last executing test programs: 2m33.645778884s ago: executing program 3 (id=17105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) 2m33.311651393s ago: executing program 3 (id=17109): r0 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x9, @sdr={0x32314247, 0x4000}}) 2m33.107850225s ago: executing program 3 (id=17112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 2m32.787605055s ago: executing program 3 (id=17117): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000003c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\\%{]', 0x3a, '+:', 0x3a, './file0'}, 0x2d) 2m32.559122888s ago: executing program 3 (id=17120): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m31.548902848s ago: executing program 3 (id=17135): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r0, 0x0, 0x2) 2m16.463219683s ago: executing program 32 (id=17135): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r0, 0x0, 0x2) 1m20.151697064s ago: executing program 4 (id=18075): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local, 0xd3ffffff}, 0x10) 1m20.042386851s ago: executing program 4 (id=18078): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800002, &(0x7f0000000100)=ANY=[], 0x1, 0x1b0, &(0x7f0000000700)="$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") lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0xee01) 1m19.772123916s ago: executing program 4 (id=18082): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 1m19.658411523s ago: executing program 4 (id=18084): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$eJzs3AucTlXXAPC19t5nDImnSS7D3nsdnuSyTZLkkiSXJEmSJLeEpEleSUgMIUlDEpLLkMQQksvEpHG/3y8JSdIkSUhuyf5+E37qrb73/b73/fL+vln/3+/87DXnrH3WedZznuecg/m269BaTWpXb0RE8C/BC38kAUAsAAwEgLwAEABA+bjycYAB5JSY9K/thP17PZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/x1z/+Bn///x+Hv//9HMsuM/XJNmeu6AcT8sync/+yN+///VvDPbMT9z964/9lV7JUugP0H4PM/O8jxp2u4/9kb95+x7OxKP3++0gtE/sNegyM5LzTmrzp+xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsL3DaX6YA4NL4StfFGGOMMcYYY4yxfx+f40pXwBhjjDHGGGOMsf97CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgPGsD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv+r/OehJ7wAvaA3JEEf6AsvQj/oDwPgJRgIL8MgeAUGw6uQDENgKLwGw+B1GA5vwAgYCaPgTRgNb8EYGAvjYDykwASYCG/DJHgHJsO7MAWmQipMg+nwHsyAmTAL3ofZ8AHMgbkwD+ZDGnwIC2AhpMNHsAg+hgxYDEtgKSyD5bACVsIqWA1rYC2sg/WwATbCJtgMW2ArbIPtsAM+gZ3wKeyC3bAHPoO98Pmv8gGSfunnf5d/6u/yuyEgoECBChXGYAzGYizmwlyYG3NjHsyDEYxgHMZhPsyH+TE/FsSCGI/xWASLoEGDhIRFsShGMYrFsTiWwBJYCkuhQ4cJmIBl8SYsh+WwPJbHClgBK2IlrIRVsApWxapYDathdayONbAG1sJaeBfehX2wLtbFelgP62P9S4+nsBE2wsbYGJtgE2yKTbEZNsMW2AJbYStsja2xDbbBdtgO22N77IAdMBETsSN2xE7YCTtjZ+yCXbArdsVu2B27Zz6fA/AFfAF7Yw3RB/tiX+yHyTkG4Ev4Er6Mg/AVfAVfxWQcgkPxNXwNX8fheBJH4EgchaOwqngLx+BYJDEeUzAFJ+JEnISTMKvQd3EqpuI0nI7TcQbOxJn4Ps7GD/ADnItzcT6mYRouwIWYjum4CE9hBi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+gAsBPcTfuxmTci3txH+7D/bgfD+ABzMRMPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hs/NeNPym5OhlEFiWUiBExIlbEilwil8gtcos8Io+IiIiIE3Ein8gn8ov8oqAoKOJFvCgiiggjjCARxgCAiIqoKC6KixKihCglSgknnEgQCaKsKCvKiXKivLhFVBC3ioqikmjrqogqoqpo56qJO0R1UV3UEDVFLVFb1BZ1RB1RV9QV9UQ9UV/UFw3E/aKh6IMD8EGR1ZkmYgg2FUOxmWgu5MVPsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHx1r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZEL+6gha8pasra8SybB3bKuvEfWk/fK+vI+2UDeLxvKB2Qj+aBsLB+STeTDsql8RDaTzWUL2VK2ko/K1vIx2Ua2le3k47K9fEJ2kE/KRPmU7Cj9xbfIM7KLfFZ2lc/JbrK77CF/luell71kbwl9QPaVL8p+sr8cEAsA8mU5SL4iB8tXZbIcIofK1+Qw+bocLt+QI+RIOUq+KUfLt+QYOVaOk+NlipwgJ8q35ST5jpws35VT5FSZKqfJAXLgLzPNkvIf5r/9B/mDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tzF1wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvmFUKVVaOVVGJagb/yf5qri6QZVQJX+Tf6m+pD+pr5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezLvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBebHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1b/4vxZp/zl+b0/WeAx10v31km6j+6rX9T9dH89QL+kB+qX9SD9ih6sX9XJeogeql/Tw/Trerh+Q4/QI/Uo/aYerd/SY/RYPU6P1yl6gp6o39aT9Dt6sn5XT9FTdaqepqfr9/QMPVPP0u/r2foDPUfP1fP0fJ2mP9QL9EKdrj/Si/THOkMv1kv0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/Qneqf+VO/Su/Ue/Zneqz/X+/QXer/+Uh/QX+lM/bU+qL/Rh/S3+rD+Th/R3+uj+pg+rn/QJ/SP+qQ+pU/rM/qs/kmf0z/r89pnXdxnfb0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSafyWfym/ymoClo4k28KWKKmCxkyBQ1RU3URE1xU9yUMCVMKVPKOONMgkkwZU1ZU86UM+VNeVPBVDAVTUVT2VQ2t5nbzO3mdnOHucPcae40NU1NU9vUNnVMHVPX1DX1TD1T39Q3DUwD09A0NI1MI9PYNDZNTBPT1DQ1zUwz08K0MK1MK9PatDZtTBvTzrQz7U1708F0MIkm0XQ0HU0n08l0Np1NF9PFdDVdTTfTzfQwPUxP09P0Mr1MkkkyfU1f08/0MwPMADPQDDSDzCAz2Aw2ySbZDDVDzTAzzAw3w80IM9KMyrpQNW+ZMWasGWfGmxSTYiaaiWaSmWQmm8lmipliUk2qmW6mmxlmhpllZpnZZraZY+aYeWaeSTNpZoFZYNJNullkFpkMk2GWmCVmmVlmVpgVZpVZZdaYNWYdrDMbzAazyWwyW8wWs81sMzvMDrPT7DS7zC6zx+wxe81es8/sM/vNfnPAHDCZJtMcNAfNIXPIHDaHzRFzxBw1R81xc9ycMCfMSXPSnDanzVlT4OL3pTexNqfNZa+yue3VNo/Na/8+LmgL2Xhb2Bax2ua3BX4TG2ttCVvSlrKlrbNlbIK98XdxRVvJVrZV7G22qr3dVvtdXMfebevae2w9e6+tbe/6TVzf3mcb2IdtQ0QA29w2ti1tE/uwbWofsc1sc9vCtrTt7RO2g33SJtqnbEf79O/iBXahXWVX2zV2rd1ld9vT9ow9ZL+1Z+1PtpftbQfal+0g+4odbF+1yXbI7+JR9k072r5lx9ixdpwd/7t4ip1qU+00O92+Z2fYmb+L0+yHdrZNt3PsXDvPzv8lzqop3X5kF9mPbYYNYIldapfZ5XaFXXmpVp/Xrrcb7Ea7035qt9itdpvdbndcuhC2u+0e+5ndaz+3B+03dr/90h6wh22m/fqXOOv4Dtvv7BH7vT1qj9nj9gd7wv6oLmVnHfsP9md73noLhAQkSVFAMZSDYikn5aKrKDddTXkoL0XoGoqjaykfXUf5qQAVpEIUT4WpCGkyZIkopKJUjKJ0PV0qrxSVJkdlKIFupLJ0E5Wjm6k83UIV6FaqSJWoMlWh26gq3U7V6A6qTndSDapJtag23UV16G6qS/dQPbqX6tN91IDup4b0ADWiB6kxPURN6GFqSo9QM2pOLagltaJHqTU9Rm2oLbWjx6k9PUEd6ElKpKeoIz1Nnehv1JmeoS70LHWl56gbdace9Dz1pBeoF/WmJOpDfelF6kf9aQC9RAPpZRpEr9BgepWSaQgNpddoGL1Ow+kNGkEjaRS9SaPpLRpDY2kcjacUmkAT6W2aRO/QZHqXptBUSqVpNJ3eoxk0k2bR+zSbPqA5NJfm0XxKow9pAS2kdPqIFtHHlEGLaQktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtAntJM+pV20m/bQZ7SXPqd99AXtpy/pAH1FmfQ1HaRv6BB9S4fpO9+bvqejdIyO0w90gn6kk3SKTtMZOks/0Tn6mc6TJwgxFKEMVRiEMWGOMDbMGeYKrwpzh1eHecK8YSS8JowLrw3zhdeF+cMCYcGwUBgfFg6LhDo0oQ0pDMOiYbEwGl4fFg9vCEuEJcNSYenQhWXChPDGsGx4U1guvDksH94SVghvDSuGlcKH760S3hZWDW8Pq4V3hNXDO8MaYc2wVlg7vCusE94d1g3vCeuF94blwvvCBuH9YcPwgbBR+GDYOHwobBI+HDYNHwmbhc3DFmHLsFX4aNg6fCxsE7YN24WPh+3DJ8IO4ZNhYvhU2DF8+pf19y388/VJYZ+wb/hi+GLo/T1yXnR+NC36YXRBdGE0PfpRdFH042hGdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH10Q3Rj1PvaOcChE0465QIX43K4WJfT5XJXudzuapfH5XURd42Lc9e6fO46l98VcAVdIRfvCrsiTjvjrCMXuqKumIu6611xd4Mr4Uq6Uq60c66MS3AtXSvXyrV2j7k2rq1r5x53j7sn3BPuSfeke8p1dE+7Tu5vrrN7xnVxz7pn3XOum+vuerjnXU83Ic+FczLJ9XV9XT/Xzw1wA9xAN9ANcoPcYDfYJbtkN9QNdcPcMDfcDXcj3Ag3yo1yo91oN8aNcePcOJfiUtxEN9FNcpPcZDfZTXFTXKpLddPddDfDzXBVZ17Yyxw3x81z81yaS3MLXNY1Y7pb5Ba5DJfhlrglbplb5la4FW6VW+XWuDVunVvnNrgNbpPb5La4LW6b2+Z2uB1up9vpdvm8FyZ1e90+t8/td/vdAfeVy3Rfu4PuG3fIfesOu+/cEfe9O+qOuePuB3fC/ehOulPutDvjzrqf3Dn3szvvvEuJTIhMjLwdmRR5JzI58m5kSmRqJDUyLTI98l5kRmRmZFbk/cjsyAeROZG5kXmR+ZG0yIeRBZGFkfTIR5FFkY8jGZHFkSWRpZFlkeUR7wtvCX1RX8xH/fW+uL/Bl/AlfSlf2jtfxif4G31Zf5Mv52/25f0tvoK/1Vf0lXxl/4hv5pv7Fr6lb+Uf9a39Y76Nb+vb+cd9e/+E7+Cf9In+Kd/RP+07+b/5zv4Z38U/67v653w339338M/7nv4F38v39km+j+/rX/T9fH8/wL/kB/qX/SD/ih/sX/XJfogf6l/zw/zrfrh/w4/wI/2omDf96Eu3yDDep/gJfqJ/20/y7/jJ/l0/xU/1qX6an+7f8zP8TD/Lv+9n+w/8HD/Xz/PzfZr/0C/wC326/8gv8h/7DL/40kNlv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+k/9Lr/b7/Gf+b3+c7/Pf+H3+y/9Af+Vz/Rf+4P+G3/If+sP++/8Ef+9P+qP+eP+B3/C/+hP+lP+tD/jz/qf/Dn/sz/P/2eNMcYYY+yfMuHyUPx2zYXH+X3+IEf8auO+AHD11kKZv16fdUW5Lv+FcX8R3z4CAE/17vrgpaVGjaSkpIvbZkgIis0FuPQ3QVli4HK8GNrBE5AIbaHsH9bfX3Q/S/9g/ugtALl+lRMLl+PL838BgEl/MP+jj49aUCE8HfffzD8XoESxyzk54XK8GNr98nylLZT7k/oLtP6T+vHi/Dm/TAFo86uc3HA5vlx/AjwGT0Pib7ZkjDHGGGOMMcYu6C8qd750/3npX3z+0f15vLqckwMux//o/pwxxhhjjDHGGGNX3jPdezz5aGJi287/80G1/1XWPz1oCv9XM/PgDwfeA1z6iQKAf3FCgKyB/CuPYvNfsq/ki6fO369adsYH8J/Ryn/H4Ap/MDHGGGOMMcb+7S5f9P/25+pKFcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVDf8WvE7vSx8gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdaf8VAAD//3aq+3A=") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m19.298818735s ago: executing program 4 (id=18087): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) 1m18.743709287s ago: executing program 4 (id=18091): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000140)) 1m18.375678119s ago: executing program 33 (id=18091): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000140)) 3.546107259s ago: executing program 5 (id=18984): futex(&(0x7f000000cffc)=0x1, 0xd, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x6, 0x5, 0x0, 0x0, &(0x7f0000000100), 0x21fffffe) 2.547759498s ago: executing program 2 (id=18997): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x0, 0xfefffff8}, {0x0, 0x109003ff}, 0xc, 0x3}) 2.480600113s ago: executing program 5 (id=18998): syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302", @ANYRES8], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 2.35264477s ago: executing program 2 (id=18999): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8041, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYBLOB="80efc03a1d090f7814f6167ba6cd02256fc2386f34c62edbc29e2fd00a248dba0f0b2fb7d2721e4da66a5525a2bb69da9f9ca6bec9758c2017e705875234f5efe3203a64bd3e673bb9ac9c8fc39fb627c1b6cb971811029a5c4b83065220255072badd3b38e267469d", @ANYRES32=0x0], 0x0, 0x307, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2.030386149s ago: executing program 2 (id=19003): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) 1.769059335s ago: executing program 2 (id=19006): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x0) 1.483400371s ago: executing program 2 (id=19008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) 1.239438446s ago: executing program 2 (id=19010): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='.\x00', 0x3a424bc, &(0x7f0000004fc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES8], 0x5, 0x0, &(0x7f0000000000)) 1.087010645s ago: executing program 1 (id=19012): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000000)="dd4e2f10", 0x4) 875.146168ms ago: executing program 0 (id=19013): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x19}) 874.469178ms ago: executing program 1 (id=19014): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x8, 0x7d, 0x1ff, 0x106, 0xfffffffe}, 0x1c) 719.731827ms ago: executing program 0 (id=19015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000040c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018013000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010500028005000100980000003c0003800c00028005000100890000002c00018010000300fe800000000000ddffffff000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 715.209468ms ago: executing program 1 (id=19016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x44, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044081}, 0x50) 685.088499ms ago: executing program 5 (id=19017): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 541.558317ms ago: executing program 0 (id=19018): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000900)=0x79) 531.599408ms ago: executing program 1 (id=19019): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000000000000000000000000ffff"], 0x54}}, 0x20000080) 472.891732ms ago: executing program 5 (id=19020): r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 368.213538ms ago: executing program 1 (id=19021): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x800) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 337.878349ms ago: executing program 5 (id=19022): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc}) 243.507645ms ago: executing program 0 (id=19023): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='\x81', 0xfdf4) 211.491047ms ago: executing program 1 (id=19024): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_writeback}]}, 0x1, 0x546, &(0x7f0000000180)="$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") readlink(&(0x7f0000000100)='./file2\x00', &(0x7f0000000700)=""/104, 0x68) 116.852343ms ago: executing program 5 (id=19025): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) 103.025974ms ago: executing program 0 (id=19026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x4040) 0s ago: executing program 0 (id=19027): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) kernel console output (not intermixed with test programs): 1586.517906][ T1187] usb 2-1: Manufacturer: syz [ 1586.522542][ T1187] usb 2-1: SerialNumber: syz [ 1586.551648][ T1187] cdc_mbim 2-1:1.0: MBIM functional descriptor missing [ 1586.568887][ T1187] cdc_mbim 2-1:1.0: bind() failure [ 1586.690245][T29614] netlink: 'syz.2.17171': attribute type 41 has an invalid length. [ 1586.764127][T29792] usb 2-1: USB disconnect, device number 33 [ 1587.837335][T29685] bond0: entered promiscuous mode [ 1587.842633][T29685] bond0: entered allmulticast mode [ 1587.851268][T29685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.864311][T29792] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1588.065059][T29792] usb 2-1: Using ep0 maxpacket: 8 [ 1588.080064][T29792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.101025][T29792] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1588.117341][T29792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.133793][T29792] usb 2-1: Product: syz [ 1588.144017][T29792] usb 2-1: Manufacturer: syz [ 1588.148764][T29792] usb 2-1: SerialNumber: syz [ 1588.170416][T29792] usb 2-1: config 0 descriptor?? [ 1588.196038][T29792] cdc_phonet 2-1:0.0: invalid descriptor buffer length [ 1588.202990][T29792] cdc_phonet: probe of 2-1:0.0 failed with error -22 [ 1588.247078][T29705] netlink: 'syz.2.17197': attribute type 15 has an invalid length. [ 1588.255428][T29705] netlink: 25 bytes leftover after parsing attributes in process `syz.2.17197'. [ 1588.308588][T29708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17198'. [ 1588.455984][T29792] usb 2-1: USB disconnect, device number 34 [ 1588.913326][T29744] : renamed from bond_slave_0 [ 1589.028349][T29750] sit0: left promiscuous mode [ 1589.047929][T29750] bridge_slave_0: left promiscuous mode [ 1589.081581][T29750] vlan0: left promiscuous mode [ 1589.100503][T29750] veth0_vlan: left promiscuous mode [ 1589.115180][T29750] macsec0: left promiscuous mode [ 1589.130308][T29750] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1589.175425][T29750] bond0: left promiscuous mode [ 1589.186922][T29750] bridge0: left promiscuous mode [ 1589.205335][T29750] geneve3: left promiscuous mode [ 1589.219135][T29750] bond5: left promiscuous mode [ 1589.253805][ T28] audit: type=1326 audit(2000000097.640:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29755 comm="syz.2.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a9d9aeb9 code=0x7ffc0000 [ 1589.276278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.334204][ T28] audit: type=1326 audit(2000000097.640:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29755 comm="syz.2.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a9d9aeb9 code=0x7ffc0000 [ 1589.379913][ T28] audit: type=1326 audit(2000000097.690:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29755 comm="syz.2.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a9d9aeb9 code=0x7ffc0000 [ 1589.414353][ T28] audit: type=1326 audit(2000000097.690:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29755 comm="syz.2.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a9d9aeb9 code=0x7ffc0000 [ 1589.501508][ T28] audit: type=1326 audit(2000000097.690:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29755 comm="syz.2.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f21a9d9aeb9 code=0x7ffc0000 [ 1589.524020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.583654][ T28] audit: type=1326 audit(2000000097.690:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29755 comm="syz.2.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a9d9aeb9 code=0x7ffc0000 [ 1589.606148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.624586][ T28] audit: type=1326 audit(2000000097.690:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29755 comm="syz.2.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a9d9aeb9 code=0x7ffc0000 [ 1589.658977][ T28] audit: type=1326 audit(2000000097.710:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29755 comm="syz.2.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f21a9d9aeb9 code=0x7ffc0000 [ 1589.693125][ T28] audit: type=1326 audit(2000000097.710:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29755 comm="syz.2.