last executing test programs: 3m3.920202163s ago: executing program 0 (id=152): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 3m3.216850501s ago: executing program 0 (id=162): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602f1fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES8], 0x11, 0x1d6, &(0x7f0000000bc0)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 3m2.861757383s ago: executing program 0 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x7}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), 0x0}, 0x20) 3m2.487041488s ago: executing program 0 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 3m2.304433163s ago: executing program 0 (id=172): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) 3m1.789603091s ago: executing program 0 (id=179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "91d0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e, 0x0, 0x408c811}, 0x40048000) 3m1.417205553s ago: executing program 32 (id=179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "91d0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e, 0x0, 0x408c811}, 0x40048000) 1m48.338183041s ago: executing program 1 (id=1345): syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYBLOB="010000006e6963622c73657373696f6e08003030303030303030303030303030303030ff352c00"], 0x1, 0xc58, &(0x7f00000000c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 1m47.729544072s ago: executing program 1 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x180a0, 0x42c04}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x4c}}, 0x24) 1m47.210929423s ago: executing program 1 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020168f58010000000000000000000001"], 0x4c}}, 0x0) 1m47.045486961s ago: executing program 1 (id=1366): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000000)={[{@shortname_win95}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@uni_xlate}, {@rodir}, {@rodir}, {@shortname_win95}, {@uni_xlate}, {@fat=@discard}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x1, 0x360, &(0x7f0000001280)="$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") mount$nfs(&(0x7f0000000300)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 1m46.325345841s ago: executing program 1 (id=1379): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m45.522714583s ago: executing program 1 (id=1394): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xa0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 1m45.141997241s ago: executing program 33 (id=1394): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xa0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.797890536s ago: executing program 3 (id=3155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0) 2.557901703s ago: executing program 3 (id=3162): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) 2.438906112s ago: executing program 3 (id=3165): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1, 0x7c, 0x0) 2.237728018s ago: executing program 3 (id=3170): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240), 0x0, 0x96f5, &(0x7f0000009680)="$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") quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xee00, 0x0) 2.174548979s ago: executing program 4 (id=3172): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864d1, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.983497033s ago: executing program 4 (id=3176): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.536192478s ago: executing program 5 (id=3183): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) 1.439503568s ago: executing program 4 (id=3186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 1.300201881s ago: executing program 2 (id=3188): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) 1.27964155s ago: executing program 5 (id=3189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x2081}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5ccf, 0x6, 0x9}}]}]}]}, 0x54}}, 0x0) 1.124018766s ago: executing program 4 (id=3190): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x1412, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) 1.12386337s ago: executing program 6 (id=3191): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1410}], 0x1, 0xc) 1.080461628s ago: executing program 2 (id=3192): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0xfffffffffffffe81, 0x4c, 0x5}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0xfffffffe}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x80) 1.046711183s ago: executing program 5 (id=3193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 974.940062ms ago: executing program 6 (id=3194): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)) 900.221384ms ago: executing program 4 (id=3195): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$eJzsVU+L00AU/71k2jQexKsieFC0PbRN45+rnqQfwA9gaWMtpqhNQVs8xFO/hwj9Gh7Er+BB2Uv3sCzsYfe6LFkm8yZN2sKyLGzLMj9If7/3ezOZN5ny5n30OXIAnFno4hVS2LiNf0QQAB6Q8l47ig/LihscHwjFNfZ/MP9njibTD50wDEYbRVIFio6NVedioVUdl5p2wwRtSMW41jL+OFg7ghjATnyf7QswiilYWy3M3fpnyQkSBce56guX4cvvFo7SXvb3+FtXircAkiRJpNdTD+XHyE70W41xpXdPpA/ZSLIxsvnJ4AmA05/DT81oMq0Php1+0A/I95++8J553nO/+W4QBp76pdwSFv8hJNcAyJ7q5vIlAHvcYG9hHbp8zpO7Ur5G9eFSE6+n5yYsCL+yudzbId/xBo9RAfAlpqWrC0e6pTYINkQatERuHbW3SppodD+GvRkIxCO9OQQsPW2BUhb4WSAK250Bd2VpjzhuM8+ZF8z6ztJ3kZA9CPscVWOgjK+d8XjUkpZSqadrVp5/J0bugOSqJ+Xi5u47G07FwMDAwMDAwGCncR4AAP//mMZQbw==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 817.206611ms ago: executing program 5 (id=3196): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000002c0)="96bced8af9c8", 0x6}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="11000000000000000000000034"], 0x18}, 0x42094) 768.885345ms ago: executing program 6 (id=3197): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200000000e4ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) 720.853835ms ago: executing program 2 (id=3198): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 704.971348ms ago: executing program 3 (id=3199): r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0xde, 0x0, '\x00', {0x0, @bt={0x7f, 0x9, 0x0, 0x1, 0xd, 0x7, 0x0, 0x8, 0x3, 0x1, 0x0, 0xd, 0x4, 0x934, 0x2, 0x0, {0x6, 0x1}, 0x38, 0x2}}}) 679.205554ms ago: executing program 5 (id=3200): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000900)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000440)="447302587796b1d69184bdd3", 0xc}], 0x3, 0x0, 0x6) 553.655668ms ago: executing program 4 (id=3201): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1d1, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40000, 0x101) 553.095451ms ago: executing program 2 (id=3202): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) execve(0x0, 0x0, 0x0) 491.013845ms ago: executing program 6 (id=3203): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 329.462768ms ago: executing program 5 (id=3204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 298.019857ms ago: executing program 2 (id=3205): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x3c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) 258.441135ms ago: executing program 6 (id=3206): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x2, 0x9, 0xffe, 0x1, 0x9, 0x1, 0x4, 0x4, 0x3, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) 24.660744ms ago: executing program 6 (id=3207): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) 5.408592ms ago: executing program 3 (id=3208): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x34959b42c323d4c0, @raw_data="77370ac0bdd3e219614153bf715d8c4066096f71138bf3765249bb11823d9492960c773d70844a18d85c95a4512e40a29988fe76c92a4d55aad32de249ca886f742568786c41cb98329694385c80490eccd6ac97155141e5e458aad4c2df788edc0146f063dc925f227c53585dfe4a4cda5fdab48ef292b2ef0d6cd7273c80e52d188580008a16cfeaa2b855cfdaaf4323e7d8e3e3d6cbd9528a1ef8920d59734aca0455b68f04075034e0bec8b32c1b5cc50440e485be399c514a2de24e83f4a63c3459432c9a10"}) 0s ago: executing program 2 (id=3209): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000002780)=@multiplanar_fd={0x800, 0x9, 0x4, 0x100000, 0x8d, {0x0, 0x2710}, {0x4, 0x1, 0x9, 0x6, 0x7, 0x9, "a83e0123"}, 0x81, 0x4, {&(0x7f0000002700)=[{0xb, 0x6, {}, 0xa}, {0x9, 0x8, {}, 0x5}]}, 0x4}) kernel console output (not intermixed with test programs): : spca561-2.14.0 probing abcd:cdee [ 172.720021][ T5890] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 172.764043][ T5890] usb 6-1: USB disconnect, device number 5 [ 173.287201][ T5846] Bluetooth: hci4: command tx timeout [ 173.548151][ T3561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.582205][ T9277] loop4: detected capacity change from 0 to 40427 [ 173.598820][ T9277] F2FS-fs (loop4): build fault injection rate: 174 [ 173.606866][ T9277] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 173.628447][ T9277] F2FS-fs (loop4): invalid crc value [ 173.633967][ T3561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.700422][ T3561] bond0 (unregistering): Released all slaves [ 173.781546][ T3561] bond1 (unregistering): Released all slaves [ 173.839221][ T9277] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 173.906284][ T9277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.036846][ T9307] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 174.081499][ T9277] syz.4.1425: attempt to access beyond end of device [ 174.081499][ T9277] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.170595][ T5828] syz-executor: attempt to access beyond end of device [ 174.170595][ T5828] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 174.211880][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 174.211905][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.211918][ T5828] Call Trace: [ 174.211925][ T5828] [ 174.211933][ T5828] dump_stack_lvl+0x189/0x250 [ 174.211965][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.211989][ T5828] ? __pfx_queue_work_on+0x10/0x10 [ 174.212009][ T5828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 174.212032][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.212067][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 174.212093][ T5828] f2fs_write_end_io+0x94b/0xc10 [ 174.212137][ T5828] __submit_merged_bio+0x256/0x6a0 [ 174.212165][ T5828] __submit_merged_write_cond+0x255/0x530 [ 174.212190][ T5828] f2fs_write_data_pages+0x2756/0x3290 [ 174.212207][ T5828] ? __lock_acquire+0xab9/0xd20 [ 174.212265][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.212340][ T5828] ? check_path+0x21/0x40 [ 174.212351][ T5828] ? check_noncircular+0xe0/0x160 [ 174.212426][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.212449][ T5828] do_writepages+0x32e/0x550 [ 174.212477][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 174.212501][ T5828] filemap_fdatawrite+0x199/0x240 [ 174.212519][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 174.212588][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 174.212614][ T5828] f2fs_sync_dirty_inodes+0x30f/0x830 [ 174.212655][ T5828] f2fs_write_checkpoint+0x93e/0x2440 [ 174.212676][ T5828] ? __lock_acquire+0xab9/0xd20 [ 174.212729][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 174.212826][ T5828] kill_f2fs_super+0x2cc/0x6d0 [ 174.212857][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 174.212900][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 174.212926][ T5828] deactivate_locked_super+0xbc/0x130 [ 174.212948][ T5828] cleanup_mnt+0x425/0x4c0 [ 174.212968][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.212995][ T5828] task_work_run+0x1d4/0x260 [ 174.213018][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 174.213043][ T5828] ? exit_to_user_mode_loop+0x55/0x4f0 [ 174.213071][ T5828] exit_to_user_mode_loop+0xff/0x4f0 [ 174.213091][ T5828] ? rcu_is_watching+0x15/0xb0 [ 174.213114][ T5828] do_syscall_64+0x2e9/0xfa0 [ 174.213138][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.213155][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 174.213176][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.213193][ T5828] RIP: 0033:0x7f653f7909f7 [ 174.213220][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 174.213234][ T5828] RSP: 002b:00007ffef6b41b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 174.213253][ T5828] RAX: 0000000000000000 RBX: 00007f653f811d7d RCX: 00007f653f7909f7 [ 174.213266][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef6b41c10 [ 174.213277][ T5828] RBP: 00007ffef6b41c10 R08: 0000000000000000 R09: 0000000000000000 [ 174.213288][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef6b42ca0 [ 174.213299][ T5828] R13: 00007f653f811d7d R14: 000000000002a7e5 R15: 00007ffef6b42ce0 [ 174.213334][ T5828] [ 174.213342][ T5828] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 174.375890][ T9317] loop5: detected capacity change from 0 to 512 [ 174.625666][ T9317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.694499][ T9317] EXT4-fs (loop5): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 174.828601][ T9329] overlayfs: missing 'lowerdir' [ 174.873360][ T9217] chnl_net:caif_netlink_parms(): no params data found [ 174.929728][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.026729][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1450'. [ 175.122644][ T9335] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1450'. [ 175.365313][ T5846] Bluetooth: hci4: command tx timeout [ 175.506710][ T3561] hsr_slave_0: left promiscuous mode [ 175.558260][ T3561] hsr_slave_1: left promiscuous mode [ 175.589206][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.596975][ T9360] loop5: detected capacity change from 0 to 164 [ 175.620892][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.654968][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.678715][ T9360] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 175.699595][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.846773][ T3561] veth0_macvtap: left promiscuous mode [ 175.875157][ T3561] veth1_vlan: left promiscuous mode [ 175.893190][ T9373] loop3: detected capacity change from 0 to 256 [ 175.894216][ T3561] veth0_vlan: left promiscuous mode [ 175.931074][ T9373] exfat: Deprecated parameter 'namecase' [ 175.980670][ T9375] netlink: 'syz.5.1463': attribute type 1 has an invalid length. [ 176.009162][ T9373] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 176.282911][ T9384] loop3: detected capacity change from 0 to 16 [ 176.352848][ T9384] erofs (device loop3): mounted with root inode @ nid 36. [ 176.402856][ T9384] erofs (device loop3): inline data across blocks @ nid 86 [ 176.418809][ T9384] erofs (device loop3): inline data across blocks @ nid 86 [ 176.438450][ T30] audit: type=1800 audit(1763527464.450:24): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1466" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 176.703378][ T9393] loop3: detected capacity change from 0 to 256 [ 176.766178][ T9393] FAT-fs (loop3): Directory bread(block 64) failed [ 176.785452][ T9393] FAT-fs (loop3): Directory bread(block 65) failed [ 176.813462][ T9393] FAT-fs (loop3): Directory bread(block 66) failed [ 176.834613][ T9393] FAT-fs (loop3): Directory bread(block 67) failed [ 176.871117][ T9393] FAT-fs (loop3): Directory bread(block 68) failed [ 176.885457][ T9393] FAT-fs (loop3): Directory bread(block 69) failed [ 176.892259][ T9393] FAT-fs (loop3): Directory bread(block 70) failed [ 176.894531][ T30] audit: type=1326 audit(1763527464.900:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x0 [ 176.899613][ T9393] FAT-fs (loop3): Directory bread(block 71) failed [ 176.933638][ T9393] FAT-fs (loop3): Directory bread(block 72) failed [ 176.942867][ T9393] FAT-fs (loop3): Directory bread(block 73) failed [ 177.040321][ T9399] random: crng reseeded on system resumption [ 177.253384][ T3561] team0 (unregistering): Port device team_slave_1 removed [ 177.261612][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 177.275247][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 177.299504][ T9404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1475'. [ 177.350525][ T3561] team0 (unregistering): Port device team_slave_0 removed [ 177.445255][ T5846] Bluetooth: hci4: command tx timeout [ 177.846438][ T9423] netlink: 'syz.5.1485': attribute type 21 has an invalid length. [ 178.186480][ T9423] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1485'. [ 178.377710][ T9435] loop2: detected capacity change from 0 to 1024 [ 178.420568][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.447728][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.451611][ T9435] hfsplus: invalid length 779 has been corrected to 255 [ 178.455004][ T9217] bridge_slave_0: entered allmulticast mode [ 178.541937][ T9217] bridge_slave_0: entered promiscuous mode [ 178.542006][ T9435] hfsplus: invalid length 779 has been corrected to 255 [ 178.606144][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.613333][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.639083][ T9217] bridge_slave_1: entered allmulticast mode [ 178.649030][ T9217] bridge_slave_1: entered promiscuous mode [ 178.746023][ T5994] hfsplus: b-tree write err: -5, ino 4 [ 178.933932][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.006144][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.055518][ T5965] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 179.233214][ T9217] team0: Port device team_slave_0 added [ 179.240724][ T5965] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 179.259975][ T5965] usb 4-1: config 0 has no interface number 0 [ 179.272337][ T9217] team0: Port device team_slave_1 added [ 179.284897][ T5965] usb 4-1: config 0 interface 29 has no altsetting 0 [ 179.331921][ T5965] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 179.363465][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.384943][ T5965] usb 4-1: Product: syz [ 179.393308][ T9471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1504'. [ 179.395273][ T5965] usb 4-1: Manufacturer: syz [ 179.424301][ T5965] usb 4-1: SerialNumber: syz [ 179.454466][ T5965] usb 4-1: config 0 descriptor?? [ 179.526102][ T5846] Bluetooth: hci4: command tx timeout [ 179.566056][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.604108][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.664601][ T9217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.704662][ T5965] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v154 fw v36.88.168 (2 channels) [ 179.730136][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.766082][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.825169][ T9217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.902396][ T5965] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 179.945219][ T5965] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 180.159571][ T9498] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1513'. [ 180.170622][ T5965] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 180.199838][ T9498] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1513'. [ 180.225803][ T5965] usb 4-1: USB disconnect, device number 8 [ 180.239604][ T5976] udevd[5976]: setting mode of /dev/bus/usb/004/008 to 020664 failed: No such file or directory [ 180.274732][ T9217] hsr_slave_0: entered promiscuous mode [ 180.301326][ T5976] udevd[5976]: setting owner of /dev/bus/usb/004/008 to uid=0, gid=0 failed: No such file or directory [ 180.314482][ T9217] hsr_slave_1: entered promiscuous mode [ 180.863936][ T9526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1525'. [ 181.250363][ T9217] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 181.318475][ T9217] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 181.327910][ T9546] loop5: detected capacity change from 0 to 64 [ 181.405333][ T9217] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 181.463765][ T9217] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.940488][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.013316][ T9217] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.071972][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.079228][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.114324][ T9586] netlink: 'syz.5.1547': attribute type 6 has an invalid length. [ 182.142364][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.149609][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.295051][ T9217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.326433][ T9217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.960693][ T9613] bond1 (unregistering): Released all slaves [ 182.997314][ T43] IPVS: starting estimator thread 0... [ 183.015516][ T9611] loop4: detected capacity change from 0 to 8192 [ 183.115377][ T9624] IPVS: using max 29 ests per chain, 69600 per kthread [ 183.182484][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.503931][ T9643] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 183.795819][ T9655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1572'. [ 184.166916][ T30] audit: type=1326 audit(1763527472.180:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 184.240462][ T9217] veth0_vlan: entered promiscuous mode [ 184.254432][ T30] audit: type=1326 audit(1763527472.210:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 184.286090][ T9676] xt_cgroup: xt_cgroup: no path or classid specified [ 184.324989][ T9217] veth1_vlan: entered promiscuous mode [ 184.338851][ T30] audit: type=1326 audit(1763527472.210:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 184.420454][ T30] audit: type=1326 audit(1763527472.210:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 184.435193][ T9681] loop4: detected capacity change from 0 to 256 [ 184.488888][ T30] audit: type=1326 audit(1763527472.210:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.5.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 184.558931][ T9686] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1585'. [ 184.681440][ T9217] veth0_macvtap: entered promiscuous mode [ 184.716377][ T9217] veth1_macvtap: entered promiscuous mode [ 184.748474][ T9689] loop4: detected capacity change from 0 to 256 [ 184.813623][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.832324][ T9689] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.876059][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.917795][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.940735][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.976075][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.998814][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.393487][ T9712] loop3: detected capacity change from 0 to 64 [ 185.411204][ T30] audit: type=1326 audit(1763527473.420:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 185.467119][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.508568][ T30] audit: type=1326 audit(1763527473.450:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 185.515204][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.616242][ T30] audit: type=1326 audit(1763527473.460:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 185.674167][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.714047][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.722330][ T30] audit: type=1326 audit(1763527473.460:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 185.778298][ T30] audit: type=1326 audit(1763527473.460:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9710 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 186.043306][ T9733] loop2: detected capacity change from 0 to 512 [ 186.193299][ T9733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.286826][ T9733] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.329015][ T9748] comedi comedi0: dmm32at: I/O port conflict (0xfffffffffffffffa,16) [ 186.375482][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1613'. [ 186.407412][ T9752] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 186.424020][ T9733] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1608: corrupted xattr block 33: e_value out of bounds [ 186.519308][ T9742] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 186.570500][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.675336][ T5904] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 186.830015][ T9762] loop3: detected capacity change from 0 to 4096 [ 186.845765][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 186.861491][ T5904] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 186.870496][ T9762] ntfs3(loop3): ino=3, Correct links count -> 2. [ 186.890476][ T5904] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.913125][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.926906][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.936002][ T9768] loop4: detected capacity change from 0 to 4096 [ 186.937788][ T9770] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 186.963530][ T9768] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 186.967614][ T5904] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.000430][ T9770] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.043906][ T5904] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.086255][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.096881][ T9768] ntfs3(loop4): ino=19, mi_enum_attr [ 187.190694][ T9774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.199114][ T9768] ntfs3(loop4): failed to convert "c46c" to cp862 [ 187.221870][ T9768] ntfs3(loop4): ino=20, mi_enum_attr [ 187.403759][ T9782] xt_l2tp: v2 doesn't support IP mode [ 187.450389][ T9784] netlink: 'syz.3.1631': attribute type 5 has an invalid length. [ 187.616356][ T5965] usb 6-1: USB disconnect, device number 6 [ 187.641943][ T9791] loop4: detected capacity change from 0 to 256 [ 187.671526][ T9795] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1637'. [ 187.713012][ T9791] FAT-fs (loop4): Directory bread(block 64) failed [ 187.753496][ T9791] FAT-fs (loop4): Directory bread(block 65) failed [ 187.774259][ T9791] FAT-fs (loop4): Directory bread(block 66) failed [ 187.789230][ T9791] FAT-fs (loop4): Directory bread(block 67) failed [ 187.804193][ T9798] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1639'. [ 187.825345][ T9791] FAT-fs (loop4): Directory bread(block 68) failed [ 187.848293][ T9791] FAT-fs (loop4): Directory bread(block 69) failed [ 187.877830][ T9791] FAT-fs (loop4): Directory bread(block 70) failed [ 187.884397][ T9791] FAT-fs (loop4): Directory bread(block 71) failed [ 187.912190][ T9791] FAT-fs (loop4): Directory bread(block 72) failed [ 187.922250][ T9791] FAT-fs (loop4): Directory bread(block 73) failed [ 188.104263][ T9810] loop6: detected capacity change from 0 to 512 [ 188.121980][ T9810] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 188.181408][ T9810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 188.199537][ T9810] System zones: 1-12 [ 188.208410][ T9810] EXT4-fs (loop6): orphan cleanup on readonly fs [ 188.224076][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 188.276977][ T9810] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1643: invalid indirect mapped block 12 (level 1) [ 188.346850][ T9810] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1643: invalid indirect mapped block 2 (level 2) [ 188.380236][ T9822] loop5: detected capacity change from 0 to 1024 [ 188.389115][ T9822] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.436235][ T9822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.453436][ T9810] EXT4-fs (loop6): 1 truncate cleaned up [ 188.462309][ T9810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 188.555819][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 188.576797][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 188.591172][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.701558][ T9217] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 189.365423][ T9864] loop4: detected capacity change from 0 to 1024 [ 189.411268][ T9864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.582480][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.972005][ T9893] loop5: detected capacity change from 0 to 16 [ 189.980616][ T5904] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.023198][ T9893] erofs (device loop5): mounted with root inode @ nid 36. [ 190.155249][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 190.172117][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.189194][ T5904] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 190.209791][ T9895] loop4: detected capacity change from 0 to 4096 [ 190.214015][ T5904] usb 4-1: config 0 has no interface number 0 [ 190.246018][ T9902] netlink: 'syz.6.1686': attribute type 2 has an invalid length. [ 190.264087][ T5904] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 190.288478][ T9902] netlink: 'syz.6.1686': attribute type 9 has an invalid length. [ 190.320845][ T5904] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 190.338006][ T9902] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1686'. [ 190.352285][ T5904] usb 4-1: config 0 interface 88 has no altsetting 0 [ 190.387000][ T5904] usb 4-1: language id specifier not provided by device, defaulting to English [ 190.415259][ T5904] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 190.442006][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 190.455900][ T9905] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 190.465095][ T9895] Process accounting resumed [ 190.473852][ T5904] usb 4-1: Product: syz [ 190.483756][ T5904] usb 4-1: SerialNumber: syz [ 190.516478][ T5904] usb 4-1: config 0 descriptor?? [ 190.774677][ T9876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.827408][ T5904] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input13 [ 190.902485][ T5904] usb 4-1: USB disconnect, device number 9 [ 191.049107][ T5847] udevd[5847]: Error opening device "/dev/input/event4": No such file or directory [ 191.095378][ T5847] udevd[5847]: Unable to EVIOCGABS device "/dev/input/event4" [ 191.103004][ T5847] udevd[5847]: Unable to EVIOCGABS device "/dev/input/event4" [ 191.273703][ T9935] loop2: detected capacity change from 0 to 4096 [ 191.363181][ T9935] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 191.382940][ T9935] ntfs3(loop2): ino=1a, mi_enum_attr [ 191.403613][ T9935] ntfs3(loop2): ino=1a, mi_enum_attr [ 191.450551][ T9935] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 191.609019][ T9935] ntfs3(loop2): ino=1a, mi_enum_attr [ 191.927882][ T9965] xt_bpf: check failed: parse error [ 192.195694][ T5918] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 192.338583][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1716'. [ 192.379963][ T5918] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 192.395020][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.417823][ T5918] usb 3-1: Product: syz [ 192.435242][ T5918] usb 3-1: Manufacturer: syz [ 192.442357][ T5918] usb 3-1: SerialNumber: syz [ 192.448729][ T9990] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 192.471500][ T5918] usb 3-1: config 0 descriptor?? [ 192.700778][ T5918] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 192.896868][T10011] overlayfs: empty lowerdir [ 192.937852][ T5945] usb 3-1: USB disconnect, device number 2 [ 193.295588][T10030] loop6: detected capacity change from 0 to 256 [ 193.373111][T10030] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 193.540410][T10038] bond1: entered allmulticast mode [ 193.544018][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1740'. [ 193.806326][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 194.068085][T10065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.262841][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.588027][T10090] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.925353][T10103] geneve2: entered allmulticast mode [ 194.973045][ T51] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.015520][ T51] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.046544][T10109] netlink: 'syz.3.1768': attribute type 3 has an invalid length. [ 195.094107][T10109] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1768'. [ 195.149130][ T51] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.195981][ T51] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 195.406600][T10127] loop3: detected capacity change from 0 to 512 [ 195.429116][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 195.429133][ T30] audit: type=1326 audit(1763527483.430:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 195.469898][T10127] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.625477][T10127] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 195.625592][ T30] audit: type=1326 audit(1763527483.430:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 195.741289][T10141] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 195.764230][T10137] loop5: detected capacity change from 0 to 2048 [ 195.795245][ T30] audit: type=1326 audit(1763527483.440:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 195.860900][T10137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.897027][ T30] audit: type=1326 audit(1763527483.440:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 195.968848][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 195.998873][ T30] audit: type=1326 audit(1763527483.440:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 196.038417][T10146] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1783'. [ 196.079181][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 196.300738][T10157] loop2: detected capacity change from 0 to 164 [ 196.359712][T10157] rock: directory entry would overflow storage [ 196.386837][T10157] rock: sig=0x66, size=4, remaining=3 [ 196.423163][T10161] loop5: detected capacity change from 0 to 256 [ 196.445862][T10157] rock: directory entry would overflow storage [ 196.460961][T10165] netlink: 'syz.3.1790': attribute type 1 has an invalid length. [ 196.476700][T10157] rock: sig=0x66, size=4, remaining=3 [ 196.743178][T10133] loop4: detected capacity change from 0 to 32768 [ 196.786457][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'. [ 196.825600][T10173] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 196.825600][T10173] SÃȘØÈžZ§6ŸÂ' [ 196.890912][T10178] openvswitch: netlink: IP tunnel dst address not specified [ 196.899800][ T3730] read_mapping_page failed! [ 196.910732][ T3730] ERROR: (device loop4): txCommit: [ 196.910732][ T3730] [ 196.975316][ T3730] jfs_write_inode: jfs_commit_inode failed! [ 197.222484][T10188] loop3: detected capacity change from 0 to 512 [ 197.289205][T10188] EXT4-fs: Ignoring removed oldalloc option [ 197.380262][T10188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.447686][T10188] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.576994][T10188] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 197.791762][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.942433][T10223] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.743691][T10264] loop6: detected capacity change from 0 to 2048 [ 198.789868][T10267] openvswitch: netlink: Message has 1 unknown bytes. [ 198.836434][T10267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.879004][T10271] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.945834][T10264] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 199.000461][T10264] Remounting filesystem read-only [ 199.109048][ T9217] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 199.164443][T10283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1834'. [ 199.951267][T10319] netlink: 892 bytes leftover after parsing attributes in process `syz.5.1850'. [ 200.504472][T10345] loop6: detected capacity change from 0 to 64 [ 200.507115][T10346] loop4: detected capacity change from 0 to 16 [ 201.237630][T10335] loop3: detected capacity change from 0 to 32768 [ 201.263739][T10335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1858 (10335) [ 201.324058][T10335] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.343855][T10335] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 201.453727][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 201.536604][T10335] BTRFS info (device loop3): enabling ssd optimizations [ 201.543793][T10335] BTRFS info (device loop3): turning on async discard [ 201.551935][T10335] BTRFS info (device loop3): enabling free space tree [ 201.631877][ T5826] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.757410][T10363] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.761830][T10406] loop2: detected capacity change from 0 to 2048 [ 201.763916][T10363] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.839536][T10410] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.883745][T10363] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.917110][T10363] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.957453][T10363] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.963500][T10363] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.993302][T10363] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.999687][T10410] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 202.031721][T10410] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 202.072605][T10410] Remounting filesystem read-only [ 202.090935][ T5835] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 202.275605][ T5904] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 202.447268][ T5904] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 202.464301][ T5904] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 202.496296][ T5904] usb 7-1: config 0 has no interface number 0 [ 202.514283][ T5904] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.539066][ T5904] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 202.577076][ T5904] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.609174][ T5904] usb 7-1: config 0 interface 52 has no altsetting 0 [ 202.629826][ T5904] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 202.661096][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 202.685257][ T5965] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 202.690337][ T5904] usb 7-1: Product: syz [ 202.721434][ T5904] usb 7-1: SerialNumber: syz [ 202.756935][ T5904] usb 7-1: config 0 descriptor?? [ 202.865580][ T5965] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 202.874671][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.906200][ T5965] usb 6-1: config 0 descriptor?? [ 202.940889][ T5965] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 202.999870][ T5904] input: syz (Stick) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input14 [ 203.133673][T10440] loop3: detected capacity change from 0 to 4096 [ 203.196656][T10440] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 203.204958][ T5904] usb 7-1: USB disconnect, device number 2 [ 203.215962][ T5185] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 203.284645][ T5185] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 203.294703][T10440] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 203.303776][ T5847] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 203.337295][T10440] ntfs3(loop3): ino=19, mi_enum_attr [ 203.344655][ T5965] gp8psk: usb in 137 operation failed. [ 203.353511][ T5965] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 203.373871][ T5965] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 203.403488][T10440] ntfs3(loop3): failed to convert "c46c" to macgaelic [ 203.415922][ T5965] usb 6-1: USB disconnect, device number 7 [ 203.427032][T10440] ntfs3(loop3): ino=20, mi_enum_attr [ 203.438572][T10444] loop4: detected capacity change from 0 to 4096 [ 203.628455][T10449] program syz.2.1904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.925234][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 204.005269][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 204.079115][T10468] loop4: detected capacity change from 0 to 64 [ 204.138120][T10472] loop6: detected capacity change from 0 to 128 [ 204.155301][T10468] syz.4.1913: attempt to access beyond end of device [ 204.155301][T10468] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 204.528736][T10486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.896139][T10500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1929'. [ 204.940606][T10500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1929'. [ 205.735553][T10530] block device autoloading is deprecated and will be removed. [ 205.753668][ T5965] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 205.789899][T10536] loop4: detected capacity change from 0 to 256 [ 205.837161][T10536] exfat: Deprecated parameter 'namecase' [ 205.865302][T10536] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 205.900816][T10536] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 205.937825][ T5965] usb 6-1: unable to get BOS descriptor or descriptor too short [ 205.963263][ T5965] usb 6-1: not running at top speed; connect to a high speed hub [ 205.994118][T10536] overlay: filesystem on ./file0 not supported [ 206.002790][ T5965] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.015370][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 206.032286][ T5965] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.084966][ T5965] usb 6-1: string descriptor 0 read error: -22 [ 206.091264][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 206.143234][ T5965] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.163232][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.187556][T10546] loop3: detected capacity change from 0 to 256 [ 206.200701][ T5965] usb 6-1: 0:2 : does not exist [ 206.245765][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 206.256092][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 206.266561][ T54] Bluetooth: hci1: hardware error 0x00 [ 206.302220][T10546] FAT-fs (loop3): Directory bread(block 64) failed [ 206.309925][T10546] FAT-fs (loop3): Directory bread(block 65) failed [ 206.317042][T10546] FAT-fs (loop3): Directory bread(block 66) failed [ 206.323667][T10546] FAT-fs (loop3): Directory bread(block 67) failed [ 206.331218][T10546] FAT-fs (loop3): Directory bread(block 68) failed [ 206.337950][T10546] FAT-fs (loop3): Directory bread(block 69) failed [ 206.344681][T10546] FAT-fs (loop3): Directory bread(block 70) failed [ 206.351414][T10546] FAT-fs (loop3): Directory bread(block 71) failed [ 206.358588][T10546] FAT-fs (loop3): Directory bread(block 72) failed [ 206.365290][T10546] FAT-fs (loop3): Directory bread(block 73) failed [ 206.477128][ T5965] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 206.544189][ T5965] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 206.588982][ T5965] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 206.634255][ T5965] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 206.721871][ T5965] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 206.765875][ T5965] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 206.799825][ T5965] usb 6-1: USB disconnect, device number 8 [ 207.000262][T10574] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.077083][ T5945] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.103957][T10578] bridge1: entered promiscuous mode [ 207.120260][T10578] bridge1: entered allmulticast mode [ 207.171273][T10582] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.258506][ T5945] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.295194][ T5945] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.328220][ T5945] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.357726][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 207.366506][ T5945] usb 5-1: SerialNumber: syz [ 207.366868][T10590] loop6: detected capacity change from 0 to 512 [ 207.409067][T10590] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.430574][T10590] EXT4-fs (loop6): Test dummy encryption mode enabled [ 207.488071][T10590] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1973: inode has both inline data and extents flags [ 207.493493][T10595] loop5: detected capacity change from 0 to 256 [ 207.526642][T10590] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1973: couldn't read orphan inode 15 (err -117) [ 207.573670][T10590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.594922][T10595] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 207.611724][T10595] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 207.612845][ T5945] usb 5-1: 0:2 : does not exist [ 