last executing test programs: 3.785993672s ago: executing program 3 (id=19931): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') sendfile(r0, r0, 0x0, 0x100) 3.610080321s ago: executing program 0 (id=19933): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r1, 0x719, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x6ff8a31fc508ee0e}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 3.574561403s ago: executing program 3 (id=19934): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}], 0x1, 0x48094) getpeername$llc(r0, 0x0, 0x0) 3.417650251s ago: executing program 3 (id=19936): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40, 0x1, 0x3, "bf6231"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 3.332475446s ago: executing program 0 (id=19937): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='errors=continue,discard_unit=section,alloc_mode=default,active_logs=6,acl,fault_injection=00000000000000001262,acl,noacl,compress_cache,background_gc=off,nobarrier,compress_cache,mode=lfs,errors=remount-ro,nocheckpoint_merge,mode=fragment:segment,inline_dmntry,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.740723339s ago: executing program 2 (id=19946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) 1.604898526s ago: executing program 2 (id=19947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x24, r1, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 1.599038027s ago: executing program 0 (id=19948): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$eJzs3U1sXEfhAPDZtdexk/Qfp/+EmjS0CYW2fNRpHBM+IkiqREhETYW4VKq4RGlaIkKQKBJQVcLJiRutqiBx4kOceqkKQqIXFPXEpRKNVCH1VDhwIAqiEgcIJIu8nlnvTnbzdh3vvrX395OeZ+fNezszz2/f97wJwNiqNv4uLs5VQrj85qsn/vbwX2eWxxxtTjHb+DvZEquFECoxPpl93/sTK+HND1460ymshIXG3+X4luURT11vzrsthLAU9oUrYTbsuXz1lbcXnjx18eSl/e+8duTagKoPAABj5atXjizu/vMf79954/UHjoUtzfHpeH02xrfH4/5j8cA/Hf9XQ3u80jK0msqmm4xDdaZ9uokO0zXymew83WSX/Key/GtdptsS7pz/RMu4TvWGjSytx7OhUp1vi1er8/Mr5+ShcV4/VZm/cO78cy+UVFBg3f3zwRDCvpbh+KX2+CCHtLHpZ56jgyhLZWW/PuD61oe1XDfbcGx4ed2oryi9zkMa6jvK3f4AJPn9wtss5VcW7k7z2yZ7y//6E9XO88M6GPb633P+1XhRraz8kzHP/1cXbXFYP5t1bUr1Sr+j7TGe9t7pGab8+aXuv7/8Tkf72Px+RK3Hcna7j7BR7i90K+fEkMuxVt3Kn68Xm9UXY5iWw5ey9NbfT/4/3Sj/Y6Czf+XX/zfyMB0rVUbeEyNQ/4EM+0agDIa2oX0dr93Nd9VL3PYAoy1/bq6e7o9G+XN9efqWgvTpgvSZgvStBenbCtJhnP3muz8OL1dWz/Pzc/p+r4en62z3xPD/+ixPfj2y3/zz5377dbf5588Twyj73emnz37u2Weurjz/X2mu/7fi+p5ON2bjb+tKnCBdL8yvqzef/Z9tz6faZbp7s/Lc02H6xudd7dNVdq1+T2jZztxWjrn2+XZ0m25v+3Sz2XQzcZjOypsfn2zN5kvHH2m7mpbXZFbfWlaPqawcabuyM4Z5OWAt0vrY7fn/tH7OhVrluXPnzz6e7WP/MFHbsjz+4JDLDdy9Xtv/zIX29j/bm+Nr1bRdCC3717S9OBjeiN/XPn6hmU/7+EMxnvZz35iYaYyfP/Pt88+uf/VhrL3wgxe/efr8+bPf8WHNH748GsXo50M6bRmV8vTwIZ0BlVaMaih/IQzxQ4kbJWAoDvxw5SDgsXPfOv382efPXjh0+PChhYXDnz+0eKBxXH+g9ei+1VIJpQXW0+pOP0/ZXk6BAAAAAAAAAAAAgELfO3ni6rtvffa9lfb/q+3/Uvv/9ORvav//o6z9f95OPrWDT+0Ad3ZIb0yTvWB1KpuuFof/z8q7K8tndzbfh2LY7Mcvtv9P2eXvdU3luS8bX8ujMcPsdQK3vS9lKmsfnfcX+NEYXorhLwOUqDLTeXQMi95vndb11Dqr5b0U9YlxeYnyJpD+b2ltWHmPyWpPrh3f69Tyz945pHKyvgbTeHDqji0LgNHw99F7//fS4L77H6sVL7+ehq7D5HDz+2ljjaiO43pRr3frxaPXHmwA1kfZ/X+m654pvPD7r0wvD2my60+0by/z95dCP/70bnt81PufHHT+eb99w86/7PoPu//PZv93PW//sh7zsvc891q6f//s2nst2YY9veaf1z+9B3pXjxlHN2L+qTaPhN7yr/8iyz+/IdSj/2T5b+0x/9vqv3dt+f835p8W26MPFeSfLgxfXClxpdpejpmsHun+X37dOLmZ1T+92/MO9f/ai53qv8Z7DLdi/jDONko/s/3KjiOaB+2tzxeEvvr/jZbWt//fZmGzzVr+HMZnYjztCNJzDnl/J/2WPz1fkfYDu7PvrxTs3/T/u7F9IYZFv4fU/29aH2fjLr8l3liWKV7rsGw367YGNqr3R+/+37gP0yNQBkPvQ31iDfM1+4krufz1en2wF7QKlJo5pS//ss8Tys6/7OVfJO//Nz+Gb55/7uucnvf/m6fn/f/m6TPxP9QtPe//N1+eef+/efp92ffm/QPPFaR/uCB9T+f05mK7v2D+vQXpHylI399MP9o2RUp/oGD+BwvS7y1If6gg/WMF6R8vSH+4IP3RlvTWPqBT+icK5t/sUnuUTvXXpx9sbnn7vHHb/sE4S/d/uv3+dxWkAxvXT14/ePyZX399dqX9/1Tzeki6j3csxmvx/On7MZ7f9w4t8eW0t2L8L1n6qF/vgHGSvz8j378/UpAObFzpOS+/bxhDlenOo2NY9N6qbsf5bCyfjOGnYvjpGD4Ww/kYHohhuje0MKTyMRjH3/jtkZcrq+f7O7L0Xp8nz9sDtb0nKoRwqMfy5NcH+n2ePX+PX7/uNv81NgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoTbXxd3FxrhLC5TdfPfH0qXMHlsccbU4x2/g72RKrNecL4fEYTsTw5/HDzQ9eOtMa3ophJSyESqg0x4enrjdz2hZCWAr7wpUwG/ZcvvrK2wtPnrp48tL+d147cm1wSwAAAAA2v/8FAAD//zjgCFM=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x54) 1.456836114s ago: executing program 2 (id=19950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.300268982s ago: executing program 3 (id=19951): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8501) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="9ed7f97978bd", 0x0, 0x3, 0x10000, 0x1, 0x0}) 1.213513237s ago: executing program 1 (id=19952): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close(r0) 1.183175478s ago: executing program 2 (id=19953): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) 1.15640822s ago: executing program 3 (id=19954): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x609c, &(0x7f0000011b00)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.022279967s ago: executing program 1 (id=19955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000f7ff00000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000014000000020a03"], 0xac}}, 0x0) 964.7773ms ago: executing program 2 (id=19956): r0 = socket(0xa, 0x3, 0xff) recvmmsg(r0, &(0x7f0000002040), 0x400000000000233, 0x10022, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082b01fec400000000000000000000000000bbfe8000000000000000000000000000aaff"], 0x0) 848.227186ms ago: executing program 1 (id=19957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r0, 0x29, 0x3, 0xfffffffffffffffd, 0x0) 647.378077ms ago: executing program 1 (id=19958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x8, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 490.307955ms ago: executing program 1 (id=19959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x10000005, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) 352.332632ms ago: executing program 0 (id=19960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}}, 0x44) 205.00059ms ago: executing program 1 (id=19961): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f00000008c0)={[{@fsync_mode_posix}, {@jqfmt_vfsv0}, {}, {}, {@fastboot}, {@noacl}, {}, {@barrier}, {@segment_mode}, {@fastboot}]}, 0x0, 0x5512, &(0x7f0000010780)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 137.129483ms ago: executing program 0 (id=19962): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x6, {{0x2, 0x4e21, @empty}}}, 0x88) 74.886036ms ago: executing program 3 (id=19963): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000009000000000000000e2ff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000068500000086000000bf09000000000000550901000000000095000000000000003509ffff08000000bf91000000000000b702000002000000850000002a000000b70000000000000795"], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x1010, &(0x7f0000001880)=""/4112, 0x41100, 0x28}, 0x94) 12.27296ms ago: executing program 2 (id=19964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 0 (id=19965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): real device only [ 1345.026076][T14783] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 1345.039076][T14783] ALSA: mixer_oss: invalid OSS volume 'î[' [ 1345.045108][T14783] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 1345.084183][T14783] ALSA: mixer_oss: invalid OSS volume '·$ffff8880558b8000(4096) [ 1363.103647][ T5804] usb 4-1: config 0 descriptor?? [ 1363.118918][T15838] cramfs: bad data blocksize 4165569313 [ 1363.124543][T15838] cramfs: bad data blocksize 3825676623 [ 1363.139629][T15838] cramfs: bad data blocksize 4294480561 [ 1363.145620][T15838] cramfs: bad data blocksize 1076736 [ 1363.168363][T15838] cramfs: bad data blocksize 485460736 [ 1363.174455][T15838] cramfs: bad data blocksize 3808479469 [ 1363.232748][T15838] cramfs: bad data blocksize 3222268820 [ 1363.257150][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1363.257164][ T28] audit: type=1800 audit(1363.247:8351): pid=15838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19027" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1363.283029][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.358571][ T5804] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 1363.366039][ T5804] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1363.592856][ T5804] usb 4-1: USB disconnect, device number 7 [ 1363.777830][T15882] netlink: 388 bytes leftover after parsing attributes in process `syz.1.19036'. [ 1363.803434][T15884] block nbd0: NBD_DISCONNECT [ 1364.063730][T15894] bridge15: entered promiscuous mode [ 1364.075905][T15902] sit0: entered promiscuous mode [ 1364.103633][T15902] netlink: 'syz.1.19042': attribute type 1 has an invalid length. [ 1364.136638][T15902] netlink: 1 bytes leftover after parsing attributes in process `syz.1.19042'. [ 1364.218541][T15906] tmpfs: Bad value for 'mpol' [ 1364.329128][T15911] vlan0: entered promiscuous mode [ 1364.334313][T15911] veth0_vlan: entered promiscuous mode [ 1364.603483][T15932] loop3: detected capacity change from 0 to 512 [ 1364.629791][T15932] EXT4-fs: inline encryption not supported [ 1364.655462][T15932] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.19052: bad orphan inode 15 [ 1364.688786][T15932] ext4_test_bit(bit=14, block=5) = 0 [ 1364.695613][T15932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1364.721243][T15932] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1364.739706][T15932] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.19052: bit already cleared for inode 13 [ 1364.795796][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.270998][T15972] loop2: detected capacity change from 0 to 64 [ 1365.312770][T15975] cgroup: name respecified [ 1365.470181][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19065'. [ 1365.492289][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19065'. [ 1365.647166][T15997] veth0_vlan: left allmulticast mode [ 1365.665552][T15997] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1365.705551][T15989] ±ÿ speed is unknown, defaulting to 1000 [ 1365.938617][ T966] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1366.129251][ T966] usb 1-1: Using ep0 maxpacket: 8 [ 1366.145821][ T966] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 1366.165379][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.187722][ T966] usb 1-1: Product: syz [ 1366.194432][ T966] usb 1-1: Manufacturer: syz [ 1366.199740][ T966] usb 1-1: SerialNumber: syz [ 1366.436233][ T966] kalmia 1-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 1366.477663][ T966] kalmia: probe of 1-1:1.0 failed with error -71 [ 1366.507352][ T966] usb 1-1: USB disconnect, device number 114 [ 1366.776873][T16018] loop3: detected capacity change from 0 to 40427 [ 1366.814356][T16018] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1366.827124][T16018] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1366.877137][T16018] F2FS-fs (loop3): invalid crc value [ 1366.908937][T16064] netlink: 'syz.1.19081': attribute type 30 has an invalid length. [ 1366.919248][T16064] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1367.109085][T16018] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1367.116327][T16018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1367.188503][T16083] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1367.287841][T16018] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 1368.567734][T16140] overlay: Bad value for 'metacopy' [ 1369.039095][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19100'. [ 1369.072904][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19100'. [ 1369.128355][T16165] netlink: 'syz.0.19100': attribute type 6 has an invalid length. [ 1369.249661][T31674] Bluetooth: hci2: command 0x0406 tx timeout [ 1369.541825][T16159] loop3: detected capacity change from 0 to 32768 [ 1369.624922][T16159] JBD2: Ignoring recovery information on journal [ 1369.659805][T16196] loop2: detected capacity change from 0 to 1024 [ 1369.680263][T16199] No such timeout policy "syz0" [ 1369.686349][T16196] EXT4-fs: inline encryption not supported [ 1369.719646][T16196] EXT4-fs: Ignoring removed bh option [ 1369.750870][T16159] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1369.760460][T17870] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1369.798779][T16196] EXT4-fs: inline encryption not supported [ 1369.838436][T16196] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1369.872105][T16196] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1369.901085][T16196] EXT4-fs error (device loop2): ext4_quota_enable:7144: comm syz.2.19108: inode #2304: comm syz.2.19108: iget: illegal inode # [ 1369.940348][T16196] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.19108: Bad quota inode: 2304, type: 2 [ 1369.958375][T16196] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1369.979218][T16196] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1369.985907][T17870] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1369.985938][T17870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.985955][T17870] usb 2-1: Product: syz [ 1369.985969][T17870] usb 2-1: Manufacturer: syz [ 1369.985983][T17870] usb 2-1: SerialNumber: syz [ 1369.996442][T16196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1370.100583][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 1370.109244][T17870] r8152-cfgselector 2-1: config 0 descriptor?? [ 1370.194812][T16196] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1370.230214][T16196] EXT4-fs error (device loop2): ext4_quota_enable:7144: comm syz.2.19108: inode #2304: comm syz.2.19108: iget: illegal inode # [ 1370.261968][T16218] netlink: 'syz.0.19113': attribute type 10 has an invalid length. [ 