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f21a9d9aeb9 code=0x7ffc0000 [ 1589.774743][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1589.894022][T29779] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1590.041639][T29787] netlink: 'syz.1.17222': attribute type 21 has an invalid length. [ 1590.062585][T29787] IPv6: NLM_F_CREATE should be specified when creating new route [ 1590.216135][T29797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17225'. [ 1590.414082][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1591.318273][T29859] loop1: detected capacity change from 0 to 512 [ 1591.342169][T29859] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.17246: bad orphan inode 15 [ 1591.366143][T29859] ext4_test_bit(bit=14, block=5) = 0 [ 1591.395251][T29859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1591.555223][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.694510][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1591.906629][T29890] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.17254'. [ 1592.365369][T29920] xt_limit: Overflow, try lower: 65536/2147483648 [ 1592.816943][T29947] libceph: resolve '0.' (ret=-3): failed [ 1592.930362][T29951] @0Ù: renamed from dummy0 (while UP) [ 1593.409727][T29977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17281'. [ 1593.419826][T29977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17281'. [ 1593.940186][T29990] loop1: detected capacity change from 0 to 4096 [ 1593.951833][T29990] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1594.215492][T29980] loop0: detected capacity change from 0 to 40427 [ 1594.276276][T29980] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1594.303702][T29980] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1594.334453][T29980] F2FS-fs (loop0): invalid crc value [ 1594.366710][T29980] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1594.514975][T29980] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 1594.522278][T29980] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1595.473431][T30064] netlink: 'syz.1.17309': attribute type 4 has an invalid length. [ 1595.482412][T30064] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17309'. [ 1595.544965][T23501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1595.688696][T30072] netlink: 'syz.2.17312': attribute type 21 has an invalid length. [ 1595.724028][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17312'. [ 1596.001068][T30088] loop0: detected capacity change from 0 to 64 [ 1596.453510][T30117] loop2: detected capacity change from 0 to 16 [ 1596.462531][T30117] erofs: (device loop2): mounted with root inode @ nid 36. [ 1597.193847][T32554] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1597.387226][T32554] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1597.403784][T32554] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.423903][T32554] usb 2-1: config 220 has no interface number 2 [ 1597.431417][T32554] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1597.454579][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1597.480190][T32554] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1597.499025][T32554] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1597.513721][T32554] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1597.533301][T32554] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1597.553718][T32554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.571678][T32554] usb 2-1: Product: syz [ 1597.576601][T32554] usb 2-1: Manufacturer: syz [ 1597.581278][T32554] usb 2-1: SerialNumber: syz [ 1597.628699][T30167] netlink: 'syz.0.17340': attribute type 32 has an invalid length. [ 1597.843232][T32554] usb 2-1: selecting invalid altsetting 0 [ 1597.870802][T32554] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1597.900541][T32554] usb 2-1: No valid video chain found. [ 1597.935892][T32554] usb 2-1: selecting invalid altsetting 0 [ 1597.962093][T32554] usbtest: probe of 2-1:220.1 failed with error -22 [ 1597.970677][T30191] loop2: detected capacity change from 0 to 128 [ 1597.990507][T32554] usb 2-1: USB disconnect, device number 35 [ 1598.707473][T30227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1598.725120][T30227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1598.735176][T30227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1598.754753][T30227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1598.765412][T30227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1598.773025][T30227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1599.389057][T30222] lo speed is unknown, defaulting to 1000 [ 1599.519318][T30268] loop2: detected capacity change from 0 to 512 [ 1599.574015][T30268] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.17366: inode has both inline data and extents flags [ 1599.605806][T30268] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.17366: couldn't read orphan inode 15 (err -117) [ 1599.621478][T30268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.671371][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.760569][T30300] netlink: 'syz.1.17370': attribute type 4 has an invalid length. [ 1600.145978][T30222] chnl_net:caif_netlink_parms(): no params data found [ 1600.615570][T30432] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1600.669390][T23501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1600.743367][T30222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.796611][T30222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.841629][T30222] bridge_slave_0: entered allmulticast mode [ 1600.856212][T30222] bridge_slave_0: entered promiscuous mode [ 1600.875895][T30222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.895674][T15257] Bluetooth: hci4: command tx timeout [ 1600.904081][T30222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.911380][T30222] bridge_slave_1: entered allmulticast mode [ 1600.928326][T30222] bridge_slave_1: entered promiscuous mode [ 1600.991126][T30222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.048567][T30222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.136409][T30222] team0: Port device team_slave_0 added [ 1601.169169][T30222] team0: Port device team_slave_1 added [ 1601.283050][T30523] netlink: 188 bytes leftover after parsing attributes in process `syz.2.17390'. [ 1601.300140][T30222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.325402][T30222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.393699][T30222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.433864][T30222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.440938][T30222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.492407][T30222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.700486][T30222] hsr_slave_0: entered promiscuous mode [ 1601.733027][T30222] hsr_slave_1: entered promiscuous mode [ 1602.607114][T30222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1602.651030][T30222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1602.714867][T30222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1602.764689][T30222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1602.874725][T30693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1602.973900][T15257] Bluetooth: hci4: command tx timeout [ 1603.107758][T30222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.196262][T30222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1603.217857][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1603.230468][T30559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.237757][T30559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.285057][T30559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.292262][T30559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.540521][T30723] loop1: detected capacity change from 0 to 256 [ 1603.599170][T30723] FAT-fs (loop1): Directory bread(block 64) failed [ 1603.620561][T30723] FAT-fs (loop1): Directory bread(block 65) failed [ 1603.649077][T30723] FAT-fs (loop1): Directory bread(block 66) failed [ 1603.684422][T30723] FAT-fs (loop1): Directory bread(block 67) failed [ 1603.691253][T30723] FAT-fs (loop1): Directory bread(block 68) failed [ 1603.724083][T30723] FAT-fs (loop1): Directory bread(block 69) failed [ 1603.730801][T30723] FAT-fs (loop1): Directory bread(block 70) failed [ 1603.781338][T30723] FAT-fs (loop1): Directory bread(block 71) failed [ 1603.814173][T30723] FAT-fs (loop1): Directory bread(block 72) failed [ 1603.820811][T30723] FAT-fs (loop1): Directory bread(block 73) failed [ 1604.040799][T30222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.447994][T30760] cgroup: Invalid name [ 1604.668488][T30773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17433'. [ 1604.921078][T30222] veth0_vlan: entered promiscuous mode [ 1604.938228][T30222] veth1_vlan: entered promiscuous mode [ 1605.008821][T30222] veth0_macvtap: entered promiscuous mode [ 1605.037657][T30222] veth1_macvtap: entered promiscuous mode [ 1605.054251][T15257] Bluetooth: hci4: command tx timeout [ 1605.231936][T30222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1605.273296][T30222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1605.301253][T30222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.333996][T30222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.342770][T30222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.393792][T30222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.433772][T30828] i2c i2c-0: Invalid block write size 252 [ 1605.733009][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.755007][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.772260][T30874] affs: No valid root block on device nbd0 [ 1605.907325][T30553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.922446][T30776] loop2: detected capacity change from 0 to 32768 [ 1605.933748][T30553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.042295][T30886] loop1: detected capacity change from 0 to 512 [ 1606.050282][T30776] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1606.130992][T30895] loop4: detected capacity change from 0 to 8 [ 1606.151187][T30886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1606.178186][T30895] SQUASHFS error: Unknown inode type 257 in squashfs_iget! [ 1606.194376][T30886] ext4 filesystem being mounted at /4297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1606.292673][T30886] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1606.340794][T30886] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1606.411030][T30886] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.17445: Failed to acquire dquot type 0 [ 1606.424258][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1606.456173][T30776] XFS (loop2): Starting recovery (logdev: internal) [ 1606.596349][T30776] XFS (loop2): Ending recovery (logdev: internal) [ 1606.692787][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1606.921035][ T5771] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1607.140175][T15257] Bluetooth: hci4: command tx timeout [ 1607.699491][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.705979][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.862810][T30966] xt_ecn: cannot match TCP bits for non-tcp packets [ 1608.004356][T30973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1608.401844][T30992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17474'. [ 1608.442128][T30992] netlink: ct family unspecified [ 1608.458573][T30992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1608.976353][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1609.080430][T31029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17486'. [ 1609.099808][ T28] audit: type=1326 audit(2000000117.480:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.0.17487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1609.144038][T31029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17486'. [ 1609.169674][ T28] audit: type=1326 audit(2000000117.500:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.0.17487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1609.265704][ T28] audit: type=1326 audit(2000000117.520:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.0.17487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1609.339183][ T28] audit: type=1326 audit(2000000117.520:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31031 comm="syz.0.17487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1609.729634][T31049] loop2: detected capacity change from 0 to 4096 [ 1609.793759][T31055] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1609.836781][T31058] loop0: detected capacity change from 0 to 128 [ 1609.846085][T31049] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 1609.905091][T31049] Remounting filesystem read-only [ 1610.064807][T31026] loop1: detected capacity change from 0 to 32768 [ 1610.184400][T31026] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1610.509875][T31026] XFS (loop1): Ending clean mount [ 1610.675242][T31099] loop4: detected capacity change from 0 to 2048 [ 1610.691844][T31099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1610.755745][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1611.235973][T31126] loop4: detected capacity change from 0 to 64 [ 1611.513708][ T28] audit: type=1326 audit(2000000119.910:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31136 comm="syz.1.17508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5199aeb9 code=0x7ffc0000 [ 1611.613773][ T28] audit: type=1326 audit(2000000119.910:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31136 comm="syz.1.17508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5199aeb9 code=0x7ffc0000 [ 1611.688289][ T28] audit: type=1326 audit(2000000119.940:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31136 comm="syz.1.17508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f4b5199aeb9 code=0x7ffc0000 [ 1611.783699][ T28] audit: type=1326 audit(2000000119.940:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31136 comm="syz.1.17508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5199aeb9 code=0x7ffc0000 [ 1611.893683][ T28] audit: type=1326 audit(2000000119.940:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31136 comm="syz.1.17508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5199aeb9 code=0x7ffc0000 [ 1611.958578][T31158] program syz.4.17521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1612.174429][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1612.247928][T31176] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1612.261163][T31175] loop0: detected capacity change from 0 to 256 [ 1612.356703][T31175] FAT-fs (loop0): Directory bread(block 64) failed [ 1612.363329][T31175] FAT-fs (loop0): Directory bread(block 65) failed [ 1612.424059][T31175] FAT-fs (loop0): Directory bread(block 66) failed [ 1612.444373][T31175] FAT-fs (loop0): Directory bread(block 67) failed [ 1612.451082][T31175] FAT-fs (loop0): Directory bread(block 68) failed [ 1612.486412][T31175] FAT-fs (loop0): Directory bread(block 69) failed [ 1612.493114][T31175] FAT-fs (loop0): Directory bread(block 70) failed [ 1612.538206][T31175] FAT-fs (loop0): Directory bread(block 71) failed [ 1612.554445][T31175] FAT-fs (loop0): Directory bread(block 72) failed [ 1612.563608][T31175] FAT-fs (loop0): Directory bread(block 73) failed [ 1612.678867][T31193] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1612.882015][T31202] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17535'. [ 1612.914115][T31202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17535'. [ 1612.923232][T31202] netlink: 31 bytes leftover after parsing attributes in process `syz.4.17535'. [ 1612.974244][T31202] netlink: 'syz.4.17535': attribute type 2 has an invalid length. [ 1612.996225][T31202] netlink: 31 bytes leftover after parsing attributes in process `syz.4.17535'. [ 1613.140602][T31219] netlink: 'syz.0.17539': attribute type 7 has an invalid length. [ 1613.283910][ T1187] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1613.494815][ T1187] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1613.503117][ T1187] usb 2-1: config 0 has no interface number 0 [ 1613.519873][ T1187] usb 2-1: config 0 interface 120 has no altsetting 0 [ 1613.537813][ T1187] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1613.565440][ T1187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.576172][ T1187] usb 2-1: Product: syz [ 1613.580408][ T1187] usb 2-1: Manufacturer: syz [ 1613.593746][ T1187] usb 2-1: SerialNumber: syz [ 1613.626810][ T1187] usb 2-1: config 0 descriptor?? [ 1613.899045][ T1187] comedi comedi5: could not switch to alternate setting 1 [ 1613.922123][ T1187] usbduxfast 2-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 1613.963970][ T1187] usb 2-1: USB disconnect, device number 36 [ 1614.094720][T30553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1614.175721][T31273] delete_channel: no stack [ 1614.660881][T31293] loop2: detected capacity change from 0 to 2048 [ 1614.705928][T31293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1614.899422][T31307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17565'. [ 1615.110338][T31320] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1615.779543][T31389] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 1615.836214][T31389] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 1616.018648][T31406] xt_connbytes: Forcing CT accounting to be enabled [ 1616.025814][T31404] usb usb9: usbfs: process 31404 (syz.0.17585) did not claim interface 6 before use [ 1616.143699][T32554] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1616.336258][T32554] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1616.364519][T32554] usb 5-1: not running at top speed; connect to a high speed hub [ 1616.371113][T31421] netlink: 'syz.1.17591': attribute type 3 has an invalid length. [ 1616.391917][T31421] netlink: 'syz.1.17591': attribute type 27 has an invalid length. [ 1616.397027][T32554] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.445901][T32554] usb 5-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1616.493647][T32554] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1616.526942][T32554] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1616.546175][T32554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.563791][T32554] usb 5-1: Product: syz [ 1616.573994][T32554] usb 5-1: Manufacturer: syz [ 1616.584099][T32554] usb 5-1: SerialNumber: syz [ 1616.836581][T32554] usb 5-1: bad CDC descriptors [ 1616.874432][T32554] usb 5-1: USB disconnect, device number 2 [ 1617.046691][T31452] comedi comedi0: multiq3: I/O port conflict (0x3,16) [ 1617.441748][T31468] xt_limit: Overflow, try lower: 0/0 [ 1617.521118][T31448] loop2: detected capacity change from 0 to 32768 [ 1617.570450][T31448] JBD2: Ignoring recovery information on journal [ 1617.734283][T31448] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1617.948633][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1618.146585][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 1618.541680][T31510] loop1: detected capacity change from 0 to 4096 [ 1618.605064][T31510] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1618.632525][T31510] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1618.675193][T31510] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1618.702580][T31510] ntfs: volume version 3.1. [ 1618.719374][T31510] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1619.216711][T31535] loop4: detected capacity change from 0 to 4096 [ 1619.244689][T31535] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1619.523821][T31558] netlink: 'syz.1.17629': attribute type 5 has an invalid length. [ 1619.863984][T30557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1620.064371][T29792] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1620.278428][T29792] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1620.297561][T29792] usb 2-1: config 5 has no interface number 0 [ 1620.310124][T29792] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1620.321209][T29792] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1620.336234][T29792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.345110][T29792] usb 2-1: Product: syz [ 1620.349433][T29792] usb 2-1: Manufacturer: syz [ 1620.355421][T29792] usb 2-1: SerialNumber: syz [ 1620.470482][T31607] x_tables: duplicate entry at hook 2 [ 1620.610015][T29792] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 1620.655941][T29792] usb 2-1: USB disconnect, device number 37 [ 1621.341391][T31661] netlink: 'syz.1.17659': attribute type 4 has an invalid length. [ 1621.375335][T31661] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.17659'. [ 1622.088214][T31656] loop0: detected capacity change from 0 to 32768 [ 1622.095484][T31656] XFS: attr2 mount option is deprecated. [ 1622.163377][T31656] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1622.338252][T31656] XFS (loop0): Ending clean mount [ 1622.367002][T31656] XFS (loop0): Quotacheck needed: Please wait. [ 1622.514710][T31656] XFS (loop0): Quotacheck: Done. [ 1622.698747][ T5773] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1623.693952][T23501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1623.936737][T31780] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1624.625909][T31806] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.17708'. [ 1625.003630][ T1187] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1625.194448][ T1187] usb 3-1: Using ep0 maxpacket: 8 [ 1625.205504][ T1187] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1625.218528][ T1187] usb 3-1: config 0 has no interface number 0 [ 1625.234881][ T1187] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1625.261178][ T1187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.293615][ T1187] usb 3-1: Product: syz [ 1625.297947][ T1187] usb 3-1: Manufacturer: syz [ 1625.302587][ T1187] usb 3-1: SerialNumber: syz [ 1625.345228][ T1187] usb 3-1: config 0 descriptor?? [ 1625.568328][ T1187] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1625.583689][ T1187] usb 3-1: Failed to initialize entity for entity 6 [ 1625.590398][ T1187] usb 3-1: Failed to register entities (-22). [ 1625.614646][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1625.806860][ T1187] usb 3-1: USB disconnect, device number 20 [ 1626.055837][T31863] xt_CT: No such helper "snmp" [ 1626.189759][T31867] loop1: detected capacity change from 0 to 512 [ 1626.236693][T31867] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.17722: bad orphan inode 15 [ 1626.256936][T31867] ext4_test_bit(bit=14, block=5) = 0 [ 1626.279142][T31867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1626.420256][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.901202][T31894] netlink: 'syz.1.17730': attribute type 3 has an invalid length. [ 1627.292930][T31908] loop2: detected capacity change from 0 to 256 [ 1627.330665][T31908] FAT-fs (loop2): Directory bread(block 64) failed [ 1627.337555][T31908] FAT-fs (loop2): Directory bread(block 65) failed [ 1627.353994][T31908] FAT-fs (loop2): Directory bread(block 66) failed [ 1627.373730][T31908] FAT-fs (loop2): Directory bread(block 67) failed [ 1627.453873][T31908] FAT-fs (loop2): Directory bread(block 68) failed [ 1627.465867][T31908] FAT-fs (loop2): Directory bread(block 69) failed [ 1627.472561][T31908] FAT-fs (loop2): Directory bread(block 70) failed [ 1627.513903][T31908] FAT-fs (loop2): Directory bread(block 71) failed [ 1627.520639][T31908] FAT-fs (loop2): Directory bread(block 72) failed [ 1627.563895][T31908] FAT-fs (loop2): Directory bread(block 73) failed [ 1627.645691][T31916] loop4: detected capacity change from 0 to 1024 [ 1627.677976][T31916] EXT4-fs: Ignoring removed orlov option [ 1627.789979][T31916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1628.037487][T30222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.057668][T31902] loop1: detected capacity change from 0 to 32768 [ 1628.200429][T31902] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1628.278176][T31902] XFS (loop1): Ending clean mount [ 1628.314100][T31902] XFS (loop1): Quotacheck needed: Please wait. [ 1628.463757][T31902] XFS (loop1): Quotacheck: Done. [ 1628.758449][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1628.821633][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1629.304030][T31979] overlay: Bad value for 'metacopy' [ 1629.653572][ T28] audit: type=1326 audit(2000000138.040:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31993 comm="syz.4.17756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16539aeb9 code=0x7ffc0000 [ 1629.730670][ T28] audit: type=1326 audit(2000000138.040:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31993 comm="syz.4.17756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16539aeb9 code=0x7ffc0000 [ 1629.753195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.776059][ T28] audit: type=1326 audit(2000000138.070:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31993 comm="syz.4.17756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7ff16539aeb9 code=0x7ffc0000 [ 1629.784557][T31997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17757'. [ 1629.842052][ T28] audit: type=1326 audit(2000000138.070:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31993 comm="syz.4.17756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16539aeb9 code=0x7ffc0000 [ 1629.916409][ T28] audit: type=1326 audit(2000000138.070:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31993 comm="syz.4.17756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff16539aeb9 code=0x7ffc0000 [ 1629.938897][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.379677][T30559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.433705][T30559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.545765][T32027] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.17766'. [ 1630.566576][T32027] openvswitch: netlink: Message has 13056 unknown bytes. [ 1630.585674][T32024] loop1: detected capacity change from 0 to 4096 [ 1630.619257][T32024] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1630.656824][T32024] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1630.766065][T32024] ntfs3: loop1: volume is dirty and "force" flag is not set! [ 1631.374622][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1631.651699][T32072] netlink: 'syz.4.17779': attribute type 3 has an invalid length. [ 1631.703681][T32072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1631.868237][T32081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17783'. [ 1631.881186][T32084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17782'. [ 1632.935157][ T8] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1633.160676][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1633.179721][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.225776][ T8] usb 2-1: config 0 descriptor?? [ 1633.242180][ T8] cp210x 2-1:0.0: cp210x converter detected [ 1633.363664][ T2192] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1633.544367][ T2192] usb 3-1: Using ep0 maxpacket: 16 [ 1633.552112][ T2192] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1633.563628][ T2192] usb 3-1: config 0 has no interface number 0 [ 1633.569799][ T2192] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 1633.586669][T32166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17808'. [ 1633.613980][ T2192] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 1633.649896][ T2192] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1633.661428][ T8] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1633.679761][ T2192] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1633.693086][ T2192] usb 3-1: Product: syz [ 1633.693843][ T8] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1633.710773][ T2192] usb 3-1: SerialNumber: syz [ 1633.736204][ T2192] usb 3-1: config 0 descriptor?? [ 1633.744465][ T8] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1633.768076][ T2192] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 1633.776586][ T8] usb 2-1: USB disconnect, device number 38 [ 1633.821079][ T2192] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input71 [ 1633.821753][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1633.859747][ T8] cp210x 2-1:0.0: device disconnected [ 1634.079019][T32202] loop0: detected capacity change from 0 to 256 [ 1634.136402][T32202] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1634.156711][T32202] FAT-fs (loop0): Filesystem has been set read-only [ 1634.181980][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1634.189291][ C1] cm109_urb_ctl_callback: 19 callbacks suppressed [ 1634.189314][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.203024][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.210256][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.217512][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.227616][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.235626][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.242866][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.250072][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.257405][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.264640][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1634.304096][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1634.313183][ T2192] usb 3-1: USB disconnect, device number 21 [ 1634.359660][ T2192] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1634.513909][T32224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17815'. [ 1634.542441][T32210] loop4: detected capacity change from 0 to 4096 [ 1634.575450][T23501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1635.569955][T32272] loop2: detected capacity change from 0 to 1024 [ 1635.595065][T32272] EXT4-fs: Ignoring removed mblk_io_submit option [ 1635.655325][T32272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1635.703099][T32272] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1635.770895][T32272] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.17831: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1635.860903][T32272] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.17831: couldn't read orphan inode 11 (err -117) [ 1635.914775][T32272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1636.046042][T32266] loop1: detected capacity change from 0 to 32768 [ 1636.117243][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.157204][T32266] JBD2: Ignoring recovery information on journal [ 1636.200098][T32296] netdevsim netdevsim4: Direct firmware load for / [ 1636.200098][T32296] failed with error -2 [ 1636.209608][T32299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17836'. [ 1636.213857][T32296] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 1636.213857][T32296] [ 1636.254056][T32266] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1636.654576][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1637.143327][T32337] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 1637.156359][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1637.187916][T32337] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 1637.223412][T32344] loop2: detected capacity change from 0 to 164 [ 1637.243184][T32344] Unable to read rock-ridge attributes [ 1637.307155][T32344] Unable to read rock-ridge attributes [ 1637.333804][T32344] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1637.820480][T32369] loop2: detected capacity change from 0 to 256 [ 1637.922457][T32369] FAT-fs (loop2): Directory bread(block 64) failed [ 1637.940151][T32369] FAT-fs (loop2): Directory bread(block 65) failed [ 1637.950370][T32369] FAT-fs (loop2): Directory bread(block 66) failed [ 1637.967443][T32369] FAT-fs (loop2): Directory bread(block 67) failed [ 1637.980425][T32369] FAT-fs (loop2): Directory bread(block 68) failed [ 1637.998040][T32369] FAT-fs (loop2): Directory bread(block 69) failed [ 1638.013610][T32369] FAT-fs (loop2): Directory bread(block 70) failed [ 1638.021895][T32369] FAT-fs (loop2): Directory bread(block 71) failed [ 1638.044453][T32369] FAT-fs (loop2): Directory bread(block 72) failed [ 1638.051054][T32369] FAT-fs (loop2): Directory bread(block 73) failed [ 1638.153226][T32352] loop4: detected capacity change from 0 to 32768 [ 1638.193050][T32352] JBD2: Ignoring recovery information on journal [ 1638.336263][T32352] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1638.564120][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17861'. [ 