207.662140][T10595] exFAT-fs (loop5): start_clu is invalid cluster(0x400) [ 207.668227][T10590] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 207.712943][ T5945] usb 5-1: USB disconnect, device number 6 [ 207.852434][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.894816][ T9217] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.118442][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x0e [ 208.165276][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 208.325631][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 208.420327][T10627] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 208.428342][T10627] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1992'. [ 208.863839][T10647] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 209.659561][T10655] loop6: detected capacity change from 0 to 32768 [ 209.677875][T10655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2004 (10655) [ 209.714783][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 209.758066][T10655] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.798952][T10655] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 209.802992][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 210.058864][T10655] BTRFS info (device loop6): enabling ssd optimizations [ 210.115279][T10655] BTRFS info (device loop6): turning on async discard [ 210.144036][T10655] BTRFS info (device loop6): enabling free space tree [ 210.294820][ T9217] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.460881][T10671] loop2: detected capacity change from 0 to 32768 [ 210.563718][T10718] netlink: 'syz.4.2030': attribute type 9 has an invalid length. [ 210.920951][T10732] netlink: 'syz.6.2028': attribute type 2 has an invalid length. [ 211.190145][T10742] loop4: detected capacity change from 0 to 8 [ 211.269594][T10742] SQUASHFS error: Failed to read block 0x4de: -5 [ 211.315507][T10742] SQUASHFS error: Failed to read block 0x4de: -5 [ 211.322087][T10742] SQUASHFS error: Failed to read block 0x4de: -5 [ 211.354329][T10742] SQUASHFS error: Failed to read block 0x4de: -5 [ 211.383104][T10742] SQUASHFS error: Failed to read block 0x4de: -5 [ 211.406472][ T30] audit: type=1800 audit(1763527499.420:42): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2038" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 212.253669][T10785] loop6: detected capacity change from 0 to 16 [ 212.286376][T10786] netlink: 'syz.4.2064': attribute type 1 has an invalid length. [ 212.287359][T10788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.312403][T10786] netlink: 'syz.4.2064': attribute type 1 has an invalid length. [ 212.729345][T10762] loop5: detected capacity change from 0 to 32768 [ 212.861330][T10762] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 212.974012][T10762] XFS (loop5): Ending clean mount [ 212.998570][T10762] XFS (loop5): Quotacheck needed: Please wait. [ 213.143753][T10762] XFS (loop5): Quotacheck: Done. [ 213.227814][T10792] loop2: detected capacity change from 0 to 32768 [ 213.297269][ T6369] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 213.324303][T10792] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.330854][T10832] netlink: 'syz.3.2079': attribute type 1 has an invalid length. [ 213.351036][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2080'. [ 213.508854][T10792] XFS (loop2): Ending clean mount [ 213.581984][T10792] XFS (loop2): Quotacheck needed: Please wait. [ 213.661487][T10792] XFS (loop2): Quotacheck: Done. [ 213.829595][ T5835] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.990730][T10852] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2089'. [ 214.299933][T10863] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 214.718961][T10844] loop6: detected capacity change from 0 to 32768 [ 214.767806][T10882] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2103' sets config #0 [ 215.301141][T10906] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2114'. [ 215.583680][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2120'. [ 215.624670][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.644300][T10922] IPv6: NLM_F_REPLACE set, but no existing node found! [ 215.653596][ T5945] lo speed is unknown, defaulting to 1000 [ 215.672577][ T5945] syz0: Port: 1 Link ACTIVE [ 215.865869][T10934] loop5: detected capacity change from 0 to 512 [ 215.886803][T10933] loop2: detected capacity change from 0 to 1024 [ 215.889067][T10934] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 215.952288][T10934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 215.971764][T10934] System zones: 1-12 [ 215.976134][T10934] EXT4-fs (loop5): orphan cleanup on readonly fs [ 215.997524][T10934] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.2128: attempt to clear invalid blocks 1024 len 1 [ 216.049847][T10934] EXT4-fs (loop5): Remounting filesystem read-only [ 216.086330][T10934] EXT4-fs (loop5): 1 truncate cleaned up [ 216.136509][T10934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 216.289552][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 216.508978][T10953] loop2: detected capacity change from 0 to 512 [ 216.559594][T10953] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 216.625205][T10953] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.715348][T10953] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2138: inode has both inline data and extents flags [ 216.746129][T10953] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2138: couldn't read orphan inode 15 (err -117) [ 216.776048][T10953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.879559][T10965] cgroup: Unexpected value for 'nofavordynmods' [ 216.885671][T10963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2142'. [ 216.960994][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.961412][T10936] loop3: detected capacity change from 0 to 32768 [ 216.981247][T10936] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2130 (10936) [ 217.053077][T10936] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.065354][T10936] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 217.107578][T10972] loop2: detected capacity change from 0 to 256 [ 217.152788][T10972] exfat: Deprecated parameter 'namecase' [ 217.197592][T10972] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 217.223277][T10973] loop5: detected capacity change from 0 to 2048 [ 217.359343][T10936] BTRFS info (device loop3): enabling ssd optimizations [ 217.399274][T10936] BTRFS info (device loop3): turning on async discard [ 217.418929][T10994] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.448054][T10936] BTRFS info (device loop3): enabling free space tree [ 217.460067][T10973] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 217.509913][T10973] Remounting filesystem read-only [ 217.622370][ T5826] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.788978][T10999] loop2: detected capacity change from 0 to 4096 [ 217.935279][T11008] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.006479][T10999] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 218.129415][T11012] loop6: detected capacity change from 0 to 1024 [ 218.225214][ T5945] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 218.326847][ T3730] hfsplus: b-tree write err: -5, ino 4 [ 218.349394][T11022] xt_connbytes: Forcing CT accounting to be enabled [ 218.396172][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 218.426887][ T5945] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 218.462147][ T5945] usb 6-1: config 0 has no interface number 0 [ 218.480504][ T5945] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.525663][ T5945] usb 6-1: config 0 interface 2 has no altsetting 0 [ 218.544898][ T5945] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 218.585435][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.625217][ T5945] usb 6-1: Product: syz [ 218.638579][ T5945] usb 6-1: Manufacturer: syz [ 218.665479][ T5945] usb 6-1: SerialNumber: syz [ 218.686138][ T5945] usb 6-1: config 0 descriptor?? [ 218.726963][T11034] loop2: detected capacity change from 0 to 64 [ 218.727810][T11035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2169'. [ 218.828184][T11037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.861299][T11037] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.898594][ T5945] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.929545][T11037] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz.3.2170: Directory hole found for htree leaf block 0 [ 218.958968][T11037] EXT4-fs (loop3): Remounting filesystem read-only [ 219.008002][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.022896][T11042] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2171'. [ 219.030826][ T4033] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 219.059368][ T4033] Quota error (device loop3): write_blk: dquota write failed [ 219.065002][T11042] netlink: 'syz.6.2171': attribute type 1 has an invalid length. [ 219.076634][ T4033] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 219.091526][ T4033] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 219.145194][ T4033] Quota error (device loop3): write_blk: dquota write failed [ 219.152609][ T4033] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 219.180924][ T5945] usb 6-1: USB disconnect, device number 9 [ 219.303211][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.147153][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 220.199170][T11093] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2196'. [ 220.337948][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.368616][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.411923][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 220.457358][ T43] usb 3-1: config 1 has no interface number 1 [ 220.494039][ T43] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.520872][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.552191][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.580129][ T43] usb 3-1: Product: syz [ 220.600794][ T43] usb 3-1: Manufacturer: syz [ 220.606618][T11111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.621465][ T43] usb 3-1: SerialNumber: syz [ 220.896586][ T43] usb 3-1: 2:1 : invalid UAC_AS_GENERAL desc [ 220.955042][ T43] usb 3-1: USB disconnect, device number 3 [ 221.037571][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.052228][T11133] set_capacity_and_notify: 1 callbacks suppressed [ 221.052244][T11133] loop6: detected capacity change from 0 to 1024 [ 221.104013][T11133] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 221.141255][T11133] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 221.155716][T11133] EXT4-fs (loop6): orphan cleanup on readonly fs [ 221.191077][T11133] Quota error (device loop6): v2_read_file_info: Block with free entry 1283 out of range (1, 6). [ 221.214106][T11133] EXT4-fs warning (device loop6): ext4_enable_quotas:7183: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 221.241834][T11133] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 221.261304][T11133] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.2216: Freeing blocks not in datazone - block = 0, count = 4096 [ 221.298831][ T30] audit: type=1400 audit(1763527509.310:43): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11143 comm="syz.3.2220" [ 221.345515][T11133] EXT4-fs (loop6): 1 orphan inode deleted [ 221.357411][T11133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.388133][T11133] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.2216: iget: bad extended attribute block 6 [ 221.413604][T11148] netlink: 'syz.5.2222': attribute type 2 has an invalid length. [ 221.426952][ T9217] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.436655][T11148] netlink: 'syz.5.2222': attribute type 2 has an invalid length. [ 221.505239][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 221.675300][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 221.699568][ T43] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 221.728420][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.755304][ T43] usb 5-1: Product: syz [ 221.766826][ T43] usb 5-1: Manufacturer: syz [ 221.784005][ T43] usb 5-1: SerialNumber: syz [ 221.799970][T11164] tmpfs: Group quota block hardlimit too large. [ 221.839103][ T43] usb 5-1: config 0 descriptor?? [ 221.873257][ T43] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 221.900921][T11168] netlink: 'syz.3.2233': attribute type 6 has an invalid length. [ 222.098897][T11176] loop5: detected capacity change from 0 to 128 [ 222.243792][T11184] xt_hashlimit: size too large, truncated to 1048576 [ 222.271687][ T43] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 222.285669][T11184] xt_hashlimit: max too large, truncated to 1048576 [ 222.312122][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 222.345455][ T43] usb 5-1: USB disconnect, device number 7 [ 222.511084][T11195] loop5: detected capacity change from 0 to 64 [ 222.605617][T11198] loop6: detected capacity change from 0 to 8 [ 222.653337][T11200] warning: `syz.2.2249' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 222.759045][T11204] netlink: 'syz.5.2251': attribute type 10 has an invalid length. [ 222.797057][T11204] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2251'. [ 222.845600][T11204] dummy0: entered promiscuous mode [ 222.870198][T11204] bridge0: port 4(dummy0) entered blocking state [ 222.877885][T11208] kAFS: unable to lookup cell '(' [ 222.905018][T11204] bridge0: port 4(dummy0) entered disabled state [ 222.924318][T11204] dummy0: entered allmulticast mode [ 222.954978][T11204] bridge0: port 4(dummy0) entered blocking state [ 222.961591][T11204] bridge0: port 4(dummy0) entered forwarding state [ 223.185260][ T5965] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.220609][T11218] loop3: detected capacity change from 0 to 4096 [ 223.267159][T11218] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 223.358406][ T5965] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.386510][T11228] usb usb1: usbfs: process 11228 (syz.5.2263) did not claim interface 32 before use [ 223.399348][ T5965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.445271][ T5965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.470922][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.495339][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.528856][ T5965] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.563212][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.601321][ T5965] usb 5-1: Product: syz [ 223.616987][ T5965] usb 5-1: Manufacturer: syz [ 223.623391][T11234] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 223.664231][T11234] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.684003][ T5965] cdc_wdm 5-1:1.0: skipping garbage [ 