1370.263411][T16196] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.19108: Bad quota inode: 2304, type: 2 [ 1370.291012][T16196] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1370.296002][T16218] team0: Device veth1_macvtap failed to register rx_handler [ 1370.372436][T17870] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1370.379389][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.490041][ T3431] usb 2-1: config 0 descriptor?? [ 1370.637811][ T3431] usb 2-1: can't set config #0, error -71 [ 1370.644239][T17870] usb 2-1: USB disconnect, device number 115 [ 1370.748364][ T5804] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1370.855849][T16251] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1370.968675][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 1370.990539][ T5804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1371.023950][ T5804] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1371.051364][ T5804] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1371.076630][ T5804] usb 4-1: Product: syz [ 1371.082182][ T5804] usb 4-1: Manufacturer: syz [ 1371.102848][ T5804] usb 4-1: SerialNumber: syz [ 1371.338395][ T5804] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1371.346755][ T5804] usb 4-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 1371.401999][ T5804] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 1371.426389][ T5804] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1371.539272][ T5804] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1371.569012][ T5804] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1371.620398][ T5804] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1371.655471][ T5804] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1371.682187][ T5804] usb 4-1: USB disconnect, device number 8 [ 1371.715185][ T5804] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1371.857506][ T5804] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1371.918808][ T5804] visor 4-1:1.0: device disconnected [ 1372.498379][T29182] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1372.700604][T29182] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1372.718853][T29182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.757800][T29182] usb 1-1: Product: syz [ 1372.778538][T29182] usb 1-1: Manufacturer: syz [ 1372.789416][T29182] usb 1-1: SerialNumber: syz [ 1372.816495][T29182] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1372.876760][T28684] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1373.161114][T16340] loop2: detected capacity change from 0 to 32768 [ 1373.229721][T16340] JBD2: Ignoring recovery information on journal [ 1373.237883][T16340] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 1373.259302][T16340] JBD2: bad block at offset 32 [ 1373.301876][T16340] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1373.373172][ T28] audit: type=1400 audit(1373.367:8352): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=16402 comm="syz.3.19151" [ 1373.435748][ T966] usb 1-1: USB disconnect, device number 115 [ 1373.493943][T16340] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 1373.593358][T16340] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1373.639277][T16340] OCFS2: File system is now read-only. [ 1373.658367][T16340] (syz.2.19135,16340,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 1373.666167][T16340] (syz.2.19135,16340,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1373.698443][T16340] (syz.2.19135,16340,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 1373.727055][T16340] (syz.2.19135,16340,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 1373.775026][T16340] (syz.2.19135,16340,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 1373.827467][T16340] (syz.2.19135,16340,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 1373.855989][T16340] (syz.2.19135,16340,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 1373.876351][T16340] (syz.2.19135,16340,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 1373.897212][T16340] (syz.2.19135,16340,1):ocfs2_mknod:298 ERROR: status = -5 [ 1373.918647][T16340] (syz.2.19135,16340,0):ocfs2_mknod:502 ERROR: status = -5 [ 1373.942560][T16340] (syz.2.19135,16340,0):ocfs2_create:676 ERROR: status = -5 [ 1373.968620][T28684] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1373.975710][T28684] ath9k_htc: Failed to initialize the device [ 1374.041876][ T966] usb 1-1: ath9k_htc: USB layer deinitialized [ 1374.179691][T16445] netlink: 'syz.1.19158': attribute type 1 has an invalid length. [ 1374.207342][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 1374.589435][ T28] audit: type=1326 audit(1374.577:8353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.3.19164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1374.668445][ T28] audit: type=1326 audit(1374.577:8354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.3.19164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1374.790717][ T28] audit: type=1326 audit(1374.577:8355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.3.19164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1374.887972][ T28] audit: type=1326 audit(1374.577:8356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.3.19164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1374.994576][ T28] audit: type=1326 audit(1374.587:8357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.3.19164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1375.127756][ T28] audit: type=1326 audit(1374.587:8358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.3.19164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1375.239375][ T28] audit: type=1326 audit(1374.587:8359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.3.19164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1375.333478][ T28] audit: type=1326 audit(1374.587:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.3.19164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1375.426014][ T28] audit: type=1326 audit(1374.587:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.3.19164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1375.928587][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19184'. [ 1375.968756][T16541] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19184'. [ 1376.035375][T16548] netlink: 'syz.2.19186': attribute type 9 has an invalid length. [ 1376.082198][T16548] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19186'. [ 1376.311784][T16559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19189'. [ 1377.041902][T16597] loop3: detected capacity change from 0 to 64 [ 1377.314194][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19203'. [ 1377.525591][T16626] sctp: [Deprecated]: syz.1.19208 (pid 16626) Use of int in max_burst socket option. [ 1377.525591][T16626] Use struct sctp_assoc_value instead [ 1377.695155][T16632] loop0: detected capacity change from 0 to 256 [ 1377.725633][T16632] exfat: Deprecated parameter 'utf8' [ 1377.742325][T16636] loop1: detected capacity change from 0 to 256 [ 1377.760314][T16632] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1377.823965][T16641] loop3: detected capacity change from 0 to 256 [ 1377.888030][T16641] FAT-fs (loop3): Directory bread(block 64) failed [ 1377.907690][T16641] FAT-fs (loop3): Directory bread(block 65) failed [ 1377.929267][T16641] FAT-fs (loop3): Directory bread(block 66) failed [ 1377.935870][T16641] FAT-fs (loop3): Directory bread(block 67) failed [ 1377.979111][T16641] FAT-fs (loop3): Directory bread(block 68) failed [ 1377.985717][T16641] FAT-fs (loop3): Directory bread(block 69) failed [ 1378.044891][T16641] FAT-fs (loop3): Directory bread(block 70) failed [ 1378.068553][T16641] FAT-fs (loop3): Directory bread(block 71) failed [ 1378.100562][T16641] FAT-fs (loop3): Directory bread(block 72) failed [ 1378.107156][T16641] FAT-fs (loop3): Directory bread(block 73) failed [ 1378.121601][T16650] loop0: detected capacity change from 0 to 64 [ 1378.593574][T16616] loop2: detected capacity change from 0 to 40427 [ 1378.608668][T16616] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1378.628165][T16616] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1378.652742][T16616] F2FS-fs (loop2): invalid crc value [ 1378.806793][T16616] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1378.814057][T16616] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1378.848407][ T966] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1378.942078][T16616] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 1379.038497][ T966] usb 2-1: Using ep0 maxpacket: 16 [ 1379.047675][ T966] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1379.066575][ T966] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.097721][ T966] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1379.117766][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.134150][ T966] usb 2-1: Product: syz [ 1379.166852][ T966] usb 2-1: Manufacturer: syz [ 1379.170196][T16694] loop3: detected capacity change from 0 to 16 [ 1379.176940][ T966] usb 2-1: SerialNumber: syz [ 1379.213757][T16694] erofs: (device loop3): mounted with root inode @ nid 36. [ 1379.250778][T16694] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1379.303888][T16694] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1379.332406][T16694] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1379.374546][T16694] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1379.474001][ T966] usb 2-1: USB disconnect, device number 116 [ 1379.605018][T16720] loop0: detected capacity change from 0 to 512 [ 1379.655778][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19224'. [ 1379.858000][T16738] loop0: detected capacity change from 0 to 8 [ 1379.914210][T16738] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1379.939620][T16738] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1379.987497][T16744] macvtap0: entered promiscuous mode [ 1380.352881][T16766] ieee802154 phy0 wpan0: encryption failed: -22 [ 1380.774014][T16793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19248'. [ 1380.832666][T16796] CIFS mount error: No usable UNC path provided in device string! [ 1380.832666][T16796] [ 1380.857933][T16796] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1381.059211][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19253'. [ 1381.115390][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19253'. [ 1381.364754][ T28] audit: type=1326 audit(1381.347:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c1d9c819 code=0x7ffc0000 [ 1381.481318][ T28] audit: type=1326 audit(1381.347:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c1d9c819 code=0x7ffc0000 [ 1381.553857][ T28] audit: type=1326 audit(1381.357:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c1d9c819 code=0x7ffc0000 [ 1381.576113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1381.616380][ T28] audit: type=1326 audit(1381.357:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c1d9c819 code=0x7ffc0000 [ 1381.650897][ T28] audit: type=1326 audit(1381.387:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c1d9c819 code=0x7ffc0000 [ 1381.718867][ T28] audit: type=1326 audit(1381.387:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c1d9c819 code=0x7ffc0000 [ 1381.809399][ T28] audit: type=1326 audit(1381.387:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c1d9c819 code=0x7ffc0000 [ 1381.907845][T16851] loop2: detected capacity change from 0 to 1024 [ 1381.914544][ T28] audit: type=1326 audit(1381.387:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff8c1d9c819 code=0x7ffc0000 [ 1381.963805][T16851] EXT4-fs: inline encryption not supported [ 1381.992220][ T28] audit: type=1326 audit(1381.387:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16823 comm="syz.2.19260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff8c1d9c819 code=0x7ffc0000 [ 1382.014421][ C0] vkms_vblank_simulate: vblank timer overrun [ 1382.046064][T16851] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1382.046064][T16851] [ 1382.548732][T17870] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1382.584277][T16883] set_capacity_and_notify: 1 callbacks suppressed [ 1382.584298][T16883] loop2: detected capacity change from 0 to 512 [ 1382.695737][T16883] syz.2.19275: attempt to access beyond end of device [ 1382.695737][T16883] loop2: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 1382.731814][T16883] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 1382.742822][T16883] FAT-fs (loop2): Filesystem has been set read-only [ 1382.750244][T16883] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 1382.762646][T17870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1382.781493][T17870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.825543][T17870] usb 4-1: string descriptor 0 read error: -22 [ 1382.842218][T17870] usb 4-1: New USB device found, idVendor=054c, idProduct=0095, bcdDevice=a5.6a [ 1382.872757][T17870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.145170][T17870] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1383.179647][T17870] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1383.225457][T17870] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1383.421902][T17870] usb 4-1: USB disconnect, device number 9 [ 1383.457036][T17870] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1383.504799][T17870] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1383.525323][T16945] xt_hashlimit: size too large, truncated to 1048576 [ 1383.551032][T17870] visor 4-1:1.0: device disconnected [ 