last executing test programs: 9m36.021202375s ago: executing program 0 (id=1258): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x2, @output={0x0, 0x0, {0xfff, 0x79f0}, 0x0, 0xfffffffc}}) 9m35.647171986s ago: executing program 0 (id=1263): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x2, 0x7fff0004}]}) setregid(0xffffffffffffffff, 0xffffffffffffffff) 9m35.288516071s ago: executing program 0 (id=1267): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x2}) 9m35.070380165s ago: executing program 0 (id=1271): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x1545, &(0x7f0000001a00)="$eJzs3AucTVX7OPDnWWvtMSROk1yGtdazOcllmSTJJUkuSZIkSW4JSZO8kpAYQpKGJCSXIYkhJJeJSeN+v18SkqRJkpDckvX/TPFXb97f+77/t19+/988389nf2Y9Z+9n7Wef55w5e2/mfNt1aK0mtas3IiL4j+CvP5IAIBYABgJAXgAIAKB8XPm4rPU5JSb9Zzthf64HU690BexK4v5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7HsbNO0Qtfwkn2XP/v+fyzf////CH/+/y+SWWbsl2vKXNcNIOZfTeH+Z2/c//+1gn9lI+5/9pTzwk/uf3YVe6ULYH+lPpd/mN//2UGOf7iG+5+9cf8Zy86u9P3nv3KJuczxQuR/2HNw5MK12V+0vyv9+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9pcoALg4vtJ1McYYY4wxxhhj7M/jc1zpChhjjDHGGGOMMfbfD0GABAUBxEAOiIWckAsEAFwNeSAvROAaiINrIR9cB/mhABSEQhAPhaEIaDBggSCEolAMonA9FIcboASUhFJQGhyUgQS4EcrCTVAObobycAtUgFuhIlSCylAFboOqcDtUgzugOtwJNaAm1ILacBfUgbuhLtwD9eBeqA/3IcD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv91PjS4bP7z0BNegF7QG5KgD/SFF6Ef9IcB8BIMhJdhELwCg+FVSIYhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAeUmACTIS3YRK8A5PhXZgCUyEVpsF0eA9mwEyYBe/DbPgA5sBcmAfzIQ0+hAWwENLhI1gEH0MGLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBn8BO+BR2wW7YA5/BXvj838w/9Xf53RAQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwH+bD/JgfC2JBjMd4LIJF0KBBQsKiWBSjGMXiWBxLYAkshaXQocMETMCyeBOWw3JYHstjBayAFbESVsIqWAWrYlWshtWwOlbHGlgDa2EtvAvvwj5YF+tiPayH9bH+xdtT2AgbYWNsjE2wCTbFptgMm2ELbIGtsBW2xtbYBttgO2yH7bE9dsAOmIiJ2BE7YifshJ2xM3bBLtgVu2I37I7dM5/PAfgCvoC9sYbog32xL/bD5BwD8CV8CV/GQfgKvoKvYjIOwaH4Gr6Gr+NwPIkjcCSOwlFYVbyFY3AskhiPKZiCE3EiTsJJmFXouzgVU3EaTsfpOANn4kx8H2fjB/gBzsW5OB/TMA0X4EJMx3RchKcwAxfjElyKy3A5LsOVuApX4hpci2twPa7HjbgRN+Nm3IpbcTtux09QAeCnuBt3YzLuxb24D/fhftyPB/AAZmImHsSDeAgP4WE8jEfwCB7FY3gcj+EJPIEn8RSextN4Fs/iOXw2/uvGn5RcnQwiixJKxIgYEStiRS6RS+QWuUUekUdERETEiTiRT+QT+UV+UVAUFPEiXhQRRYQRRpAIYwBAREVUFBfFRQlRQpQSpYQTTiSIBFFWlBXlRDlRXtwiKohbRUVRSbR1VUQVUVW0c9XEHaK6qC5qiJqilqgtaos6oo6oK+qKeqKeqC/qiwbiftFQ9MEB+KDI6kwTMQSbiqHYTDQX8sJvsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHh2r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZFf91FD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6Cy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeU/zX/7MvmDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tyF5wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvGBUKVVaOVVGJagb/518VVzdoEqokr/Lv1hf0j+or5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezTvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBeaHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1Z/6vzenyzwmOule+sk3Uf31S/qfrq/HqBf0gP1y3qQfkUP1q/qZD1ED9Wv6WH6dT1cv6FH6JF6lH5Tj9Zv6TF6rB6nx+sUPUFP1G/rSfodPVm/q6foqTpVT9PT9Xt6hp6pZ+n39Wz9gZ6j5+p5er5O0x/qBXqhTtcf6UX6Y52hF