223.702693][ T5965] cdc_wdm 5-1:1.0: skipping garbage [ 223.717158][ T5965] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 223.727330][ T5965] cdc_wdm 5-1:1.0: Unknown control protocol [ 223.734848][ T995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.954011][T11210] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 223.973812][T11248] loop6: detected capacity change from 0 to 256 [ 223.979490][ T5965] usb 5-1: USB disconnect, device number 8 [ 223.996309][T11244] bridge2: entered promiscuous mode [ 224.010836][T11244] bridge2: entered allmulticast mode [ 224.080091][T11248] FAT-fs (loop6): Directory bread(block 64) failed [ 224.109482][T11248] FAT-fs (loop6): Directory bread(block 65) failed [ 224.121431][T11248] FAT-fs (loop6): Directory bread(block 66) failed [ 224.128415][T11248] FAT-fs (loop6): Directory bread(block 67) failed [ 224.140286][T11248] FAT-fs (loop6): Directory bread(block 68) failed [ 224.151850][T11248] FAT-fs (loop6): Directory bread(block 69) failed [ 224.160386][T11248] FAT-fs (loop6): Directory bread(block 70) failed [ 224.185572][T11248] FAT-fs (loop6): Directory bread(block 71) failed [ 224.202436][T11248] FAT-fs (loop6): Directory bread(block 72) failed [ 224.222655][T11248] FAT-fs (loop6): Directory bread(block 73) failed [ 224.288629][T11254] netlink: 'syz.5.2276': attribute type 1 has an invalid length. [ 224.305295][T11254] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2276'. [ 224.318590][T11248] syz.6.2273: attempt to access beyond end of device [ 224.318590][T11248] loop6: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 224.358065][T11248] syz.6.2273: attempt to access beyond end of device [ 224.358065][T11248] loop6: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 224.376819][ T30] audit: type=1800 audit(1763527512.390:44): pid=11248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2273" name="file0" dev="loop6" ino=1048665 res=0 errno=0 [ 224.480546][T11242] loop3: detected capacity change from 0 to 32768 [ 224.544593][T11242] jfs_strtoUCS: char2uni returned -22. [ 224.564064][T11242] charset = cp936, char = 0xd4 [ 225.534203][T11300] loop6: detected capacity change from 0 to 1024 [ 225.576264][T11300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.618245][T11300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.675353][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 225.708926][T11300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.880250][T11317] loop5: detected capacity change from 0 to 256 [ 225.903959][T11308] bond1: option ad_user_port_key: invalid value (1136) [ 225.924583][T11317] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 225.946544][T11308] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 225.964213][ T9217] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.982554][T11321] loop2: detected capacity change from 0 to 256 [ 225.991281][T11317] exFAT-fs (loop5): start_clu is invalid cluster(0x400) [ 225.997513][T11308] bond1 (unregistering): Released all slaves [ 226.375426][T11326] loop5: detected capacity change from 0 to 2048 [ 226.424325][T11326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.283825][T11372] ipip0: entered promiscuous mode [ 228.085453][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.409628][T11426] loop2: detected capacity change from 0 to 8 [ 228.440018][T11428] loop3: detected capacity change from 0 to 128 [ 228.484391][T11426] SQUASHFS error: Unable to read directory block [1d0:0] [ 228.494502][T11428] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 228.535686][T11428] hpfs: filesystem error: improperly stopped [ 228.560236][T11428] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 228.605206][T11428] hpfs: You really don't want any checks? You are crazy... [ 228.605592][T11428] hpfs: hpfs_map_sector(): read error [ 228.674943][T11428] hpfs: code page support is disabled [ 228.706151][T11428] hpfs: hpfs_map_4sectors(): unaligned read [ 228.712416][T11428] hpfs: hpfs_map_4sectors(): unaligned read [ 228.767712][T11428] hpfs: filesystem error: unable to find root dir [ 228.815672][T11428] hpfs: hpfs_map_4sectors(): unaligned read [ 228.822478][T11428] hpfs: hpfs_map_sector(): read error [ 228.936922][T11441] loop5: detected capacity change from 0 to 4096 [ 228.960613][T11441] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 229.027228][T11450] loop3: detected capacity change from 0 to 64 [ 229.058824][T11441] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 229.357782][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 229.387144][T11460] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 229.389102][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 229.563426][T11468] netlink: 'syz.5.2381': attribute type 3 has an invalid length. [ 229.656681][T11462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.690000][ T30] audit: type=1326 audit(1763527517.690:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dd18f6c9 code=0x7ffc0000 [ 229.779077][T11477] delete_channel: no stack [ 229.788145][ T30] audit: type=1326 audit(1763527517.730:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dd18f6c9 code=0x7ffc0000 [ 229.874024][ T30] audit: type=1326 audit(1763527517.750:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc5dd18f6c9 code=0x7ffc0000 [ 229.959771][ T30] audit: type=1326 audit(1763527517.750:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dd18f6c9 code=0x7ffc0000 [ 230.031584][ T30] audit: type=1326 audit(1763527517.750:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dd18f6c9 code=0x7ffc0000 [ 230.842807][T11526] loop5: detected capacity change from 0 to 16 [ 230.871082][T11526] erofs (device loop5): unsupported chunk format 900 of nid 36 [ 231.015726][T11535] loop6: detected capacity change from 0 to 128 [ 231.038483][T11535] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 231.077157][T11535] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.276541][T11540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.530103][T11555] QAT: Stopping all acceleration devices. [ 232.417584][T11559] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.423919][T11559] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 232.508698][T11594] netlink: 'syz.5.2435': attribute type 1 has an invalid length. [ 232.578031][T11596] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 232.697669][T11562] loop6: detected capacity change from 0 to 32768 [ 232.789922][T11562] ERROR: (device loop6): xtSearch: xt_getpage: xtree page corrupt [ 232.789922][T11562] [ 232.829173][T11562] xtLookup: xtSearch returned -5 [ 232.858051][T11562] add_index: get/read_metapage failed! [ 232.863551][T11562] ERROR: (device loop6): xtSearch: xt_getpage: xtree page corrupt [ 232.863551][T11562] [ 232.903401][T11575] loop4: detected capacity change from 0 to 32768 [ 232.910769][T11603] netlink: 'syz.5.2439': attribute type 21 has an invalid length. [ 232.918695][T11562] xtLookup: xtSearch returned -5 [ 232.923742][T11562] free_index: error reading directory table [ 232.959283][T11562] ERROR: (device loop6): xtSearch: xt_getpage: xtree page corrupt [ 232.959283][T11562] [ 233.003678][T11603] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2439'. [ 233.014089][T11559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.035656][T11562] xtLookup: xtSearch returned -5 [ 233.040633][T11562] free_index: error reading directory table [ 233.050198][T11559] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 233.066371][T11562] ERROR: (device loop6): xtSearch: xt_getpage: xtree page corrupt [ 233.066371][T11562] [ 233.133693][T11562] xtLookup: xtSearch returned -5 [ 233.165271][T11562] free_index: error reading directory table [ 233.171207][T11562] ERROR: (device loop6): xtSearch: xt_getpage: xtree page corrupt [ 233.171207][T11562] [ 233.241095][T11562] xtLookup: xtSearch returned -5 [ 233.251991][T11562] free_index: error reading directory table [ 233.295456][T11562] ERROR: (device loop6): xtSearch: xt_getpage: xtree page corrupt [ 233.295456][T11562] [ 233.335235][T11562] xtLookup: xtSearch returned -5 [ 233.340217][T11562] free_index: error reading directory table [ 233.585960][T11624] loop4: detected capacity change from 0 to 256 [ 233.756721][T11631] loop2: detected capacity change from 0 to 128 [ 233.785586][T11631] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.827664][T11631] ext4 filesystem being mounted at /531/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.930048][T11631] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 234.119953][ T5835] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.426195][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 234.554697][T11666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2461'. [ 234.589756][T11666] netlink: 'syz.5.2461': attribute type 1 has an invalid length. [ 234.606454][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 234.653238][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.695217][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 234.712591][T11673] loop4: detected capacity change from 0 to 8 [ 234.743489][ T24] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 234.766812][T11673] SQUASHFS error: Unable to read inode 0xe3 [ 234.781039][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.835227][ T24] usb 7-1: Product: syz [ 234.844734][ T24] usb 7-1: Manufacturer: syz [ 234.890941][ T24] usb 7-1: SerialNumber: syz [ 234.918873][ T24] usb 7-1: config 0 descriptor?? [ 235.262600][T11696] loop5: detected capacity change from 0 to 256 [ 235.363153][ T5890] usb 7-1: USB disconnect, device number 3 [ 235.378434][T11696] FAT-fs (loop5): Directory bread(block 64) failed [ 235.414363][T11696] FAT-fs (loop5): Directory bread(block 65) failed [ 235.423095][T11696] FAT-fs (loop5): Directory bread(block 66) failed [ 235.438757][T11696] FAT-fs (loop5): Directory bread(block 67) failed [ 235.475330][T11696] FAT-fs (loop5): Directory bread(block 68) failed [ 235.536531][T11696] FAT-fs (loop5): Directory bread(block 69) failed [ 235.565299][T11696] FAT-fs (loop5): Directory bread(block 70) failed [ 235.571902][T11696] FAT-fs (loop5): Directory bread(block 71) failed [ 235.639506][T11706] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.655543][T11696] FAT-fs (loop5): Directory bread(block 72) failed [ 235.671355][T11696] FAT-fs (loop5): Directory bread(block 73) failed [ 235.691250][T11711] xt_NFQUEUE: number of total queues is 0 [ 235.883566][T11714] loop3: detected capacity change from 0 to 1024 [ 236.096069][ T419] hfsplus: b-tree write err: -5, ino 4 [ 236.434088][T11729] lo speed is unknown, defaulting to 1000 [ 236.902443][T11763] loop2: detected capacity change from 0 to 164 [ 237.008508][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2501'. [ 237.066465][T11768] netlink: 'syz.3.2501': attribute type 1 has an invalid length. [ 237.079962][T11771] loop4: detected capacity change from 0 to 16 [ 237.105750][T11768] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2501'. [ 237.125370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.137994][T11771] erofs (device loop4): mounted with root inode @ nid 36. [ 237.399770][T11780] netlink: 'syz.5.2507': attribute type 21 has an invalid length. [ 237.425240][T11780] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2507'. [ 237.495744][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 237.515983][T11780] netlink: 'syz.5.2507': attribute type 5 has an invalid length. [ 237.548939][T11780] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2507'. [ 237.653689][T11789] loop2: detected capacity change from 0 to 2048 [ 237.665680][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 237.681269][T11793] ptrace attach of "./syz-executor exec"[5826] was attempted by " Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ"[11793] [ 237.767036][T11789] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 237.776553][ T24] usb 7-1: config 0 has an invalid interface number: 10 but max is 0 [ 237.818019][T11789] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 237.839217][ T24] usb 7-1: config 0 has no interface number 0 [ 237.858137][ T24] usb 7-1: config 0 interface 10 has no altsetting 0 [ 237.907935][ T24] usb 7-1: New USB device found, idVendor=0c44, idProduct=0022, bcdDevice=1d.02 [ 237.915752][T11789] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 237.939376][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.941035][T11789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.982777][ T24] usb 7-1: Product: syz [ 238.018540][ T24] usb 7-1: Manufacturer: syz [ 238.023181][ T24] usb 7-1: SerialNumber: syz [ 238.068401][ T24] usb 7-1: config 0 descriptor?? [ 238.332029][ T24] usb_serial_simple 7-1:0.10: moto_modem converter detected [ 238.378884][ T24] usb 7-1: moto_modem converter now attached to ttyUSB0 [ 238.422112][ T24] usb 7-1: USB disconnect, device number 4 [ 238.473636][ T24] moto_modem ttyUSB0: moto_modem converter now disconnected from ttyUSB0 [ 238.501204][ T24] usb_serial_simple 7-1:0.10: device disconnected [ 238.849095][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2528'. [ 241.485086][T11915] loop4: detected capacity change from 0 to 128 [ 241.524593][T11915] EXT4-fs (loop4): Test dummy encryption mode enabled [ 241.546762][T11911] loop2: detected capacity change from 0 to 4096 [ 241.588698][T11911] ntfs3(loop2): Unsupported bytes per MFT record 8192. [ 241.607957][T11915] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.644233][T11911] ntfs3(loop2): try to read out of volume at offset 0x1ffe00 [ 241.678625][T11915] ext4 filesystem being mounted at /526/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.695000][T11911] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 241.709383][T11911] VFS: Can't find a romfs filesystem on dev loop2. [ 241.709383][T11911] [ 241.833966][T11915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.2558: bg 0: bad block bitmap checksum [ 241.977271][ T5828] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.105324][ T5918] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 242.216365][T11948] netlink: 'syz.5.2573': attribute type 11 has an invalid length. [ 242.248245][T11948] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2573'. [ 242.275932][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 242.284028][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 102, changing to 7 [ 242.335246][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 10030, setting to 1024 [ 242.363966][ T5918] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.375358][ T5890] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 242.397636][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.424974][ T5918] usb 7-1: Product: syz [ 242.455265][ T5918] usb 7-1: Manufacturer: syz [ 242.459941][ T5918] usb 7-1: SerialNumber: syz [ 242.493417][ T5918] usb 7-1: config 0 descriptor?? [ 242.523050][ T5918] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.545218][ T5918] em28xx 7-1:0.0: DVB interface 0 found: isoc [ 242.555503][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 242.578015][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.605501][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.632931][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.644341][T11964] nbd: couldn't find device at index -37165402 [ 242.652957][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.671329][ T5890] usb 4-1: Product: syz [ 242.681344][ T5890] usb 4-1: Manufacturer: syz [ 242.695601][ T5890] usb 4-1: SerialNumber: syz [ 242.775321][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 242.786248][ T5918] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 242.844653][T11972] netlink: 'syz.2.2585': attribute type 39 has an invalid length. [ 242.871292][ T5918] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 242.904632][ T5918] em28xx 7-1:0.0: board has no eeprom [ 242.937367][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 242.950022][ T5890] usb 4-1: 0:2 : does not exist [ 242.959078][ T10] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 242.985463][ T10] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 243.005606][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.015977][ T5890] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 243.038153][T11978] comedi comedi0: pcl730: I/O port conflict (0x4004f27,4) [ 243.038962][ T5918] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 243.053718][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 243.067724][ T10] usb 6-1: config 1 has no interface number 0 [ 243.076368][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 243.086571][ T5918] em28xx 7-1:0.0: dvb set to isoc mode. [ 243.092523][ T5965] em28xx 7-1:0.0: Binding DVB extension [ 243.111902][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.128127][ T5918] usb 7-1: USB disconnect, device number 5 [ 243.139412][ T5890] usb 4-1: USB disconnect, device number 10 [ 243.149226][ T5918] em28xx 7-1:0.0: Disconnecting em28xx [ 243.160664][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 243.241633][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.318260][ T5965] em28xx 7-1:0.0: Registering input extension [ 243.339528][ T5918] em28xx 7-1:0.0: Closing input extension [ 243.361749][ T10] snd_usb_pod 6-1:1.1: set_interface failed [ 243.389247][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 243.412968][ T10] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 243.429576][ T5918] em28xx 7-1:0.0: Freeing device [ 243.443240][ T10] usb 6-1: USB disconnect, device number 10 [ 243.572439][T11995] netlink: 'syz.4.2596': attribute type 1 has an invalid length. [ 243.601307][ T30] audit: type=1326 audit(1763527531.610:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11996 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f8f6c9 code=0x7ffc0000 [ 243.685239][ T30] audit: type=1326 audit(1763527531.610:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11996 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f8d50f8f6c9 code=0x7ffc0000 [ 243.785227][ T30] audit: type=1326 audit(1763527531.610:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11996 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f8f6c9 code=0x7ffc0000 [ 243.856707][ T30] audit: type=1326 audit(1763527531.610:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11996 comm="syz.6.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f8f6c9 code=0x7ffc0000 [ 244.362867][T12031] loop5: detected capacity change from 0 to 4096 [ 244.442504][T12031] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 244.482604][T12031] ntfs3(loop5): ino=b, mi_enum_attr [ 244.517924][T12031] ntfs3(loop5): Failed to load $Extend (-22). [ 244.524073][T12031] ntfs3(loop5): Failed to initialize $Extend. [ 244.665647][T12042] loop6: detected capacity change from 0 to 4096 [ 244.674394][T12042] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 244.685533][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2624'. [ 244.716562][ T3439] ntfs3(loop5): ino=5, mi_enum_attr [ 244.742570][ T3439] ntfs3(loop5): ino=5, mi_enum_attr [ 244.748369][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2624'. [ 244.795774][T12042] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 244.853503][T12042] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 244.922401][T12042] ntfs3(loop6): ino=1b, mi_enum_attr [ 245.122927][T12060] loop4: detected capacity change from 0 to 4096 [ 245.164469][T12060] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 245.963539][T12099] loop5: detected capacity change from 0 to 1024 [ 246.131474][T12073] loop2: detected capacity change from 0 to 32768 [ 246.182234][T12107] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 246.198148][ T419] hfsplus: b-tree write err: -5, ino 4 [ 246.205258][T12107] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 246.229534][T12107] overlayfs: missing 'lowerdir' [ 246.599046][T12117] lo speed is unknown, defaulting to 1000 [ 246.632671][T12122] ieee802154 phy0 wpan0: encryption failed: -90 [ 247.036307][T12140] netlink: 'syz.4.2667': attribute type 21 has an invalid length. [ 247.044246][T12140] netlink: 'syz.4.2667': attribute type 6 has an invalid length. [ 247.055314][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 247.070488][T12140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2667'. [ 247.219919][ T24] usb 6-1: config index 0 descriptor too short (expected 65305, got 72) [ 247.251009][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 247.299232][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.311194][ T24] usb 6-1: Product: syz [ 247.323242][ T24] usb 6-1: Manufacturer: syz [ 247.345177][ T24] usb 6-1: SerialNumber: syz [ 247.373808][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 247.506810][ T5945] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 247.904461][T12177] sg_write: data in/out 768/1 bytes for SCSI command 0x11-- guessing data in; [ 247.904461][T12177] program syz.3.2685 not setting count and/or reply_len properly [ 248.003913][ T5904] usb 6-1: USB disconnect, device number 11 [ 248.112093][T12178] loop4: detected capacity change from 0 to 4096 [ 248.202270][T12178] ntfs3(loop4): ino=b, mi_enum_attr [ 248.215288][T12178] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 248.226253][T12178] ntfs3(loop4): Failed to load $Extend (-22). [ 248.235439][T12178] ntfs3(loop4): Failed to initialize $Extend. [ 248.448515][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 248.517707][T12194] loop2: detected capacity change from 0 to 1024 [ 248.617659][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.644407][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 248.655293][ T5945] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 248.674790][ T5945] ath9k_htc: Failed to initialize the device [ 248.684796][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 248.713697][ T5904] usb 6-1: ath9k_htc: USB layer deinitialized [ 248.725206][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.755370][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.773079][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 248.801625][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 248.820809][T12184] loop3: detected capacity change from 0 to 32768 [ 248.834836][ T24] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 248.846839][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 248.857729][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.866293][ T24] usb 7-1: Product: syz [ 248.870657][ T24] usb 7-1: Manufacturer: syz [ 248.877313][ T24] usb 7-1: SerialNumber: syz [ 248.886015][ T24] usb 7-1: config 0 descriptor?? [ 248.943182][T12184] find_entry called with index = 0 [ 248.955044][T12184] find_entry called with index = 0 [ 249.017074][ T5844] usb 3-1: config 48 has an invalid descriptor of length 107, skipping remainder of the config [ 249.043449][ T5844] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 249.061477][ T5844] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 249.071745][ T5844] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid maxpacket 29206, setting to 1024 [ 249.125772][ T24] usb 7-1: ucan: probing device on interface #0 [ 249.133646][ T5844] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x8 has invalid maxpacket 1024 [ 249.149014][ T24] usb 7-1: ucan: invalid endpoint configuration [ 249.168560][ T30] audit: type=1326 audit(1763527537.180:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 249.169921][ T5844] usb 3-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.207905][ T24] usb 7-1: ucan: probe failed; try to update the device firmware [ 249.230725][ T24] usb 7-1: USB disconnect, device number 6 [ 249.247275][ T5844] usb 3-1: config 48 interface 0 has no altsetting 0 [ 249.259688][ T5844] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 249.272293][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.305223][ T30] audit: type=1326 audit(1763527537.210:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 249.345204][ T5844] usb 3-1: Product: syz [ 249.359646][ T5844] usb 3-1: Manufacturer: syz [ 249.376085][ T5844] usb 3-1: SerialNumber: syz [ 249.398688][T12194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 249.420734][ T30] audit: type=1326 audit(1763527537.210:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 249.443171][T12218] netlink: 'syz.4.2706': attribute type 21 has an invalid length. [ 249.463969][ T30] audit: type=1326 audit(1763527537.210:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz.4.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 249.647793][ T5844] usb 3-1: USB disconnect, device number 4 [ 249.667936][T12228] loop3: detected capacity change from 0 to 512 [ 249.708105][T12228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.708224][T12228] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.811697][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.263676][ T61] hfsplus: b-tree write err: -5, ino 4 [ 250.677699][T12245] loop6: detected capacity change from 0 to 32768 [ 250.702060][T12245] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2718 (12245) [ 250.768797][T12245] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.795000][T12245] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 250.935954][T12245] BTRFS info (device loop6): setting nodatasum [ 250.942252][T12245] BTRFS info (device loop6): allowing degraded mounts [ 250.994144][T12245] BTRFS info (device loop6): disabling tree log [ 251.017578][T12245] BTRFS info (device loop6): turning on async discard [ 251.042287][T12245] BTRFS info (device loop6): enabling free space tree [ 251.133303][T12299] loop5: detected capacity change from 0 to 16 [ 251.161245][T12299] erofs (device loop5): mounted with root inode @ nid 36. [ 251.227412][ T9217] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.661491][T12317] netlink: 'syz.2.2746': attribute type 5 has an invalid length. [ 251.706745][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 251.764001][T12315] loop3: detected capacity change from 0 to 8192 [ 251.776145][T12317] ip6erspan0: entered promiscuous mode [ 251.778079][T12319] loop4: detected capacity change from 0 to 1024 [ 251.823938][T12315] process 'syz.3.2747' launched './file2' with NULL argv: empty string added [ 251.894651][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 251.894791][T12319] fuse: Bad value for 'fd' [ 251.968378][T12315] FAT-fs (loop3): Filesystem has been set read-only [ 251.987936][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.037968][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.064461][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.108198][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.123558][ T1306] hfsplus: b-tree write err: -5, ino 4 [ 252.157637][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.177012][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.219974][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.266413][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.327811][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.381971][T12315] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 252.391322][T12310] loop5: detected capacity change from 0 to 32768 [ 252.450708][ T30] audit: type=1800 audit(1763527540.440:58): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2747" name="file2" dev="loop3" ino=1048671 res=0 errno=0 [ 252.631356][T12341] loop4: detected capacity change from 0 to 64 [ 252.735740][T12345] netlink: 'syz.5.2761': attribute type 1 has an invalid length. [ 252.829339][T12352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2763'. [ 252.971467][T12352] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2763'. [ 253.136991][T12361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.787604][T12383] loop4: detected capacity change from 0 to 4096 [ 253.813040][T12383] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 253.915766][T12383] ntfs3(loop4): ino=19, mi_enum_attr [ 253.941435][T12383] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 254.031395][T12383] ntfs3(loop4): failed to convert "c46c" to koi8-r [ 254.065028][T12383] ntfs3(loop4): ino=20, mi_enum_attr [ 254.103180][T12397] loop2: detected capacity change from 0 to 4096 [ 254.318888][T12411] xt_nat: multiple ranges no longer supported [ 254.325976][T12408] loop6: detected capacity change from 0 to 2048 [ 254.405344][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.415275][T12416] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.621233][T12422] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 255.456378][T12462] loop2: detected capacity change from 0 to 1024 [ 255.463677][T12462] EXT4-fs: inline encryption not supported [ 255.560137][T12462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.585626][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 255.648153][T12473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.674278][ T5918] lo speed is unknown, defaulting to 1000 [ 255.694060][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.713733][ T5918] syz0: Port: 1 Link DOWN [ 255.714623][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.809847][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 255.865213][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.903492][ T10] usb 6-1: Product: syz [ 255.917279][ T10] usb 6-1: Manufacturer: syz [ 255.921921][ T10] usb 6-1: SerialNumber: syz [ 255.946922][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 