1383.865648][T16973] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19295'. [ 1383.887628][T16976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19296'. [ 1384.067647][ T28] audit: type=1326 audit(1384.057:8371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16982 comm="syz.2.19298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c1d9c819 code=0x50000 [ 1384.441138][T16998] loop3: detected capacity change from 0 to 4096 [ 1384.474764][T16998] ntfs: volume version 3.1. [ 1384.742146][T17017] loop3: detected capacity change from 0 to 16 [ 1384.746598][T17015] loop0: detected capacity change from 0 to 1024 [ 1384.776399][T17017] erofs: (device loop3): mounted with root inode @ nid 36. [ 1385.248901][T17000] loop1: detected capacity change from 0 to 32768 [ 1385.689140][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19321'. [ 1386.198412][ T966] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1386.266477][T17094] loop1: detected capacity change from 0 to 4096 [ 1386.397523][T17094] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1386.414821][ T966] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1386.439953][ T966] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1386.477868][ T966] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1386.536882][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1386.577346][ T966] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1386.602385][ T966] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1386.631395][ T5763] ntfs3: loop1: ino=9, ntfs_sync_fs failed, -22. [ 1386.640869][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1386.689530][ T966] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1386.711507][ T966] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1386.734478][T17112] loop2: detected capacity change from 0 to 4096 [ 1386.758842][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1386.772848][T17119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.777546][T17112] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1386.810420][ T966] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1386.827689][ T966] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1386.883666][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1386.918962][ T966] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1386.927954][ T966] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1386.978515][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1387.009205][ T966] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1387.023449][T17112] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1387.032672][ T966] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1387.079622][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1387.102598][ T966] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1387.126089][ T966] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1387.127093][ T2940] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 1387.166710][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1387.175110][ T966] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1387.184114][ T5766] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1387.184145][ T5766] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1387.184160][ T5766] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1387.199871][ T2940] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 1387.230503][ T966] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1387.268477][ T966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1387.299351][ T966] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1387.315039][ T966] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1387.332839][ T966] usb 1-1: Product: syz [ 1387.337064][ T966] usb 1-1: Manufacturer: syz [ 1387.345087][ T966] usb 1-1: SerialNumber: syz [ 1387.377090][ T966] usb 1-1: config 0 descriptor?? [ 1387.411581][ T966] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1387.738545][T28684] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1387.756197][ T966] usb 1-1: USB disconnect, device number 116 [ 1387.779200][ T966] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1387.938521][T28684] usb 2-1: Using ep0 maxpacket: 8 [ 1387.958077][T17169] program syz.2.19338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1387.969012][T28684] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1388.009050][T28684] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1388.038715][T28684] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1388.067322][T28684] usb 2-1: Product: syz [ 1388.077462][T28684] usb 2-1: Manufacturer: syz [ 1388.095243][T28684] usb 2-1: SerialNumber: syz [ 1388.293097][T17186] usb usb8: usbfs: process 17186 (syz.2.19341) did not claim interface 0 before use [ 1388.320409][T28684] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1388.336692][T28684] usb 2-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 1388.358739][T28684] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1388.389738][T28684] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1388.513021][T17196] loop3: detected capacity change from 0 to 2048 [ 1388.530874][T28684] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1388.577409][T28684] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1388.594190][T17196] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1388.631329][T28684] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1388.645946][T17196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1388.661021][T28684] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1388.703973][T28684] usb 2-1: USB disconnect, device number 117 [ 1388.739495][T28684] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1388.787869][T28684] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1388.852828][T28684] visor 2-1:1.0: device disconnected [ 1389.982676][T17293] loop1: detected capacity change from 0 to 2048 [ 1390.014281][T17293] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1390.051023][T17293] NILFS (loop1): mounting unchecked fs [ 1390.090171][ T9117] udevd[9117]: incorrect nilfs2 checksum on /dev/loop1 [ 1390.156595][T17293] NILFS (loop1): recovery complete [ 1390.175778][T17306] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1390.579865][T17331] netlink: 72 bytes leftover after parsing attributes in process `syz.3.19376'. [ 1390.581827][T17336] loop1: detected capacity change from 0 to 64 [ 1390.678419][ T5804] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1390.902306][ T5804] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1390.928166][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.959147][ T5804] usb 1-1: Product: syz [ 1390.963383][ T5804] usb 1-1: Manufacturer: syz [ 1390.968002][ T5804] usb 1-1: SerialNumber: syz [ 1390.985457][ T5804] usb 1-1: config 0 descriptor?? [ 1391.361414][T17380] loop3: detected capacity change from 0 to 512 [ 1391.400789][T17380] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1391.441410][T28684] usb 1-1: USB disconnect, device number 117 [ 1391.456107][T17380] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1391.526609][T17395] loop1: detected capacity change from 0 to 2048 [ 1391.536791][T17380] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1391.542226][T17395] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1391.563209][T17395] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1391.571418][T17395] UDF-fs: Scanning with blocksize 512 failed [ 1391.599372][T17380] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1391.626685][T17395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1391.626722][T17380] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1391.681626][T17380] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.19379: corrupted inode contents [ 1391.705253][T17380] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #12: comm syz.3.19379: mark_inode_dirty error [ 1391.737295][T17380] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.19379: corrupted inode contents [ 1391.763324][T17380] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.19379: mark_inode_dirty error [ 1391.785584][T17380] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.19379: corrupted inode contents [ 1391.849681][T17380] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1391.881753][T17380] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.19379: corrupted inode contents [ 1391.937063][T17380] EXT4-fs error (device loop3): ext4_truncate:4301: inode #12: comm syz.3.19379: mark_inode_dirty error [ 1391.938451][T29182] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1391.962779][T17380] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1392.011216][T17380] EXT4-fs (loop3): 1 truncate cleaned up [ 1392.038786][T17380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1392.171895][T29182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1392.207030][T29182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.227678][T29182] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1392.254698][T29182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.282332][T29182] usb 3-1: config 0 descriptor?? [ 1392.320766][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.743825][T29182] aquacomputer_d5next 0003:0C70:F0B6.0002: item fetching failed at offset 5/7 [ 1392.782762][T29182] aquacomputer_d5next: probe of 0003:0C70:F0B6.0002 failed with error -22 [ 1392.935527][T17468] loop1: detected capacity change from 0 to 512 [ 1392.946075][T29182] usb 3-1: USB disconnect, device number 101 [ 1392.989263][T17468] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1392.996285][T17468] EXT4-fs error (device loop1): ext4_find_extent:945: inode #4: comm syz.1.19390: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 1393.023697][T17468] __quota_error: 187 callbacks suppressed [ 1393.023716][T17468] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 1393.049029][T17468] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1393.074158][T17468] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1393.089549][T17468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1393.154559][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.221624][T17488] loop0: detected capacity change from 0 to 256 [ 1393.306324][T17493] loop1: detected capacity change from 0 to 128 [ 1393.335687][T17488] FAT-fs (loop0): Directory bread(block 64) failed [ 1393.357705][T17493] FAT-fs (loop1): Directory bread(block 524322) failed [ 1393.365131][T17488] FAT-fs (loop0): Directory bread(block 65) failed [ 1393.379911][T17493] FAT-fs (loop1): Directory bread(block 524323) failed [ 1393.390153][T17488] FAT-fs (loop0): Directory bread(block 66) failed [ 1393.403056][T17493] FAT-fs (loop1): Directory bread(block 524324) failed [ 1393.412833][T17488] FAT-fs (loop0): Directory bread(block 67) failed [ 1393.425994][T17493] FAT-fs (loop1): Directory bread(block 524325) failed [ 1393.433550][T17488] FAT-fs (loop0): Directory bread(block 68) failed [ 1393.448431][T17493] FAT-fs (loop1): Directory bread(block 524326) failed [ 1393.455457][T17493] FAT-fs (loop1): Directory bread(block 524327) failed [ 1393.462824][T17488] FAT-fs (loop0): Directory bread(block 69) failed [ 1393.476579][T17493] FAT-fs (loop1): Directory bread(block 524328) failed [ 1393.483964][T17488] FAT-fs (loop0): Directory bread(block 70) failed [ 1393.499559][T17493] FAT-fs (loop1): Directory bread(block 524329) failed [ 1393.507354][T17488] FAT-fs (loop0): Directory bread(block 71) failed [ 1393.534846][T17488] FAT-fs (loop0): Directory bread(block 72) failed [ 1393.563081][T17488] FAT-fs (loop0): Directory bread(block 73) failed [ 1393.599225][T17493] FAT-fs (loop1): Directory bread(block 524322) failed [ 1393.606634][T17493] FAT-fs (loop1): Directory bread(block 524323) failed [ 1394.037969][T17529] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1394.049927][T17529] team0: Device ipvlan2 is already an upper device of the team interface [ 1394.314868][T17546] loop1: detected capacity change from 0 to 2048 [ 1394.351037][T17546] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1394.403295][ T9117] udevd[9117]: incorrect nilfs2 checksum on /dev/loop1 [ 1394.431476][T17557] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1394.633519][T17567] loop2: detected capacity change from 0 to 128 [ 1394.853820][T17578] loop3: detected capacity change from 0 to 2048 [ 1394.912719][T17578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1394.947348][ T28] audit: type=1800 audit(1394.937:8543): pid=17578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19412" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1395.158378][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.343475][T17606] loop3: detected capacity change from 0 to 1024 [ 1395.360083][T17608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19417'. [ 1395.365576][T17606] EXT4-fs: Ignoring removed mblk_io_submit option [ 1395.381683][T17610] netlink: 52 bytes leftover after parsing attributes in process `syz.1.19418'. [ 1395.392740][T17610] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19418'. [ 1395.410251][T17606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1395.428522][ T966] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 1395.440941][T17606] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1395.487009][T17606] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #11: comm syz.3.19416: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1395.528982][T17606] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.19416: couldn't read orphan inode 11 (err -117) [ 1395.549566][T17606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.605456][T17619] netlink: 'syz.1.19420': attribute type 1 has an invalid length. [ 1395.627414][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19420'. [ 1395.656137][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1395.668915][T17622] loop2: detected capacity change from 0 to 128 [ 1395.684324][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.695982][ T966] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1395.736256][ T966] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1395.774314][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.815926][ T966] usb 1-1: config 0 descriptor?? [ 1395.842154][T17593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1396.055152][T17642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19424'. [ 1396.315495][ T966] acrux 0003:1A34:0802.0003: unknown main item tag 0x0 [ 1396.385882][ T966] acrux 0003:1A34:0802.0003: hidraw0: USB HID v0.08 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 1396.408435][ T966] acrux 0003:1A34:0802.0003: no inputs found [ 1396.417802][ T966] acrux 0003:1A34:0802.0003: Failed to enable force feedback support, error: -19 [ 1396.550066][ T966] usb 1-1: USB disconnect, device number 118 [ 1396.674458][T17663] loop3: detected capacity change from 0 to 8192 [ 1396.705609][T17663] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1396.766892][T17663] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1396.804614][T17663] REISERFS (device loop3): using ordered data mode [ 1396.816404][T17663] reiserfs: using flush barriers [ 1396.880386][T17663] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 1396.906548][T17663] REISERFS (device loop3): checking transaction log (loop3) [ 1396.916700][T17663] REISERFS (device loop3): Using r5 hash to sort names [ 1396.924041][T17870] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1396.942229][T17663] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1396.963837][T17663] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1397.118631][T17870] usb 2-1: Using ep0 maxpacket: 32 [ 1397.133367][T17870] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1397.143766][T17870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.164861][T17870] usb 2-1: Product: syz [ 1397.169194][T17870] usb 2-1: Manufacturer: syz [ 1397.176566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1397.183001][T17870] usb 2-1: SerialNumber: syz [ 1397.200768][T17701] loop2: detected capacity change from 0 to 4096 [ 1397.200902][T17870] usb 2-1: config 0 descriptor?? [ 1397.245566][T17870] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1397.278192][T17708] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1397.284202][T17870] dvb-usb: bulk message failed: -22 (4/0) [ 1397.341808][T17870] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1397.390756][T17870] dvb-usb: bulk message failed: -22 (5/0) [ 1397.390781][T17870] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1397.411859][T17870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1397.420079][T17870] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1397.420310][T17870] usb 2-1: media controller created [ 1397.428394][T17701] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1397.428490][T17701] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1397.454983][T17701] Remounting filesystem read-only [ 1397.455001][T17701] NILFS (loop2): error -5 truncating bmap (ino=12) [ 1397.473771][T17870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1397.521444][ T5766] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1397.521547][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 1397.521565][ T5766] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 1397.521744][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 1397.521760][ T5766] NILFS (loop2): discard dirty block: blocknr=14, size=4096 [ 1397.521984][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1397.522000][ T5766] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 1397.522020][ T5766] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1397.522034][ T5766] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 1397.522051][ T5766] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 1397.522064][ T5766] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 1397.523896][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1397.523916][ T5766] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 1397.525641][ T5766] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 1397.525662][ T5766] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 1397.525681][ T5766] NILFS (loop2): discard dirty page: offset=270336, ino=3 [ 1397.525693][ T5766] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 1397.549862][T17870] usb 2-1: selecting invalid altsetting 3 [ 1397.549891][T17870] ttusb2: set interface to alts=3 failed [ 1397.670371][T17870] DVB: Unable to find symbol tda10086_attach() [ 1397.670401][T17870] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1397.680922][T17870] dvb-usb: bulk message failed: -22 (4/0) [ 1397.680944][T17870] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1397.681044][T17870] dvb-usb: bulk message failed: -22 (5/0) [ 1397.681058][T17870] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1397.681112][T17870] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1397.689281][T17870] usb 2-1: USB disconnect, device number 118 [ 1397.766200][T17870] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1398.522089][T17772] loop3: detected capacity change from 0 to 256 [ 1398.539443][T17772] exfat: Deprecated parameter 'utf8' [ 1398.602135][T17772] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1398.700371][T17777] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1399.018672][T17870] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1399.240101][T17870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1399.268845][T17870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.329189][T17870] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1399.353272][T17870] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1399.377135][T17870] usb 3-1: Manufacturer: syz [ 1399.398724][T17870] usb 3-1: config 0 descriptor?? [ 1399.415889][T17823] loop0: detected capacity change from 0 to 256 [ 1399.477460][T17823] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 1399.766722][T17841] loop1: detected capacity change from 0 to 512 [ 1399.784729][T17841] EXT4-fs: inline encryption not supported [ 1399.837857][T17870] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 1399.868398][T17870] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 1399.875628][T17870] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 1399.876378][T17841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1399.913616][T17870] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 1399.936661][T17841] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1399.943180][T17870] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 1399.972453][T17870] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1399.988500][T17841] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.19468: inode #15: comm syz.1.19468: iget: illegal inode # [ 1400.059520][T17841] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.19468: couldn't read orphan inode 15 (err -117) [ 1400.087686][T17870] usb 3-1: USB disconnect, device number 102 [ 1400.110163][T17841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1400.115326][T17854] fido_id[17854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1400.209584][T17866] loop3: detected capacity change from 0 to 1024 [ 1400.327664][T17878] loop0: detected capacity change from 0 to 512 [ 1400.340622][ T1141] hfsplus: b-tree write err: -5, ino 25 [ 1400.346481][ T1141] hfsplus: b-tree write err: -5, ino 4 [ 1400.365613][T17878] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1400.389051][ T1141] hfsplus: b-tree write err: -5, ino 2 [ 1400.394636][ T1141] hfsplus: b-tree write err: -5, ino 26 [ 1400.406475][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.465422][T17878] EXT4-fs (loop0): 1 truncate cleaned up [ 1400.531021][T17878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1400.806634][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.013803][T17904] loop2: detected capacity change from 0 to 4096 [ 1401.037897][T17904] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1401.133936][T17904] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1401.187260][T17904] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 1401.275725][ T28] audit: type=1800 audit(1401.267:8544): pid=17904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19479" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 1401.355004][T17924] loop0: detected capacity change from 0 to 4096 [ 1401.412661][T17924] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1401.446981][T17924] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1401.483464][T17935] loop2: detected capacity change from 0 to 64 [ 1401.520520][T17924] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1401.572682][T17924] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1401.605833][T17931] loop1: detected capacity change from 0 to 4096 [ 1401.618562][T17924] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1401.664264][T17924] ntfs: volume version 3.1. [ 1401.703332][T17924] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1401.759300][T17924] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1401.789927][T17924] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1401.809640][T17924] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1401.840969][T17931] ntfs3: loop1: failed to convert "0080" to cp775 [ 1401.859245][T17931] ntfs3: loop1: failed to convert name for inode 1e. [ 1402.072284][T17951] loop3: detected capacity change from 0 to 128 [ 1402.126950][T17951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1402.145282][T17957] loop1: detected capacity change from 0 to 256 [ 1402.174922][T17957] exfat: Deprecated parameter 'utf8' [ 1402.194971][T17951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1402.219402][T17957] exfat: Deprecated parameter 'namecase' [ 1402.225218][T17957] exfat: Deprecated parameter 'namecase' [ 1402.268697][T17957] exfat: Deprecated parameter 'utf8' [ 1402.365398][T17957] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1402.448590][T17969] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1403.026085][T17990] ntfs: volume version 3.1. [ 1403.294422][T18007] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1403.378953][T18003] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1404.088362][ T5804] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1404.149716][T18059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1404.179655][T29182] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1404.215439][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.300981][ T5804] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1404.318479][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.337815][ T5804] usb 2-1: config 0 descriptor?? [ 1404.354539][ T5804] cp210x 2-1:0.0: cp210x converter detected [ 1404.417950][T29182] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1404.446758][T29182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.478523][T29182] usb 3-1: Product: syz [ 1404.488928][T29182] usb 3-1: Manufacturer: syz [ 1404.510749][T29182] usb 3-1: SerialNumber: syz [ 1404.529421][T29182] usb 3-1: config 0 descriptor?? [ 1404.549143][T29182] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1404.816015][ T5804] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1404.988332][T29182] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input81 [ 1405.101356][T29182] usb 2-1: USB disconnect, device number 119 [ 1405.150719][T29182] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1405.263829][ T5804] usb 3-1: USB disconnect, device number 103 [ 1405.295657][T29182] cp210x 2-1:0.0: device disconnected [ 1405.412709][T18130] set_capacity_and_notify: 5 callbacks suppressed [ 1405.412723][T18130] loop3: detected capacity change from 0 to 4096 [ 1405.498079][T18130] ntfs: volume version 3.1. [ 1405.811151][T18164] loop1: detected capacity change from 0 to 1024 [ 1405.818924][T18164] EXT4-fs: inline encryption not supported [ 1405.827482][T18164] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1405.862573][T18164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.015405][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.253191][T18191] loop2: detected capacity change from 0 to 128 [ 1406.284489][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 1406.284504][ T28] audit: type=1800 audit(1406.277:8546): pid=18191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19540" name="file2" dev="loop2" ino=1048788 res=0 errno=0 [ 1406.323548][T18191] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1406.368128][T18191] FAT-fs (loop2): Filesystem has been set read-only [ 1406.460601][ T28] audit: type=1326 audit(1406.457:8547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.3.19542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86c839c819 code=0x0 [ 1406.478458][ T966] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1406.705410][ T966] usb 2-1: Using ep0 maxpacket: 16 [ 1406.715963][ T966] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1406.726424][ T966] usb 2-1: config 0 has no interface number 0 [ 1406.732773][ T966] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.744999][ T966] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.778454][ T966] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1406.797505][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.825336][ T966] usb 2-1: config 0 descriptor?? [ 1407.022785][T18232] loop2: detected capacity change from 0 to 512 [ 1407.041445][T18232] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1407.072237][T18232] EXT4-fs (loop2): 2 truncates cleaned up [ 1407.080052][T18232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1407.142232][T18232] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.2.19551: path /4886/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 1407.176174][T18232] EXT4-fs (loop2): Remounting filesystem read-only [ 1407.207569][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.208972][T28684] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1407.289415][ T966] holtek_mouse 0003:04D9:A081.0005: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.1-1/input1 [ 1407.439198][T28684] usb 1-1: Using ep0 maxpacket: 32 [ 1407.458907][T28684] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1407.506376][T28684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.533969][T28684] usb 1-1: Product: syz [ 1407.539048][T28684] usb 1-1: Manufacturer: syz [ 1407.543713][T28684] usb 1-1: SerialNumber: syz [ 1407.566000][T28684] usb 1-1: config 0 descriptor?? [ 1407.579824][ T966] usb 2-1: USB disconnect, device number 120 [ 1407.594329][T28684] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1407.648506][T28684] dvb-usb: bulk message failed: -22 (4/0) [ 1407.671677][T28684] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1407.717346][T28684] dvb-usb: bulk message failed: -22 (5/0) [ 1407.752318][T28684] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1407.776283][T28684] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1407.787802][T28684] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1407.815213][T28684] usb 1-1: media controller created [ 1407.823590][T18271] loop2: detected capacity change from 0 to 1024 [ 1407.851483][T28684] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1407.890870][ T28] audit: type=1800 audit(1407.887:8548): pid=18271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19556" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1407.925799][T28684] usb 1-1: selecting invalid altsetting 3 [ 1407.939054][T28684] ttusb2: set interface to alts=3 failed [ 1408.013938][T28684] DVB: Unable to find symbol tda10086_attach() [ 1408.022839][T28684] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1408.065883][T28684] dvb-usb: bulk message failed: -22 (4/0) [ 1408.066739][T18252] loop3: detected capacity change from 0 to 32768 [ 1408.078020][T28684] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1408.102445][T28684] dvb-usb: bulk message failed: -22 (5/0) [ 1408.108542][T28684] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1408.145703][T28684] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1408.196347][T28684] usb 1-1: USB disconnect, device number 119 [ 1408.232210][T18252] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1408.249012][T28684] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1408.354370][T18306] loop2: detected capacity change from 0 to 128 [ 1408.443346][T18306] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1408.444540][T18252] XFS (loop3): Ending clean mount [ 1408.476187][T18303] loop1: detected capacity change from 0 to 4096 [ 1408.608018][ T5768] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1408.623414][ T5766] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1408.693787][T18313] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1408.767218][ T28] audit: type=1800 audit(1408.757:8549): pid=18303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19557" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1409.077229][T18323] loop2: detected capacity change from 0 to 4096 [ 1409.092647][T18323] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1409.160588][T18323] ntfs: volume version 3.1. [ 1409.286380][T18323] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1409.311335][T18323] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1409.362314][T18323] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 1409.378475][T18323] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 1409.400215][T18323] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 1409.947246][T18363] loop2: detected capacity change from 0 to 256 [ 1409.975102][T18363] exfat: Deprecated parameter 'utf8' [ 1410.064116][T18363] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1410.473598][T18377] loop3: detected capacity change from 0 to 8192 [ 1410.523439][T18377] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1410.589541][T18377] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1410.604902][T18377] REISERFS (device loop3): using ordered data mode [ 1410.618319][T18377] reiserfs: using flush barriers [ 1410.636294][T18377] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1410.684682][T18377] REISERFS (device loop3): checking transaction log (loop3) [ 1410.874814][T18377] REISERFS (device loop3): Using tea hash to sort names [ 1410.884570][T18377] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1410.902946][T18377] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1411.183947][T18395] mkiss: ax0: crc mode is auto. [ 1411.377796][T18413] loop2: detected capacity change from 0 to 64 [ 1411.606181][T18421] loop0: detected capacity change from 0 to 1024 [ 1411.824236][ T1141] hfsplus: b-tree write err: -5, ino 25 [ 1411.835283][ T1141] hfsplus: b-tree write err: -5, ino 4 [ 1411.845268][ T1141] hfsplus: b-tree write err: -5, ino 2 [ 1412.261049][T18446] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.19592'. [ 1412.407732][T18405] loop1: detected capacity change from 0 to 40427 [ 1412.435536][T18405] F2FS-fs (loop1): invalid crc value [ 1412.468188][T18426] loop3: detected capacity change from 0 to 32768 [ 1412.508346][T18405] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1412.578861][T18426] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1412.600865][T18405] F2FS-fs (loop1): Start checkpoint disabled! [ 1412.663480][T18405] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1412.675673][T18426] XFS (loop3): Ending clean mount [ 1412.815636][ T5768] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1413.076510][T18468] loop2: detected capacity change from 0 to 4096 [ 1413.120298][T18468] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1413.173498][ T3455] kworker/u4:10: attempt to access beyond end of device [ 1413.173498][ T3455] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1413.238609][ T3455] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1413.245844][ T3455] kworker/u4:10: attempt to access beyond end of device [ 1413.245844][ T3455] loop1: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 1413.318461][ T3455] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1413.415491][T18476] loop3: detected capacity change from 0 to 4096 [ 1413.531484][T18481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1413.628284][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1413.628301][ T28] audit: type=1800 audit(1413.607:8550): pid=18476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19595" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1414.619210][T18531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19609'. [ 1414.638791][T17870] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1414.660128][T18537] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.19611'. [ 1414.663745][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19609'. [ 1414.858908][T17870] usb 1-1: Using ep0 maxpacket: 8 [ 1414.878633][T18551] tipc: Enabling of bearer rejected, failed to enable media [ 1414.884431][T17870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.899619][T17870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.914964][T17870] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1414.925757][T17870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.940863][T17870] usb 1-1: config 0 descriptor?? [ 1415.068510][ T5804] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1415.280726][ T5804] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1415.308354][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.330254][ T5804] usb 4-1: config 0 descriptor?? [ 1415.356894][ T5804] cp210x 4-1:0.0: cp210x converter detected [ 1415.373705][T17870] cherry 0003:046A:0027.0006: unknown main item tag 0x3 [ 1415.386681][T17870] cherry 0003:046A:0027.0006: unknown main item tag 0x1 [ 1415.395115][T17870] cherry 0003:046A:0027.0006: bogus close delimiter [ 1415.418484][T17870] cherry 0003:046A:0027.0006: item 0 0 2 10 parsing failed [ 1415.437604][T17870] cherry: probe of 0003:046A:0027.0006 failed with error -22 [ 1415.608419][T18559] loop2: detected capacity change from 0 to 32768 [ 1415.627947][T17870] usb 1-1: USB disconnect, device number 120 [ 1415.765631][T18565] loop1: detected capacity change from 0 to 32768 [ 1415.833465][T18565] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1415.850056][T18565] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1415.949292][ T5804] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1415.963772][ T5804] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1415.975230][ T5804] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1415.985052][ T5804] usb 4-1: USB disconnect, device number 10 [ 1415.998730][ T5804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1416.009859][ T5804] cp210x 4-1:0.0: device disconnected [ 1416.047201][T18565] XFS (loop1): Ending clean mount [ 1416.104556][T18565] XFS (loop1): Quotacheck needed: Please wait. [ 1416.226155][T18565] XFS (loop1): Quotacheck: Done. [ 1416.372959][ T5763] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1416.637461][T18626] loop3: detected capacity change from 0 to 64 [ 1416.692910][T18626] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1417.028837][T18644] genirq: Flags mismatch irq 10. 00000000 (pcl812) vs. 00000080 (virtio2) [ 1417.158625][T29182] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1417.282518][T18658] loop3: detected capacity change from 0 to 512 [ 1417.373644][T29182] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1417.388433][T29182] usb 2-1: config 0 has no interface number 0 [ 1417.420533][T29182] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1417.436597][T29182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.471818][T29182] usb 2-1: Product: syz [ 1417.476046][T29182] usb 2-1: Manufacturer: syz [ 1417.497138][T29182] usb 2-1: SerialNumber: syz [ 1417.519788][T29182] usb 2-1: config 0 descriptor?? [ 1417.531677][T18675] loop3: detected capacity change from 0 to 256 [ 1417.562301][T29182] usb 2-1: selecting invalid altsetting 1 [ 1417.591843][T29182] dvb_ttusb_budget: ttusb_init_controller: error [ 1417.628489][T29182] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1417.746093][T29182] DVB: Unable to find symbol stv0299_attach() [ 1417.829526][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19640'. [ 1417.830199][T18691] genirq: Flags mismatch irq 10. 00000000 (pcl812) vs. 00000080 (virtio2) [ 1417.838932][T18695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19640'. [ 1417.857056][T18695] netlink: 'syz.3.19640': attribute type 7 has an invalid length. [ 1417.896662][T29182] DVB: Unable to find symbol tda8083_attach() [ 1417.918920][T29182] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1417.941741][T29182] usb 2-1: USB disconnect, device number 121 [ 1418.032915][T18714] hsr0: MTU too low for tipc bearer [ 1418.066161][T18714] tipc: Enabling of bearer rejected, failed to enable media [ 1418.128596][T18718] loop0: detected capacity change from 0 to 128 [ 1418.192514][T18718] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 1418.204597][T18718] FAT-fs (loop0): Filesystem has been set read-only [ 1418.211640][T18722] loop3: detected capacity change from 0 to 1024 [ 1418.361589][ T3455] hfsplus: b-tree write err: -5, ino 25 [ 1418.367359][ T3455] hfsplus: b-tree write err: -5, ino 4 [ 1418.402767][ T3455] hfsplus: b-tree write err: -5, ino 2 [ 1418.779583][T18711] loop2: detected capacity change from 0 to 32768 [ 1418.837005][T18711] JBD2: Ignoring recovery information on journal [ 1418.880635][T18711] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1419.058663][T17870] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1419.169393][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 1419.271899][T17870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1419.303407][T17870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.337331][T17870] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1419.363733][T17870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.393322][T17870] usb 4-1: config 0 descriptor?? [ 1419.431387][T17870] hub 4-1:0.0: USB hub found [ 1419.547992][T18778] loop1: detected capacity change from 0 to 512 [ 1419.637235][T17870] hub 4-1:0.0: 1 port detected [ 1419.652638][T18778] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.19657: couldn't read orphan inode 26 (err -116) [ 1419.678017][T18778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1419.715735][T18778] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #3: comm syz.1.19657: corrupted inode contents [ 1419.756396][T18778] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #3: comm