xa0 [ 1175.221120][T29287] ? clear_bhb_loop+0x40/0x90 [ 1175.225782][T29287] ? clear_bhb_loop+0x40/0x90 [ 1175.230437][T29287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1175.236311][T29287] RIP: 0033:0x7fb01e99da0a [ 1175.240707][T29287] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.260303][T29287] RSP: 002b:00007fb01cbf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1175.268697][T29287] RAX: ffffffffffffffda RBX: 00007fb01cbf5ee0 RCX: 00007fb01e99da0a [ 1175.276650][T29287] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007fb01cbf5ea0 [ 1175.284598][T29287] RBP: 0000200000000000 R08: 00007fb01cbf5ee0 R09: 0000000000000041 [ 1175.292544][T29287] R10: 0000000000000041 R11: 0000000000000246 R12: 00002000000001c0 [ 1175.300493][T29287] R13: 00007fb01cbf5ea0 R14: 000000000000050a R15: 0000200000000200 [ 1175.308458][T29287] [ 1175.311825][T29287] Kernel Offset: disabled [ 1175.316135][T29287] Rebooting in 86400 seconds..