255.962556][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 256.016908][T12488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2820'. [ 256.209235][T12491] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 256.238149][T12491] bond2 (unregistering): Released all slaves [ 256.318765][T12501] loop2: detected capacity change from 0 to 4096 [ 256.363955][T12504] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.399127][ T5844] r8152-cfgselector 6-1: USB disconnect, device number 12 [ 256.409951][T12501] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 256.460611][T12501] Remounting filesystem read-only [ 256.613957][T12512] loop6: detected capacity change from 0 to 8 [ 256.646850][T12512] SQUASHFS error: lzo decompression failed, data probably corrupt [ 256.664302][T12512] SQUASHFS error: Failed to read block 0x91: -5 [ 256.695329][T12512] SQUASHFS error: Unable to read metadata cache entry [8f] [ 256.734534][T12512] SQUASHFS error: Unable to read inode 0x11f [ 256.909218][T12524] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2837'. [ 257.079171][T12531] loop3: detected capacity change from 0 to 256 [ 257.079956][T12530] xt_TCPMSS: Only works on TCP SYN packets [ 257.299690][T12541] netlink: 'syz.3.2845': attribute type 2 has an invalid length. [ 257.665729][T12558] nbd: must specify an index to disconnect [ 257.815321][ T5844] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 257.985545][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 257.991510][T12571] loop2: detected capacity change from 0 to 1024 [ 257.992574][ T5844] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 258.047144][T12571] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 258.057121][ T5844] usb 5-1: config 0 has no interface number 0 [ 258.064653][ T5844] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 258.095220][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.129914][ T5844] usb 5-1: Product: syz [ 258.134124][ T5844] usb 5-1: Manufacturer: syz [ 258.140758][T12571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.205173][ T5844] usb 5-1: SerialNumber: syz [ 258.227662][ T5844] usb 5-1: config 0 descriptor?? [ 258.288267][T12585] Unsupported ieee802154 address type: 0 [ 258.309412][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.457396][ T5844] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 258.464760][ T5844] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 258.481673][T12591] loop6: detected capacity change from 0 to 256 [ 258.509445][T12591] exfat: Deprecated parameter 'namecase' [ 258.514691][T12593] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 258.536649][ T5844] uvcvideo 5-1:0.31: Failed to create links for entity 5 [ 258.557912][T12591] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 258.565312][ T5844] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 258.599724][T12591] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 258.615614][ T5844] usb 5-1: USB disconnect, device number 9 [ 258.667379][T12587] loop2: detected capacity change from 0 to 4096 [ 258.694715][T12587] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 258.818393][T12587] ntfs3(loop2): ino=19, mi_enum_attr [ 258.823754][T12587] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 258.986274][T12604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2874'. [ 259.079629][ T30] audit: type=1326 audit(1763527547.090:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.5.2876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x0 [ 259.381359][T12614] lo speed is unknown, defaulting to 1000 [ 259.724307][T12637] SET target dimension over the limit! [ 259.905853][T12645] netlink: 'syz.5.2893': attribute type 39 has an invalid length. [ 260.110435][T12655] netlink: 'syz.2.2898': attribute type 15 has an invalid length. [ 260.133269][T12655] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2898'. [ 260.423325][T12670] overlayfs: missing 'workdir' [ 260.685070][ T30] audit: type=1326 audit(1763527548.690:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c398f6c9 code=0x7ffc0000 [ 260.728552][ T30] audit: type=1326 audit(1763527548.690:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c398f6c9 code=0x7ffc0000 [ 260.812013][ T30] audit: type=1326 audit(1763527548.700:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f88c398f6c9 code=0x7ffc0000 [ 260.845801][ T30] audit: type=1326 audit(1763527548.700:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c398f6c9 code=0x7ffc0000 [ 260.870874][ T30] audit: type=1326 audit(1763527548.700:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c398f6c9 code=0x7ffc0000 [ 261.155458][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2921'. [ 261.180228][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2921'. [ 261.220492][T12709] tmpfs: Bad value for 'mpol' [ 261.723281][T12733] bridge0: port 3(netdevsim0) entered disabled state [ 261.758748][T12733] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2936'. [ 261.857583][T12740] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2940'. [ 262.052543][T12750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2945'. [ 262.079956][T12750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2945'. [ 262.147953][T12756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.179347][T12756] batadv_slave_0: entered promiscuous mode [ 262.231097][T12756] batadv_slave_0: entered allmulticast mode [ 262.284530][T12762] loop4: detected capacity change from 0 to 64 [ 262.535044][T12773] loop5: detected capacity change from 0 to 512 [ 262.581277][T12773] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 262.669165][T12773] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 262.709229][T12773] EXT4-fs (loop5): 1 truncate cleaned up [ 262.716929][T12773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.790851][T12786] capability: warning: `syz.6.2961' uses deprecated v2 capabilities in a way that may be insecure [ 262.869107][T12790] syz.2.2964: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 262.871533][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.905342][T12790] CPU: 1 UID: 0 PID: 12790 Comm: syz.2.2964 Not tainted syzkaller #0 PREEMPT(full) [ 262.905368][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 262.905384][T12790] Call Trace: [ 262.905393][T12790] [ 262.905402][T12790] dump_stack_lvl+0x189/0x250 [ 262.905436][T12790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.905461][T12790] ? __pfx__printk+0x10/0x10 [ 262.905483][T12790] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 262.905506][T12790] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 262.905531][T12790] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 262.905558][T12790] warn_alloc+0x214/0x310 [ 262.905586][T12790] ? __pfx_warn_alloc+0x10/0x10 [ 262.905614][T12790] ? kasan_save_track+0x4f/0x80 [ 262.905633][T12790] ? kasan_save_track+0x3e/0x80 [ 262.905649][T12790] ? __kasan_kmalloc+0x93/0xb0 [ 262.905667][T12790] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 262.905686][T12790] ? xskq_create+0x56/0x170 [ 262.905707][T12790] ? xsk_setsockopt+0x4dc/0x8d0 [ 262.905726][T12790] ? do_sock_setsockopt+0x17c/0x1b0 [ 262.905745][T12790] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 262.905762][T12790] ? do_syscall_64+0xfa/0xfa0 [ 262.905792][T12790] __vmalloc_node_range_noprof+0x134/0x16a0 [ 262.905848][T12790] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.905875][T12790] ? __kasan_kmalloc+0x93/0xb0 [ 262.905901][T12790] vmalloc_user_noprof+0xad/0xf0 [ 262.905921][T12790] ? xskq_create+0xbf/0x170 [ 262.905944][T12790] xskq_create+0xbf/0x170 [ 262.905968][T12790] xsk_init_queue+0xb0/0x110 [ 262.905993][T12790] xsk_setsockopt+0x4dc/0x8d0 [ 262.906017][T12790] ? __pfx_xsk_setsockopt+0x10/0x10 [ 262.906040][T12790] ? __pfx_aa_sk_perm+0x10/0x10 [ 262.906062][T12790] ? aa_sock_opt_perm+0xff/0x1b0 [ 262.906085][T12790] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 262.906105][T12790] ? __pfx_xsk_setsockopt+0x10/0x10 [ 262.906129][T12790] do_sock_setsockopt+0x17c/0x1b0 [ 262.906155][T12790] __x64_sys_setsockopt+0x13f/0x1b0 [ 262.906182][T12790] do_syscall_64+0xfa/0xfa0 [ 262.906206][T12790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.906222][T12790] ? clear_bhb_loop+0x60/0xb0 [ 262.906243][T12790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.906260][T12790] RIP: 0033:0x7fc5dd18f6c9 [ 262.906293][T12790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.906308][T12790] RSP: 002b:00007fc5ddfd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.906327][T12790] RAX: ffffffffffffffda RBX: 00007fc5dd3e5fa0 RCX: 00007fc5dd18f6c9 [ 262.906340][T12790] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 262.906351][T12790] RBP: 00007fc5dd211f91 R08: 0000000000000004 R09: 0000000000000000 [ 262.906362][T12790] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 262.906373][T12790] R13: 00007fc5dd3e6038 R14: 00007fc5dd3e5fa0 R15: 00007fff196b5878 [ 262.906405][T12790] [ 262.906417][T12790] Mem-Info: [ 263.231313][T12790] active_anon:6704 inactive_anon:0 isolated_anon:0 [ 263.231313][T12790] active_file:3466 inactive_file:40033 isolated_file:0 [ 263.231313][T12790] unevictable:768 dirty:572 writeback:0 [ 263.231313][T12790] slab_reclaimable:11173 slab_unreclaimable:99450 [ 263.231313][T12790] mapped:30224 shmem:1409 pagetables:1514 [ 263.231313][T12790] sec_pagetables:0 bounce:0 [ 263.231313][T12790] kernel_misc_reclaimable:0 [ 263.231313][T12790] free:1322367 free_pcp:13182 free_cma:0 [ 263.371548][T12790] Node 0 active_anon:26716kB inactive_anon:0kB active_file:13864kB inactive_file:159928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120896kB dirty:2284kB writeback:0kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13080kB pagetables:5704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 263.469795][T12790] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 263.527834][T12790] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.627969][T12790] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 263.658454][T12790] Node 0 DMA32 free:1383684kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26916kB inactive_anon:0kB active_file:13864kB inactive_file:159928kB unevictable:1536kB writepending:2284kB zspages:0kB present:3129332kB managed:2553372kB mlocked:0kB bounce:0kB free_pcp:38080kB local_pcp:18884kB free_cma:0kB [ 263.768104][T12790] lowmem_reserve[]: 0 0 1 1 1 [ 263.777182][T12818] : renamed from bridge_slave_0 [ 263.803768][T12790] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.875294][T12790] lowmem_reserve[]: 0 0 0 0 0 [ 263.896325][T12790] Node 1 Normal free:3890040kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14912kB local_pcp:8672kB free_cma:0kB [ 263.963376][T12790] lowmem_reserve[]: 0 0 0 0 0 [ 263.970138][T12790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.010189][T12790] Node 0 DMA32: 4125*4kB (UM) 2620*8kB (UM) 1205*16kB (UM) 188*32kB (UM) 107*64kB (ME) 47*128kB (M) 39*256kB (UM) 31*512kB (UM) 15*1024kB (UE) 2*2048kB (ME) 308*4096kB (UM) = 1382500kB [ 264.055403][T12790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 264.097176][T12790] Node 1 Normal: 180*4kB (UME) 55*8kB (UME) 37*16kB (UME) 151*32kB (UME) 47*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3890040kB [ 264.141455][T12790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.165707][T12790] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.186811][T12790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.238768][T12835] loop3: detected capacity change from 0 to 1024 [ 264.246820][T12790] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.282264][T12835] hfsplus: extend alloc file! (8192,8,110) [ 264.309010][T12790] 44953 total pagecache pages [ 264.313736][T12790] 0 pages in swap cache [ 264.355251][T12790] Free swap = 124996kB [ 264.359499][T12790] Total swap = 124996kB [ 264.377626][T12790] 2097051 pages RAM [ 264.381473][T12790] 0 pages HighMem/MovableOnly [ 264.396257][T12790] 426810 pages reserved [ 264.405095][T12790] 0 pages cma reserved [ 264.413472][T12840] loop6: detected capacity change from 0 to 4096 [ 264.443597][T12840] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 264.492961][T12844] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2991'. [ 264.547906][T12840] ntfs3(loop6): ino=19, mi_enum_attr [ 264.624488][T12840] ntfs3(loop6): failed to convert "c46c" to macroman [ 264.679356][T12840] ntfs3(loop6): ino=20, mi_enum_attr [ 264.766058][T12854] netlink: 'syz.3.2996': attribute type 1 has an invalid length. [ 264.806576][T12854] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2996'. [ 265.010466][T12863] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.794621][T12907] lo speed is unknown, defaulting to 1000 [ 266.209533][T12924] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3030'. [ 266.269559][T12926] loop4: detected capacity change from 0 to 764 [ 266.321520][T12926] rock: directory entry would overflow storage [ 266.335793][T12930] x_tables: duplicate underflow at hook 3 [ 266.386267][T12926] rock: sig=0x4654, size=5, remaining=4 [ 266.517259][T12934] syz_tun: refused to change device tx_queue_len [ 266.918693][T12950] loop5: detected capacity change from 0 to 256 [ 267.197243][T12956] loop3: detected capacity change from 0 to 2048 [ 267.241322][T12956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.375370][T12962] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 267.587697][T12970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.789109][T12978] loop3: detected capacity change from 0 to 512 [ 267.864255][T12978] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3056: inode has both inline data and extents flags [ 267.891856][T12978] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3056: couldn't read orphan inode 15 (err -117) [ 267.968521][T12978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.078882][T12948] loop2: detected capacity change from 0 to 32768 [ 268.108892][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.143606][T12948] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.212745][T12948] XFS (loop2): Ending clean mount [ 268.248606][T12948] XFS (loop2): Quotacheck needed: Please wait. [ 268.419348][T12948] XFS (loop2): Quotacheck: Done. [ 268.567184][ T5835] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.905405][ T5918] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 268.942547][T13025] bond2: entered promiscuous mode [ 269.088811][ T5918] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 269.110163][ T5918] usb 6-1: can't read configurations, error -71 [ 269.190161][T13034] loop2: detected capacity change from 0 to 4096 [ 269.482140][T13050] loop4: detected capacity change from 0 to 512 [ 269.521430][T13048] loop6: detected capacity change from 0 to 4096 [ 269.531513][T13050] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 269.540474][T13048] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 269.572791][T13055] loop2: detected capacity change from 0 to 1024 [ 269.587432][T13050] EXT4-fs (loop4): Remounting filesystem read-only [ 269.632708][T13050] EXT4-fs (loop4): 1 truncate cleaned up [ 269.670574][T13050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.722885][T13048] ntfs3(loop6): ino=1d, mi_enum_attr [ 269.746404][ T30] audit: type=1326 audit(1763527557.760:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 269.765301][T13048] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 269.781515][ T30] audit: type=1326 audit(1763527557.760:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 269.820669][T13055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.871484][ T30] audit: type=1326 audit(1763527557.760:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 269.894323][ T30] audit: type=1326 audit(1763527557.760:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.5.