syz.1.19657: mark_inode_dirty error [ 1419.780246][T18778] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.19657: bg 0: block 64: padding at end of block bitmap is not set [ 1419.805369][T18778] Quota error (device loop1): write_blk: dquota write failed [ 1419.813522][T18778] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1419.824673][T18778] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.19657: Failed to acquire dquot type 0 [ 1419.830734][T18743] loop0: detected capacity change from 0 to 40427 [ 1419.844710][T17870] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1419.851515][T19734] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1419.866912][T17870] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1419.878584][T18743] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1419.880833][T17870] usbhid 4-1:0.0: can't add hid device: -71 [ 1419.888476][T18743] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1419.901969][T17870] usbhid: probe of 4-1:0.0 failed with error -71 [ 1419.945227][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.950517][T17870] usb 4-1: USB disconnect, device number 11 [ 1419.954768][T18743] F2FS-fs (loop0): invalid crc value [ 1420.030204][T18743] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1420.073739][T19734] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1420.082635][T19734] usb 3-1: config 0 has no interface number 0 [ 1420.106997][T19734] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1420.128121][T19734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.137124][T19734] usb 3-1: Product: syz [ 1420.141826][T19734] usb 3-1: Manufacturer: syz [ 1420.146480][T19734] usb 3-1: SerialNumber: syz [ 1420.147176][T18743] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1420.160899][T19734] usb 3-1: config 0 descriptor?? [ 1420.165927][T18743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1420.193819][T19734] usb 3-1: selecting invalid altsetting 1 [ 1420.203349][T19734] dvb_ttusb_budget: ttusb_init_controller: error [ 1420.238413][T19734] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1420.369835][T19734] DVB: Unable to find symbol stv0299_attach() [ 1420.467219][T19734] DVB: Unable to find symbol tda8083_attach() [ 1420.498763][T19734] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1420.555714][T19734] usb 3-1: USB disconnect, device number 104 [ 1421.018411][T29182] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1421.072206][T18858] loop0: detected capacity change from 0 to 4096 [ 1421.138753][T18863] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1421.219241][T29182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.258538][T29182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.288576][T29182] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1421.313056][T29182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.328000][ T28] audit: type=1800 audit(1421.327:8551): pid=18858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19661" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1421.344085][T29182] usb 2-1: config 0 descriptor?? [ 1421.831861][T29182] logitech-djreceiver 0003:046D:C52F.0007: unknown main item tag 0x0 [ 1421.851586][T29182] logitech-djreceiver 0003:046D:C52F.0007: unknown main item tag 0x0 [ 1421.909384][T29182] logitech-djreceiver 0003:046D:C52F.0007: unknown main item tag 0x0 [ 1421.917741][T29182] logitech-djreceiver 0003:046D:C52F.0007: unknown main item tag 0x0 [ 1421.959180][T29182] logitech-djreceiver 0003:046D:C52F.0007: unknown main item tag 0x0 [ 1421.967362][T29182] logitech-djreceiver 0003:046D:C52F.0007: unknown main item tag 0x0 [ 1422.016378][T29182] logitech-djreceiver 0003:046D:C52F.0007: unknown main item tag 0x0 [ 1422.057260][T29182] usb 2-1: USB disconnect, device number 122 [ 1422.514651][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19684'. [ 1423.574484][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.581046][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.624731][T18978] loop0: detected capacity change from 0 to 512 [ 1423.646267][T18951] loop3: detected capacity change from 0 to 32768 [ 1423.649808][T18978] EXT4-fs: Ignoring removed i_version option [ 1423.678550][T18951] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1423.696410][T18978] EXT4-fs: Ignoring removed bh option [ 1423.761329][T18978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1423.817462][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19698'. [ 1423.894959][T18978] EXT4-fs error (device loop0): ext4_resize_begin:62: comm syz.0.19696: resize_inode disabled but reserved GDT blocks non-zero [ 1423.955595][T14488] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1424.047393][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.055385][T18998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19701'. [ 1424.578413][ T5804] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1424.775230][T19044] loop1: detected capacity change from 0 to 512 [ 1424.788794][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 1424.807962][ T5804] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1424.824555][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.842803][ T5804] usb 4-1: Product: syz [ 1424.853154][ T5804] usb 4-1: Manufacturer: syz [ 1424.859852][T19044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.866715][ T5804] usb 4-1: SerialNumber: syz [ 1424.971671][ T5804] usb 4-1: config 0 descriptor?? [ 1424.978145][T19044] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.19711: corrupted xattr block 6: invalid header [ 1425.013199][ T5804] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1425.169140][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.657331][ T5804] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 1425.686408][ T5804] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1425.697847][T19092] loop1: detected capacity change from 0 to 1024 [ 1425.719787][ T5804] usb 4-1: USB disconnect, device number 12 [ 1425.729388][T19092] EXT4-fs: Ignoring removed mblk_io_submit option [ 1425.757958][T19092] EXT4-fs: Ignoring removed oldalloc option [ 1425.821877][T19092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1425.857678][T19114] loop2: detected capacity change from 0 to 64 [ 1425.932107][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1426.477571][T19144] loop1: detected capacity change from 0 to 16 [ 1426.509989][T19144] erofs: (device loop1): mounted with root inode @ nid 36. [ 1426.600824][T19144] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1426.971298][T19119] loop0: detected capacity change from 0 to 32768 [ 1427.006760][ T5804] hid-generic 0004:0004:FFFF0001.0008: unknown main item tag 0x0 [ 1427.039456][ T5804] hid-generic 0004:0004:FFFF0001.0008: unknown main item tag 0x0 [ 1427.065670][ T5804] hid-generic 0004:0004:FFFF0001.0008: unknown main item tag 0x0 [ 1427.110605][T19119] JBD2: Ignoring recovery information on journal [ 1427.154359][ T5804] hid-generic 0004:0004:FFFF0001.0008: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 1427.294002][T19119] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1427.343291][T19171] loop2: detected capacity change from 0 to 8192 [ 1427.384983][T19171] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1427.517121][T19193] loop1: detected capacity change from 0 to 512 [ 1427.543399][T19193] EXT4-fs: Ignoring removed orlov option [ 1427.606408][T19193] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1427.620885][T19193] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1427.629622][T19193] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1427.637002][T19193] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1427.651103][T19193] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1427.666253][T19193] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1427.678072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.698066][T19193] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.19737: bg 0: block 40: padding at end of block bitmap is not set [ 1427.740380][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 1427.754822][T19193] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1427.801782][T19193] EXT4-fs (loop1): 1 truncate cleaned up [ 1427.827386][T19193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1427.996787][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.185279][T19220] netlink: 104 bytes leftover after parsing attributes in process `syz.2.19743'. [ 1428.254800][T19222] loop3: detected capacity change from 0 to 1024 [ 1428.341106][T19229] loop0: detected capacity change from 0 to 128 [ 1429.695101][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19763'. [ 1430.071170][T19303] loop3: detected capacity change from 0 to 4096 [ 1430.086771][T19307] loop2: detected capacity change from 0 to 512 [ 1430.133587][T19303] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1430.158635][T19303] NILFS (loop3): trying rollback from an earlier position [ 1430.177101][T19307] EXT4-fs: Ignoring removed i_version option [ 1430.200777][T19307] EXT4-fs: Ignoring removed bh option [ 1430.219895][T19303] NILFS (loop3): recovery complete [ 1430.272141][T19307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1430.274188][T19309] loop0: detected capacity change from 0 to 8192 [ 1430.311664][T19319] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1430.330081][T19309] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1430.575841][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.824981][ T28] audit: type=1326 audit(1430.817:8552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19336 comm="syz.3.19775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1430.879472][ T28] audit: type=1326 audit(1430.817:8553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19336 comm="syz.3.19775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1430.944748][ T28] audit: type=1326 audit(1430.817:8554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19336 comm="syz.3.19775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1431.005762][ T28] audit: type=1326 audit(1430.817:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19336 comm="syz.3.19775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1431.108584][ T28] audit: type=1326 audit(1430.817:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19336 comm="syz.3.19775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1431.183038][ T28] audit: type=1326 audit(1430.817:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19336 comm="syz.3.19775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1431.245466][ T28] audit: type=1326 audit(1430.817:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19336 comm="syz.3.19775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f86c839c819 code=0x7ffc0000 [ 1431.455430][T19357] loop3: detected capacity change from 0 to 8192 [ 1431.480428][T19357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1431.562213][T19357] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1431.578465][T19363] loop1: detected capacity change from 0 to 8192 [ 1431.590801][T19363] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1431.628011][T19372] loop2: detected capacity change from 0 to 1024 [ 1431.635459][T19357] REISERFS (device loop3): using ordered data mode [ 1431.649583][T19372] EXT4-fs: inline encryption not supported [ 1431.665739][T19357] reiserfs: using flush barriers [ 1431.686863][T19372] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1431.721896][T19357] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1431.751293][T19357] REISERFS (device loop3): checking transaction log (loop3) [ 1431.840357][T19357] REISERFS (device loop3): Using r5 hash to sort names [ 1431.847816][T19357] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1431.862164][T19372] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.19784: Freeing blocks not in datazone - block = 0, count = 4096 [ 1431.920012][T19372] EXT4-fs (loop2): Remounting filesystem read-only [ 1431.926715][T19372] EXT4-fs (loop2): 1 orphan inode deleted [ 1431.955360][T19372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1431.967725][T19357] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1431.988687][ T12] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 1432.027891][ T12] Quota error (device loop2): write_blk: dquota write failed [ 1432.073055][ T12] Quota error (device loop2): remove_free_dqentry: Can't write block (2) with free entries [ 1432.088954][T19357] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1432.116274][ T12] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 1432.157725][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 1432.175292][T19357] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1432.205304][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.758612][T19409] loop0: detected capacity change from 0 to 512 [ 1432.853048][T19409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1432.988004][T19384] loop1: detected capacity change from 0 to 32768 [ 1433.058853][T19384] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1433.121231][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19798'. [ 1433.126766][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.150390][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19798'. [ 1433.160517][T19432] netlink: 'syz.3.19798': attribute type 14 has an invalid length. [ 1433.168996][T19432] netlink: 'syz.3.19798': attribute type 12 has an invalid length. [ 1433.227495][T19384] XFS (loop1): Ending clean mount [ 1433.299642][T19384] XFS (loop1): Quotacheck needed: Please wait. [ 1433.516439][T19445] loop3: detected capacity change from 0 to 4096 [ 1433.533079][T19384] XFS (loop1): Quotacheck: Done. [ 1433.558476][T19452] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1433.565424][T19452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1433.635539][T19452] vhci_hcd vhci_hcd.0: Device attached [ 1433.707009][T19454] vhci_hcd: connection closed [ 1433.707282][ T3431] vhci_hcd: stop threads [ 1433.708093][T19445] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1433.728396][ T3431] vhci_hcd: release socket [ 1433.733214][ T3431] vhci_hcd: disconnect device [ 1433.785331][T19445] ntfs3: loop3: Failed to load $Extend (-22). [ 1433.786363][ T5763] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1433.808937][T19445] ntfs3: loop3: Failed to initialize $Extend. [ 1434.624639][T19498] loop3: detected capacity change from 0 to 256 [ 1434.743114][T19498] FAT-fs (loop3): Directory bread(block 64) failed [ 1434.762494][T19498] FAT-fs (loop3): Directory bread(block 65) failed [ 1434.789594][T19498] FAT-fs (loop3): Directory bread(block 66) failed [ 1434.818830][T19498] FAT-fs (loop3): Directory bread(block 67) failed [ 1434.825776][T19498] FAT-fs (loop3): Directory bread(block 68) failed [ 1434.847169][T19498] FAT-fs (loop3): Directory bread(block 69) failed [ 1434.867345][T19498] FAT-fs (loop3): Directory bread(block 70) failed [ 1434.880567][T19508] loop2: detected capacity change from 0 to 512 [ 1434.893823][T19498] FAT-fs (loop3): Directory bread(block 71) failed [ 1434.906760][T19508] EXT4-fs: Ignoring removed i_version option [ 1434.915883][T19498] FAT-fs (loop3): Directory bread(block 72) failed [ 1434.930507][T19498] FAT-fs (loop3): Directory bread(block 73) failed [ 1434.937844][T19508] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: comm syz.2.19816: inode #196608: comm syz.2.19816: iget: illegal inode # [ 1434.996793][T19508] EXT4-fs (loop2): no journal found [ 1435.018300][T19508] EXT4-fs (loop2): can't get journal size [ 1435.069280][T19508] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1435.160201][T19508] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1435.225990][T19508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.235562][T19522] loop0: detected capacity change from 0 to 512 [ 1435.309380][T19508] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.19816: Logical block already allocated [ 1435.338632][T19522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 1435.418676][T19522] System zones: 1-12 [ 1435.456603][T19522] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.19818: corrupted in-inode xattr: e_value size too large [ 1435.464741][T19539] loop3: detected capacity change from 0 to 256 [ 1435.494721][T19522] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.19818: couldn't read orphan inode 15 (err -117) [ 1435.534644][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.585527][T19522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1435.613115][T19539] FAT-fs (loop3): Directory bread(block 64) failed [ 1435.634986][T19539] FAT-fs (loop3): Directory bread(block 65) failed [ 1435.659290][T19539] FAT-fs (loop3): Directory bread(block 66) failed [ 1435.665979][T19539] FAT-fs (loop3): Directory bread(block 67) failed [ 1435.695001][T19539] FAT-fs (loop3): Directory bread(block 68) failed [ 1435.706126][T19539] FAT-fs (loop3): Directory bread(block 69) failed [ 1435.739961][T19539] FAT-fs (loop3): Directory bread(block 70) failed [ 1435.752157][T19539] FAT-fs (loop3): Directory bread(block 71) failed [ 1435.773997][T19539] FAT-fs (loop3): Directory bread(block 72) failed [ 1435.800322][T19539] FAT-fs (loop3): Directory bread(block 73) failed [ 1435.861328][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.160076][T19567] sp0: Synchronizing with TNC [ 1436.216621][T19566] [U] è` [ 1436.462765][T19585] loop0: detected capacity change from 0 to 4096 [ 1436.511121][T19585] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1436.548546][T19585] NILFS (loop0): trying rollback from an earlier position [ 1436.616801][T19585] NILFS (loop0): recovery complete [ 1436.636185][T19596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19835'. [ 1436.646320][T19597] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1437.056522][T19576] loop1: detected capacity change from 0 to 40427 [ 1437.079185][T19576] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 1437.102943][T19576] F2FS-fs (loop1): Image doesn't support compression [ 1437.136084][T19576] F2FS-fs (loop1): Image doesn't support compression [ 1437.178021][T19576] F2FS-fs (loop1): invalid crc value [ 1437.225842][T19576] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1437.461512][T19576] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1437.605909][T19576] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of __insert_extent_tree+0x200/0x650 [ 1437.670893][T19576] syz.1.19829: attempt to access beyond end of device [ 1437.670893][T19576] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1437.724872][T19640] loop0: detected capacity change from 0 to 4096 [ 1437.744492][T19640] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1437.795407][T19649] loop2: detected capacity change from 0 to 512 [ 1437.845502][T19649] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1437.854169][T19649] System zones: 0-2, 18-18, 34-34 [ 1437.863893][ T5763] syz-executor: attempt to access beyond end of device [ 1437.863893][ T5763] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1437.895826][ T5763] F2FS-fs (loop1): Remounting filesystem read-only [ 1437.924673][T19649] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 1437.973100][T19649] EXT4-fs (loop2): Remounting filesystem read-only [ 1437.994069][T19649] EXT4-fs (loop2): 1 truncate cleaned up [ 1438.001133][T19649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1438.036605][ T3431] __quota_error: 3 callbacks suppressed [ 1438.036619][ T3431] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1438.107663][T19660] loop3: detected capacity change from 0 to 512 [ 1438.114435][ T3431] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1438.131186][T19660] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1438.151627][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.165184][T19660] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1438.181302][ T3431] Quota error (device loop2): write_blk: dquota write failed [ 1438.195256][T19660] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #11: comm syz.3.19853: corrupted inode contents [ 1438.218075][T19660] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #11: comm syz.3.19853: mark_inode_dirty error [ 1438.221351][ T3431] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 1438.251701][T19660] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.19853: invalid indirect mapped block 1 (level 1) [ 1438.273774][T19660] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #11: comm syz.3.19853: corrupted inode contents [ 1438.286805][ T3431] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1438.298566][ T3431] Quota error (device loop2): write_blk: dquota write failed [ 1438.306072][ T3431] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 1438.322330][ T3431] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 1438.332737][T19660] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1438.341951][ T3431] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1438.358340][T19660] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #11: comm syz.3.19853: corrupted inode contents [ 1438.358556][ T3431] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1438.383314][ T3431] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1438.481976][T19660] EXT4-fs error (device loop3): ext4_truncate:4301: inode #11: comm syz.3.19853: mark_inode_dirty error [ 1438.547594][T19660] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1438.575793][T19660] EXT4-fs (loop3): 1 truncate cleaned up [ 1438.601565][T19660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1438.694250][T19660] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.19853: path /4958/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1438.880926][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.953106][T19689] syz.2.19858 (19689) used obsolete PPPIOCDETACH ioctl [ 1438.998359][ T5804] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1439.056741][T19702] dvmrp0: left allmulticast mode [ 1439.208827][ T5804] usb 1-1: Using ep0 maxpacket: 16 [ 1439.219941][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.258844][ T5804] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1439.278914][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.320721][ T5804] usb 1-1: config 0 descriptor?? [ 1439.450113][ T5804] rc_core: IR keymap rc-xbox-dvd not found [ 1439.456704][ T5804] Registered IR keymap rc-empty [ 1439.465341][ T5804] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1439.488384][ T5804] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input82 [ 1439.612434][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1439.641162][ T5804] usb 1-1: USB disconnect, device number 121 [ 1439.676413][ T9117] udevd[9117]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1439.747959][T19750] loop2: detected capacity change from 0 to 256 [ 1439.766815][T19750] exfat: Deprecated parameter 'utf8' [ 1439.775506][T19750] exfat: Deprecated parameter 'namecase' [ 1439.803648][T19750] exfat: Deprecated parameter 'namecase' [ 1439.832961][T19750] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f78d, utbl_chksum : 0xe619d30d) [ 1440.484302][T19795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19880'. [ 1440.703603][T19807] netlink: 168 bytes leftover after parsing attributes in process `syz.0.19883'. [ 1440.730132][T19809] Bluetooth: MGMT ver 1.22 [ 1440.910888][T19817] netlink: 'syz.0.19886': attribute type 4 has an invalid length. [ 1440.987899][T19823] loop1: detected capacity change from 0 to 512 [ 1441.040642][T19823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1441.208793][T19839] loop0: detected capacity change from 0 to 512 [ 1441.259079][T19839] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1441.267422][T19839] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1441.316732][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.332771][T19839] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1441.387393][T19839] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1441.438564][T19839] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1441.499526][T19839] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.19890: bg 0: block 15: invalid block bitmap [ 1441.559464][T19853] loop3: detected capacity change from 0 to 4096 [ 1441.576396][T19839] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1441.621913][T19859] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1441.636128][T19839] EXT4-fs (loop0): 1 truncate cleaned up [ 1441.679679][T19839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1441.856834][T19868] loop1: detected capacity change from 0 to 2048 [ 1441.858840][T19839] EXT4-fs error (device loop0): ext4_get_link:104: inode #16: comm syz.0.19890: bad symlink. [ 1441.880004][T19872] EXT4-fs error (device loop0): ext4_get_link:104: inode #16: comm syz.0.19890: bad symlink. [ 1441.885175][T19853] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean [ 1441.937776][T19868] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1441.952847][T19853] NILFS (loop3): nilfs_sufile_do_free: segment 8 is already clean [ 1441.987191][T19868] NILFS (loop1): mounting unchecked fs [ 1442.095624][T19868] NILFS (loop1): recovery complete [ 1442.130785][T19879] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1442.150073][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.287733][T19945] loop0: detected capacity change from 0 to 128 [ 1443.384535][T19948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19914'. [ 1443.385472][T19945] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1443.662226][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1443.749577][T19966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.817269][T19923] loop2: detected capacity change from 0 to 32768 [ 1443.876662][T19923] JBD2: Ignoring recovery information on journal [ 1443.973379][T19923] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1443.980500][T19978] loop0: detected capacity change from 0 to 512 [ 1443.989832][T19978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1444.017701][T19978] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1444.048662][T19978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 1444.060858][T19978] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 1444.091255][T19978] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1444.101534][T19978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1444.147927][T19978] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 1444.223996][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.325905][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 1444.721385][T20004] loop0: detected capacity change from 0 to 2048 [ 1444.775594][T20016] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1445.418550][T17870] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1445.545148][T20012] loop2: detected capacity change from 0 to 40427 [ 1445.569210][T20012] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1445.577054][T20012] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1445.613545][T20012] F2FS-fs (loop2): invalid crc value [ 1445.628561][T17870] usb 4-1: Using ep0 maxpacket: 32 [ 1445.636003][T20012] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1445.651421][T17870] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1445.666239][T20056] loop1: detected capacity change from 0 to 512 [ 1445.682966][T17870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.705939][T20056] EXT4-fs: Ignoring removed bh option [ 1445.718929][T17870] usb 4-1: config 0 has no interface number 0 [ 1445.740176][T17870] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1445.740679][T20056] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1445.777200][T20012] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1445.791016][T17870] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1445.800899][T20012] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1445.812364][T17870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.831614][T17870] usb 4-1: Product: syz [ 1445.841767][T17870] usb 4-1: Manufacturer: syz [ 1445.846419][T17870] usb 4-1: SerialNumber: syz [ 1445.849966][T20056] EXT4-fs (loop1): 1 truncate cleaned up [ 1445.876771][T20056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1445.886111][T17870] usb 4-1: config 0 descriptor?? [ 1445.911704][T17870] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1445.931344][T17870] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 1446.115044][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.117174][T17870] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1446.244809][T20043] loop0: detected capacity change from 0 to 40427 [ 1446.312417][T20043] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 1446.324400][T17870] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 1446.326395][T20043] F2FS-fs (loop0): Image doesn't support compression [ 1446.340275][T20043] F2FS-fs (loop0): Image doesn't support compression [ 1446.380284][T20043] F2FS-fs (loop0): invalid crc value [ 1446.423754][T20043] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1446.550575][T17870] usb 4-1: USB disconnect, device number 13 [ 1446.557095][T17870] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 1446.601559][T20043] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1446.762285][T20043] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of __insert_extent_tree+0x200/0x650 [ 1446.777805][T20097] loop1: detected capacity change from 0 to 4096 [ 1446.802805][T20043] syz.0.19937: attempt to access beyond end of device [ 1446.802805][T20043] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1446.903565][ T5771] syz-executor: attempt to access beyond end of device [ 1446.903565][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1446.973914][ T5771] F2FS-fs (loop0): Remounting filesystem read-only [ 1447.850490][T20142] loop0: detected capacity change from 0 to 2048 [ 1447.872410][T20142] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1447.956389][ T9117] udevd[9117]: incorrect nilfs2 checksum on /dev/loop0 [ 1447.963693][T20148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1448.093786][T20123] loop3: detected capacity change from 0 to 32768 [ 1448.127655][T20152] tipc: Started in network mode [ 1448.158666][T20152] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1448.167595][ T28] audit: type=1800 audit(1448.147:8559): pid=20123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19954" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 1448.186225][T20123] ERROR: (device loop3): dbAllocBits: leaf page corrupt [ 1448.186225][T20123] [ 1448.207548][T20152] tipc: Enabled bearer , priority 10 [ 1448.235632][T20123] ERROR: (device loop3): remounting filesystem as read-only [ 1448.256472][T20123] syz.3.19954: attempt to access beyond end of device [ 1448.256472][T20123] loop3: rw=34817, sector=4680704, nr_sectors = 968 limit=32768 [ 1448.303557][ T111] blkno = 8ed80, nblocks = 79 [ 1448.313197][ T111] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 1448.313197][ T111] [ 1448.566576][T20167] [ 1448.568957][T20167] ====================================================== [ 1448.576156][T20167] WARNING: possible circular locking dependency detected [ 1448.583371][T20167] syzkaller #0 Not tainted [ 1448.587807][T20167] ------------------------------------------------------ [ 1448.594832][T20167] syz.2.19964/20167 is trying to acquire lock: [ 1448.600992][T20167] ffffffff97690fd8 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x67/0x230 [ 1448.611053][T20167] [ 1448.611053][T20167] but task is already holding lock: [ 1448.618428][T20167] ffff88802b0edeb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 1448.628814][T20167] [ 1448.628814][T20167] which lock already depends on the new lock. [ 1448.628814][T20167] [ 1448.639245][T20167] [ 1448.639245][T20167] the existing dependency chain (in reverse order) is: [ 1448.648270][T20167] [ 1448.648270][T20167] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1448.656581][T20167] __mutex_lock+0x136/0xcc0 [ 1448.661633][T20167] nf_tables_dumpreset_obj+0x72/0xa0 [ 1448.667494][T20167] netlink_dump+0x747/0xe50 [ 1448.672555][T20167] __netlink_dump_start+0x5f1/0x810 [ 1448.678304][T20167] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1448.684482][T20167] nf_tables_getobj_reset+0x1e1/0x630 [ 1448.690397][T20167] nfnetlink_rcv_msg+0x8a4/0x12b0 [ 1448.695967][T20167] netlink_rcv_skb+0x241/0x4d0 [ 1448.701296][T20167] nfnetlink_rcv+0x2c9/0x24a0 [ 1448.706551][T20167] netlink_unicast+0x751/0x8d0 [ 1448.711855][T20167] netlink_sendmsg+0x8d0/0xbf0 [ 1448.717158][T20167] ____sys_sendmsg+0x5ba/0x960 [ 1448.722458][T20167] ___sys_sendmsg+0x2a6/0x360 [ 1448.727667][T20167] __se_sys_sendmsg+0x1c2/0x2b0 [ 1448.733056][T20167] do_syscall_64+0x55/0xa0 [ 1448.738106][T20167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.744552][T20167] [ 1448.744552][T20167] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1448.752861][T20167] __mutex_lock+0x136/0xcc0 [ 1448.757944][T20167] __netlink_dump_start+0xf4/0x810 [ 1448.763602][T20167] ip_set_dump+0x15c/0x1f0 [ 1448.764915][T20160] loop1: detected capacity change from 0 to 40427 [ 1448.768562][T20167] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 1448.768588][T20167] netlink_rcv_skb+0x241/0x4d0 [ 1448.768608][T20167] nfnetlink_rcv+0x2c9/0x24a0 [ 1448.768628][T20167] netlink_unicast+0x751/0x8d0 [ 1448.795411][T20160] F2FS-fs (loop1): invalid crc_offset: 4 [ 1448.796293][T20167] netlink_sendmsg+0x8d0/0xbf0 [ 1448.807228][T20167] ____sys_sendmsg+0x5ba/0x960 [ 1448.812535][T20167] ___sys_sendmsg+0x2a6/0x360 [ 1448.817757][T20167] __se_sys_sendmsg+0x1c2/0x2b0 [ 1448.823323][T20167] do_syscall_64+0x55/0xa0 [ 1448.828364][T20167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.835074][T20167] [ 1448.835074][T20167] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1448.842942][T20167] __lock_acquire+0x2df1/0x7d40 [ 1448.848317][T20167] lock_acquire+0x19e/0x420 [ 1448.853352][T20167] __mutex_lock+0x136/0xcc0 [ 1448.858470][T20167] ip_set_nfnl_get_byindex+0x67/0x230 [ 1448.864472][T20167] set_match_v1_checkentry+0x71/0x230 [ 1448.870372][T20167] xt_check_match+0x4ea/0xc50 [ 1448.875650][T20167] __nft_match_init+0x67a/0x8d0 [ 1448.881034][T20167] nf_tables_newrule+0x176c/0x2880 [ 1448.886696][T20167] nfnetlink_rcv+0x113e/0x24a0 [ 1448.892098][T20167] netlink_unicast+0x751/0x8d0 [ 1448.897420][T20167] netlink_sendmsg+0x8d0/0xbf0 [ 1448.902725][T20167] ____sys_sendmsg+0x5ba/0x960 [ 1448.908044][T20167] ___sys_sendmsg+0x2a6/0x360 [ 1448.913260][T20167] __se_sys_sendmsg+0x1c2/0x2b0 [ 1448.918656][T20167] do_syscall_64+0x55/0xa0 [ 1448.923620][T20167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.930056][T20167] [ 1448.930056][T20167] other info that might help us debug this: [ 1448.930056][T20167] [ 1448.940295][T20167] Chain exists of: [ 1448.940295][T20167] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1448.940295][T20167] [ 1448.949715][T20160] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1448.954737][T20167] Possible unsafe locking scenario: [ 1448.954737][T20167] [ 1448.954750][T20167] CPU0 CPU1 [ 1448.954755][T20167] ---- ---- [ 1448.954759][T20167] lock(&nft_net->commit_mutex); [ 1448.954774][T20167] lock(nlk_cb_mutex-NETFILTER); [ 1448.954787][T20167] lock(&nft_net->commit_mutex); [ 1448.999644][T20160] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1449.007122][T20167] lock(nfnl_subsys_ipset); [ 1449.011730][T20167] [ 1449.011730][T20167] *** DEADLOCK *** [ 1449.011730][T20167] [ 1449.019982][T20167] 1 lock held by syz.2.19964/20167: [ 1449.025197][T20167] #0: ffff88802b0edeb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 1449.035940][T20167] [ 1449.035940][T20167] stack backtrace: [ 1449.041841][T20167] CPU: 1 PID: 20167 Comm: syz.2.19964 Not tainted syzkaller #0 [ 1449.049660][T20167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1449.059825][T20167] Call Trace: [ 1449.063139][T20167] [ 1449.066092][T20167] dump_stack_lvl+0x18c/0x250 [ 1449.070812][T20167] ? load_image+0x420/0x420 [ 1449.075453][T20167] ? show_regs_print_info+0x20/0x20 [ 1449.080805][T20167] ? print_circular_bug+0x12b/0x1a0 [ 1449.086036][T20167] check_noncircular+0x2fc/0x400 [ 1449.091065][T20167] ? print_deadlock_bug+0x5d0/0x5d0 [ 1449.096313][T20167] ? lockdep_lock+0xf5/0x230 [ 1449.100922][T20167] ? _find_first_zero_bit+0xd3/0x100 [ 1449.106383][T20167] __lock_acquire+0x2df1/0x7d40 [ 1449.111242][T20167] ? mark_lock+0x94/0x320 [ 1449.115602][T20167] ? verify_lock_unused+0x140/0x140 [ 1449.120811][T20167] ? __lock_acquire+0x1273/0x7d40 [ 1449.125947][T20167] lock_acquire+0x19e/0x420 [ 1449.130442][T20167] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1449.135984][T20167] ? __might_sleep+0xe0/0xe0 [ 1449.140568][T20167] ? read_lock_is_recursive+0x20/0x20 [ 1449.146025][T20167] __mutex_lock+0x136/0xcc0 [ 1449.150546][T20167] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1449.156104][T20167] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 1449.162397][T20167] ? ip_set_pernet+0x23/0x230 [ 1449.167106][T20167] ? mutex_lock_nested+0x20/0x20 [ 1449.172069][T20167] ? ip_set_pernet+0x23/0x230 [ 1449.177009][T20167] ? ip_set_pernet+0x23/0x230 [ 1449.181685][T20167] ip_set_nfnl_get_byindex+0x67/0x230 [ 1449.187050][T20167] set_match_v1_checkentry+0x71/0x230 [ 1449.192419][T20167] xt_check_match+0x4ea/0xc50 [ 1449.197115][T20167] ? xt_check_proc_name+0x270/0x270 [ 1449.202322][T20167] ? __stack_depot_save+0x1f/0x630 [ 1449.207442][T20167] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1449.213424][T20167] __nft_match_init+0x67a/0x8d0 [ 1449.218286][T20167] ? ___sys_sendmsg+0x2a6/0x360 [ 1449.223159][T20167] ? nft_match_large_dump+0x50/0x50 [ 1449.228388][T20167] ? nf_tables_newrule+0x150e/0x2880 [ 1449.233694][T20167] ? rcu_is_watching+0x15/0xb0 [ 1449.238474][T20167] ? nf_tables_newrule+0x150e/0x2880 [ 1449.243784][T20167] ? __kmalloc+0xe2/0x230 [ 1449.248290][T20167] nf_tables_newrule+0x176c/0x2880 [ 1449.253439][T20167] ? nf_tables_delchain+0x1060/0x1060 [ 1449.258824][T20167] ? __lock_acquire+0x7d40/0x7d40 [ 1449.263861][T20167] ? mutex_unlock+0x10/0x10 [ 1449.268485][T20167] ? __nla_parse+0x40/0x50 [ 1449.272903][T20167] nfnetlink_rcv+0x113e/0x24a0 [ 1449.277704][T20167] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1449.283543][T20167] ? __lock_acquire+0x7d40/0x7d40 [ 1449.288572][T20167] ? netlink_deliver_tap+0x2e/0x1b0 [ 1449.293771][T20167] netlink_unicast+0x751/0x8d0 [ 1449.298551][T20167] netlink_sendmsg+0x8d0/0xbf0 [ 1449.303427][T20167] ? netlink_getsockopt+0x590/0x590 [ 1449.308689][T20167] ? aa_sock_msg_perm+0x94/0x150 [ 1449.313647][T20167] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1449.318427][ T966] tipc: Node number set to 4269801488 [ 1449.318924][T20167] ? security_socket_sendmsg+0x80/0xa0 [ 1449.329757][T20167] ? netlink_getsockopt+0x590/0x590 [ 1449.334978][T20167] ____sys_sendmsg+0x5ba/0x960 [ 1449.339758][T20167] ? __asan_memset+0x22/0x40 [ 1449.344341][T20167] ? __sys_sendmsg_sock+0x30/0x30 [ 1449.349353][T20167] ? __import_iovec+0x5f2/0x850 [ 1449.354195][T20167] ? import_iovec+0x73/0xa0 [ 1449.358793][T20167] ___sys_sendmsg+0x2a6/0x360 [ 1449.363474][T20167] ? __sys_sendmsg+0x2a0/0x2a0 [ 1449.368250][T20167] __se_sys_sendmsg+0x1c2/0x2b0 [ 1449.373106][T20167] ? __x64_sys_sendmsg+0x80/0x80 [ 1449.378036][T20167] ? lockdep_hardirqs_on+0x98/0x150 [ 1449.383256][T20167] do_syscall_64+0x55/0xa0 [ 1449.387692][T20167] ? clear_bhb_loop+0x40/0x90 [ 1449.392372][T20167] ? clear_bhb_loop+0x40/0x90 [ 1449.397046][T20167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1449.402938][T20167] RIP: 0033:0x7ff8c1d9c819 [ 1449.407345][T20167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.426951][T20167] RSP: 002b:00007ff8c2cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1449.435381][T20167] RAX: ffffffffffffffda RBX: 00007ff8c2015fa0 RCX: 00007ff8c1d9c819 [ 1449.443360][T20167] RDX: 0000000024044010 RSI: 0000200000000140 RDI: 0000000000000003 [ 1449.451334][T20167] RBP: 00007ff8c1e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1449.459394][T20167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.467480][T20167] R13: 00007ff8c2016038 R14: 00007ff8c2015fa0 R15: 00007fffe122eac8 [ 1449.475790][T20167] [ 1449.481895][T20167] set match dimension is over the limit! [ 1449.728510][ T28] audit: type=1326 audit(1449.717:8560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20185 comm="syz.1.19967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf8919c819 code=0x0