last executing test programs: 7m10.063833153s ago: executing program 3 (id=8447): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0021002bbd700000000000ff00000005002a000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) 7m9.763010328s ago: executing program 3 (id=8453): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="0d00000024680400", 0x8}], 0x1) 7m9.634516234s ago: executing program 3 (id=8456): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000200)) 7m9.535230759s ago: executing program 3 (id=8457): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000dc0)={[{@umask}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@part={'part', 0x3d, 0x4}}, {@nobarrier}, {@force}, {@gid}, {@gid}, {}]}, 0x44, 0x70f, &(0x7f00000005c0)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) 7m9.11995879s ago: executing program 3 (id=8462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 7m8.427086865s ago: executing program 3 (id=8467): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x6}, @in6={0xa, 0x4e20, 0x1, @empty, 0x959}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e21, @remote}], 0x12) 7m7.969897668s ago: executing program 32 (id=8467): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x6}, @in6={0xa, 0x4e20, 0x1, @empty, 0x959}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e21, @remote}], 0x12) 3m34.592887054s ago: executing program 1 (id=11057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) 3m34.27165926s ago: executing program 1 (id=11064): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 3m34.026348972s ago: executing program 1 (id=11068): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0xc, {0x9}}) 3m33.711305628s ago: executing program 1 (id=11075): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 3m32.173960265s ago: executing program 1 (id=11094): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 3m30.538739397s ago: executing program 1 (id=11117): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0xcb4, 0x4) 3m30.036014613s ago: executing program 33 (id=11117): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0xcb4, 0x4) 1m30.056729679s ago: executing program 6 (id=12575): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x100, 0x2, 0x0, 0x0, 0x40, 0x1720}, 0x20) 1m29.792059292s ago: executing program 6 (id=12579): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x2, @in=@broadcast, 0x0, 0x1}]}]}, 0x13c}}, 0x0) 1m29.578130653s ago: executing program 6 (id=12581): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8, 0x0, 0x0, 0x4, 0x41000000, 0x0, 0x0, 0x1], [0x10000, 0x0, 0x3a7f7589, 0x0, 0x0, 0x0, 0x0, 0x80e1], [0x6, 0x0, 0x0, 0x3, 0x0, 0xffffffff]], '\x00', [{0x2, 0x3}, {}, {0x8}, {0x0, 0x1, 0x0, 0x1}, {0xc9}, {0x0, 0x8}, {0x80000001}, {0x72}, {0x40003}, {}, {0x0, 0xac}, {0x0, 0x4}]}) 1m29.403574862s ago: executing program 6 (id=12582): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m28.726354865s ago: executing program 6 (id=12585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b40000000000600050000000000040006"], 0x48}}, 0x0) 1m26.066106339s ago: executing program 6 (id=12595): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() 1m25.470212139s ago: executing program 34 (id=12595): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) munlockall() 3.236431257s ago: executing program 5 (id=13495): setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) 3.023948937s ago: executing program 5 (id=13499): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) 2.626647617s ago: executing program 5 (id=13504): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000d00)={0x1b, "e80704cfd47eae079558827dd279fdc862dbc87a12ad4894ad358768d41f2aeef75574a63e0f022e8e845f6f77cae9241e8fbc7c08514f8d4a0c1c50320edd1912948e6a828be2abf04af41996b19fd43bea3d6c4b766032b9c01795507d7bfaee36f1c9fe0fd588272376fffc223434f3cc8b3694ac33205a96db1330122fd8"}) 2.425935317s ago: executing program 4 (id=13507): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001040)={0xa, 0x0}) 2.308123943s ago: executing program 5 (id=13509): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1, &(0x7f0000000080), 0x1, 0x4dd, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40040, 0x6ab858183a7ef6ba) 2.149256041s ago: executing program 4 (id=13511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 1.925571353s ago: executing program 4 (id=13513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x801, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xb029}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x984, 0x8}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) 1.857911406s ago: executing program 2 (id=13514): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000080)='1', 0x1) 1.840399807s ago: executing program 5 (id=13516): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x541b, 0x0) 1.607762999s ago: executing program 4 (id=13518): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x100) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x3, @win={{0xfffff182, 0x4, 0x2, 0x6}, 0x9, 0x6, &(0x7f0000000140)={{0x4, 0x7, 0x0, 0x5}}, 0x4, 0x0, 0x10}}) 1.57929441s ago: executing program 2 (id=13519): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x20400, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 1.515024503s ago: executing program 5 (id=13521): syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x5eca, &(0x7f000000bd40)="$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") open$dir(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 1.466047346s ago: executing program 7 (id=13522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000200)}, 0x20) 1.329344583s ago: executing program 4 (id=13523): syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x800c, &(0x7f0000000140), 0x0, 0x111d, &(0x7f0000001480)="$eJzs2LFqFEEcBvBv9k7NobBy6RcLCwsJkbNWUyhca6uNSipT5SpFMA9jY+eDaCr7kF6LPMHK3eayCOFUkrPQ3w+Wmf3PNzsz5U4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbph8K8lmlYyXtSpJSZrmcHqcpFnWb34eVCl5ujudPd6fPJl1sVQpz5Iyn5Xy8UGXnYwn43vj+5s7t7/M3rx9/WJvb3d/MfDyekmTo5NLPcUop3sZrAjNN7hxlgYAAID/R3th9e8t9OnGmtYHAAAAfuVybxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lxb9/2ry06VpCRNczg9TtKcM+/KX9ofAAAAcHElVZ7X59W7a4De3Xyty1m97Tyssp0PdUaLyLBPV6sWXTkIAAAA/7z22qK5lXLQ/yaX933gToZ9fZEcZmurez9t8n0nGeRgY/vnb48eJTk6efdq/pR2sO6zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9iBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAADAXgEAAP//1gXd9g==") quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.328503083s ago: executing program 2 (id=13533): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0)={[{@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@fat=@showexec}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@utf8no}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8}, {@shortname_mixed}, {@utf8}, {@utf8no}, {@fat=@showexec}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) 1.239021427s ago: executing program 0 (id=13524): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 1.19003102s ago: executing program 7 (id=13525): r0 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.012940848s ago: executing program 0 (id=13526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x401, 0x0, 0xfffffffd, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}}, 0x0) 981.6668ms ago: executing program 7 (id=13527): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 980.71105ms ago: executing program 2 (id=13528): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10024, 0x20902}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 730.991783ms ago: executing program 0 (id=13529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0) 688.742815ms ago: executing program 7 (id=13530): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x4a) 617.590678ms ago: executing program 0 (id=13531): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23ffffe}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 582.1459ms ago: executing program 2 (id=13532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002200)=ANY=[@ANYBLOB="2c000000020303000000000000000000000000100800010001000000080005400000000208000440"], 0x2c}}, 0x0) 500.027554ms ago: executing program 0 (id=13534): r0 = socket$kcm(0x2a, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xffffff8d) 379.98981ms ago: executing program 7 (id=13535): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x3, 0x0, 0x5}}, 0x18}}, 0x24040004) 308.786174ms ago: executing program 0 (id=13536): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) 249.573347ms ago: executing program 2 (id=13537): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 113.918113ms ago: executing program 4 (id=13538): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x2}, 0x20) 0s ago: executing program 7 (id=13539): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002163, 0x0) kernel console output (not intermixed with test programs): T8693] XFS: attr2 mount option is deprecated. [ 1400.550273][ T8742] loop0: detected capacity change from 0 to 2048 [ 1400.581565][ T4311] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1400.596792][ T8742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1400.599366][ T4311] usb 7-1: config 0 has no interface number 0 [ 1400.673121][ T4311] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1400.686989][ T4311] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1400.701802][ T4311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.713929][ T4311] usb 7-1: Product: syz [ 1400.718198][ T4311] usb 7-1: Manufacturer: syz [ 1400.723471][ T4311] usb 7-1: SerialNumber: syz [ 1400.730059][ T4311] usb 7-1: config 0 descriptor?? [ 1400.735804][ T8724] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1400.748975][ T8693] XFS (loop5): Mounting V5 Filesystem [ 1400.770177][ T4311] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4a:d3:0c:a7:a5:53 [ 1401.010606][ T8693] XFS (loop5): Ending clean mount [ 1401.244973][T25288] XFS (loop5): Unmounting Filesystem [ 1401.703340][ T8795] Cannot find del_set index 4 as target [ 1401.767581][ T26] audit: type=1326 audit(50891552.869:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.2.12203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1401.856372][ T26] audit: type=1326 audit(50891552.922:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.2.12203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1401.961350][ T26] audit: type=1326 audit(50891552.922:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.2.12203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1402.016946][ T8806] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1402.042297][ T26] audit: type=1326 audit(50891552.922:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.2.12203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1402.120269][ T26] audit: type=1326 audit(50891552.922:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.2.12203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1402.193283][ T26] audit: type=1326 audit(50891552.922:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.2.12203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1402.256199][ T26] audit: type=1326 audit(50891552.922:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.2.12203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1402.317683][ T26] audit: type=1326 audit(50891552.922:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8797 comm="syz.2.12203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1402.586628][ T8785] loop0: detected capacity change from 0 to 32768 [ 1402.681473][ T8785] XFS (loop0): Mounting V5 Filesystem [ 1402.796447][ T8785] XFS (loop0): Ending clean mount [ 1402.818525][ T8785] XFS (loop0): Quotacheck needed: Please wait. [ 1402.913065][ T8844] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1402.949472][ T8785] XFS (loop0): Quotacheck: Done. [ 1403.018152][T20575] usb 7-1: USB disconnect, device number 8 [ 1403.030274][T20575] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1403.111200][ T4272] XFS (loop0): Unmounting Filesystem [ 1403.602040][ T8880] loop6: detected capacity change from 0 to 8 [ 1404.321978][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12227'. [ 1404.367132][ T8922] netlink: 108 bytes leftover after parsing attributes in process `syz.6.12227'. [ 1404.396770][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12227'. [ 1404.445175][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12227'. [ 1404.612474][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1404.619008][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1404.809944][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1404.849481][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12233'. [ 1404.921384][ T8939] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1404.946453][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12234'. [ 1405.220925][ T8959] loop4: detected capacity change from 0 to 256 [ 1405.335059][ T8959] FAT-fs (loop4): Directory bread(block 64) failed [ 1405.381031][ T8959] FAT-fs (loop4): Directory bread(block 65) failed [ 1405.409556][ T8959] FAT-fs (loop4): Directory bread(block 66) failed [ 1405.416196][ T8959] FAT-fs (loop4): Directory bread(block 67) failed [ 1405.453748][ T8917] loop0: detected capacity change from 0 to 32768 [ 1405.473825][ T8959] FAT-fs (loop4): Directory bread(block 68) failed [ 1405.500240][ T8959] FAT-fs (loop4): Directory bread(block 69) failed [ 1405.518043][ T8917] JBD2: Ignoring recovery information on journal [ 1405.532142][ T8959] FAT-fs (loop4): Directory bread(block 70) failed [ 1405.539146][ T8959] FAT-fs (loop4): Directory bread(block 71) failed [ 1405.546637][ T8959] FAT-fs (loop4): Directory bread(block 72) failed [ 1405.553570][ T8959] FAT-fs (loop4): Directory bread(block 73) failed [ 1405.567599][ T8969] loop5: detected capacity change from 0 to 65 [ 1405.671694][ T8969] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1405.779985][ T8917] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1406.164088][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 1406.419366][ T5132] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1406.630841][ T5132] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1406.657293][ T5132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.714660][ T5132] usb 3-1: config 0 descriptor?? [ 1406.742316][ T5132] cp210x 3-1:0.0: cp210x converter detected [ 1407.151599][ T5132] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1407.171769][ T5132] usb 3-1: USB disconnect, device number 104 [ 1407.205104][ T5132] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1407.253971][ T5132] cp210x 3-1:0.0: device disconnected [ 1407.275805][ T8992] loop4: detected capacity change from 0 to 32768 [ 1407.350200][ T8992] XFS (loop4): Mounting V5 Filesystem [ 1407.385704][ T9078] SET target dimension over the limit! [ 1407.499275][ T8992] XFS (loop4): Ending clean mount [ 1407.568704][ T8992] XFS (loop4): syz.4.12245 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 1407.740284][ T4278] XFS (loop4): Unmounting Filesystem [ 1408.171096][T20570] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1408.395183][T20570] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1408.414206][T20570] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.429486][ T9124] loop2: detected capacity change from 0 to 2048 [ 1408.441206][T20570] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1408.471526][T20570] usb 6-1: config 1 has no interface number 0 [ 1408.490334][T20570] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1408.533679][ T9124] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1408.549809][T20570] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1408.597042][T20570] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1408.667581][T20570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.675679][T20570] usb 