1638.611165][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17861'. [ 1638.650705][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17861'. [ 1638.680975][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17861'. [ 1638.720323][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17861'. [ 1638.753860][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17861'. [ 1638.780827][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17861'. [ 1638.805015][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17861'. [ 1638.825424][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17861'. [ 1638.911556][T30222] ocfs2: Unmounting device (7,4) on (node local) [ 1640.334055][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1640.669590][T32458] loop0: detected capacity change from 0 to 32768 [ 1640.695829][T32458] [ 1640.695829][T32458] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1640.695829][T32458] [ 1640.733855][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1640.835720][ T5773] [ 1640.835720][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1640.835720][ T5773] [ 1640.866944][ T5773] [ 1640.866944][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1640.866944][ T5773] [ 1640.947803][ T8] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1640.963641][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.982107][ T8] usb 5-1: Product: syz [ 1641.002528][ T8] usb 5-1: Manufacturer: syz [ 1641.007120][T32480] loop1: detected capacity change from 0 to 32768 [ 1641.023011][ T8] usb 5-1: SerialNumber: syz [ 1641.036354][ T8] usb 5-1: config 0 descriptor?? [ 1641.301208][ T8] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1641.497337][T32520] loop0: detected capacity change from 0 to 164 [ 1641.542591][T32520] Unable to read rock-ridge attributes [ 1641.558498][ T8] usb 5-1: USB disconnect, device number 3 [ 1641.614166][T32520] Unable to read rock-ridge attributes [ 1641.624982][T32520] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1642.090454][T32561] loop0: detected capacity change from 0 to 64 [ 1642.233950][T32558] loop2: detected capacity change from 0 to 4096 [ 1642.319001][T32558] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1642.359397][T32558] ntfs3: loop2: Failed to load $Extend (-22). [ 1642.382460][T32558] ntfs3: loop2: Failed to initialize $Extend. [ 1642.393263][ T28] audit: type=1326 audit(2000000150.790:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32574 comm="syz.0.17910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1642.502873][ T28] audit: type=1326 audit(2000000150.790:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32574 comm="syz.0.17910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1642.591156][ T28] audit: type=1326 audit(2000000150.800:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32574 comm="syz.0.17910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1642.591210][ T28] audit: type=1326 audit(2000000150.800:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32574 comm="syz.0.17910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1642.591254][ T28] audit: type=1326 audit(2000000150.830:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32574 comm="syz.0.17910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1642.591298][ T28] audit: type=1326 audit(2000000150.830:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32574 comm="syz.0.17910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1642.591342][ T28] audit: type=1326 audit(2000000150.830:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32574 comm="syz.0.17910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1642.591386][ T28] audit: type=1326 audit(2000000150.830:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32574 comm="syz.0.17910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1642.920108][T23501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1643.307392][T32611] __nla_validate_parse: 33 callbacks suppressed [ 1643.307409][T32611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17921'. [ 1643.354232][T32611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17921'. [ 1643.509501][ T28] audit: type=1326 audit(2000000151.880:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32617 comm="syz.1.17924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5199aeb9 code=0x7ffc0000 [ 1643.579099][ T28] audit: type=1326 audit(2000000151.890:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32617 comm="syz.1.17924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5199aeb9 code=0x7ffc0000 [ 1643.738847][T32627] xt_hashlimit: max too large, truncated to 1048576 [ 1644.064006][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1644.266295][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1644.277514][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1644.296610][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.315998][T32660] loop4: detected capacity change from 0 to 1024 [ 1644.339395][T32660] EXT4-fs: Ignoring removed mblk_io_submit option [ 1644.349274][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1644.381171][T32660] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1644.391642][ T8] usb 3-1: config 1 has no interface number 1 [ 1644.414237][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1644.465125][T32660] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.17936: bad orphan inode 11 [ 1644.475959][T32660] ext4_test_bit(bit=10, block=4) = 1 [ 1644.493799][T32660] is_bad_inode(inode)=0 [ 1644.498329][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1644.513381][T32660] NEXT_ORPHAN(inode)=3254779904 [ 1644.542535][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.551628][T32660] max_ino=32 [ 1644.556693][T32660] i_nlink=0 [ 1644.566792][ T8] usb 3-1: Product: syz [ 1644.571116][ T8] usb 3-1: Manufacturer: syz [ 1644.594308][T32660] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 2: comm syz.4.17936: lblock 2 mapped to illegal pblock 2 (length 1) [ 1644.619083][ T8] usb 3-1: SerialNumber: syz [ 1644.678705][T32660] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 48: comm syz.4.17936: lblock 0 mapped to illegal pblock 48 (length 1) [ 1644.725352][T32660] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.17936: Failed to acquire dquot type 0 [ 1644.738105][T32660] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1644.749179][T32660] EXT4-fs error (device loop4): ext4_evict_inode:252: inode #11: comm syz.4.17936: mark_inode_dirty error [ 1644.774278][T32660] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 1644.817939][T32660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.924384][ T8] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1644.931898][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 1644.939007][T30559] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1645.000170][T30559] EXT4-fs error (device loop4): ext4_release_dquot:6985: comm kworker/u4:12: Failed to release dquot type 0 [ 1645.049321][ T8] usb 3-1: USB disconnect, device number 22 [ 1645.057693][T30222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1645.094616][T30222] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1645.122040][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1645.151010][T32695] loop0: detected capacity change from 0 to 2048 [ 1645.175194][T30222] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1645.213118][T30222] EXT4-fs error (device loop4): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 1645.238112][T32695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1645.367368][T32695] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.17944: bg 0: block 234: padding at end of block bitmap is not set [ 1645.443238][T32729] tc_dump_action: action bad kind [ 1645.555592][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.093986][T30559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1646.752179][ T329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17969'. [ 1646.999532][ T338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17972'. [ 1647.048289][ T338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17972'. [ 1647.068194][ T338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17972'. [ 1647.800913][ T382] loop4: detected capacity change from 0 to 1024 [ 1647.935637][ T382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.035973][ T382] EXT4-fs error (device loop4): ext4_get_first_dir_block:3595: inode #11: comm syz.4.17986: directory missing '.' [ 1648.209170][T30222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.320822][ T404] loop1: detected capacity change from 0 to 4096 [ 1648.423696][ T8] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1648.536944][ T427] loop4: detected capacity change from 0 to 1024 [ 1648.553681][ T427] EXT4-fs: Ignoring removed mblk_io_submit option [ 1648.630419][ T427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.665783][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1648.679691][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1648.744221][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.768889][T30222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.826057][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1648.874819][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.958735][ T8] hub 3-1:4.0: USB hub found [ 1649.030284][ T441] loop1: detected capacity change from 0 to 2048 [ 1649.067667][ T441] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1649.088745][ T441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1649.179356][ T8] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 1649.248058][ T441] EXT4-fs error (device loop1): empty_inline_dir:1867: inode #12: block 9: comm syz.1.18000: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 1649.328029][ T441] EXT4-fs (loop1): Remounting filesystem read-only [ 1649.357827][ T441] EXT4-fs warning (device loop1): empty_inline_dir:1874: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 1649.451772][ T469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18006'. [ 1649.483291][ T469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1649.552125][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.565260][T29792] usb 3-1: USB disconnect, device number 23 [ 1650.500691][ T475] loop4: detected capacity change from 0 to 40427 [ 1650.553799][ T475] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1650.600963][ T475] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1650.647653][ T475] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1650.714733][ T475] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1650.730791][ T475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1651.188170][ T542] loop0: detected capacity change from 0 to 2048 [ 1651.216870][ T542] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1651.265637][ T542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1651.852724][ T570] loop1: detected capacity change from 0 to 4096 [ 1651.861881][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1651.902246][ T570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1652.087929][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.227659][ T596] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1652.326706][ T591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1652.359085][ T610] netlink: 'syz.1.18041': attribute type 8 has an invalid length. [ 1652.713679][ T654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18047'. [ 1653.025424][ T669] loop1: detected capacity change from 0 to 1024 [ 1653.060073][ T669] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1653.155126][ T669] hfsplus: filesystem is marked journaled, leaving read-only. [ 1653.443842][ T694] loop1: detected capacity change from 0 to 1024 [ 1653.684207][T30557] hfsplus: b-tree write err: -5, ino 4 [ 1653.733868][ T712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18066'. [ 1653.914412][ T721] QAT: Invalid ioctl 1076910120 [ 1654.415353][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1654.459030][ T759] loop4: detected capacity change from 0 to 256 [ 1654.596902][ T766] xt_TCPMSS: Only works on TCP SYN packets [ 1654.623838][ T2192] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1654.790863][ T779] loop4: detected capacity change from 0 to 256 [ 1654.808849][ T779] exfat: Deprecated parameter 'namecase' [ 1654.822094][ T2192] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1654.834552][ T779] exfat: Deprecated parameter 'utf8' [ 1654.840378][ T779] exfat: Deprecated parameter 'namecase' [ 1654.854182][ T2192] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1654.866103][ T779] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1654.874871][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1654.892479][ T779] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1654.905963][ T2192] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1654.934062][ T2192] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1654.952125][ T2192] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1654.966887][ T2192] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1654.976266][ T2192] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1654.986245][ T2192] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1655.003782][ T2192] usb 3-1: Product: syz [ 1655.012530][ T2192] usb 3-1: Manufacturer: syz [ 1655.023778][ T2192] usb 3-1: SerialNumber: syz [ 1655.044772][ T2192] usb 3-1: config 0 descriptor?? [ 1655.071312][ T746] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1655.084643][ T2192] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1655.090059][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1655.109393][ T2192] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1655.123444][ T8] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1655.144177][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.165909][ T8] usb 1-1: config 0 descriptor?? [ 1655.175461][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1655.337448][ T2192] usb 3-1: USB disconnect, device number 24 [ 1655.357457][ T2192] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1655.597022][ T8] gspca_vc032x: reg_w err -71 [ 1655.607149][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.649991][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.657001][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.671920][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.678773][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.693921][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.700492][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.716858][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.722531][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.729335][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.735223][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.762926][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.779729][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.790891][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.796873][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.802337][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.808358][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.814917][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 1655.820415][ T8] gspca_vc032x: Unknown sensor... [ 1655.839520][ T8] vc032x: probe of 1-1:0.0 failed with error -22 [ 1655.852204][ T8] usb 1-1: USB disconnect, device number 26 [ 1655.914719][T30559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.063327][T30559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.245673][T30559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.469064][ T846] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.18098'. [ 1656.501789][T30559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.697665][ T855] loop2: detected capacity change from 0 to 256 [ 1656.968448][T30227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1656.985966][T30227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1657.004143][T30227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1657.028514][T30227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1657.039087][T30227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1657.047791][T30227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1657.614539][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1657.697398][ T915] loop0: detected capacity change from 0 to 4096 [ 1657.776477][ T915] ntfs3: loop0: ino=3, Correct links count -> 2. [ 1657.967726][ T940] loop1: detected capacity change from 0 to 2048 [ 1658.019045][ T940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1658.183707][ T865] lo speed is unknown, defaulting to 1000 [ 1658.856854][ T996] loop2: detected capacity change from 0 to 1024 [ 1658.893868][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1658.929822][ T996] hfsplus: failed to load extents file [ 1659.052410][ T1003] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1659.107629][ T1003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1659.133867][T30227] Bluetooth: hci4: command tx timeout [ 1659.152133][ T1003] bond0: (slave lo): Enslaving as an active interface with an up link [ 1659.301090][ T1036] loop0: detected capacity change from 0 to 128 [ 1659.387944][ T1036] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1659.435250][ T1036] ext4 filesystem being mounted at /4581/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.524910][ T1036] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 1659.617165][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1659.641924][ T1060] loop1: detected capacity change from 0 to 64 [ 1660.175050][T30557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1660.209791][ T865] chnl_net:caif_netlink_parms(): no params data found [ 1660.450632][ T1154] loop0: detected capacity change from 0 to 64 [ 1660.563574][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1660.563589][ T28] audit: type=1800 audit(2000000168.950:724): pid=1154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18140" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 1661.016793][ T1221] comedi comedi0: no devices specified [ 1661.213735][T30227] Bluetooth: hci4: command tx timeout [ 1661.341270][ T1243] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1661.394125][ T865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.401323][ T865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.444004][ T865] bridge_slave_0: entered allmulticast mode [ 1661.501627][ T865] bridge_slave_0: entered promiscuous mode [ 1661.540133][ T865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.575859][ T865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.583181][ T865] bridge_slave_1: entered allmulticast mode [ 1661.615799][ T865] bridge_slave_1: entered promiscuous mode [ 1661.650009][ T1263] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.18152'. [ 1661.774217][T30559] hsr_slave_0: left promiscuous mode [ 1661.787413][T30559] hsr_slave_1: left promiscuous mode [ 1661.839162][T30559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.863867][T30559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.887913][T30559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.904024][T30559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.927255][T30559] bridge_slave_1: left allmulticast mode [ 1661.933067][T30559] bridge_slave_1: left promiscuous mode [ 1661.968596][T30559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.997409][T30559] bridge_slave_0: left allmulticast mode [ 1662.003316][T30559] bridge_slave_0: left promiscuous mode [ 1662.027151][T30559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.260199][T30559] veth1_macvtap: left promiscuous mode [ 1662.267534][T30559] veth0_macvtap: left promiscuous mode [ 1662.273210][T30559] veth1_vlan: left promiscuous mode [ 1662.282120][T30559] veth0_vlan: left promiscuous mode [ 1662.460899][ T1311] loop2: detected capacity change from 0 to 1024 [ 1662.484736][ T1311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1662.491569][ T1311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1662.527371][ T1311] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1662.586663][ T1311] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1662.619318][ T1311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1662.813698][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.016727][T30559] bond1 (unregistering): Released all slaves [ 1663.296608][T30227] Bluetooth: hci4: command tx timeout [ 1664.337824][T30559] team0 (unregistering): Port device team_slave_1 removed [ 1664.410171][T30559] team0 (unregistering): Port device team_slave_0 removed [ 1664.487248][T30559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.561249][T30559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1665.101007][T30559] bond0 (unregistering): Released all slaves [ 1665.259132][ T865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.299945][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1665.340059][ T1308] bond0: entered promiscuous mode [ 1665.371105][ T865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.380700][T30227] Bluetooth: hci4: command tx timeout [ 1665.567099][ T865] team0: Port device team_slave_0 added [ 1665.602339][ T865] team0: Port device team_slave_1 added [ 1665.840952][ T865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1665.892404][ T865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.924081][ T1423] overlay: Unknown parameter '\' [ 1666.014385][ T865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.056257][ T865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.063266][ T865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.150708][ T865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.180041][ T1435] loop0: detected capacity change from 0 to 16 [ 1666.210664][ T1435] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1666.392698][ T865] hsr_slave_0: entered promiscuous mode [ 1666.397834][T30170] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1666.418753][ T865] hsr_slave_1: entered promiscuous mode [ 1666.604231][T30170] usb 3-1: Using ep0 maxpacket: 16 [ 1666.613884][T30170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1666.624831][T30170] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 1666.634781][T30170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.685342][T30170] usb 3-1: config 0 descriptor?? [ 1666.717754][T30170] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 1666.952822][T30170] usb 3-1: USB disconnect, device number 25 [ 1667.231527][T30553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1667.283831][T30836] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1667.347316][ T865] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1667.372767][ T865] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1667.397160][ T865] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1667.433048][ T865] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1667.514728][T30836] usb 2-1: Using ep0 maxpacket: 16 [ 1667.535823][T30836] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 1667.570954][T30836] usb 2-1: config 0 has no interface number 0 [ 1667.594235][T30836] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1667.634034][T30836] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1667.680605][T30836] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1667.713585][T30836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.721679][T30836] usb 2-1: Product: syz [ 1667.746386][T30836] usb 2-1: Manufacturer: syz [ 1667.751065][T30836] usb 2-1: SerialNumber: syz [ 1667.769975][ T865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.791656][T30836] usb 2-1: config 0 descriptor?? [ 1667.819542][ T1553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1667.874297][ T865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.937904][T30553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.945112][T30553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.978327][T30553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.985563][T30553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.102465][T30836] usb 2-1: USB disconnect, device number 39 [ 1668.151797][ T1628] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18197'. [ 1668.455128][ T1633] loop2: detected capacity change from 0 to 8192 [ 1668.778300][ T865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.900663][ T1657] loop2: detected capacity change from 0 to 1764 [ 1669.157516][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.164651][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.916380][ T865] veth0_vlan: entered promiscuous mode [ 1669.985643][ T865] veth1_vlan: entered promiscuous mode [ 1670.005384][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18213'. [ 1670.069282][ T1712] ip6tnl7: entered allmulticast mode [ 1670.173259][ T865] veth0_macvtap: entered promiscuous mode [ 1670.216382][ T865] veth1_macvtap: entered promiscuous mode [ 1670.292106][ T865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1670.332915][ T865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1670.376193][ T865] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.387820][ T865] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.399564][ T865] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.408762][ T865] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.523022][ T1682] loop0: detected capacity change from 0 to 40427 [ 1670.575150][ T1682] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1670.582974][ T1682] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1670.717704][ T1682] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1670.760236][ T1746] netlink: 'syz.1.18218': attribute type 3 has an invalid length. [ 1670.765289][T30550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.826186][T30550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1670.980984][T30557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.006985][ T1682] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1671.023780][T30557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.034034][ T1682] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1671.064950][T30553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1671.217122][ T1682] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1671.345499][ T1763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18220'. [ 1671.433997][ T1768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18092'. [ 1671.613007][ T1779] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1671.666506][ T1779] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1672.124403][ T1187] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1672.364034][ T1187] usb 2-1: Using ep0 maxpacket: 8 [ 1672.404904][ T1187] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1672.434295][ T1187] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.455594][ T1187] usb 2-1: config 0 has no interface number 0 [ 1672.472884][ T1187] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1672.499118][ T1187] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1672.533725][ T1187] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1672.585284][ T1187] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1672.631313][ T1187] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1672.654596][ T1187] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1672.663503][ T1187] usb 2-1: Product: syz [ 1672.668795][ T1187] usb 2-1: SerialNumber: syz [ 1672.694855][ T1187] usb 2-1: config 0 descriptor?? [ 1672.719107][ T1827] loop2: detected capacity change from 0 to 512 [ 1672.839293][ T1827] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.18234: corrupted in-inode xattr: invalid ea_ino [ 1672.952038][ T1827] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.18234: couldn't read orphan inode 15 (err -117) [ 1672.978020][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1672.991178][ T1187] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1673.007708][ T1187] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 1673.017047][ T1827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1673.111003][ T1811] loop5: detected capacity change from 0 to 32768 [ 1673.269191][ T1811] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 1673.269191][ T1811] [ 1673.284200][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1673.295336][ T1187] usb 2-1: USB disconnect, device number 40 [ 1673.787075][ T1873] loop0: detected capacity change from 0 to 256 [ 1674.421209][ T1912] loop2: detected capacity change from 0 to 64 [ 1675.103859][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1675.175434][ T1899] loop1: detected capacity change from 0 to 32768 [ 1675.257864][ T1899] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1675.315586][ T8] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1675.325763][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.356758][ T8] usb 1-1: config 0 descriptor?? [ 1675.374559][ T1899] OCFS2: ERROR (device loop1): int ocfs2_validate_xattr_block(struct super_block *, struct buffer_head *): Extended attribute block #2304 has bad signature [ 1675.453701][ T1899] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1675.483680][ T1899] OCFS2: File system is now read-only. [ 1675.497801][ T1899] (syz.1.18247,1899,0):ocfs2_xattr_block_find:2831 ERROR: status = -30 [ 1675.628635][ T8] snd-usb-hiface: probe of 1-1:0.0 failed with error -22 [ 1675.761783][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1675.876019][T32554] usb 1-1: USB disconnect, device number 27 [ 1676.647107][ T2020] comedi comedi2: dt2814: a I/O base address must be specified [ 1676.824127][T30557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1676.984709][ T2035] netlink: 'syz.0.18276': attribute type 5 has an invalid length. [ 1677.252582][ T2004] loop5: detected capacity change from 0 to 32768 [ 1677.767533][ T2059] loop1: detected capacity change from 0 to 4096 [ 1677.795719][ T2059] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1677.952401][ T2077] loop5: detected capacity change from 0 to 256 [ 1678.114111][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1678.290383][ T2093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18290'. [ 1678.731418][ T2100] loop1: detected capacity change from 0 to 4096 [ 1678.762040][ T2100] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1679.039088][ T2126] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1679.241332][ T2128] loop2: detected capacity change from 0 to 4096 [ 1679.335022][ T2128] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1679.611432][ T2128] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1679.635349][ T2128] ntfs3: loop2: ino=1f, "file2" failed to open parent directory r=5 to update [ 1679.794403][T18943] ntfs3: loop2: ino=1f, failed to open parent directory r=5 to update [ 1680.293952][T32554] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1680.453808][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1680.493993][T32554] usb 3-1: Using ep0 maxpacket: 32 [ 1680.507074][T32554] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1680.519541][T32554] usb 3-1: config 0 has no interface number 0 [ 1680.538401][T32554] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 1680.558143][T32554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.578418][T32554] usb 3-1: Product: syz [ 1680.582686][T32554] usb 3-1: Manufacturer: syz [ 1680.599923][T32554] usb 3-1: SerialNumber: syz [ 1680.614265][T32554] usb 3-1: config 0 descriptor?? [ 1680.627162][T32554] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1680.656080][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1680.666918][ T8] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 1680.683802][ T2209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18322'. [ 1680.693030][ T8] usb 2-1: config 2 has no interface number 0 [ 1680.712887][ T8] usb 2-1: config 2 interface 88 has no altsetting 0 [ 1680.735866][ T8] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1680.754821][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.762899][ T8] usb 2-1: Product: syz [ 1680.780067][ T8] usb 2-1: Manufacturer: syz [ 1680.787895][ T8] usb 2-1: SerialNumber: syz [ 1681.066806][T32554] gspca_sn9c2028: read1 error -71 [ 1681.075923][T32554] gspca_sn9c2028: read1 error -71 [ 1681.081084][T32554] sn9c2028: probe of 3-1:0.119 