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a078f6c9 code=0x7ffc0000 [ 269.896442][T13048] ntfs3(loop6): ino=1d, mi_enum_attr [ 269.939922][T13055] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3088: missing EA_INODE flag [ 269.943598][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.000020][T13055] EXT4-fs (loop2): Remounting filesystem read-only [ 270.116933][ T9217] ntfs3(loop6): ino=1d, mi_enum_attr [ 270.118178][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.165577][ T30] audit: type=1326 audit(1763527558.160:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 270.245853][ T30] audit: type=1326 audit(1763527558.160:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 270.340555][ T30] audit: type=1326 audit(1763527558.160:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 270.410144][ T30] audit: type=1326 audit(1763527558.160:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 270.525381][ T30] audit: type=1326 audit(1763527558.160:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653f78f6c9 code=0x7ffc0000 [ 271.448321][T13132] Invalid ELF header magic: != ELF [ 271.467586][T13133] loop4: detected capacity change from 0 to 128 [ 271.575269][ T5945] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 271.609185][T13139] loop6: detected capacity change from 0 to 128 [ 271.714489][T13139] FAT-fs (loop6): error, clusters badly computed (5 != 1) [ 271.755724][T13139] FAT-fs (loop6): Filesystem has been set read-only [ 271.775599][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 271.803442][T13139] FAT-fs (loop6): error, clusters badly computed (6 != 2) [ 271.812178][ T5945] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 271.825738][T13139] FAT-fs (loop6): error, clusters badly computed (7 != 3) [ 271.831879][ T5945] usb 4-1: config 0 has no interface number 0 [ 271.833096][T13139] FAT-fs (loop6): error, clusters badly computed (8 != 4) [ 271.845243][ T5945] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.907915][T13139] FAT-fs (loop6): error, clusters badly computed (9 != 5) [ 271.908193][ T5945] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 271.917314][T13139] FAT-fs (loop6): error, clusters badly computed (10 != 6) [ 271.935239][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 271.958819][T13139] FAT-fs (loop6): error, clusters badly computed (11 != 7) [ 271.961175][ T5945] usb 4-1: Product: syz [ 271.982184][ T5945] usb 4-1: SerialNumber: syz [ 271.993661][T13139] FAT-fs (loop6): error, clusters badly computed (12 != 8) [ 272.001594][ T5945] usb 4-1: config 0 descriptor?? [ 272.018946][ T5945] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 272.023781][T13139] FAT-fs (loop6): error, clusters badly computed (13 != 9) [ 272.037450][ T5945] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input18 [ 272.045836][T13139] FAT-fs (loop6): error, clusters badly computed (14 != 10) [ 272.246227][T13157] loop5: detected capacity change from 0 to 2048 [ 272.282511][T13157] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 272.320224][T13161] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 272.326313][T13157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.369500][T13161] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3140'. [ 272.472374][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 272.479728][ C1] cm109_urb_ctl_callback: 4 callbacks suppressed [ 272.479752][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.493233][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.500447][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.507597][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.514750][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.521992][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.529155][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.536587][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.546363][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.555541][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 272.563865][ T5945] usb 4-1: USB disconnect, device number 11 [ 272.569845][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 272.638149][ T5945] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 272.927448][T13183] loop5: detected capacity change from 0 to 1764 [ 273.328016][T13203] netlink: 'syz.6.3160': attribute type 1 has an invalid length. [ 273.682101][T13221] loop6: detected capacity change from 0 to 1024 [ 273.725518][T13223] loop5: detected capacity change from 0 to 47 [ 273.757042][ T3561] hfsplus: b-tree write err: -5, ino 4 [ 274.084840][T13235] loop4: detected capacity change from 0 to 4096 [ 274.149611][T13235] EXT4-fs (loop4): Test dummy encryption mode enabled [ 274.207949][T13235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.463207][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.716773][T13263] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 274.735563][T13225] loop3: detected capacity change from 0 to 32768 [ 274.822410][T13225] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.978759][T13279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3192'. [ 274.994485][T13283] loop4: detected capacity change from 0 to 8 [ 275.005454][T13225] XFS (loop3): Ending clean mount [ 275.031533][T13283] SQUASHFS error: lzo decompression failed, data probably corrupt [ 275.071587][T13283] SQUASHFS error: Failed to read block 0x0: -5 [ 275.120221][T13283] SQUASHFS error: lzo decompression failed, data probably corrupt [ 275.146208][T13283] SQUASHFS error: Failed to read block 0x0: -5 [ 275.163237][ T30] audit: type=1800 audit(1763527563.170:74): pid=13283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3195" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 275.215726][T13287] netlink: 'syz.6.3197': attribute type 2 has an invalid length. [ 275.223624][T13287] netlink: 119 bytes leftover after parsing attributes in process `syz.6.3197'. [ 275.247073][ T5826] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.353734][T13292] loop4: detected capacity change from 0 to 16 [ 275.364879][T13292] erofs (device loop4): mounted with root inode @ nid 36. [ 275.380745][T13292] page: refcount:4 mapcount:0 mapping:ffff8880576c21e8 index:0x0 pfn:0x54f3b [ 275.396658][T13292] memcg:ffff8880245f1a80 [ 275.401859][T13292] aops:erofs_aops ino:24 dentry name(?):"/" [ 275.412980][T13292] flags: 0xfff00000004009(locked|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 275.422483][T13292] raw: 00fff00000004009 0000000000000000 dead000000000122 ffff8880576c21e8 [ 275.435941][T13292] raw: 0000000000000000 ffff8880778a4800 00000004ffffffff ffff8880245f1a80 [ 275.458722][T13292] page dumped because: VM_BUG_ON_FOLIO(success && folio_test_uptodate(folio)) [ 275.505451][T13292] page_owner tracks the page as allocated [ 275.549661][T13292] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140cc0(GFP_USER|__GFP_COMP), pid 13292, tgid 13291 (syz.4.3201), ts 275380388101, free_ts 275376341209 [ 275.655462][T13292] post_alloc_hook+0x234/0x290 [ 275.660288][T13292] get_page_from_freelist+0x2365/0x2440 [ 275.684495][T13292] __alloc_frozen_pages_noprof+0x181/0x370 [ 275.693435][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'. [ 275.694532][T13292] alloc_pages_mpol+0x232/0x4a0 [ 275.708656][T13292] alloc_pages_noprof+0xa9/0x190 [ 275.713621][T13292] folio_alloc_noprof+0x1e/0x30 [ 275.723470][T13292] filemap_alloc_folio_noprof+0x112/0x490 [ 275.726927][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3205'. [ 275.731952][T13292] do_read_cache_folio+0x2e2/0x590 [ 275.749349][T13292] erofs_bread+0x46f/0x7f0 [ 275.754022][T13292] erofs_namei+0x36b/0x1030 [ 275.759039][T13292] erofs_lookup+0x138/0x340 [ 275.763594][T13292] path_openat+0x15c6/0x3d90 [ 275.781663][T13292] do_filp_open+0x1fa/0x410 [ 275.789491][T13292] do_sys_openat2+0x121/0x1c0 [ 275.794218][T13292] __x64_sys_openat+0x138/0x170 [ 275.799604][T13292] do_syscall_64+0xfa/0xfa0 [ 275.804195][T13292] page last free pid 24 tgid 24 stack trace: [ 275.810826][T13292] __free_frozen_pages+0xbc8/0xd30 [ 275.817276][T13292] vfree+0x25a/0x400 [ 275.821277][T13292] delayed_vfree_work+0x55/0x80 [ 275.826700][T13292] process_one_work+0x93a/0x15e0 [ 275.831735][T13292] worker_thread+0x9b0/0xee0 [ 275.837161][T13292] kthread+0x711/0x8a0 [ 275.841731][T13292] ret_from_fork+0x599/0xb30 [ 275.885234][T13292] ret_from_fork_asm+0x1a/0x30 [ 275.898986][T13292] ------------[ cut here ]------------ [ 275.904486][T13292] kernel BUG at mm/filemap.c:1531! [ 275.968167][T13292] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 275.974444][T13292] CPU: 0 UID: 0 PID: 13292 Comm: syz.4.3201 Not tainted syzkaller #0 PREEMPT(full) [ 275.983804][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.993848][T13292] RIP: 0010:folio_end_read+0x22e/0x230 [ 275.999308][T13292] Code: 54 c7 ff 48 89 df 48 c7 c6 80 84 74 8b e8 8a 89 2d ff 90 0f 0b e8 92 54 c7 ff 48 89 df 48 c7 c6 e0 7c 74 8b e8 73 89 2d ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa [ 276.018901][T13292] RSP: 0018:ffffc900050ff288 EFLAGS: 00010246 [ 276.024956][T13292] RAX: 3654791c3a9da800 RBX: ffffea000153cec0 RCX: 0000000000000000 [ 276.032919][T13292] RDX: 0000000000000007 RSI: ffffffff8d78e538 RDI: 00000000ffffffff [ 276.040879][T13292] RBP: 0000000000000001 R08: ffffffff8f7de477 R09: 1ffffffff1efbc8e [ 276.048845][T13292] R10: dffffc0000000000 R11: fffffbfff1efbc8f R12: 1ffffd40002a79d9 [ 276.056800][T13292] R13: 1ffffd40002a79d8 R14: ffffea000153cec8 R15: 0000000000000008 [ 276.064754][T13292] FS: 00007f65406e66c0(0000) GS:ffff888125ebc000(0000) knlGS:0000000000000000 [ 276.073671][T13292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.080241][T13292] CR2: 000055556a772588 CR3: 00000000329d4000 CR4: 00000000003526f0 [ 276.088209][T13292] Call Trace: [ 276.091474][T13292] [ 276.094391][T13292] ? __pfx_iomap_bio_submit_read+0x10/0x10 [ 276.100186][T13292] iomap_read_folio+0x373/0x580 [ 276.105038][T13292] ? __pfx_iomap_read_folio+0x10/0x10 [ 276.110403][T13292] ? __folio_batch_add_and_move+0x192/0xc60 [ 276.116372][T13292] erofs_read_folio+0x12c/0x2e0 [ 276.121215][T13292] ? __pfx_erofs_read_folio+0x10/0x10 [ 276.126577][T13292] ? __folio_batch_add_and_move+0x768/0xc60 [ 276.132460][T13292] ? __pfx_lru_add+0x10/0x10 [ 276.137037][T13292] ? __pfx___folio_batch_add_and_move+0x10/0x10 [ 276.143270][T13292] filemap_read_folio+0x117/0x380 [ 276.148293][T13292] ? __pfx_erofs_read_folio+0x10/0x10 [ 276.153653][T13292] ? __pfx_filemap_read_folio+0x10/0x10 [ 276.159183][T13292] ? filemap_add_folio+0x35f/0x540 [ 276.164289][T13292] do_read_cache_folio+0x358/0x590 [ 276.169390][T13292] ? __pfx_erofs_read_folio+0x10/0x10 [ 276.174754][T13292] erofs_bread+0x46f/0x7f0 [ 276.179165][T13292] erofs_namei+0x36b/0x1030 [ 276.183668][T13292] ? __pfx_erofs_namei+0x10/0x10 [ 276.188603][T13292] ? __pfx_d_alloc_parallel+0x10/0x10 [ 276.193967][T13292] erofs_lookup+0x138/0x340 [ 276.198465][T13292] path_openat+0x15c6/0x3d90 [ 276.203062][T13292] ? __kasan_slab_alloc+0x6c/0x80 [ 276.208076][T13292] ? __pfx_path_openat+0x10/0x10 [ 276.213007][T13292] do_filp_open+0x1fa/0x410 [ 276.217499][T13292] ? __lock_acquire+0xab9/0xd20 [ 276.222366][T13292] ? __pfx_do_filp_open+0x10/0x10 [ 276.227385][T13292] ? _raw_spin_unlock+0x28/0x50 [ 276.232226][T13292] ? alloc_fd+0x64c/0x6c0 [ 276.236557][T13292] do_sys_openat2+0x121/0x1c0 [ 276.241229][T13292] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.246423][T13292] ? rcu_is_watching+0x15/0xb0 [ 276.251175][T13292] __x64_sys_openat+0x138/0x170 [ 276.256014][T13292] do_syscall_64+0xfa/0xfa0 [ 276.260508][T13292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.266561][T13292] ? clear_bhb_loop+0x60/0xb0 [ 276.271223][T13292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.277098][T13292] RIP: 0033:0x7f653f78f6c9 [ 276.281502][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.301111][T13292] RSP: 002b:00007f65406e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.309511][T13292] RAX: ffffffffffffffda RBX: 00007f653f9e5fa0 RCX: 00007f653f78f6c9 [ 276.317476][T13292] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 276.325434][T13292] RBP: 00007f653f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 276.333396][T13292] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 276.341354][T13292] R13: 00007f653f9e6038 R14: 00007f653f9e5fa0 R15: 00007ffef6b428c8 [ 276.349320][T13292] [ 276.352322][T13292] Modules linked in: [ 276.357008][T13292] ---[ end trace 0000000000000000 ]--- [ 276.375395][T13292] RIP: 0010:folio_end_read+0x22e/0x230 [ 276.381183][T13292] Code: 54 c7 ff 48 89 df 48 c7 c6 80 84 74 8b e8 8a 89 2d ff 90 0f 0b e8 92 54 c7 ff 48 89 df 48 c7 c6 e0 7c 74 8b e8 73 89 2d ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa [ 276.412628][T13292] RSP: 0018:ffffc900050ff288 EFLAGS: 00010246 [ 276.418901][T13292] RAX: 3654791c3a9da800 RBX: ffffea000153cec0 RCX: 0000000000000000 [ 276.427030][T13292] RDX: 0000000000000007 RSI: ffffffff8d78e538 RDI: 00000000ffffffff [ 276.435087][T13292] RBP: 0000000000000001 R08: ffffffff8f7de477 R09: 1ffffffff1efbc8e [ 276.443215][T13292] R10: dffffc0000000000 R11: fffffbfff1efbc8f R12: 1ffffd40002a79d9 [ 276.476860][T13292] R13: 1ffffd40002a79d8 R14: ffffea000153cec8 R15: 0000000000000008 [ 276.487128][T13292] FS: 00007f65406e66c0(0000) GS:ffff888125fbc000(0000) knlGS:0000000000000000 [ 276.496632][T13292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.503364][T13292] CR2: 00007f8d511b12f8 CR3: 00000000329d4000 CR4: 00000000003526f0 [ 276.517463][T13292] Kernel panic - not syncing: Fatal exception [ 276.523965][T13292] Kernel Offset: disabled [ 276.528276][T13292] Rebooting in 86400 seconds..