6-1: Product: syz [ 1408.707583][T20570] usb 6-1: Manufacturer: syz [ 1408.725292][T20570] usb 6-1: SerialNumber: syz [ 1409.044781][ T9190] tmpfs: Bad value for 'mpol' [ 1409.200221][ T5276] usb 6-1: USB disconnect, device number 24 [ 1409.452197][ T9217] loop4: detected capacity change from 0 to 256 [ 1409.499986][ T9217] exfat: Deprecated parameter 'namecase' [ 1409.517932][ T9217] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1410.870538][ T26] audit: type=1326 audit(50891562.433:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.2.12316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1410.919925][ T9296] loop6: detected capacity change from 0 to 1024 [ 1410.970761][ T9296] EXT4-fs: Ignoring removed mblk_io_submit option [ 1410.978149][ T26] audit: type=1326 audit(50891562.464:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.2.12316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1411.043754][ T9296] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1411.069946][ T9296] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1411.131484][ T26] audit: type=1326 audit(50891562.464:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.2.12316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1411.175905][ T9296] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1411.237955][ T9296] EXT4-fs: Ignoring removed mblk_io_submit option [ 1411.265480][ T9296] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1411.305861][ T26] audit: type=1326 audit(50891562.464:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.2.12316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1411.335546][ T9296] EXT4-fs: Cannot change quota options when quota turned on [ 1411.408653][ T26] audit: type=1326 audit(50891562.464:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.2.12316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279c799 code=0x7ffc0000 [ 1411.512483][ T4042] EXT4-fs (loop6): unmounting filesystem. [ 1411.557140][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1411.589241][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1411.639680][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1411.662468][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1411.704433][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1411.728724][ T9336] loop6: detected capacity change from 0 to 164 [ 1411.760391][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1411.770937][ T9336] Unable to read rock-ridge attributes [ 1411.798687][ T9336] Unable to read rock-ridge attributes [ 1411.816867][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1411.840760][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1411.867583][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1411.915467][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1412.890977][ T9385] xt_CT: No such helper "pptp" [ 1412.921878][ T9401] loop5: detected capacity change from 0 to 128 [ 1413.345207][ T9428] SET target dimension over the limit! [ 1413.480305][ T9432] loop4: detected capacity change from 0 to 512 [ 1413.635120][ T9432] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #16: comm syz.4.12355: corrupted inode contents [ 1413.650205][ T9432] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #16: comm syz.4.12355: mark_inode_dirty error [ 1413.663473][ T9432] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #16: comm syz.4.12355: corrupted inode contents [ 1413.678052][ T9432] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.12355: mark_inode_dirty error [ 1413.690875][ T9432] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #16: comm syz.4.12355: corrupted inode contents [ 1413.716708][ T9432] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1413.745097][ T9432] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #16: comm syz.4.12355: corrupted inode contents [ 1413.770019][ T9432] EXT4-fs error (device loop4): ext4_truncate:4318: inode #16: comm syz.4.12355: mark_inode_dirty error [ 1413.821734][ T9432] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1413.872268][ T9432] EXT4-fs (loop4): 1 truncate cleaned up [ 1413.896993][ T9432] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1413.898756][ T75] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1413.969283][ T26] audit: type=1326 audit(50891565.687:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.0.12361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1413.972107][ T75] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 1 [ 1414.018515][ T9461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1414.025875][ T9461] IPv6: NLM_F_CREATE should be set when creating new route [ 1414.033226][ T9461] IPv6: NLM_F_CREATE should be set when creating new route [ 1414.057263][ T26] audit: type=1326 audit(50891565.708:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.0.12361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1414.089948][ T9432] EXT4-fs (loop4): unmounting filesystem. [ 1414.197678][ T26] audit: type=1326 audit(50891565.708:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.0.12361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1414.316438][ T26] audit: type=1326 audit(50891565.729:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.0.12361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1414.531653][ T9481] loop2: detected capacity change from 0 to 1024 [ 1414.552503][ T9483] cgroup: Unknown subsys name 'pcr' [ 1414.591387][ T9488] loop6: detected capacity change from 0 to 8 [ 1414.675861][ T9481] hfsplus: invalid catalog entry type in lookup [ 1415.059595][ T9513] program syz.2.12376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1415.380400][ T9532] netlink: 'syz.0.12383': attribute type 6 has an invalid length. [ 1415.666012][ T9548] loop0: detected capacity change from 0 to 512 [ 1415.732651][ T9548] EXT4-fs: Ignoring removed oldalloc option [ 1415.786442][ T9548] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1415.863136][ T9562] netlink: 'syz.6.12390': attribute type 49 has an invalid length. [ 1415.881718][ T9548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1416.028609][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1416.578461][ T9602] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 1416.658509][ T9591] loop2: detected capacity change from 0 to 4096 [ 1416.695198][ T9591] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1416.734309][ T9591] ntfs3: loop2: mft corrupted [ 1416.766835][ T9591] ntfs3: loop2: Failed to load $Volume. [ 1417.089431][ T9625] netlink: 'syz.2.12411': attribute type 1 has an invalid length. [ 1417.130959][ T9625] __nla_validate_parse: 44 callbacks suppressed [ 1417.130979][ T9625] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12411'. [ 1417.312615][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1417.312632][ T26] audit: type=1326 audit(50891569.194:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fed9c799 code=0x7ffc0000 [ 1417.349538][ T9630] loop6: detected capacity change from 0 to 4096 [ 1417.376612][ T26] audit: type=1326 audit(50891569.225:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fed9c799 code=0x7ffc0000 [ 1417.398903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.423663][ T9630] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1417.433004][ T5132] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1417.448074][ T26] audit: type=1326 audit(50891569.236:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fed9c799 code=0x7ffc0000 [ 1417.506877][ T26] audit: type=1326 audit(50891569.236:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fed9c799 code=0x7ffc0000 [ 1417.529267][ C0] vkms_vblank_simulate: vblank timer overrun [ 1417.579469][ T26] audit: type=1326 audit(50891569.236:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f10fed9c799 code=0x7ffc0000 [ 1417.610683][ T26] audit: type=1326 audit(50891569.236:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fed9c799 code=0x7ffc0000 [ 1417.641412][ T26] audit: type=1326 audit(50891569.236:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fed9c799 code=0x7ffc0000 [ 1417.677713][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.715666][ T26] audit: type=1326 audit(50891569.236:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f10fed9c799 code=0x7ffc0000 [ 1417.734610][ T5132] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1417.783290][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.816214][ T5132] usb 1-1: Product: syz [ 1417.827981][ T26] audit: type=1326 audit(50891569.236:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.5.12416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f10fed9c799 code=0x7ffc0000 [ 1417.834103][ T5132] usb 1-1: Manufacturer: syz [ 1417.926277][ T5132] usb 1-1: SerialNumber: syz [ 1417.951942][ T5132] usb 1-1: config 0 descriptor?? [ 1418.009260][ T5132] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 1418.044786][ T5132] usb 1-1: No valid video chain found. [ 1418.116835][ T9668] loop6: detected capacity change from 0 to 256 [ 1418.206556][ T9668] FAT-fs (loop6): Directory bread(block 64) failed [ 1418.225603][ T9668] FAT-fs (loop6): Directory bread(block 65) failed [ 1418.241066][ T5132] usb 1-1: USB disconnect, device number 119 [ 1418.287239][ T9668] FAT-fs (loop6): Directory bread(block 66) failed [ 1418.306609][ T9668] FAT-fs (loop6): Directory bread(block 67) failed [ 1418.314717][ T9668] FAT-fs (loop6): Directory bread(block 68) failed [ 1418.328317][ T9668] FAT-fs (loop6): Directory bread(block 69) failed [ 1418.342723][ T9668] FAT-fs (loop6): Directory bread(block 70) failed [ 1418.382737][ T9668] FAT-fs (loop6): Directory bread(block 71) failed [ 1418.407822][ T9668] FAT-fs (loop6): Directory bread(block 72) failed [ 1418.457928][ T9668] FAT-fs (loop6): Directory bread(block 73) failed [ 1418.661459][ T9691] loop4: detected capacity change from 0 to 2048 [ 1419.117289][ T9718] loop4: detected capacity change from 0 to 256 [ 1419.196770][ T9718] FAT-fs (loop4): Directory bread(block 64) failed [ 1419.220945][ T9718] FAT-fs (loop4): Directory bread(block 65) failed [ 1419.256445][ T9718] FAT-fs (loop4): Directory bread(block 66) failed [ 1419.336461][ T9718] FAT-fs (loop4): Directory bread(block 67) failed [ 1419.343313][ T9718] FAT-fs (loop4): Directory bread(block 68) failed [ 1419.390217][ T9718] FAT-fs (loop4): Directory bread(block 69) failed [ 1419.434370][ T9718] FAT-fs (loop4): Directory bread(block 70) failed [ 1419.456477][ T9718] FAT-fs (loop4): Directory bread(block 71) failed [ 1419.483407][ T9718] FAT-fs (loop4): Directory bread(block 72) failed [ 1419.506790][ T9718] FAT-fs (loop4): Directory bread(block 73) failed [ 1419.675824][ T9737] loop6: detected capacity change from 0 to 2048 [ 1419.793317][ T9737] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1420.128349][ T9768] tmpfs: Bad value for 'mpol' [ 1420.221888][T20570] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1420.345571][ T6230] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1420.361249][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12452'. [ 1420.394129][ T9779] tipc: Can't bind to reserved service type 2 [ 1420.412422][T20570] usb 6-1: Using ep0 maxpacket: 16 [ 1420.420136][T20570] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1420.449136][T20570] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.489569][T20570] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1420.513342][T20570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.522143][T20570] usb 6-1: Product: syz [ 1420.526849][T20570] usb 6-1: Manufacturer: syz [ 1420.531902][T20570] usb 6-1: SerialNumber: syz [ 1420.545913][ T6230] usb 1-1: Using ep0 maxpacket: 16 [ 1420.565936][ T6230] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1420.603922][ T6230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.660249][ T6230] usb 1-1: config 0 has no interface number 0 [ 1420.688475][ T6230] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 1420.717757][ T6230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.738510][ T6230] usb 1-1: Product: syz [ 1420.752754][ T6230] usb 1-1: Manufacturer: syz [ 1420.764042][ T6230] usb 1-1: SerialNumber: syz [ 1420.783158][ T9794] loop2: detected capacity change from 0 to 128 [ 1420.801003][ T6230] usb 1-1: config 0 descriptor?? [ 1420.813294][ T6230] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 1420.826897][T20573] usb 6-1: USB disconnect, device number 25 [ 1420.832098][ T6230] usb 1-1: No valid video chain found. [ 1420.873666][ T9804] loop4: detected capacity change from 0 to 128 [ 1420.886649][ T9794] syz.2.12456: attempt to access beyond end of device [ 1420.886649][ T9794] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1420.921577][ T9804] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 1420.955136][ T9804] FAT-fs (loop4): Filesystem has been set read-only [ 1420.980040][ T9794] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 1420.990616][ T9812] loop6: detected capacity change from 0 to 512 [ 1421.030361][ T9812] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1421.049861][ T9812] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1421.075402][ T9812] System zones: 0-1, 15-15, 18-18, 34-34 [ 1421.083300][ T9812] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1421.099476][ T6230] usb 1-1: USB disconnect, device number 120 [ 1421.128342][ T4276] sysv_free_block: flc_count > flc_size [ 1421.133984][ T4276] sysv_free_block: flc_count > flc_size [ 1421.143080][ T9812] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1421.159369][ T4276] sysv_free_block: flc_count > flc_size [ 1421.170733][ T4276] sysv_free_block: flc_count > flc_size [ 1421.176454][ T4276] sysv_free_block: flc_count > flc_size [ 1421.193911][ T4276] sysv_free_block: flc_count > flc_size [ 1421.199545][ T4276] sysv_free_block: flc_count > flc_size [ 1421.200155][ T9812] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1421.220425][ T9812] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1421.229703][ T9812] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.12457: bad orphan inode 16 [ 1421.241189][ T9812] ext4_test_bit(bit=15, block=18) = 1 [ 1421.246828][ T9812] is_bad_inode(inode)=0 [ 1421.251388][ T9812] NEXT_ORPHAN(inode)=0 [ 1421.255534][ T9812] max_ino=32 [ 1421.258779][ T9812] i_nlink=2 [ 1421.262653][ T4276] sysv_free_block: flc_count > flc_size [ 1421.268261][ T4276] sysv_free_block: flc_count > flc_size [ 1421.275249][ T9812] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1421.284479][ T4276] sysv_free_block: flc_count > flc_size [ 1421.291147][ T4276] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1421.362481][ T9812] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 1421.490975][ T4042] EXT4-fs (loop6): unmounting filesystem. [ 1421.605616][ T9838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12462'. [ 1421.640801][ T9838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12462'. [ 1421.678309][ T9838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12462'. [ 1422.050744][ T4311] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1422.270002][ T4311] usb 6-1: Using ep0 maxpacket: 16 [ 1422.285062][ T4311] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1422.315743][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.339459][ T4311] usb 6-1: Product: syz [ 1422.343799][ T4311] usb 6-1: Manufacturer: syz [ 1422.348918][ T4311] usb 6-1: SerialNumber: syz [ 1422.390835][ T4311] usb 6-1: config 0 descriptor?? [ 1422.434418][ T4311] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1422.551437][ T9893] loop2: detected capacity change from 0 to 512 [ 1422.651951][ T9893] EXT4-fs: Ignoring removed orlov option [ 1422.699569][ T9893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1422.717321][ T9891] loop0: detected capacity change from 0 to 8192 [ 