failed with error -71 [ 1681.099261][T32554] usb 3-1: USB disconnect, device number 26 [ 1681.253441][ T8] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1681.276322][ T8] asix: probe of 2-1:2.88 failed with error -71 [ 1681.315565][ T8] usb 2-1: USB disconnect, device number 41 [ 1681.378430][ T2249] loop0: detected capacity change from 0 to 1764 [ 1681.618028][ T2262] loop5: detected capacity change from 0 to 16 [ 1681.681847][ T2262] erofs: (device loop5): mounted with root inode @ nid 36. [ 1681.778821][ T2262] syz.5.18333: attempt to access beyond end of device [ 1681.778821][ T2262] loop5: rw=524288, sector=131758, nr_sectors = 2 limit=16 [ 1681.856305][ T2262] syz.5.18333: attempt to access beyond end of device [ 1681.856305][ T2262] loop5: rw=524288, sector=74, nr_sectors = 2 limit=16 [ 1681.924360][ T2262] syz.5.18333: attempt to access beyond end of device [ 1681.924360][ T2262] loop5: rw=524288, sector=262336, nr_sectors = 2 limit=16 [ 1681.989392][ T2282] loop1: detected capacity change from 0 to 16 [ 1682.034690][ T2282] erofs: (device loop1): mounted with root inode @ nid 36. [ 1682.092733][ T2282] cifs: Unknown parameter 'cache_strategy' [ 1682.322329][ T2303] loop1: detected capacity change from 0 to 47 [ 1682.446505][ T2313] netlink: 'syz.5.18346': attribute type 3 has an invalid length. [ 1682.474010][ T2313] netlink: 3 bytes leftover after parsing attributes in process `syz.5.18346'. [ 1682.534682][ T2318] loop1: detected capacity change from 0 to 136 [ 1682.564491][ T2318] Attempt to read inode for relocated directory [ 1682.575445][T30557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1682.610839][ T2318] syz.1.18347: attempt to access beyond end of device [ 1682.610839][ T2318] loop1: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 1682.679997][ T2318] syz.1.18347: attempt to access beyond end of device [ 1682.679997][ T2318] loop1: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 1682.752431][ T28] audit: type=1800 audit(2000000191.140:725): pid=2318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18347" name="file1" dev="loop1" ino=1487 res=0 errno=0 [ 1682.805639][ T2330] netlink: 'syz.5.18350': attribute type 3 has an invalid length. [ 1683.241694][ T2356] binfmt_misc: register: failed to install interpreter file ./file0 [ 1683.665328][ T2374] loop0: detected capacity change from 0 to 4096 [ 1683.764211][ T2374] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1683.797261][ T2393] loop1: detected capacity change from 0 to 128 [ 1683.819601][ T2374] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1683.856700][T30557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1683.977288][ T2393] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1684.043734][ T2393] FAT-fs (loop1): Filesystem has been set read-only [ 1684.050538][ T2393] syz.1.18365: attempt to access beyond end of device [ 1684.050538][ T2393] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1684.115113][ T2393] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1684.123027][ T2393] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1684.187508][ T2393] syz.1.18365: attempt to access beyond end of device [ 1684.187508][ T2393] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1684.264788][ T28] audit: type=1800 audit(2000000192.640:726): pid=2393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18365" name="file2" dev="loop1" ino=1048799 res=0 errno=0 [ 1684.314194][ T2416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18370'. [ 1685.100359][ T2471] loop5: detected capacity change from 0 to 8 [ 1685.125945][ T2471] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1685.180234][ T5774] udevd[5774]: incorrect cramfs checksum on /dev/loop5 [ 1685.194873][ T2471] cramfs: Error -3 while decompressing! [ 1685.200489][ T2471] cramfs: ffffffff973f8368(26)->ffff88805a1b5000(4096) [ 1685.227953][ T2471] cramfs: Error -3 while decompressing! [ 1685.250185][ T2471] cramfs: ffffffff973f8382(26)->ffff888057ee9000(4096) [ 1685.270511][ T2471] cramfs: Error -3 while decompressing! [ 1685.288942][ T2471] cramfs: ffffffff973f839c(16)->ffff88805288a000(4096) [ 1685.317652][ T2471] cramfs: Error -3 while decompressing! [ 1685.338156][ T2471] cramfs: ffffffff973f8368(26)->ffff88805a1b5000(4096) [ 1685.367830][ T5774] udevd[5774]: incorrect cramfs checksum on /dev/loop5 [ 1685.751341][ T2506] loop0: detected capacity change from 0 to 1024 [ 1685.907703][ T2506] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 1685.927404][ T2506] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1685.939252][ T2506] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.18392: Failed to acquire dquot type 0 [ 1685.961763][ T2506] EXT4-fs error (device loop0): mb_free_blocks:1954: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1685.977032][ T2506] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #13: comm syz.0.18392: corrupted inode contents [ 1686.004146][ T2506] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #13: comm syz.0.18392: mark_inode_dirty error [ 1686.053412][ T2506] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #13: comm syz.0.18392: corrupted inode contents [ 1686.087852][ T2506] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.18392: mark_inode_dirty error [ 1686.112795][ T2506] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #13: comm syz.0.18392: corrupted inode contents [ 1686.127373][ T2506] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1686.136917][ T2506] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #13: comm syz.0.18392: corrupted inode contents [ 1686.149930][ T2506] EXT4-fs error (device loop0): ext4_truncate:4294: inode #13: comm syz.0.18392: mark_inode_dirty error [ 1686.163397][ T2506] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1686.244457][ T2506] EXT4-fs (loop0): 1 truncate cleaned up [ 1686.273632][ T1187] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1686.277263][ T2506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.418182][ T2506] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 1686.449485][ T2506] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1686.474191][ T1187] usb 3-1: Using ep0 maxpacket: 16 [ 1686.481389][ T2506] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.18392: Failed to acquire dquot type 0 [ 1686.505367][ T1187] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1686.518410][ T1187] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1686.538124][ T1187] usb 3-1: New USB device found, idVendor=046b, idProduct=0000, bcdDevice= 0.00 [ 1686.559972][ T1187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.599573][ T1187] usb 3-1: 0:2 : does not exist [ 1686.628190][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.886574][ T1187] usb 3-1: USB disconnect, device number 27 [ 1687.873671][ T5859] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1687.959120][ T2653] loop2: detected capacity change from 0 to 512 [ 1687.996316][ T2653] EXT4-fs: Ignoring removed bh option [ 1688.019406][ T2653] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1688.040827][ T2653] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1688.061608][ T5859] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 1688.080331][ T5859] usb 1-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.121217][ T2653] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1688.144323][ T5859] usb 1-1: config 160 has no interface number 0 [ 1688.150692][ T5859] usb 1-1: config 160 interface 200 has no altsetting 0 [ 1688.194198][ T2653] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1688.238567][ T2617] loop5: detected capacity change from 0 to 32768 [ 1688.247316][ T5859] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1688.260678][ T2653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1688.280027][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.309700][ T5859] usb 1-1: Product: syz [ 1688.353576][ T5859] usb 1-1: Manufacturer: syz [ 1688.358673][ T5859] usb 1-1: SerialNumber: syz [ 1688.500097][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1688.610684][ T5859] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1688.636367][ T5859] usb 1-1: MIDIStreaming interface descriptor not found [ 1688.746203][ T5859] usb 1-1: USB disconnect, device number 28 [ 1688.841034][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1688.875953][ T2706] netlink: 84 bytes leftover after parsing attributes in process `syz.5.18423'. [ 1689.308264][ T2747] netlink: 'syz.1.18432': attribute type 2 has an invalid length. [ 1689.331658][ T2747] netlink: 723 bytes leftover after parsing attributes in process `syz.1.18432'. [ 1689.624320][T30559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1689.691817][ T2759] loop0: detected capacity change from 0 to 4096 [ 1689.861554][ T2759] ntfs3: loop0: MFT: r=b, expect seq=b instead of 1ff! [ 1689.904609][ T2759] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1689.944736][ T2759] ntfs3: loop0: Failed to load $Extend (-22). [ 1689.964687][ T2759] ntfs3: loop0: Failed to initialize $Extend. [ 1690.391545][ T2797] loop2: detected capacity change from 0 to 4096 [ 1690.428738][ T2797] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1690.633863][ T2799] loop5: detected capacity change from 0 to 8192 [ 1690.685005][ T2799] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1690.771763][ T2799] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1690.782569][ T2799] REISERFS (device loop5): using ordered data mode [ 1690.789544][ T2799] reiserfs: using flush barriers [ 1690.803679][ T2799] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1690.827965][ T2799] REISERFS (device loop5): checking transaction log (loop5) [ 1690.840278][ T2799] REISERFS (device loop5): Using r5 hash to sort names [ 1690.856004][ T2799] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1691.127308][ T2836] loop0: detected capacity change from 0 to 4096 [ 1691.174268][ T2836] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1691.458456][ T2836] ntfs3: loop0: ino=0, attr_set_size [ 1691.879802][ T2875] loop2: detected capacity change from 0 to 2048 [ 1691.969006][ T2875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1692.328872][ T2904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18464'. [ 1692.483284][ T2917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18465'. [ 1694.019395][ T3001] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 1694.036503][ T3001] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1694.149670][ T3012] usb usb8: usbfs: process 3012 (syz.0.18492) did not claim interface 0 before use [ 1694.365479][ T3024] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18494'. [ 1694.558397][ T3034] netlink: 'syz.2.18498': attribute type 21 has an invalid length. [ 1694.742335][ T3040] Sensor A: ================= START STATUS ================= [ 1694.774207][ T3040] Sensor A: Test Pattern: 75% Colorbar [ 1694.805003][ T3040] Sensor A: Show Information: All [ 1694.838028][ T3040] Sensor A: Vertical Flip: true [ 1694.862138][ T3040] Sensor A: Horizontal Flip: true [ 1694.892820][ T3040] Sensor A: Brightness: 128 [ 1694.914446][ T3040] Sensor A: Contrast: 128 [ 1694.918904][ T3040] Sensor A: Hue: 0 [ 1694.922684][ T3040] Sensor A: Saturation: 255 [ 1694.945646][ T3040] Sensor A: ================== END STATUS ================== [ 1695.291501][ T3071] ieee802154 phy0 wpan0: encryption failed: -22 [ 1695.304860][ T3069] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1695.374417][T30559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1695.528738][ T3083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18512'. [ 1695.878486][ T3106] loop0: detected capacity change from 0 to 16 [ 1695.921822][ T3106] erofs: (device loop0): mounted with root inode @ nid 36. [ 1695.986608][ T3106] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1696.087473][ T3106] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1696.375616][ T3133] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18524'. [ 1696.409750][ T3135] netlink: 'syz.1.18523': attribute type 1 has an invalid length. [ 1697.061470][ T3175] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1697.137230][ T3182] loop0: detected capacity change from 0 to 512 [ 1697.192171][ T3182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 1697.253812][ T3182] System zones: 1-12 [ 1697.271331][ T3182] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.18537: Directory hole found for htree index block 0 [ 1697.286577][ T3182] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 1697.320286][ T3182] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.18537: Directory hole found for htree index block 0 [ 1697.430485][ T3182] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1697.475701][ T3182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1697.561059][ T3182] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.18537: Directory hole found for htree index block 0 [ 1697.705112][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1698.194829][ T2192] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1698.423834][ T2192] usb 2-1: Using ep0 maxpacket: 16 [ 1698.441099][ T2192] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1698.460020][ T2192] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.490927][ T2192] usb 2-1: config 0 has no interface number 0 [ 1698.516479][ T2192] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1698.546205][ T2192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.563751][T30170] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1698.573058][ T2192] usb 2-1: Product: syz [ 1698.578148][ T2192] usb 2-1: Manufacturer: syz [ 1698.582995][ T2192] usb 2-1: SerialNumber: syz [ 1698.599980][ T2192] usb 2-1: config 0 descriptor?? [ 1698.750515][T30170] usb 3-1: Using ep0 maxpacket: 8 [ 1698.758330][T30170] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1698.774738][T30170] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1698.788140][T30170] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1698.798502][T30170] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1698.849856][T30170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.865642][ T2192] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1698.879183][T30170] usb 3-1: Product: syz [ 1698.892092][ T2192] usb 2-1: No valid video chain found. [ 1698.898574][T30170] usb 3-1: Manufacturer: syz [ 1698.903224][T30170] usb 3-1: SerialNumber: syz [ 1698.914735][T30170] usb 3-1: config 0 descriptor?? [ 1698.933013][T30170] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1699.085123][ T8] usb 2-1: USB disconnect, device number 42 [ 1699.109612][ T3291] netlink: 'syz.0.18557': attribute type 9 has an invalid length. [ 1699.171185][T30170] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1699.203883][T30170] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1699.234175][T30170] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1699.345733][ T3309] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1699.433820][T30170] usb 3-1: USB disconnect, device number 28 [ 1699.547518][ T3320] loop5: detected capacity change from 0 to 1024 [ 1699.786407][T30559] hfsplus: b-tree write err: -5, ino 4 [ 1700.199675][ T3345] loop1: detected capacity change from 0 to 4096 [ 1700.230039][ T3345] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1700.493019][ T3345] ntfs3: loop1: failed to convert "c46c" to iso8859-1 [ 1701.138868][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1701.175059][ T3411] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18583'. [ 1701.213466][ T3416] loop5: detected capacity change from 0 to 1024 [ 1701.787743][T30559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1702.189299][ T3472] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 1702.448613][ T3485] loop5: detected capacity change from 0 to 1024 [ 1702.522320][ T3485] hfsplus: invalid file type 03755 for inode 20 [ 1702.822197][ T3509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18611'. [ 1705.093143][ T3630] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1705.254795][ T3638] loop5: detected capacity change from 0 to 8 [ 1705.294663][ T3638] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1705.319274][ T6251] udevd[6251]: incorrect cramfs checksum on /dev/loop5 [ 1705.352838][ T3638] cramfs: Error -5 while decompressing! [ 1705.372024][ T3638] cramfs: ffffffff973f4368(26)->ffff88805ccf7000(4096) [ 1705.375947][ T3599] loop2: detected capacity change from 0 to 40427 [ 1705.413758][ T3599] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1705.420201][ T3638] cramfs: Error -3 while decompressing! [ 1705.445288][ T3638] cramfs: ffffffff973f4382(26)->ffff88807f346000(4096) [ 1705.463877][ T3599] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1705.487335][ T3638] cramfs: Error -3 while decompressing! [ 1705.498162][ T3647] autofs4:pid:3647:autofs_fill_super: called with bogus options [ 1705.507914][ T3599] F2FS-fs (loop2): invalid crc value [ 1705.518865][ T3638] cramfs: ffffffff973f439c(16)->ffff888057eb6000(4096) [ 1705.526572][ T3638] cramfs: Error -5 while decompressing! [ 1705.532940][ T3638] cramfs: ffffffff973f4368(26)->ffff88805ccf7000(4096) [ 1705.541816][ T3599] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1705.554122][ T28] audit: type=1800 audit(2000000213.950:727): pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.18652" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1705.688761][ T3599] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1705.723776][ T3599] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1705.990397][T30553] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1706.008564][T30553] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1706.023766][ T3672] netlink: 'syz.5.18659': attribute type 1 has an invalid length. [ 1706.043158][ T3672] netlink: 224 bytes leftover after parsing attributes in process `syz.5.18659'. [ 1706.250807][ T3682] netlink: 'syz.5.18664': attribute type 2 has an invalid length. [ 1706.470906][ T3692] loop0: detected capacity change from 0 to 22 [ 1706.500374][ T3692] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1706.614381][ T3692] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1706.704059][ T3705] AppArmor: change_hat: Invalid input '0' [ 1706.895683][T30557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1706.913677][T30836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1706.928549][ T3714] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.18672'. [ 1707.123671][T30836] usb 6-1: Using ep0 maxpacket: 16 [ 1707.131077][T30836] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1707.159961][T30836] usb 6-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 1707.180876][T30836] usb 6-1: config 0 has no interface number 0 [ 1707.189804][T30836] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1707.204434][T30836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.229944][T30836] usb 6-1: Product: syz [ 1707.253815][T30836] usb 6-1: Manufacturer: syz [ 1707.258502][T30836] usb 6-1: SerialNumber: syz [ 1707.275582][ T3728] openvswitch: netlink: Flow actions attr not present in new flow. [ 1707.297396][T30836] usb 6-1: config 0 descriptor?? [ 1707.545132][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1707.640082][ T2192] usb 6-1: USB disconnect, device number 2 [ 1708.699488][ T3844] netlink: 'syz.0.18701': attribute type 15 has an invalid length. [ 1708.954069][ T3858] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 1709.520471][ T3894] loop2: detected capacity change from 0 to 512 [ 1709.557465][ T3894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 1709.557623][ T3894] System zones: 1-12 [ 1709.570315][ T3894] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.18717: Directory hole found for htree index block 0 [ 1709.570791][ T3894] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1709.570859][ T3894] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.18717: Directory hole found for htree index block 0 [ 1709.593891][ T3894] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1709.595336][ T3894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1709.614175][T32554] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1709.633387][ T3894] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1709.715169][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1709.761358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1709.824880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1709.895243][T32554] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1709.903766][T32554] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.914430][T32554] usb 1-1: config 220 has no interface number 2 [ 1709.920821][T32554] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1709.935675][T32554] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1709.973875][T32554] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1709.980901][T32554] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1710.019309][T32554] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1710.035531][T32554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.085155][T32554] usb 1-1: Product: syz [ 1710.094338][T32554] usb 1-1: Manufacturer: syz [ 1710.099048][T32554] usb 1-1: SerialNumber: syz [ 1710.370635][T32554] usb 1-1: selecting invalid altsetting 0 [ 1710.394712][T32554] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1710.444115][T32554] usb 1-1: No valid video chain found. [ 1710.462797][T32554] usb 1-1: selecting invalid altsetting 0 [ 1710.473940][T32554] usbtest: probe of 1-1:220.1 failed with error -22 [ 1710.490895][T32554] usb 1-1: USB disconnect, device number 29 [ 1711.098731][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18733'. [ 1711.129172][ T3962] ip6tnl1: entered allmulticast mode [ 1711.590239][ T3987] loop2: detected capacity change from 0 to 512 [ 1711.677113][ T3987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1711.699124][ T3987] ext4 filesystem being mounted at /4684/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1711.719937][ T3987] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1711.732201][ T3987] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 64512 [ 1711.752636][ T3987] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.18741: Failed to acquire dquot type 0 [ 1711.845026][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.184065][ T4020] netlink: 80 bytes leftover after parsing attributes in process `syz.1.18749'. [ 1712.491493][ T4034] netlink: 'syz.2.18754': attribute type 2 has an invalid length. [ 1712.655353][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1713.006339][ T4012] loop5: detected capacity change from 0 to 32768 [ 1713.092785][ T4012] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1713.232511][ T1187] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 [ 1713.245819][ T1187] XFS (loop5): Unmount and run xfs_repair [ 1713.251640][ T1187] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1713.304598][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1713.336673][ T1187] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 1713.353801][ T1187] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 1713.362812][ T1187] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1713.383393][ T1187] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 1713.403659][ T1187] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1713.412598][ T1187] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 1713.433587][ T1187] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1713.442638][ T1187] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1713.477506][ T4012] XFS (loop5): metadata I/O error in "xfs_read_agf+0x294/0x590" at daddr 0x1 len 1 error 74 [ 1713.503791][ T4012] XFS (loop5): Error -117 reserving per-AG metadata reserve pool. [ 1713.512251][ T4012] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592). Shutting down filesystem. [ 1713.573835][ T4012] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1713.582285][ T4012] XFS (loop5): Ending clean mount [ 1713.648279][ T4012] XFS (loop5): Failed to initialize disk quotas. [ 1713.658444][ T4012] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1713.706691][ T4080] netlink: 10 bytes leftover after parsing attributes in process `syz.0.18765'. [ 1714.067735][ T4098] loop1: detected capacity change from 0 to 2048 [ 1714.083140][ T4098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1714.194117][T30836] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1714.203163][ T4098] UDF-fs: incorrect filename length (10) [ 1714.408016][T30836] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1714.433838][T30836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.441928][T30836] usb 1-1: Product: syz [ 1714.473585][T30836] usb 1-1: Manufacturer: syz [ 1714.478265][T30836] usb 1-1: SerialNumber: syz [ 1714.557234][T30836] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1714.607432][ T1187] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1714.727402][ T4127] libceph: resolve '0.0' (ret=-3): failed [ 1714.848647][ C0] usb 1-1: ath: unknown panic pattern! [ 1715.294627][T21074] usb 1-1: USB disconnect, device number 30 [ 1715.390610][ T4154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18781'. [ 1715.706423][ T1187] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1715.741240][ T1187] ath9k_htc: Failed to initialize the device [ 1715.774360][T21074] usb 1-1: ath9k_htc: USB layer deinitialized [ 1715.844909][T32554] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1715.870347][ T4181] loop5: detected capacity change from 0 to 1764 [ 1715.953272][ T4181] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1716.053746][T32554] usb 3-1: Using ep0 maxpacket: 8 [ 1716.074378][T32554] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1716.133666][T32554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1716.153692][T32554] usb 3-1: Product: syz [ 1716.168178][T32554] usb 3-1: Manufacturer: syz [ 1716.172860][T32554] usb 3-1: SerialNumber: syz [ 1716.229060][T32554] usb 3-1: config 0 descriptor?? [ 1716.241072][ T4200] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1716.276767][T32554] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1716.696257][T32554] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1716.717920][T32554] sq905: probe of 3-1:0.0 failed with error -71 [ 1716.733957][T32554] usb 3-1: USB disconnect, device number 29 [ 1717.094571][ T4236] loop5: detected capacity change from 0 to 4096 [ 1717.125275][ T4236] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1717.194214][ T4236] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 1717.501759][ T4220] loop1: detected capacity change from 0 to 32768 [ 1717.605557][ T4220] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1717.856566][ T4276] loop0: detected capacity change from 0 to 512 [ 1717.888774][ T4220] XFS (loop1): Ending clean mount [ 1717.925338][ T4276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1718.108231][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.194889][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1718.416810][T30553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1718.827023][ T28] audit: type=1326 audit(2000000227.210:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.5.18821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426d19aeb9 code=0x7ffc0000 [ 1718.906982][ T28] audit: type=1326 audit(2000000227.210:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.5.18821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426d19aeb9 code=0x7ffc0000 [ 1718.967727][ T28] audit: type=1326 audit(2000000227.250:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.5.18821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f426d19aeb9 code=0x7ffc0000 [ 1719.001684][ T28] audit: type=1326 audit(2000000227.250:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.5.18821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426d19aeb9 code=0x7ffc0000 [ 1719.027462][ T28] audit: type=1326 audit(2000000227.250:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.5.18821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426d19aeb9 code=0x7ffc0000 [ 1719.054292][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1719.067412][ T4322] netlink: 'syz.0.18823': attribute type 1 has an invalid length. [ 1719.083621][ T4322] netlink: 228 bytes leftover after parsing attributes in process `syz.0.18823'. [ 1719.599725][ T4350] loop1: detected capacity change from 0 to 512 [ 1719.708393][ T4350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.790500][ T4350] ext4 filesystem being mounted at /4649/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1719.935179][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.051891][ T4374] netlink: 6 bytes leftover after parsing attributes in process `syz.5.18839'. [ 1720.115467][ T4374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1720.149506][ T4376] loop0: detected capacity change from 0 to 4096 [ 1721.134133][ T4434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18857'. [ 1722.661705][ T4525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1722.711074][ T4529] loop1: detected capacity change from 0 to 16 [ 1722.767208][ T4529] erofs: (device loop1): mounted with root inode @ nid 36. [ 1722.896446][ T4540] overlayfs: conflicting options: nfs_export=on,index=off [ 1723.034908][ T4545] netlink: 'syz.0.18894': attribute type 1 has an invalid length. [ 1723.385186][ T4565] ip6t_srh: unknown srh invflags 4449 [ 1723.662362][ T4582] netlink: 'syz.5.18904': attribute type 1 has an invalid length. [ 1723.807624][ T4590] loop0: detected capacity change from 0 to 128 [ 1724.174249][ T2924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1724.498383][ T4584] loop2: detected capacity change from 0 to 32768 [ 1724.588692][ T4584] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1724.646502][ T4584] XFS (loop2): Ending clean mount [ 1724.651126][ T4584] XFS (loop2): Quotacheck needed: Please wait. [ 1724.774027][ T4584] XFS (loop2): Quotacheck: Done. [ 1724.824626][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1724.847510][ T4628] netlink: 'syz.5.18916': attribute type 1 has an invalid length. [ 1724.847536][ T4628] netlink: 480 bytes leftover after parsing attributes in process `syz.5.18916'. [ 1724.923717][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1724.988849][ T4597] loop1: detected capacity change from 0 to 32768 [ 1725.026497][ T4597] (syz.1.18910,4597,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1725.026770][ T4597] (syz.1.18910,4597,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1725.084691][ T4597] JBD2: Ignoring recovery information on journal [ 1725.220703][ T4597] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1725.268856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1725.351732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1725.496670][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 1725.508515][ T28] audit: type=1326 audit(2000000233.900:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1725.580117][ T4642] loop0: detected capacity change from 0 to 2048 [ 1725.610447][ T28] audit: type=1326 audit(2000000233.900:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1725.686157][ T28] audit: type=1326 audit(2000000233.950:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f302f39aeb9 code=0x7ffc0000 [ 1725.726375][ T4642] Alternate GPT is invalid, using primary GPT. [ 1725.750015][ T28] audit: type=1326 audit(2000000233.950:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f302f39ac22 code=0x7ffc0000 [ 1725.764659][ T4642] loop0: p2 p3 p7 [ 1725.772244][ C1] vkms_vblank_simulate: vblank timer overrun [ 1725.826551][ T28] audit: type=1326 audit(2000000233.960:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f302f35b78e code=0x7ffc0000 [ 1725.907040][ T28] audit: type=1326 audit(2000000233.970:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f302f39ace7 code=0x7ffc0000 [ 1726.003368][ T28] audit: type=1326 audit(2000000233.970:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f302f35b78e code=0x7ffc0000 [ 1726.143729][ T28] audit: type=1326 audit(2000000233.970:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f302f39ab4b code=0x7ffc0000 [ 1726.237983][ T28] audit: type=1326 audit(2000000234.030:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f302f35b78e