1422.735102][ T9893] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1422.760755][ T9893] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.12478: bg 0: block 248: padding at end of block bitmap is not set [ 1422.784333][ T9893] Quota error (device loop2): write_blk: dquota write failed [ 1422.793618][ T9893] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1422.821325][ T4311] gspca_spca508: reg_read err -71 [ 1422.835855][ T4311] gspca_spca508: reg_read err -71 [ 1422.860879][ T9891] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1422.881288][ T9893] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.12478: Failed to acquire dquot type 1 [ 1422.884248][ T4311] gspca_spca508: reg_read err -71 [ 1422.908786][ T9891] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1422.921279][ T9893] EXT4-fs (loop2): 1 truncate cleaned up [ 1422.965092][ T9891] REISERFS (device loop0): using ordered data mode [ 1422.971484][ T4311] gspca_spca508: reg_read err -71 [ 1422.978279][ T9893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1423.003936][ T9891] reiserfs: using flush barriers [ 1423.009242][ T4311] gspca_spca508: reg write: error -71 [ 1423.027406][ T4311] spca508: probe of 6-1:0.0 failed with error -71 [ 1423.047756][ T9891] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1423.086210][ T9893] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1423.096181][ T4311] usb 6-1: USB disconnect, device number 26 [ 1423.166162][ T9891] REISERFS (device loop0): checking transaction log (loop0) [ 1423.217898][ T9891] REISERFS (device loop0): Using r5 hash to sort names [ 1423.227500][ T9893] EXT4-fs error (device loop2): __ext4_remount:6644: comm syz.2.12478: Abort forced by user [ 1423.242076][ T9891] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1423.263034][ T9893] EXT4-fs (loop2): Remounting filesystem read-only [ 1423.271245][ T9893] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1423.334532][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 1423.584510][ T9933] tmpfs: Bad value for 'mpol' [ 1423.702802][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12490'. [ 1423.729762][ T26] audit: type=1326 audit(50891575.933:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.6.12491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7b9c799 code=0x7ffc0000 [ 1423.756360][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12490'. [ 1423.791766][ T26] audit: type=1326 audit(50891575.933:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.6.12491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7b9c799 code=0x7ffc0000 [ 1423.896293][ T26] audit: type=1326 audit(50891575.975:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.0.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1423.901497][ T9946] loop5: detected capacity change from 0 to 22 [ 1423.998482][ T26] audit: type=1326 audit(50891575.975:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.0.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1424.033387][ T9946] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1424.096293][ T9946] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1424.150747][ T26] audit: type=1326 audit(50891575.975:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.6.12491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f0de7b9c799 code=0x7ffc0000 [ 1424.241102][ T26] audit: type=1326 audit(50891575.975:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.6.12491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7b9c799 code=0x7ffc0000 [ 1424.375562][ T26] audit: type=1326 audit(50891575.975:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.6.12491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7b9c799 code=0x7ffc0000 [ 1424.496501][ T26] audit: type=1326 audit(50891575.986:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.0.12489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1425.089579][ T9936] loop2: detected capacity change from 0 to 40427 [ 1425.127845][ T9936] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1425.134283][ T9936] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1425.209215][ T9936] F2FS-fs (loop2): invalid crc value [ 1425.285921][ T9936] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1425.447121][T25288] cgroup: fork rejected by pids controller in /syz5 [ 1425.566318][ T9936] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1425.573665][ T9936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1426.288488][ T7849] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.375510][T10056] device netdevsim0 entered promiscuous mode [ 1426.390059][T10056] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1426.521751][ T7849] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.777657][ T7849] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.003754][ T7849] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.514167][T25294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1427.528661][T25294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1427.578240][T25294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1427.604055][T25294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1427.611779][T25294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1427.619784][T25294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1428.233160][T20573] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1428.304132][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12544'. [ 1428.427073][T20573] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.462950][T20573] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.529780][T20573] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.561723][T20573] usb 7-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1428.581357][T20573] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.602376][T20573] usb 7-1: config 0 descriptor?? [ 1428.614960][T10102] loop2: detected capacity change from 0 to 32768 [ 1428.751771][T10102] JBD2: Ignoring recovery information on journal [ 1428.816053][ T4377] usb 7-1: USB disconnect, device number 9 [ 1428.962844][T10102] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1429.203476][T10102] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1429.327438][T10102] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1429.376374][T10102] OCFS2: File system is now read-only. [ 1429.385705][T10102] (syz.2.12535,10102,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 1429.409808][T10105] chnl_net:caif_netlink_parms(): no params data found [ 1429.456175][T10102] (syz.2.12535,10102,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 1429.503187][T10102] (syz.2.12535,10102,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1429.535247][T10102] (syz.2.12535,10102,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1429.585654][T10102] (syz.2.12535,10102,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1429.604835][T13534] Bluetooth: hci4: command 0x0409 tx timeout [ 1429.626577][T10102] (syz.2.12535,10102,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1429.679380][T10102] (syz.2.12535,10102,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1429.690440][T10102] (syz.2.12535,10102,1):ocfs2_symlink:1941 ERROR: status = -30 [ 1429.699575][T10102] (syz.2.12535,10102,1):ocfs2_symlink:2065 ERROR: status = -30 [ 1429.894422][ T4276] ocfs2: Unmounting device (7,2) on (node local) [ 1429.971478][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.018453][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.044290][T10105] device bridge_slave_0 entered promiscuous mode [ 1430.271725][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.289150][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.321481][T10105] device bridge_slave_1 entered promiscuous mode [ 1430.642687][ T52] block nbd0: Attempted send on invalid socket [ 1430.649087][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.671814][T10355] F2FS-fs (nbd0): Unable to read 1th superblock [ 1430.678445][ T93] block nbd0: Attempted send on invalid socket [ 1430.684872][ T93] I/O error, dev nbd0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.702484][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12567'. [ 1430.720994][T10355] F2FS-fs (nbd0): Unable to read 2th superblock [ 1430.851323][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.985720][T13534] Bluetooth: hci0: command 0x0406 tx timeout [ 1431.284430][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.421926][ T7849] device hsr_slave_0 left promiscuous mode [ 1431.437279][ T7849] device hsr_slave_1 left promiscuous mode [ 1431.473568][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.514060][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.544917][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.557625][T20575] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1431.585649][T13534] Bluetooth: hci4: command 0x041b tx timeout [ 1431.591821][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.625008][ T7849] device bridge_slave_1 left promiscuous mode [ 1431.648022][T10427] loop4: detected capacity change from 0 to 164 [ 1431.660575][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.699671][ T7849] device bridge_slave_0 left promiscuous mode [ 1431.718544][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.738151][T20575] usb 3-1: Using ep0 maxpacket: 32 [ 1431.755667][T20575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.813217][T20575] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1431.860225][T20575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.870300][ T7849] device veth1_macvtap left promiscuous mode [ 1431.893014][ T7849] device veth0_macvtap left promiscuous mode [ 1431.893444][T20575] usb 3-1: Product: syz [ 1431.914613][ T7849] device veth1_vlan left promiscuous mode [ 1431.924387][T10437] loop6: detected capacity change from 0 to 128 [ 1431.937270][T20575] usb 3-1: Manufacturer: syz [ 1431.964684][T20575] usb 3-1: SerialNumber: syz [ 1431.980138][T10437] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1432.010176][T20575] usb 3-1: config 0 descriptor?? [ 1432.036425][T20575] usb 3-1: bad CDC descriptors [ 1432.057817][T20575] usb 3-1: unsupported MDLM descriptors [ 1432.065881][T10437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1432.143200][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1432.143215][ T26] audit: type=1326 audit(50891584.762:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.4.12583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1432.183845][T10437] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1432.220586][T10437] UDF-fs: error (device loop6): udf_count_free_bitmap: udf_count_free failed [ 1432.255860][ T26] audit: type=1326 audit(50891584.804:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.4.12583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1432.281330][T20575] usb 3-1: USB disconnect, device number 105 [ 1432.397341][ T26] audit: type=1326 audit(50891584.804:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.4.12583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1432.483386][ T26] audit: type=1326 audit(50891584.804:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.4.12583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1432.526075][ T26] audit: type=1326 audit(50891584.804:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.4.12583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1432.558084][ T4042] UDF-fs: error (device loop6): udf_read_inode: (ino 104) failed !bh [ 1432.586087][ T26] audit: type=1326 audit(50891584.815:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.4.12583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1432.650443][ T26] audit: type=1326 audit(50891584.815:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.4.12583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1432.681853][ T4042] UDF-fs: error (device loop6): udf_read_inode: (ino 104) failed !bh [ 1432.720027][ T26] audit: type=1326 audit(50891584.804:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.4.12583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1433.577448][T13534] Bluetooth: hci4: command 0x040f tx timeout [ 1433.896334][ T7849] team0 (unregistering): Port device team_slave_1 removed [ 1433.971134][ T7849] team0 (unregistering): Port device team_slave_0 removed [ 1434.047898][ T7849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.123187][ T7849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.680081][ T7849] bond0 (unregistering): Released all slaves [ 1434.837242][T10416] netlink: 'syz.0.12577': attribute type 30 has an invalid length. [ 1434.960274][T10477] netlink: 'syz.4.12588': attribute type 41 has an invalid length. [ 1435.107211][T10105] team0: Port device team_slave_0 added [ 1435.195275][T10105] team0: Port device team_slave_1 added [ 1435.322816][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.384756][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.480129][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.523214][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.537680][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.564690][T13534] Bluetooth: hci4: command 0x0419 tx timeout [ 1435.590671][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.793475][T10105] device hsr_slave_0 entered promiscuous mode [ 1435.811709][T10573] loop2: detected capacity change from 0 to 128 [ 1435.832904][T10105] device hsr_slave_1 entered promiscuous mode [ 1435.891886][T10105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1435.899728][T10105] Cannot create hsr debugfs directory [ 1436.202337][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12601'. [ 1436.629554][T10668] loop4: detected capacity change from 0 to 256 [ 1436.873252][ T6230] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1436.950725][T25294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1436.970014][T25294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1436.979903][T25294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1436.988209][T25294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1437.000023][T25294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1437.012779][T25294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1437.099054][ T6230] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.113107][ T6230] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1437.125172][ T6230] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice=fd.00 [ 1437.142553][ T6230] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=2 [ 1437.156896][ T6230] usb 3-1: Product: syz [ 1437.167317][ T6230] usb 3-1: Manufacturer: syz [ 1437.180942][ T6230] usb 3-1: SerialNumber: syz [ 1437.418945][ T7849] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.427957][ T6230] usb 3-1: 0:2 : does not exist [ 1437.466632][ T6230] usb 3-1: unit 5 not found! [ 1437.538449][ T6230] usb 3-1: USB disconnect, device number 106 [ 1437.728340][ T7849] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.837124][ T5065] udevd[5065]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1437.990677][ T7849] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.143345][ T7849] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.511579][T10105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1438.614596][T10105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1438.688272][T10105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1438.701937][ T6230] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1438.730878][T10105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1438.901652][ T6230] usb 1-1: Using ep0 maxpacket: 8 [ 1438.941514][T10683] chnl_net:caif_netlink_parms(): no params data found [ 1438.952897][ T6230] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1438.987734][T13534] Bluetooth: hci0: command 0x0409 tx timeout [ 1439.000605][ T6230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.009687][ T6230] usb 1-1: Product: syz [ 1439.013908][ T6230] usb 1-1: Manufacturer: syz [ 1439.019057][ T6230] usb 1-1: SerialNumber: syz [ 1439.034578][ T6230] usb 1-1: config 0 descriptor?? [ 1439.059829][ T6230] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1439.229860][T10863] loop2: detected capacity change from 0 to 4096 [ 1439.484209][ T6230] gspca_sq930x: ucbus_write failed -71 [ 1439.577233][T10105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.730392][ T6230] gspca_sq930x: Sensor ov9630 not yet treated [ 1439.736691][ T6230] sq930x: probe of 1-1:0.0 failed with error -22 [ 1439.786767][ T6230] usb 1-1: USB disconnect, device number 121 [ 1439.988334][T10914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12625'. [ 1440.441801][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1440.455645][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1440.563688][T10945] loop2: detected capacity change from 0 to 736 [ 1440.572364][T10105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.851879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1440.902897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1440.930772][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.937944][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.968361][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 1440.985202][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1441.182557][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.244741][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.273125][T10683] device bridge_slave_0 entered promiscuous mode [ 1441.306045][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1441.315362][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1441.338813][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.346176][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1441.483965][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.491204][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.522457][T10683] device bridge_slave_1 entered promiscuous mode [ 1441.547955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1441.851898][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1441.885964][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1441.915901][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1441.955569][T10683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.070004][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1442.084682][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1442.103219][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1442.120504][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1442.140451][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1442.161973][T10105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1442.201007][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1442.216789][T10683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.418662][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1442.443409][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1442.517341][T10683] team0: Port device team_slave_0 added [ 1442.941146][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 1443.031667][T10683] team0: Port device team_slave_1 added [ 1443.160489][T10683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.183473][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.245208][T10683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.788826][T10683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.795848][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.873940][T10683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.893125][ T26] audit: type=1326 audit(50891597.097:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.0.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1443.963083][ T26] audit: type=1326 audit(50891597.108:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.0.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1444.064441][ T26] audit: type=1326 audit(50891597.108:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.0.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1444.107167][ T7849] device hsr_slave_0 left promiscuous mode [ 1444.141247][ T7849] device hsr_slave_1 left promiscuous mode [ 1444.168319][ T26] audit: type=1326 audit(50891597.171:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.0.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1444.196120][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1444.207087][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.221197][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1444.245524][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1444.253794][ T26] audit: type=1326 audit(50891597.171:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.0.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1444.351055][ T7849] device bridge_slave_1 left promiscuous mode [ 1444.359559][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.369345][ T26] audit: type=1326 audit(50891597.171:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.0.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1444.400957][ T7849] device bridge_slave_0 left promiscuous mode [ 1444.407274][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.473046][ T26] audit: type=1326 audit(50891597.171:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.0.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1444.562749][ T26] audit: type=1326 audit(50891597.171:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.0.12660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1444.586371][ T7849] device veth1_macvtap left promiscuous mode [ 1444.607490][ T7849] device veth0_macvtap left promiscuous mode [ 1444.613706][ T7849] device veth1_vlan left promiscuous mode [ 1444.658667][ T7849] device veth0_vlan left promiscuous mode [ 1444.715165][T11121] loop2: detected capacity change from 0 to 32768 [ 1444.768557][T11121] (syz.2.12658,11121,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1444.825101][T11123] loop4: detected capacity change from 0 to 32768 [ 1444.838772][T11121] (syz.2.12658,11121,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1444.896759][T11123] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.12659 (11123) [ 1444.922345][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 1444.932601][T11121] JBD2: Ignoring recovery information on journal [ 1444.968931][T11123] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1444.996348][T11123] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1445.024615][T11123] BTRFS info (device loop4): using free space tree [ 1445.052881][T11121] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1445.109610][T11121] ocfs2: Unmounting device (7,2) on (node local) [ 1445.238969][ T7849] bond1 (unregistering): Released all slaves [ 1445.284592][T11123] BTRFS info (device loop4): enabling ssd optimizations [ 1445.528632][ T4278] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1447.624018][T11224] syz.4.12667 (11224): drop_caches: 2 [ 1447.640839][ T7849] team0 (unregistering): Port device team_slave_1 removed [ 1447.756411][ T7849] team0 (unregistering): Port device team_slave_0 removed [ 1447.763209][T11230] libceph: resolve '0' (ret=-3): failed [ 1447.873959][ T7849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.984099][ T7849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1448.591971][ T7849] bond0 (unregistering): Released all slaves [ 1448.728911][T10683] device hsr_slave_0 entered promiscuous mode [ 1448.737265][T10683] device hsr_slave_1 entered promiscuous mode [ 1448.744352][T10683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1448.752265][T10683] Cannot create hsr debugfs directory [ 1448.761739][T11157] netlink: 'syz.0.12661': attribute type 2 has an invalid length. [ 1448.778022][T11157] netlink: 119 bytes leftover after parsing attributes in process `syz.0.12661'. [ 1448.789019][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1448.796616][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1448.927630][T10105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.095792][ T26] audit: type=1326 audit(50891602.567:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.4.12672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1449.198927][ T26] audit: type=1326 audit(50891602.588:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.4.12672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1449.275186][ T26] audit: type=1326 audit(50891602.588:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.4.12672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1449.382078][ T26] audit: type=1326 audit(50891602.588:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11288 comm="syz.4.12672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1449.755705][T11340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1449.854070][T11344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12679'. [ 1449.901234][T10683] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1449.974859][T10683] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1450.021822][T10683] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1450.056439][T10683] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1450.372265][T11372] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1450.462864][T10683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.535847][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1450.561850][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1450.621179][T10683] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.653020][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1450.666515][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1450.708147][T22215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.715475][T22215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.758494][T11387] device netdevsim0 left promiscuous mode [ 1450.769972][T11390] CIFS mount error: No usable UNC path provided in device string! [ 1450.769972][T11390] [ 1450.770789][T11387] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1450.796512][T11387] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1450.821619][T11390] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1450.829002][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1450.848471][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1450.877385][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1450.911579][T22215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.918833][T22215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.962553][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1451.021926][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1451.041365][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1451.059339][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1451.162883][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1451.175441][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1451.194050][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1451.214141][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1451.238070][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1451.267154][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1451.291707][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1451.319937][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1451.344939][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1451.366894][T11408] netlink: 'syz.2.12693': attribute type 1 has an invalid length. [ 1451.380539][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1451.416089][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1451.448340][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1451.465295][T10105] device veth0_vlan entered promiscuous mode [ 1451.481649][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1451.505214][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1451.529130][T10105] device veth1_vlan entered promiscuous mode [ 1451.560320][T11407] loop4: detected capacity change from 0 to 4096 [ 1451.610441][T11407] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1451.655403][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1451.668327][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1451.711712][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1451.757825][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1451.801024][T10105] device veth0_macvtap entered promiscuous mode [ 1451.908222][T10105] device veth1_macvtap entered promiscuous mode [ 1452.003777][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.038422][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.063959][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.114059][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.143727][T10105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.151468][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1452.179401][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1452.219813][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1452.248068][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1452.294020][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.331039][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.363163][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.380275][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.445553][T10105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.489718][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1452.517264][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1452.564066][T10105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.599327][T10105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.618387][T10105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.622861][T11451] loop4: detected capacity change from 0 to 2048 [ 1452.627250][T10105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.707199][T11451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1452.798133][T11462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12705'. [ 1452.852926][T11462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12705'. [ 1452.949568][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12706'. [ 1452.992343][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12706'. [ 1453.022553][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12706'. [ 1453.043667][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1453.066958][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1453.082703][T10683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.228249][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.236150][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.312600][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1453.360485][T22215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.408487][T22215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.445801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1453.537663][T11504] netlink: 'syz.2.12711': attribute type 6 has an invalid length. [ 1454.504351][T11547] sctp: [Deprecated]: syz.0.12721 (pid 11547) Use of int in maxseg socket option. [ 1454.504351][T11547] Use struct sctp_assoc_value instead [ 1454.767146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1454.820310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1454.901551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1454.920442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1454.961284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1454.996573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1455.042496][T10683] device veth0_vlan entered promiscuous mode [ 1455.109572][T10683] device veth1_vlan entered promiscuous mode [ 1455.173610][T11510] loop4: detected capacity change from 0 to 40427 [ 1455.216754][T11569] xt_hashlimit: size too large, truncated to 1048576 [ 1455.243328][T11510] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1455.258651][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1455.278940][T11510] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1455.331117][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1455.341793][T11569] xt_hashlimit: invalid rate [ 1455.362867][T11510] F2FS-fs (loop4): invalid crc value [ 1455.384098][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1455.395081][T11510] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 1455.426331][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1455.468371][T10683] device veth0_macvtap entered promiscuous mode [ 1455.487253][T10683] device veth1_macvtap entered promiscuous mode [ 1455.573924][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.618072][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.630158][T11510] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1455.637363][T11510] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1455.657146][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.715795][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.753674][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.782794][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.815472][T11510] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 1455.839266][T10683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.849586][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1455.875276][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1455.926853][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1455.974696][T22215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1456.050512][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.094861][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.110412][T11594] 9pnet_fd: p9_fd_create_tcp (11594): problem connecting socket to 127.0.0.1 [ 1456.142065][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.170266][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.244688][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.285808][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.314220][T10683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.348481][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1456.370695][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1456.387874][T11610] JFS: discard option not supported on device [ 1456.410534][T10683] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.421927][T10683] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.431937][T10683] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.440975][T10683] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.468078][T11610] Mount JFS Failure: -22 [ 1456.472409][T11610] jfs_mount failed w/return code = -22 [ 1456.692577][ T7849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.704977][ T7849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.787821][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1456.853627][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.897675][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.954505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1457.488758][T11669] loop2: detected capacity change from 0 to 512 [ 1457.549228][T11671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12748'. [ 1457.597180][T11671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12748'. [ 1457.612384][T11669] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1457.707008][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 1457.930788][T11694] loop2: detected capacity change from 0 to 512 [ 1458.005911][T11694] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1458.041295][T11694] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1458.069990][T11694] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1458.090587][T11705] loop7: detected capacity change from 0 to 512 [ 1458.098477][T11694] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1458.114854][T11694] System zones: 0-2, 18-18, 34-35 [ 1458.121520][T11694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1458.149434][T11694] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 1458.251904][T11705] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1458.429979][T10683] EXT4-fs (loop7): unmounting filesystem. [ 1458.447883][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 1458.982915][T11748] loop5: detected capacity change from 0 to 1024 [ 1459.019935][T20570] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1459.092959][T11748] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1459.213660][T20570] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 1459.231619][T20570] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1459.253498][T20570] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1459.290508][T20570] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.308644][T20570] usb 8-1: Product: syz [ 1459.313142][T20570] usb 8-1: Manufacturer: syz [ 1459.323519][T20570] usb 8-1: SerialNumber: syz [ 1459.335971][T20570] usb 8-1: config 0 descriptor?? [ 1459.432940][T10105] EXT4-fs (loop5): unmounting filesystem. [ 1459.583468][T20570] usb 8-1: USB disconnect, device number 2 [ 1459.802551][T11721] loop0: detected capacity change from 0 to 32768 [ 1459.866144][T11721] find_entry called with index = 0 [ 1459.895453][T11721] find_entry called with index = 0 [ 1460.436381][T11771] loop2: detected capacity change from 0 to 32768 [ 1460.545330][T11771] jfs_lookup: dtSearch returned -5 [ 1460.633629][T11822] program syz.7.12779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1462.092986][T11894] netlink: 209848 bytes leftover after parsing attributes in process `syz.5.12797'. [ 1462.169536][T11894] netlink: zone id is out of range [ 1462.394103][T20570] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1462.437837][T11857] loop4: detected capacity change from 0 to 32768 [ 1462.451212][T11916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12803'. [ 1462.462868][T11916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12803'. [ 1462.591797][T20570] usb 3-1: Using ep0 maxpacket: 32 [ 1462.599266][T11857] XFS (loop4): Mounting V5 Filesystem [ 1462.617509][T20570] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1462.705465][T11935] loop0: detected capacity change from 0 to 1024 [ 1462.744599][T20570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.810751][T11857] XFS (loop4): Ending clean mount [ 1462.828417][T20570] usb 3-1: config 0 descriptor?? [ 1462.889561][T20570] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1463.016461][ T4278] XFS (loop4): Unmounting Filesystem [ 1463.138553][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1463.147362][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1463.255524][T20570] gspca_vc032x: reg_w err -71 [ 1463.260676][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.266058][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.285453][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.322880][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.350630][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.374622][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.380010][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.452110][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.457494][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.488548][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.493977][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.528363][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.533763][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.545564][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.561097][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.575875][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.581257][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.649777][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.668006][T20570] gspca_vc032x: I2c Bus Busy Wait 00 [ 1463.706333][T20570] gspca_vc032x: Unknown sensor... [ 1463.711606][T20570] vc032x: probe of 3-1:0.0 failed with error -22 [ 1463.748839][T20570] usb 3-1: USB disconnect, device number 107 [ 1464.039416][ T4311] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1464.246411][ T4311] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 1464.265481][ T4311] usb 1-1: config 160 has no interface number 0 [ 1464.300649][ T4311] usb 1-1: config 160 interface 200 has no altsetting 0 [ 1464.324988][T12006] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1464.337667][ T4311] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1464.367271][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.401500][ T4311] usb 1-1: Product: syz [ 1464.405757][ T4311] usb 1-1: Manufacturer: syz [ 1464.429510][T11997] loop7: detected capacity change from 0 to 8192 [ 1464.446515][ T4311] usb 1-1: SerialNumber: syz [ 1464.511231][T11997] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1464.525869][T11997] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 1464.571996][T11997] REISERFS (device loop7): using ordered data mode [ 1464.616636][T11997] reiserfs: using flush barriers [ 1464.670175][ T4311] usb 1-1: MIDIStreaming interface descriptor not found [ 1464.688729][T11997] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1464.741786][T11997] REISERFS (device loop7): checking transaction log (loop7) [ 1464.764018][ T4311] usb 1-1: USB disconnect, device number 122 [ 1464.782872][T11997] REISERFS (device loop7): Using r5 hash to sort names [ 1464.790152][T11997] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1465.290826][ T4425] udevd[4425]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1465.933769][T12018] loop4: detected capacity change from 0 to 32768 [ 1466.105699][T12018] XFS (loop4): Mounting V5 Filesystem [ 1466.216895][T12112] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.12843'. [ 1466.306392][T12018] XFS (loop4): Ending clean mount [ 1466.350545][T12018] XFS (loop4): Quotacheck needed: Please wait. [ 1466.359885][T12116] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1466.459917][T12018] XFS (loop4): Quotacheck: Done. [ 1466.674010][ T4278] XFS (loop4): Unmounting Filesystem [ 1466.896055][T12140] loop0: detected capacity change from 0 to 4096 [ 1466.933490][T12140] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1466.973456][ T4311] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1467.041545][T12140] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1467.077583][T12140] ntfs3: loop0: Failed to load $Extend. [ 1467.156102][ T4311] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1467.184254][ T4311] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1467.228802][ T4311] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1467.271948][ T4311] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1467.300918][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1467.330429][ T4311] usb 6-1: Product: syz [ 1467.334678][ T4311] usb 6-1: Manufacturer: syz [ 1467.373779][ T4311] usb 6-1: SerialNumber: syz [ 1467.431013][ T4311] usb 6-1: config 0 descriptor?? [ 1467.452789][ T4311] hub 6-1:0.0: bad descriptor, ignoring hub [ 1467.497846][ T4311] hub: probe of 6-1:0.0 failed with error -5 [ 1467.530218][ T4311] usb 6-1: selecting invalid altsetting 0 [ 1467.727124][ T4311] usb 6-1: USB disconnect, device number 27 [ 1468.052636][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1468.437284][T12226] loop2: detected capacity change from 0 to 2048 [ 1468.499313][T12234] trusted_key: encrypted_key: master key parameter is missing [ 1468.529209][T12226] NILFS (loop2): invalid segment: Inconsistency found [ 1468.570391][T12226] NILFS (loop2): trying rollback from an earlier position [ 1468.635147][T12226] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 1468.721675][T12226] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 1469.161231][T12262] loop5: detected capacity change from 0 to 2048 [ 1469.268984][T20570] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1469.294471][T12262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1469.399028][T12214] loop4: detected capacity change from 0 to 32768 [ 1469.471544][T20570] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1469.481531][T20570] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1469.491761][T20570] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1469.502570][T20570] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1469.513199][T20570] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1469.523858][T20570] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.535323][T20570] usb 8-1: config 0 descriptor?? [ 1469.571442][T12214] XFS (loop4): Mounting V5 Filesystem [ 1469.739645][T20570] hdpvr 8-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 1469.753660][T20570] hdpvr 8-1:0.0: untested firmware, the driver might not work. [ 1469.784524][T12214] XFS (loop4): Ending clean mount [ 1469.808499][T12214] XFS (loop4): Quotacheck needed: Please wait. [ 1469.944917][T20570] hdpvr 8-1:0.0: device init failed [ 1469.953130][T20570] hdpvr: probe of 8-1:0.0 failed with error -12 [ 1470.008019][T12214] XFS (loop4): Quotacheck: Done. [ 1470.023309][T20570] usb 8-1: USB disconnect, device number 3 [ 1470.050218][T12309] loop0: detected capacity change from 0 to 256 [ 1470.057432][T12309] exfat: Deprecated parameter 'utf8' [ 1470.148269][T12309] exfat: Deprecated parameter 'utf8' [ 1470.153783][T12309] exfat: Deprecated parameter 'namecase' [ 1470.207253][T12309] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1470.240874][ T4278] XFS (loop4): Unmounting Filesystem [ 1470.582555][ T26] audit: type=1326 audit(50891625.116:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.12887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1470.679240][ T26] audit: type=1326 audit(50891625.158:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.12887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1470.799181][ T26] audit: type=1326 audit(50891625.158:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.12887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1470.859136][T12340] loop7: detected capacity change from 0 to 1764 [ 1470.906123][ T26] audit: type=1326 audit(50891625.158:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.12887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1471.020593][ T26] audit: type=1326 audit(50891625.158:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.12887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1471.080673][T12340] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1471.212199][ T4311] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1471.349282][T12366] loop5: detected capacity change from 0 to 256 [ 1471.405244][ T4311] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1471.441030][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.491145][ T4311] usb 1-1: config 0 descriptor?? [ 1471.553835][ T4311] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1471.919676][ T4311] gspca_stv06xx: I2C: Read error writing address: -71 [ 1471.949866][ T4311] usb 1-1: USB disconnect, device number 123 [ 1472.398972][T12426] tmpfs: Bad value for 'mpol' [ 1472.646528][T12433] loop0: detected capacity change from 0 to 512 [ 1472.733781][T12433] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1472.770586][T12433] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1472.860920][T12433] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1472.928086][T12433] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1473.016800][T12433] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1473.085555][T12433] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.12908: bg 0: block 15: invalid block bitmap [ 1473.136996][T12433] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 1473.184959][T12433] EXT4-fs (loop0): 1 truncate cleaned up [ 1473.190738][T12433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1473.430695][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1473.508589][T12477] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (253) [ 1473.690719][T12488] netlink: 'syz.0.12920': attribute type 1 has an invalid length. [ 1474.015919][T12505] xt_cgroup: xt_cgroup: no path or classid specified [ 1474.249972][T12516] xt_hashlimit: max too large, truncated to 1048576 [ 1475.413348][ T4311] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1475.435874][T12571] loop0: detected capacity change from 0 to 512 [ 1475.512055][T12571] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.12946: inode has both inline data and extents flags [ 1475.604013][ T4311] usb 3-1: Using ep0 maxpacket: 16 [ 1475.625832][ T4311] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1475.655561][T12571] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.12946: couldn't read orphan inode 15 (err -117) [ 1475.698900][ T4311] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1475.727555][T12571] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1475.740410][ T4311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.740454][ T4311] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 1475.740481][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.742397][ T4311] usb 3-1: config 0 descriptor?? [ 1475.993921][ T5133] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1476.003366][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 1476.141507][ T4311] usb 3-1: USB disconnect, device number 108 [ 1476.225913][ T5133] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1476.225964][ T5133] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1476.225991][ T5133] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1476.230608][ T5133] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1476.332759][ T5133] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1476.332802][ T5133] usb 5-1: Product: syz [ 1476.332820][ T5133] usb 5-1: Manufacturer: syz [ 1476.332837][ T5133] usb 5-1: SerialNumber: syz [ 1476.336182][ T5133] usb 5-1: config 0 descriptor?? [ 1476.338448][ T5133] hub 5-1:0.0: bad descriptor, ignoring hub [ 1476.338478][ T5133] hub: probe of 5-1:0.0 failed with error -5 [ 1476.341131][ T5133] usb 5-1: selecting invalid altsetting 0 [ 1476.349220][T12626] loop5: detected capacity change from 0 to 256 [ 1476.411933][T12626] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1476.431823][T12626] syz.5.12956: attempt to access beyond end of device [ 1476.431823][T12626] loop5: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 1476.827987][ T5132] usb 5-1: USB disconnect, device number 105 [ 1477.035903][T12670] raw_sendmsg: syz.7.12961 forgot to set AF_INET. Fix it! [ 1477.260812][T12681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1477.585861][T12700] netlink: 'syz.2.12970': attribute type 4 has an invalid length. [ 1477.719010][T12700] device veth1_macvtap left promiscuous mode [ 1477.813557][T12713] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1477.851771][T12713] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1478.546681][ T4311] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1478.721732][ T4311] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 1478.721780][ T4311] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1478.721807][ T4311] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1478.724007][ T4311] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1478.724041][ T4311] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1478.724064][ T4311] usb 8-1: Product: syz [ 1478.724081][ T4311] usb 8-1: Manufacturer: syz [ 1478.724098][ T4311] usb 8-1: SerialNumber: syz [ 1478.726130][ T4311] usb 8-1: config 0 descriptor?? [ 1478.730784][ T4311] hub 8-1:0.0: bad descriptor, ignoring hub [ 1478.730813][ T4311] hub: probe of 8-1:0.0 failed with error -5 [ 1478.733456][ T4311] usb 8-1: selecting invalid altsetting 0 [ 1479.071169][ T4311] usb 8-1: USB disconnect, device number 4 [ 1479.379213][T12796] netlink: 'syz.5.12991': attribute type 4 has an invalid length. [ 1479.617121][T12805] ipt_ECN: cannot use operation on non-tcp rule [ 1479.811387][T12814] loop4: detected capacity change from 0 to 512 [ 1479.900244][T12814] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1479.972784][T12814] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1479.997629][T12825] netlink: 'syz.0.13001': attribute type 4 has an invalid length. [ 1480.035277][T12814] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1480.053986][T12814] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1480.091330][T12825] device veth1_macvtap left promiscuous mode [ 1480.156960][T12814] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1480.179951][T12814] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2916: inode #16: comm syz.4.12998: corrupted xattr block 31 [ 1480.270035][T12814] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 1480.301064][T12814] EXT4-fs (loop4): 1 orphan inode deleted [ 1480.307018][T12814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1480.394317][ T26] audit: type=1326 audit(50891635.415:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.5.13005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639c799 code=0x7ffc0000 [ 1480.472875][T12814] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1480.498195][ T26] audit: type=1326 audit(50891635.436:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.5.13005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639c799 code=0x7ffc0000 [ 1480.612595][ T26] audit: type=1326 audit(50891635.436:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.5.13005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639c799 code=0x7ffc0000 [ 1480.680698][ T26] audit: type=1326 audit(50891635.436:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.5.13005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639c799 code=0x7ffc0000 [ 1480.721531][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 1480.745521][ T26] audit: type=1326 audit(50891635.436:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.5.13005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f3a9639c799 code=0x7ffc0000 [ 1480.838622][ T26] audit: type=1326 audit(50891635.436:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.5.13005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639c799 code=0x7ffc0000 [ 1480.897681][ T26] audit: type=1326 audit(50891635.436:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.5.13005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639c799 code=0x7ffc0000 [ 1480.929110][ T5132] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1480.952868][ T26] audit: type=1326 audit(50891635.436:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.5.13005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a9639c799 code=0x7ffc0000 [ 1480.983115][T12871] loop5: detected capacity change from 0 to 2048 [ 1481.026094][ T26] audit: type=1326 audit(50891635.436:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.5.13005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3a9639c799 code=0x7ffc0000 [ 1481.068322][T12876] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1481.120822][ T5132] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1481.146205][ T5132] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1481.170579][T12871] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 1481.180372][ T5132] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1481.280709][T12871] Remounting filesystem read-only [ 1481.289475][ T5132] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1481.326236][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1481.335943][ T5132] usb 1-1: Product: syz [ 1481.340559][ T5132] usb 1-1: Manufacturer: syz [ 1481.345219][ T5132] usb 1-1: SerialNumber: syz [ 1481.362520][ T5132] usb 1-1: config 0 descriptor?? [ 1481.391617][ T5132] hub 1-1:0.0: bad descriptor, ignoring hub [ 1481.399038][ T5132] hub: probe of 1-1:0.0 failed with error -5 [ 1481.411704][ T5132] usb 1-1: selecting invalid altsetting 0 [ 1481.508938][T20570] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1481.709072][T20570] usb 3-1: Using ep0 maxpacket: 8 [ 1481.717651][T20570] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1481.756316][T20570] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 223, changing to 7 [ 1481.776196][ T4311] usb 1-1: USB disconnect, device number 124 [ 1481.790094][T20570] usb 3-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40 [ 1481.825343][T20570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.851683][T20570] usb 3-1: Product: syz [ 1481.866682][T20570] usb 3-1: Manufacturer: syz [ 1481.895425][T20570] usb 3-1: SerialNumber: syz [ 1482.116278][T20570] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1482.146087][T20570] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1482.166614][T20570] usb 3-1: 2:1 : invalid channels 0 [ 1482.218596][T20570] usb 3-1: USB disconnect, device number 109 [ 1482.491412][ T5065] udevd[5065]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.588749][T12991] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1482.604427][T12991] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1482.651385][T12991] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1482.688636][T12991] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1482.754424][T12998] xt_TCPMSS: Only works on TCP SYN packets [ 1482.851725][T13002] loop7: detected capacity change from 0 to 2048 [ 1482.907737][T13002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1482.991935][ T26] audit: type=1800 audit(50891638.145:289): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.13037" name="file1" dev="loop7" ino=1367 res=0 errno=0 [ 1483.166261][T13015] loop5: detected capacity change from 0 to 1024 [ 1483.373289][T13015] hfsplus: invalid extended attribute record [ 1483.626064][ T75] hfsplus: b-tree write err: -5, ino 25 [ 1483.631876][ T75] hfsplus: b-tree write err: -5, ino 4 [ 1483.659004][ T75] hfsplus: b-tree write err: -5, ino 2 [ 1483.787660][T13050] loop5: detected capacity change from 0 to 64 [ 1483.900767][T13056] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13053'. [ 1484.241739][T13076] openvswitch: netlink: EtherType 0 is less than min 600 [ 1484.481539][T13083] loop4: detected capacity change from 0 to 1024 [ 1484.916896][T13057] loop2: detected capacity change from 0 to 32768 [ 1484.948271][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13071'. [ 1484.992344][T13106] loop0: detected capacity change from 0 to 2048 [ 1485.043505][T13057] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 1485.043505][T13057] [ 1485.105338][T13117] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1485.156007][T13057] ERROR: (device loop2): remounting filesystem as read-only [ 1485.162528][T13106] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 1485.242633][T13106] Remounting filesystem read-only [ 1485.284057][T13119] loop7: detected capacity change from 0 to 2048 [ 1485.355423][T13119] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1485.425232][ T26] audit: type=1107 audit(50891640.707:290): pid=13124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>' [ 1485.476617][T13131] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1485.513057][T13119] NILFS error (device loop7): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1485.620653][T13119] Remounting filesystem read-only [ 1486.085557][T13146] loop4: detected capacity change from 0 to 4096 [ 1486.363471][T13158] loop2: detected capacity change from 0 to 1764 [ 1486.628797][T13146] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1486.703577][T13130] syz.5.13075 (13130): drop_caches: 2 [ 1486.785506][ T4276] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1486.860369][ T4276] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1487.359215][T13199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.430192][T13199] device batadv_slave_0 entered promiscuous mode [ 1487.469749][T13199] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1488.338240][T13250] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1488.406013][T13250] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1488.434442][T13250] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1488.466460][T13250] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1488.485902][T13260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13107'. [ 1489.057298][T13291] loop0: detected capacity change from 0 to 1024 [ 1489.191945][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13118'. [ 1489.240977][T13291] hfsplus: invalid extended attribute record [ 1489.400087][ T46] hfsplus: b-tree write err: -5, ino 25 [ 1489.411208][ T46] hfsplus: b-tree write err: -5, ino 4 [ 1489.451920][ T46] hfsplus: b-tree write err: -5, ino 2 [ 1490.298237][T13359] xt_NFQUEUE: number of total queues is 0 [ 1490.401255][T13362] loop4: detected capacity change from 0 to 2048 [ 1490.483516][T13370] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1490.690019][T13362] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 1490.760835][T13362] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1490.802020][T13381] tmpfs: Bad value for 'size' [ 1490.831147][T13362] Remounting filesystem read-only [ 1490.858962][T13362] NILFS (loop4): error -5 truncating bmap (ino=16) [ 1491.137280][ T4278] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1491.173695][T13404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13147'. [ 1491.229484][T13404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13147'. [ 1491.235034][ T4311] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1491.269884][T13404] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13147'. [ 1491.436393][ T4311] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1491.457142][ T4311] usb 6-1: config 0 has no interface number 0 [ 1491.468661][T13417] tmpfs: Bad value for 'mpol' [ 1491.479734][ T4311] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1491.536138][ T4311] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1491.599523][ T4311] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1491.640787][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.673325][ T4311] usb 6-1: Product: syz [ 1491.677577][ T4311] usb 6-1: Manufacturer: syz [ 1491.688429][ T4311] usb 6-1: SerialNumber: syz [ 1491.713681][ T4311] usb 6-1: config 0 descriptor?? [ 1491.747586][ T4311] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1491.805739][ T4377] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1491.918898][ T4311] usb 6-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1491.967505][ T4311] usb 6-1: USB disconnect, device number 28 [ 1492.006271][ T4377] usb 8-1: Using ep0 maxpacket: 8 [ 1492.015831][ T4377] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1492.016538][ T4311] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1492.029162][ T4377] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 223, changing to 7 [ 1492.101906][ T4311] cypress_m8 6-1:0.35: device disconnected [ 1492.138589][ T4377] usb 8-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40 [ 1492.157094][ T4377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.183820][ T4377] usb 8-1: Product: syz [ 1492.233572][ T4377] usb 8-1: Manufacturer: syz [ 1492.242205][ T4377] usb 8-1: SerialNumber: syz [ 1492.470417][ T4377] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1492.515095][ T4377] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1492.539296][ T4377] usb 8-1: 2:1 : invalid channels 0 [ 1492.630117][ T4377] usb 8-1: USB disconnect, device number 5 [ 1492.746584][T13510] loop5: detected capacity change from 0 to 256 [ 1492.823351][T13514] loop0: detected capacity change from 0 to 256 [ 1492.842628][T13510] FAT-fs (loop5): Directory bread(block 64) failed [ 1492.863585][ T5065] udevd[5065]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1492.913726][T13510] FAT-fs (loop5): Directory bread(block 65) failed [ 1492.923344][T13510] FAT-fs (loop5): Directory bread(block 66) failed [ 1492.992075][T13514] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 1493.000407][T13510] FAT-fs (loop5): Directory bread(block 67) failed [ 1493.016272][T13510] FAT-fs (loop5): Directory bread(block 68) failed [ 1493.022990][T13510] FAT-fs (loop5): Directory bread(block 69) failed [ 1493.108078][T13510] FAT-fs (loop5): Directory bread(block 70) failed [ 1493.182920][T13510] FAT-fs (loop5): Directory bread(block 71) failed [ 1493.273127][T13510] FAT-fs (loop5): Directory bread(block 72) failed [ 1493.282203][T13510] FAT-fs (loop5): Directory bread(block 73) failed [ 1493.480988][T13539] xt_ecn: cannot match TCP bits for non-tcp packets [ 1493.842127][T13564] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13175'. [ 1493.842220][T13564] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13175'. [ 1494.273074][T13581] netlink: 'syz.4.13181': attribute type 21 has an invalid length. [ 1494.738188][T13601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13187'. [ 1494.738276][T13601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13187'. [ 1495.313326][T13632] netlink: 'syz.7.13195': attribute type 21 has an invalid length. [ 1496.188131][T13679] overlayfs: option "workdir=./file0:/" is useless in a non-upper mount, ignore [ 1496.230031][T13679] overlayfs: missing 'lowerdir' [ 1496.515214][T13696] Unsupported ieee802154 address type: 0 [ 1496.805077][T13709] [U] [ 1496.807970][T13709] [U] [ 1496.810766][T13709] [U] [ 1496.813528][T13709] [U] [ 1496.873958][T13709] [U] [ 1496.876756][T13709] [U] [ 1496.879512][T13709] [U] [ 1496.882254][T13709] [U] [ 1496.901867][T13709] [U] [ 1496.904680][T13709] [U] [ 1496.907430][T13709] [U] [ 1496.971238][T13708] [U] [ 1497.221225][T13733] futex_wake_op: syz.7.13222 tries to shift op by 32; fix this program [ 1497.254777][T13732] loop5: detected capacity change from 0 to 2048 [ 1497.271700][T13735] netlink: 'syz.0.13221': attribute type 1 has an invalid length. [ 1497.321061][T13732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1497.331286][T13735] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13221'. [ 1497.533781][T13739] netlink: 'syz.7.13223': attribute type 2 has an invalid length. [ 1497.665566][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13225'. [ 1498.306433][T13780] loop0: detected capacity change from 0 to 16 [ 1498.386633][T13780] erofs: (device loop0): mounted with root inode @ nid 36. [ 1498.428307][ T26] audit: type=1326 audit(50891654.355:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.4.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1498.521021][ T26] audit: type=1326 audit(50891654.407:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.4.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1498.650576][ T26] audit: type=1326 audit(50891654.407:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.4.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1498.769875][ T26] audit: type=1326 audit(50891654.407:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13788 comm="syz.4.13237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80199c799 code=0x7ffc0000 [ 1498.814426][T13727] loop2: detected capacity change from 0 to 40427 [ 1498.877634][T13727] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64) [ 1498.958388][T13727] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1499.014814][T13727] F2FS-fs (loop2): invalid crc value [ 1499.067165][T13727] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1499.272944][T13817] loop5: detected capacity change from 0 to 4096 [ 1499.400045][T13727] F2FS-fs (loop2): recover fsync data on readonly fs [ 1499.441754][T13727] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 1499.492375][T13727] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1499.511847][ T5132] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1499.612683][T10105] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 1499.644914][T10105] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1499.701931][ T5132] usb 1-1: Using ep0 maxpacket: 16 [ 1499.713242][ T5132] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1499.749337][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.768933][ T5132] usb 1-1: Product: syz [ 1499.784439][T13844] netlink: 'syz.5.13249': attribute type 1 has an invalid length. [ 1499.794562][ T5132] usb 1-1: Manufacturer: syz [ 1499.806623][ T5132] usb 1-1: SerialNumber: syz [ 1499.835382][ T4316] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1499.851622][ T5132] usb 1-1: config 0 descriptor?? [ 1500.016516][ T4316] usb 8-1: Using ep0 maxpacket: 8 [ 1500.026144][ T4316] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1500.064102][ T4316] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1500.081229][ T5132] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 1500.095900][ T5132] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1500.102574][ T4316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.111210][ T4316] usb 8-1: Product: syz [ 1500.140163][ T4316] usb 8-1: Manufacturer: syz [ 1500.170008][ T4316] usb 8-1: SerialNumber: syz [ 1500.291637][ T5132] usb 1-1: USB disconnect, device number 125 [ 1500.351723][T13860] loop5: detected capacity change from 0 to 1024 [ 1500.400997][ T4316] usb 8-1: BAAD GENERIC IO: no channels? [ 1500.504930][ T4316] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 1500.546792][ T4316] usb 8-1: USB disconnect, device number 6 [ 1500.659294][T22215] hfsplus: b-tree write err: -5, ino 25 [ 1500.667821][T22215] hfsplus: b-tree write err: -5, ino 4 [ 1500.690062][T22215] hfsplus: b-tree write err: -5, ino 2 [ 1500.789162][ T5065] udevd[5065]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.750029][T13984] delete_channel: no stack [ 1501.962254][T13996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13271'. [ 1502.007810][T13996] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13271'. [ 1502.345042][T14018] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 1502.900502][T14040] loop2: detected capacity change from 0 to 4096 [ 1502.967047][T14040] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1503.267147][T14067] loop7: detected capacity change from 0 to 16 [ 1503.338486][T14067] erofs: (device loop7): mounted with root inode @ nid 36. [ 1504.160230][T14096] loop0: detected capacity change from 0 to 4096 [ 1505.309749][T14162] loop2: detected capacity change from 0 to 512 [ 1505.475497][T14177] netlink: 'syz.0.13321': attribute type 6 has an invalid length. [ 1505.486430][T14162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1505.884820][ T4311] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1506.066894][ T4311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.105991][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 200, setting to 64 [ 1506.145697][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1506.398417][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1506.409437][ T4311] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1506.465073][ T4311] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1506.474477][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.513733][ T4311] usb 3-1: config 0 descriptor?? [ 1506.520428][T14162] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1506.694204][T14235] netlink: 340 bytes leftover after parsing attributes in process `syz.5.13337'. [ 1506.717247][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13337'. [ 1506.782192][ T6230] usb 3-1: USB disconnect, device number 110 [ 1506.872051][T14246] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 1507.201297][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13345'. [ 1507.341237][ T6230] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1507.353221][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 1507.478205][T14286] loop4: detected capacity change from 0 to 256 [ 1507.522311][ T6230] usb 1-1: Using ep0 maxpacket: 16 [ 1507.529694][ T6230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1507.593787][ T6230] usb 1-1: config 192 has too many interfaces: 127, using maximum allowed: 32 [ 1507.630937][ T6230] usb 1-1: config 192 has an invalid interface association descriptor of length 5, skipping [ 1507.672430][ T6230] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.737961][ T6230] usb 1-1: config 192 has 0 interfaces, different from the descriptor's value: 127 [ 1507.776437][ T6230] usb 1-1: config 192 has too many interfaces: 127, using maximum allowed: 32 [ 1507.812511][ T6230] usb 1-1: config 192 has an invalid interface association descriptor of length 5, skipping [ 1507.826037][T14299] loop2: detected capacity change from 0 to 1024 [ 1507.854313][ T6230] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.878741][T14299] hfsplus: Filesystem is marked locked, mounting read-only. [ 1507.909739][ T6230] usb 1-1: config 192 has 0 interfaces, different from the descriptor's value: 127 [ 1507.943091][T14299] hfsplus: filesystem is marked locked, leaving read-only. [ 1507.957435][ T6230] usb 1-1: New USB device found, idVendor=03eb, idProduct=7617, bcdDevice= 2.69 [ 1507.976136][ T6230] usb 1-1: New USB device strings: Mfr=3, Product=1, SerialNumber=9 [ 1508.017514][ T6230] usb 1-1: Product: syz [ 1508.021782][ T6230] usb 1-1: Manufacturer: syz [ 1508.066128][ T6230] usb 1-1: SerialNumber: syz [ 1508.295100][ T6230] usb 1-1: USB disconnect, device number 126 [ 1509.033581][T14370] IPv6: sit1: Disabled Multicast RS [ 1509.240557][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13375'. [ 1509.270680][T14383] No such timeout policy "syz0" [ 1509.526776][T14391] Timeout policy `syz1' can only be used by L3 protocol number 24579 [ 1510.055852][ T4377] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1510.175130][T14422] loop7: detected capacity change from 0 to 4096 [ 1510.235964][T14422] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1510.266609][ T4377] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 1510.295817][ T4377] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1510.314727][T14422] ntfs3: loop7: Failed to load $Extend. [ 1510.327563][ T4377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.348290][ T4377] usb 5-1: Product: syz [ 1510.358230][ T4377] usb 5-1: Manufacturer: syz [ 1510.363158][ T4377] usb 5-1: SerialNumber: syz [ 1510.408095][ T26] audit: type=1800 audit(50891666.922:295): pid=14422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.13388" name=2E02 dev="loop7" ino=33 res=0 errno=0 [ 1510.617881][T14385] loop2: detected capacity change from 0 to 32768 [ 1510.676732][T14445] loop0: detected capacity change from 0 to 1024 [ 1510.795867][T14385] XFS (loop2): Mounting V5 Filesystem [ 1510.848195][ T4377] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1510.914300][ T75] hfsplus: b-tree write err: -5, ino 25 [ 1510.920668][ T75] hfsplus: b-tree write err: -5, ino 4 [ 1510.947490][ T4377] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1510.999507][ T75] hfsplus: b-tree write err: -5, ino 2 [ 1511.071686][ T4377] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1511.124292][ T4377] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1511.176421][ T4377] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1511.201841][T14385] XFS (loop2): Ending clean mount [ 1511.209860][ T4377] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1511.222906][T14469] loop7: detected capacity change from 0 to 4096 [ 1511.235605][T14474] loop5: detected capacity change from 0 to 1024 [ 1511.266147][T14469] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1511.273082][ T4377] usb 5-1: USB disconnect, device number 106 [ 1511.311900][T14474] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1511.338019][T14474] EXT4-fs error (device loop5): ext4_get_journal_inode:5756: inode #32: comm syz.5.13399: iget: special inode unallocated [ 1511.409508][T14474] EXT4-fs (loop5): no journal found [ 1511.425165][T14474] EXT4-fs (loop5): can't get journal size [ 1511.488113][T14474] EXT4-fs (loop5): filesystem is read-only [ 1511.513709][T14474] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1511.529491][ T4276] XFS (loop2): Unmounting Filesystem [ 1511.583851][T14488] loop0: detected capacity change from 0 to 8192 [ 1511.604809][T14488] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1511.722965][T14488] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1511.759833][T14469] ntfs: (device loop7): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 1511.799223][T14469] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1511.800822][T14488] REISERFS (device loop0): using ordered data mode [ 1511.843155][T14469] ntfs: (device loop7): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1511.862933][T10105] EXT4-fs (loop5): unmounting filesystem. [ 1511.884033][T14488] reiserfs: using flush barriers [ 1511.915767][T14469] ntfs: volume version 3.1. [ 1511.999202][T14488] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 1512.017243][T14469] ntfs: (device loop7): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 1512.045451][T14469] ntfs: (device loop7): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 1512.073437][T14488] REISERFS (device loop0): checking transaction log (loop0) [ 1512.100130][T14488] REISERFS (device loop0): Using r5 hash to sort names [ 1512.114708][T14469] ntfs: (device loop7): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 1512.128168][T14488] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1512.174452][T14488] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1512.568470][T14513] overlayfs: conflicting options: userxattr,metacopy=on [ 1512.738224][T14511] loop5: detected capacity change from 0 to 4096 [ 1512.841207][T14511] ntfs: (device loop5): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 1512.913433][T14511] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1513.002833][T14511] ntfs: volume version 3.1. [ 1514.498327][T14614] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1514.584793][T14610] loop7: detected capacity change from 0 to 4096 [ 1514.695290][T14610] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1515.043578][T14628] loop2: detected capacity change from 0 to 8192 [ 1515.119593][T14628] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1515.142505][T14628] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1515.151784][T14628] REISERFS (device loop2): using ordered data mode [ 1515.206462][T14628] reiserfs: using flush barriers [ 1515.272451][T14628] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1515.357771][T14657] netlink: 'syz.4.13451': attribute type 12 has an invalid length. [ 1515.482609][T14628] REISERFS (device loop2): checking transaction log (loop2) [ 1515.513409][T14628] REISERFS (device loop2): Using tea hash to sort names [ 1515.558893][T14628] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1515.657500][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1515.657517][ T26] audit: type=1326 audit(50891672.444:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.0.13455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1515.739073][ T26] audit: type=1326 audit(50891672.444:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.0.13455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1515.848285][T14674] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.13458'. [ 1515.867454][ T26] audit: type=1326 audit(50891672.444:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.0.13455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1515.971731][ T26] audit: type=1326 