code=0x7ffc0000 [ 1726.311225][ T28] audit: type=1326 audit(2000000234.030:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.18921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f302f39ab4b code=0x7ffc0000 [ 1726.750937][ T4679] loop1: detected capacity change from 0 to 2048 [ 1726.782130][ T4682] comedi comedi0: pcl730: a I/O base address must be specified [ 1726.814455][ T4679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1727.260133][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18934'. [ 1727.712997][ T4725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18941'. [ 1727.766231][ T4728] loop5: detected capacity change from 0 to 64 [ 1728.019692][ T4743] loop2: detected capacity change from 0 to 16 [ 1728.048578][ T4743] erofs: (device loop2): mounted with root inode @ nid 36. [ 1728.063356][ T4743] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1728.074685][ T4743] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[58, 4038] out[1851] [ 1728.086357][ T4743] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1728.349886][ T4760] loop0: detected capacity change from 0 to 256 [ 1728.371058][ T4762] netlink: 'syz.5.18950': attribute type 1 has an invalid length. [ 1728.396149][ T4766] loop2: detected capacity change from 0 to 256 [ 1728.407756][ T4762] netlink: 236 bytes leftover after parsing attributes in process `syz.5.18950'. [ 1728.480721][ T4766] FAT-fs (loop2): Directory bread(block 64) failed [ 1728.503737][ T4766] FAT-fs (loop2): Directory bread(block 65) failed [ 1728.531108][ T4766] FAT-fs (loop2): Directory bread(block 66) failed [ 1728.550645][ T4766] FAT-fs (loop2): Directory bread(block 67) failed [ 1728.593778][ T4766] FAT-fs (loop2): Directory bread(block 68) failed [ 1728.634080][ T4766] FAT-fs (loop2): Directory bread(block 69) failed [ 1728.640813][ T4766] FAT-fs (loop2): Directory bread(block 70) failed [ 1728.681454][ T4766] FAT-fs (loop2): Directory bread(block 71) failed [ 1728.705870][ T4766] FAT-fs (loop2): Directory bread(block 72) failed [ 1728.712504][ T4766] FAT-fs (loop2): Directory bread(block 73) failed [ 1728.739946][ T4780] loop0: detected capacity change from 0 to 164 [ 1729.078819][ T4794] loop0: detected capacity change from 0 to 256 [ 1729.214758][T30557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1729.264077][ T4794] FAT-fs (loop0): Directory bread(block 64) failed [ 1729.271249][ T4794] FAT-fs (loop0): Directory bread(block 65) failed [ 1729.307957][ T4794] FAT-fs (loop0): Directory bread(block 66) failed [ 1729.326838][ T4794] FAT-fs (loop0): Directory bread(block 67) failed [ 1729.353782][ T4794] FAT-fs (loop0): Directory bread(block 68) failed [ 1729.369814][ T4794] FAT-fs (loop0): Directory bread(block 69) failed [ 1729.405259][ T4794] FAT-fs (loop0): Directory bread(block 70) failed [ 1729.411971][ T4794] FAT-fs (loop0): Directory bread(block 71) failed [ 1729.451033][ T4794] FAT-fs (loop0): Directory bread(block 72) failed [ 1729.461042][ T4794] FAT-fs (loop0): Directory bread(block 73) failed [ 1729.656801][ T4820] loop1: detected capacity change from 0 to 64 [ 1729.939658][ T4837] loop2: detected capacity change from 0 to 128 [ 1730.039941][ T4838] loop5: detected capacity change from 0 to 8 [ 1730.124595][ T4838] cramfs: Error -3 while decompressing! [ 1730.130241][ T4838] cramfs: ffffffff973f8368(26)->ffff88805a49e000(4096) [ 1730.156043][ T4838] cramfs: Error -3 while decompressing! [ 1730.165076][ T5774] udevd[5774]: incorrect cramfs checksum on /dev/loop5 [ 1730.167623][ T4838] cramfs: ffffffff973f8382(26)->ffff888058550000(4096) [ 1730.237129][ T4838] cramfs: Error -3 while decompressing! [ 1730.259354][ T4838] cramfs: ffffffff973f839c(16)->ffff888050eb9000(4096) [ 1730.281941][ T5774] udevd[5774]: incorrect cramfs checksum on /dev/loop5 [ 1730.323696][ T4838] cramfs: Error -3 while decompressing! [ 1730.329343][ T4838] cramfs: ffffffff973f8368(26)->ffff88805a49e000(4096) [ 1730.579283][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1730.594419][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.600842][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.674125][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18979'. [ 1730.683167][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18979'. [ 1730.753568][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18979'. [ 1731.060936][ T4892] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1731.153988][ T4932] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1731.715370][ T4985] C: renamed from lo (while UP) [ 1731.729362][ T4985] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1731.981264][ T4935] loop1: detected capacity change from 0 to 32768 [ 1732.012146][ T4935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.18989 (4935) [ 1732.044918][ T4935] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1732.068906][ T4935] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1732.116448][ T4935] BTRFS info (device loop1): using free space tree [ 1732.234039][ T1187] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1732.250097][ T4935] BTRFS info (device loop1): enabling ssd optimizations [ 1732.263686][ T4935] BTRFS info (device loop1): auto enabling async discard [ 1732.442286][ T5770] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1732.463674][ T1187] usb 6-1: Using ep0 maxpacket: 8 [ 1732.476406][ T1187] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1732.500485][ T1187] usb 6-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255 [ 1732.550032][ T1187] usb 6-1: config 8 interface 0 has no altsetting 0 [ 1732.576245][ T1187] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1732.585641][ T1187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.592716][ C1] vkms_vblank_simulate: vblank timer overrun [ 1732.645050][ T1187] usb 6-1: Product: syz [ 1732.653812][ T1187] usb 6-1: Manufacturer: syz [ 1732.687860][ T1187] usb 6-1: SerialNumber: syz [ 1732.720553][ T4994] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1733.022379][ T1187] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1733.043667][ T1187] usb 6-1: selecting invalid altsetting 0 [ 1733.158845][ T1187] usb 6-1: USB disconnect, device number 3 [ 1733.274932][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1734.251026][ T5076] set_capacity_and_notify: 1 callbacks suppressed [ 1734.251043][ T5076] loop2: detected capacity change from 0 to 32768 [ 1734.270695][ T5138] loop1: detected capacity change from 0 to 512 [ 1734.339375][ T5138] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1734.383703][ T5138] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1734.405185][ T5076] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1734.415491][ T29] INFO: task syz-executor:5769 blocked for more than 143 seconds. [ 1734.423351][ T29] Not tainted syzkaller #0 [ 1734.446405][ T5138] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1734.453112][ T5138] __quota_error: 20 callbacks suppressed [ 1734.453128][ T5138] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1734.463980][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1734.478224][ T5138] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1734.495386][ T5138] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1734.510482][ T5138] EXT4-fs (loop1): ext4_process_orphan: truncating inode 16 to 9000 bytes [ 1734.519469][ T5138] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.19024: bg 0: block 40: padding at end of block bitmap is not set [ 1734.535254][ T5138] EXT4-fs (loop1): Remounting filesystem read-only [ 1734.543830][ T5138] EXT4-fs (loop1): 1 truncate cleaned up [ 1734.554665][ T5138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1734.606186][ T29] task:syz-executor state:D stack:21704 pid:5769 ppid:1 flags:0x00004004 [ 1734.625867][ T5076] XFS (loop2): Ending clean mount [ 1734.646154][ T29] Call Trace: [ 1734.681901][ T29] [ 1734.693673][ T29] __schedule+0x1553/0x45a0 [ 1734.710685][ T29] ? asan.module_dtor+0x20/0x20 [ 1734.731126][ T29] ? mark_lock+0x94/0x320 [ 1734.749417][ T29] ? lock_chain_count+0x20/0x20 [ 1734.773700][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1734.783410][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1734.798386][ T29] schedule+0xbd/0x170 [ 1734.807161][ T29] io_schedule+0x80/0xd0 [ 1734.814499][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1734.819869][ T29] ? folio_wait_bit+0x30/0x30 [ 1734.845050][ T29] ? filemap_get_entry+0x379/0x3f0 [ 1734.850262][ T29] ? _compound_head+0x120/0x120 [ 1734.869241][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 1734.874996][ T29] __filemap_get_folio+0xbc/0xbb0 [ 1734.880090][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 1734.897532][ T29] ? mapping_evict_folio+0x510/0x510 [ 1734.903420][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1734.914952][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1734.920228][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1734.929322][ T29] evict+0x4dd/0x8d0 [ 1734.933372][ T29] ? proc_nr_inodes+0x230/0x230 [ 1734.938576][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1734.944085][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1734.949380][ T29] evict_inodes+0x606/0x6a0 [ 1734.954062][ T29] ? clear_inode+0x150/0x150 [ 1734.958701][ T29] generic_shutdown_super+0x97/0x2b0 [ 1734.964103][ T29] kill_block_super+0x44/0x90 [ 1734.968865][ T29] deactivate_locked_super+0x97/0x100 [ 1734.975125][ T29] cleanup_mnt+0x43b/0x4d0 [ 1734.979601][ T29] task_work_run+0x1d4/0x260 [ 1734.984353][ T29] ? task_work_cancel+0x220/0x220 [ 1734.989430][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1734.995076][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 1735.000437][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1735.006124][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1735.011631][ T29] do_syscall_64+0x61/0xa0 [ 1735.016301][ T29] ? clear_bhb_loop+0x40/0x90 [ 1735.021051][ T29] ? clear_bhb_loop+0x40/0x90 [ 1735.030863][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1735.037032][ T29] RIP: 0033:0x7f54f2b9c117 [ 1735.041508][ T29] RSP: 002b:00007fff61f63478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1735.051077][ T29] RAX: 0000000000000000 RBX: 00007f54f2c0471f RCX: 00007f54f2b9c117 [ 1735.060291][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff61f63530 [ 1735.068757][T30550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1735.086268][ T29] RBP: 00007fff61f63530 R08: 00007fff61f64530 R09: 00000000ffffffff [ 1735.099914][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff61f645c0 [ 1735.108249][ T29] R13: 00007f54f2c0471f R14: 00000000001826ac R15: 00007fff61f64600 [ 1735.116726][ T29] [ 1735.119910][ T29] [ 1735.119910][ T29] Showing all locks held in the system: [ 1735.121723][ T5771] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1735.136707][ T29] 1 lock held by khungtaskd/29: [ 1735.136725][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1735.136822][ T29] 2 locks held by getty/5530: [ 1735.136834][ T29] #0: ffff888031d800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1735.136885][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1735.136945][ T29] 1 lock held by syz-executor/5769: [ 1735.136957][ T29] #0: ffff88802e3fe0e0 (&type->s_umount_key#61){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1735.196994][ T29] 1 lock held by syz-executor/5770: [ 1735.202313][ T29] #0: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1735.220505][ T29] 1 lock held by syz-executor/5771: [ 1735.226244][ T29] 1 lock held by kworker/u4:5/30550: [ 1735.231624][ T29] [ 1735.234953][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1735.254910][ T29] ============================================= [ 1735.254910][ T29] [ 1735.263393][ T29] NMI backtrace for cpu 1 [ 1735.267756][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1735.274986][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1735.285089][ T29] Call Trace: [ 1735.288407][ T29] [ 1735.291379][ T29] dump_stack_lvl+0x18c/0x250 [ 1735.296114][ T29] ? show_regs_print_info+0x20/0x20 [ 1735.301351][ T29] ? load_image+0x400/0x400 [ 1735.305910][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1735.310908][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1735.317117][ T29] ? _printk+0xde/0x130 [ 1735.321316][ T29] ? load_image+0x400/0x400 [ 1735.325861][ T29] ? load_image+0x400/0x400 [ 1735.330413][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1735.336554][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1735.342593][ T29] watchdog+0xf3d/0xf80 [ 1735.346811][ T29] ? watchdog+0x1e1/0xf80 [ 1735.351182][ T29] kthread+0x2fa/0x390 [ 1735.355267][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1735.360342][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1735.364973][ T29] ret_from_fork+0x48/0x80 [ 1735.369434][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1735.374058][ T29] ret_from_fork_asm+0x11/0x20 [ 1735.378867][ T29] [ 1735.381982][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.388483][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1735.393794][ C0] NMI backtrace for cpu 0 [ 1735.393805][ C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1735.393821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1735.393832][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1735.393853][ C0] RIP: 0010:__asan_memset+0x8/0x40 [ 1735.393878][ C0] Code: 00 00 f3 0f 1e fa 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 bc ea ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 55 41 56 53 <48> 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 [ 1735.393892][ C0] RSP: 0018:ffffc90000ba7ab0 EFLAGS: 00000246 [ 1735.393905][ C0] RAX: ffff88805c02c022 RBX: ffff88805c02c022 RCX: ffff888018efbc00 [ 1735.393918][ C0] RDX: 000000000000006c RSI: 0000000000000000 RDI: ffff88805c02c022 [ 1735.393928][ C0] RBP: ffff88804e0949d8 R08: ffff888018efbc00 R09: 0000000000000003 [ 1735.393940][ C0] R10: 000000000000002e R11: 0000000000000000 R12: dffffc0000000000 [ 1735.393950][ C0] R13: ffff888054de9140 R14: 0000000000000022 R15: 00000000000000c0 [ 1735.393961][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1735.393975][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1735.393986][ C0] CR2: 0000555555635a28 CR3: 0000000030abf000 CR4: 00000000003506f0 [ 1735.394001][ C0] Call Trace: [ 1735.394007][ C0] [ 1735.394014][ C0] nsim_dev_trap_report_work+0x639/0xb00 [ 1735.394041][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 1735.394064][ C0] process_scheduled_works+0xa5d/0x15d0 [ 1735.394099][ C0] ? assign_work+0x430/0x430 [ 1735.394122][ C0] ? assign_work+0x3d0/0x430 [ 1735.394151][ C0] worker_thread+0xa55/0xfc0 [ 1735.394186][ C0] kthread+0x2fa/0x390 [ 1735.394201][ C0] ? pr_cont_work+0x560/0x560 [ 1735.394220][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1735.394236][ C0] ret_from_fork+0x48/0x80 [ 1735.394256][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1735.394272][ C0] ret_from_fork_asm+0x11/0x20 [ 1735.394302][ C0] [ 1735.395707][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1735.395740][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1735.395783][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1735.395810][ T29] Call Trace: [ 1735.395822][ T29] [ 1735.395845][ T29] dump_stack_lvl+0x18c/0x250 [ 1735.395921][ T29] ? show_regs_print_info+0x20/0x20 [ 1735.395984][ T29] ? load_image+0x400/0x400 [ 1735.396070][ T29] panic+0x2dc/0x730 [ 1735.396141][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1735.396222][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1735.396262][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1735.396320][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1735.396410][ T29] watchdog+0xf7c/0xf80 [ 1735.396466][ T29] ? watchdog+0x1e1/0xf80 [ 1735.396565][ T29] kthread+0x2fa/0x390 [ 1735.396611][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1735.396684][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1735.396732][ T29] ret_from_fork+0x48/0x80 [ 1735.396810][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1735.396858][ T29] ret_from_fork_asm+0x11/0x20 [ 1735.396986][ T29] [ 1735.399496][ T29] Kernel Offset: disabled [ 1735.697780][ T29] Rebooting in 86400 seconds..