audit(50891672.465:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.0.13455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1516.104729][ T26] audit: type=1326 audit(50891672.465:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.0.13455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1516.129477][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1516.192378][ T26] audit: type=1326 audit(50891672.465:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.0.13455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1516.244963][ T26] audit: type=1326 audit(50891672.465:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.0.13455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1516.298416][ T26] audit: type=1326 audit(50891672.465:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14665 comm="syz.0.13455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f33df99c799 code=0x7ffc0000 [ 1517.119152][T14736] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1517.345993][T14751] cgroup: Unexpected value for 'cpuset_v2_mode' [ 1517.856246][T14785] loop2: detected capacity change from 0 to 736 [ 1518.048730][T20570] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1518.239684][T20570] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1518.266382][T20570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.304255][T14810] loop5: detected capacity change from 0 to 64 [ 1518.336661][T20570] usb 1-1: config 0 descriptor?? [ 1518.349934][T20570] cp210x 1-1:0.0: cp210x converter detected [ 1518.606677][T14826] netlink: 'syz.4.13503': attribute type 3 has an invalid length. [ 1518.617073][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.745497][T20570] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1518.764937][T20570] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1518.801798][T20570] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1518.840870][T20570] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1518.903820][T20570] usb 1-1: USB disconnect, device number 127 [ 1518.950592][T20570] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1518.984355][T20570] cp210x 1-1:0.0: device disconnected [ 1519.027874][T14858] loop5: detected capacity change from 0 to 512 [ 1519.041100][T14858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1519.079120][T14858] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:337: inode #15: comm syz.5.13509: verity file corrupted; can't find descriptor [ 1519.178358][T14858] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 1519.354394][T10105] EXT4-fs (loop5): unmounting filesystem. [ 1519.450261][T14884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1519.958226][T14913] loop2: detected capacity change from 0 to 256 [ 1520.347813][T14916] loop4: detected capacity change from 0 to 8192 [ 1520.478566][T14916] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1520.505105][T14916] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1520.514486][T14916] REISERFS (device loop4): using ordered data mode [ 1520.522311][T14945] netlink: 'syz.0.13529': attribute type 2 has an invalid length. [ 1520.530553][T14945] netlink: 'syz.0.13529': attribute type 1 has an invalid length. [ 1520.620680][T14916] reiserfs: using flush barriers [ 1520.667094][T14916] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1520.760613][T14916] REISERFS (device loop4): checking transaction log (loop4) [ 1520.836148][T14916] REISERFS (device loop4): Using tea hash to sort names [ 1520.865215][T14916] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1521.038803][T14964] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1521.059113][T14900] loop5: detected capacity change from 0 to 32768 [ 1521.095308][T14964] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1521.132399][T14900] ================================================================== [ 1521.140550][T14900] BUG: KASAN: slab-out-of-bounds in reiserfs_xattr_get+0xfa/0x5a0 [ 1521.148427][T14900] Read of size 8 at addr ffff88804a873d98 by task syz.5.13521/14900 [ 1521.156464][T14900] [ 1521.158843][T14900] CPU: 1 PID: 14900 Comm: syz.5.13521 Not tainted syzkaller #0 [ 1521.166454][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1521.176603][T14900] Call Trace: [ 1521.179960][T14900] [ 1521.182978][T14900] dump_stack_lvl+0x188/0x24e [ 1521.187734][T14900] ? read_lock_is_recursive+0x10/0x10 [ 1521.193182][T14900] ? show_regs_print_info+0x12/0x12 [ 1521.198460][T14900] ? load_image+0x400/0x400 [ 1521.203022][T14900] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1521.208568][T14900] ? __virt_addr_valid+0x188/0x540 [ 1521.213924][T14900] ? __virt_addr_valid+0x465/0x540 [ 1521.219120][T14900] ? reiserfs_xattr_get+0xfa/0x5a0 [ 1521.224349][T14900] print_report+0xa8/0x210 [ 1521.228921][T14900] kasan_report+0x10b/0x140 [ 1521.233529][T14900] ? reiserfs_xattr_get+0xfa/0x5a0 [ 1521.238714][T14900] reiserfs_xattr_get+0xfa/0x5a0 [ 1521.243813][T14900] ? get_cached_acl+0x4f7/0x540 [ 1521.248729][T14900] reiserfs_get_acl+0x7a/0x680 [ 1521.254259][T14900] ? leave_rcu+0xf4/0x160 [ 1521.258655][T14900] get_acl+0x154/0x250 [ 1521.262785][T14900] check_acl+0x3a/0x150 [ 1521.267005][T14900] generic_permission+0x3bf/0x510 [ 1521.272106][T14900] ? open_xa_dir+0x6f0/0x6f0 [ 1521.276760][T14900] inode_permission+0x239/0x480 [ 1521.281689][T14900] may_open+0x262/0x400 [ 1521.285899][T14900] path_openat+0x24d0/0x2ee0 [ 1521.290564][T14900] ? verify_lock_unused+0x140/0x140 [ 1521.295832][T14900] ? do_syscall_64+0x4c/0xa0 [ 1521.300592][T14900] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.306721][T14900] ? do_filp_open+0x430/0x430 [ 1521.311462][T14900] do_filp_open+0x1f1/0x430 [ 1521.316026][T14900] ? vfs_tmpfile+0x480/0x480 [ 1521.320685][T14900] ? _raw_spin_unlock+0x24/0x40 [ 1521.325861][T14900] ? alloc_fd+0x58f/0x630 [ 1521.330256][T14900] do_sys_openat2+0x150/0x4b0 [ 1521.335007][T14900] ? __se_sys_mount+0x38f/0x3d0 [ 1521.339914][T14900] ? __kmem_cache_free+0xb6/0x1f0 [ 1521.345092][T14900] ? do_sys_open+0xe0/0xe0 [ 1521.349570][T14900] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1521.355616][T14900] ? lock_chain_count+0x20/0x20 [ 1521.360564][T14900] __x64_sys_openat+0x135/0x160 [ 1521.365565][T14900] do_syscall_64+0x4c/0xa0 [ 1521.370091][T14900] ? clear_bhb_loop+0x60/0xb0 [ 1521.374834][T14900] ? clear_bhb_loop+0x60/0xb0 [ 1521.379661][T14900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.385612][T14900] RIP: 0033:0x7f3a9635cfce [ 1521.390137][T14900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1521.409797][T14900] RSP: 002b:00007f3a9727ada8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1521.418703][T14900] RAX: ffffffffffffffda RBX: 00007f3a9727b6c0 RCX: 00007f3a9635cfce [ 1521.426738][T14900] RDX: 0000000000010000 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 1521.434757][T14900] RBP: 0000200000005e00 R08: 0000000000000000 R09: 0000000000000000 [ 1521.442885][T14900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000540 [ 1521.451004][T14900] R13: 00007f3a9727aea0 R14: 0000000000005eca R15: 0000200000000000 [ 1521.459028][T14900] [ 1521.462084][T14900] [ 1521.464442][T14900] Allocated by task 14858: [ 1521.468905][T14900] kasan_set_track+0x4b/0x70 [ 1521.473549][T14900] __kasan_kmalloc+0x8e/0xa0 [ 1521.478191][T14900] __kmalloc+0xb0/0x240 [ 1521.482414][T14900] ext4_mb_add_groupinfo+0x1ed/0xef0 [ 1521.487756][T14900] ext4_mb_init+0x15ef/0x25a0 [ 1521.492481][T14900] ext4_fill_super+0x68bf/0x7dc0 [ 1521.497461][T14900] get_tree_bdev+0x3f1/0x610 [ 1521.502098][T14900] vfs_get_tree+0x88/0x270 [ 1521.506651][T14900] do_new_mount+0x24a/0xa40 [ 1521.511201][T14900] __se_sys_mount+0x2e3/0x3d0 [ 1521.515934][T14900] do_syscall_64+0x4c/0xa0 [ 1521.520408][T14900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.526532][T14900] [ 1521.528891][T14900] Freed by task 10105: [ 1521.532992][T14900] kasan_set_track+0x4b/0x70 [ 1521.537644][T14900] kasan_save_free_info+0x2d/0x50 [ 1521.542717][T14900] ____kasan_slab_free+0x126/0x1e0 [ 1521.547986][T14900] slab_free_freelist_hook+0x131/0x1a0 [ 1521.553676][T14900] __kmem_cache_free+0xb6/0x1f0 [ 1521.558633][T14900] ext4_mb_release+0x75f/0xf30 [ 1521.563456][T14900] ext4_put_super+0x213/0xe90 [ 1521.568251][T14900] generic_shutdown_super+0x130/0x340 [ 1521.573697][T14900] kill_block_super+0x7c/0xe0 [ 1521.578478][T14900] deactivate_locked_super+0x93/0xf0 [ 1521.583826][T14900] cleanup_mnt+0x42c/0x4b0 [ 1521.588305][T14900] task_work_run+0x1d0/0x260 [ 1521.592966][T14900] exit_to_user_mode_loop+0xe6/0x110 [ 1521.598319][T14900] exit_to_user_mode_prepare+0xee/0x180 [ 1521.603943][T14900] syscall_exit_to_user_mode+0x16/0x40 [ 1521.609556][T14900] do_syscall_64+0x58/0xa0 [ 1521.614293][T14900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.620349][T14900] [ 1521.622719][T14900] The buggy address belongs to the object at ffff88804a873c00 [ 1521.622719][T14900] which belongs to the cache kmalloc-256 of size 256 [ 1521.636918][T14900] The buggy address is located 152 bytes to the right of [ 1521.636918][T14900] 256-byte region [ffff88804a873c00, ffff88804a873d00) [ 1521.650962][T14900] [ 1521.653341][T14900] The buggy address belongs to the physical page: [ 1521.659881][T14900] page:ffffea00012a1c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a872 [ 1521.670188][T14900] head:ffffea00012a1c80 order:1 compound_mapcount:0 compound_pincount:0 [ 1521.678577][T14900] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1521.686641][T14900] raw: 00fff00000010200 ffffea0001cc0880 dead000000000004 ffff888017441b40 [ 1521.695341][T14900] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1521.704234][T14900] page dumped because: kasan: bad access detected [ 1521.710705][T14900] page_owner tracks the page as allocated [ 1521.716466][T14900] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 14059, tgid 14057 (syz.4.13288), ts 1503167557370, free_ts 1503108604273 [ 1521.740099][T14900] post_alloc_hook+0x173/0x1a0 [ 1521.744933][T14900] get_page_from_freelist+0x1a1e/0x1ab0 [ 1521.750819][T14900] __alloc_pages+0x1ec/0x4f0 [ 1521.755478][T14900] alloc_slab_page+0x5d/0x160 [ 1521.760328][T14900] new_slab+0x87/0x2c0 [ 1521.764456][T14900] ___slab_alloc+0xbc6/0x1240 [ 1521.769211][T14900] __kmem_cache_alloc_node+0x1a0/0x260 [ 1521.774830][T14900] __kmalloc+0xa0/0x240 [ 1521.779084][T14900] __register_sysctl_table+0x96c/0xe70 [ 1521.784602][T14900] __addrconf_sysctl_register+0x271/0x3e0 [ 1521.790476][T14900] addrconf_sysctl_register+0x15c/0x1b0 [ 1521.796136][T14900] ipv6_add_dev+0xbe0/0x1120 [ 1521.800783][T14900] addrconf_notify+0x634/0xf40 [ 1521.805598][T14900] raw_notifier_call_chain+0xcb/0x160 [ 1521.811114][T14900] register_netdevice+0x163f/0x1b00 [ 1521.816369][T14900] geneve_configure+0x637/0xa70 [ 1521.821358][T14900] page last free stack trace: [ 1521.826070][T14900] free_unref_page_prepare+0x8b4/0x9a0 [ 1521.831596][T14900] free_unref_page+0x2e/0x3f0 [ 1521.836425][T14900] __unfreeze_partials+0x1a5/0x200 [ 1521.841682][T14900] put_cpu_partial+0x17c/0x250 [ 1521.846501][T14900] qlist_free_all+0x76/0xe0 [ 1521.851061][T14900] kasan_quarantine_reduce+0x144/0x160 [ 1521.856573][T14900] __kasan_slab_alloc+0x1e/0x80 [ 1521.861484][T14900] slab_post_alloc_hook+0x4b/0x480 [ 1521.866656][T14900] __kmem_cache_alloc_node+0x140/0x260 [ 1521.872164][T14900] __kmalloc+0xa0/0x240 [ 1521.876469][T14900] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1521.882083][T14900] tomoyo_path_perm+0x26f/0x610 [ 1521.887029][T14900] security_path_truncate+0xcf/0x120 [ 1521.892376][T14900] path_openat+0x27dd/0x2ee0 [ 1521.897018][T14900] do_filp_open+0x1f1/0x430 [ 1521.901574][T14900] do_sys_openat2+0x150/0x4b0 [ 1521.906308][T14900] [ 1521.908709][T14900] Memory state around the buggy address: [ 1521.914386][T14900] ffff88804a873c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1521.922591][T14900] ffff88804a873d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1521.930705][T14900] >ffff88804a873d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1521.938906][T14900] ^ [ 1521.943800][T14900] ffff88804a873e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1521.951909][T14900] ffff88804a873e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1521.960009][T14900] ================================================================== [ 1521.968192][ C1] vkms_vblank_simulate: vblank timer overrun [ 1521.978341][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1521.984818][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1522.004015][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1522.021106][T14900] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1522.028421][T14900] CPU: 1 PID: 14900 Comm: syz.5.13521 Not tainted syzkaller #0 [ 1522.036049][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1522.046153][T14900] Call Trace: [ 1522.049565][T14900] [ 1522.052532][T14900] dump_stack_lvl+0x188/0x24e [ 1522.057274][T14900] ? memcpy+0x3c/0x60 [ 1522.061651][T14900] ? show_regs_print_info+0x12/0x12 [ 1522.067093][T14900] ? load_image+0x400/0x400 [ 1522.071661][T14900] panic+0x2e5/0x730 [ 1522.075609][T14900] ? bpf_jit_dump+0xd0/0xd0 [ 1522.080170][T14900] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1522.086205][T14900] ? _raw_spin_unlock+0x40/0x40 [ 1522.091110][T14900] check_panic_on_warn+0x80/0xa0 [ 1522.096110][T14900] ? reiserfs_xattr_get+0xfa/0x5a0 [ 1522.101279][T14900] end_report+0x66/0x110 [ 1522.105590][T14900] kasan_report+0x118/0x140 [ 1522.110158][T14900] ? reiserfs_xattr_get+0xfa/0x5a0 [ 1522.115597][T14900] reiserfs_xattr_get+0xfa/0x5a0 [ 1522.120691][T14900] ? get_cached_acl+0x4f7/0x540 [ 1522.126079][T14900] reiserfs_get_acl+0x7a/0x680 [ 1522.130912][T14900] ? leave_rcu+0xf4/0x160 [ 1522.135299][T14900] get_acl+0x154/0x250 [ 1522.139433][T14900] check_acl+0x3a/0x150 [ 1522.143663][T14900] generic_permission+0x3bf/0x510 [ 1522.148733][T14900] ? open_xa_dir+0x6f0/0x6f0 [ 1522.153361][T14900] inode_permission+0x239/0x480 [ 1522.158264][T14900] may_open+0x262/0x400 [ 1522.162453][T14900] path_openat+0x24d0/0x2ee0 [ 1522.167080][T14900] ? verify_lock_unused+0x140/0x140 [ 1522.172397][T14900] ? do_syscall_64+0x4c/0xa0 [ 1522.177019][T14900] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1522.183136][T14900] ? do_filp_open+0x430/0x430 [ 1522.187953][T14900] do_filp_open+0x1f1/0x430 [ 1522.192485][T14900] ? vfs_tmpfile+0x480/0x480 [ 1522.197108][T14900] ? _raw_spin_unlock+0x24/0x40 [ 1522.202022][T14900] ? alloc_fd+0x58f/0x630 [ 1522.206576][T14900] do_sys_openat2+0x150/0x4b0 [ 1522.211328][T14900] ? __se_sys_mount+0x38f/0x3d0 [ 1522.216257][T14900] ? __kmem_cache_free+0xb6/0x1f0 [ 1522.221355][T14900] ? do_sys_open+0xe0/0xe0 [ 1522.225816][T14900] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1522.232005][T14900] ? lock_chain_count+0x20/0x20 [ 1522.236900][T14900] __x64_sys_openat+0x135/0x160 [ 1522.241827][T14900] do_syscall_64+0x4c/0xa0 [ 1522.246284][T14900] ? clear_bhb_loop+0x60/0xb0 [ 1522.250985][T14900] ? clear_bhb_loop+0x60/0xb0 [ 1522.255688][T14900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1522.261628][T14900] RIP: 0033:0x7f3a9635cfce [ 1522.266063][T14900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1522.285731][T14900] RSP: 002b:00007f3a9727ada8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1522.294613][T14900] RAX: ffffffffffffffda RBX: 00007f3a9727b6c0 RCX: 00007f3a9635cfce [ 1522.303047][T14900] RDX: 0000000000010000 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 1522.311127][T14900] RBP: 0000200000005e00 R08: 0000000000000000 R09: 0000000000000000 [ 1522.319255][T14900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000540 [ 1522.328063][T14900] R13: 00007f3a9727aea0 R14: 0000000000005eca R15: 0000200000000000 [ 1522.336108][T14900] [ 1522.339749][T14900] Kernel Offset: disabled [ 1522.344103][T14900] Rebooting in 86400 seconds..