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36E71Tf6p36d16j/5M79Wf6336C71ff6kP6K90pv5aH9Tf6EP6W31Yf6eP6O/1UX1MH9c/6BP6R31Sn9Kn9Rl9Vv+kz+mf9Xnts07usz7ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiTz+Qz+U1+U9AUNPEm3hQxRUwWMmSKmqImaqKmuCluSpgSppQpZZxxJsEkmLKmrClnypnyprypYCqYiqaiqWwqm9vMbeZ2c7u5w9xh7jR3mpqmpqltaps6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlhWphWppVpbVqbNqaNaWfamfamvelgOphEk2g6mo6mk+lkOpvOpovpYrqarqab6WZ6mB6mp+lpepleJskkmb6mr+ln+pkBZoAZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmWdqJq3zBgz1owz402KSTETzUQzyUwyk81kM8VMMakm1Uw3080MM8PMMrPMbDPbzDFzzDwzz6SZNLPALDDpJt0sMotMhskwS8wSs8wsMyvMCrPKrDJrzBqzDtaZDWaD2WQ2mS1mi9lmtpkdZofZaXaaXWaX2WP2mL1mr9ln9pn9Zr85YA6YTJNpDpqD5pA5ZA6bw+aIOWKOmqPmuDluTpgT5qQ5aU6b0+asKXDh89KbWJvT5rJX2dz2apvH5rV/Hxe0hWy8LWyLWG3z2wK/i421toQtaUvZ0tbZMjbB3viHuKKtZCvbKvY2W9Xebqv9Ia5j77Z17T22nr3X1rZ3/S6ub++zDezDtiEigG1uG9uWtol92Da1j9hmtrltYVva9vYJ28E+aRPtU7ajffoP8QK70K6yq+0au9busrvtaXvGHrLf2rP2J9vL9rYD7ct2kH3FDrav2mQ75A/xKPumHW3fsmPsWDvOjv9DPMVOtal2mp1u37Mz7Mw/xGn2Qzvbpts5dq6dZ+f/EmfVlG4/sovsxzbDBrDELrXL7HK7wq68WKvPa9fbDXaj3Wk/tVvsVrvNbrc7Lp4I2912j/3M7rWf24P2G7vffmkP2MM20379S5x1fIftd/aI/d4etcfscfuDPWF/VBezs479B/uzPW+9BUICkqQooBjKQbGUk3LRVZSbrqY8lJcidA3F0bWUj66j/FSAClIhiqfCVIQ0GbJEFFJRKkZRup4ulleKSpOjMpRAN1JZuonK0c1Unm6hCnQrVaRKVJmq0G1UlW6nanQHVac7qQbVpFpUm+6iOnQ31aV7qB7dS/XpPmpA91NDeoAa0YPUmB6iJvQwNaVHqBk1pxbUklrRo9SaHqM21Jba0ePUnp6gDvQkJdJT1JGepk70N+pMz1AXepa60nPUjbpTD3qeetIL1It6UxL1ob70IvWj/jSAXqKB9DINoldoML1KyTSEhtJrNIxep+H0Bo2gkTSK3qTR9BaNobE0jsZTCk2gifQ2TaJ3aDK9S1NoKqXSNJpO79EMmkmz6H2aTR/QHJpL82g+pdGHtIAWUjp9RIvoY8qgxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjvoE9pJn9Iu2k176DPaS5/TPvqC9tOXdIC+okz6mg7SN3SIvqXD9J3vTd/TUTpGx+kHOkE/0kk6RafpDJ2ln+gc/UznyROEGIpQhioMwpgwRxgb5gxzhVeFucOrwzxh3jASXhPGhdeG+cLrwvxhgbBgWCiMDwuHRUIdmtCGFIZh0bBYGA2vD4uHN4QlwpJhqbB06MIyYUJ4Y1g2vCksF94clg9vCSuEt4YVw0rhw/dWCW8Lq4a3h9XCO8Lq4Z1hjbBmWCusHd4V1gnvDuuG94T1wnvDcuF9YYPw/rBh+EDYKHwwbBw+FDYJHw6bho+EzcLmYYuwZdgqfDRsHT4Wtgnbhu3Cx8P24RNhh/DJMDF8KuwYPv3L+vsW/uP1SWGfsG/4Yvhi6P09cl50fjQt+mF0QXRhND36UXRR9ONoRnRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y9T72jnAoRNOOuUCF+NyuFiX0+VyV7nc7mqXx+V1EXeNi3PXunzuOpffFXAFXSEX7wq7Ik4746wjF7qirpiLuutdcXeDK+FKulKutHOujEtwLV0r18q1do+5Nq6ta+ced4+7J9wT7kn3pHvKdXRPu07ub66ze8Z1cc+6Z91zrpvr7nq4511PNyHPr+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ35617muDlunpvn0lyaW+CyzhnT3SK3yGW4DLfELXHL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfL5/11UrfX7XP73H633x1wX7lM97U76L5xh9y37rD7zh1x37uj7pg77n5wJ9yP7qQ75U67M+6s+8mdcz+78867lMiEyMTI25FJkXcikyPvRqZEpkZSI9Mi0yPvRWZEZkZmRd6PzI58EJkTmRuZF5kfSYt8GFkQWRhJj3wUWRT5OJIRWRxZElkaWRZZHvG+8JbQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+Ga+uW/hW/pW/lHf2j/m2/i2vp1/3Lf3T/gO/kmf6J/yHf3TvpP/m+/sn/Fd/LO+q3/Od/PdfQ//vO/pX/C9fG+f5Pv4vv5F38/39wP8S36gf9kP8q/4wf5Vn+yH+KH+NT/Mv+6H+zf8CD/Sj4p504++eIkM432Kn+An+rf9JP+On+zf9VPOep/qp/np/j0/w8/0s/z7frb/wM/xc/08P9+n+Q/9Ar/Qp/uP/CL/sc/wiy/eVPYr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/wnfqf/1O/yu/0e/5nf6z/3+/wXfr//0h/wX/lM/7U/6L/xh/y3/rD/zh/x3/uj/pg/7n/wJ/yP/qQ/5U/7M/6s/8mf8z/78/w3a4wxxhhj/5IJl4bi92t+vZ3f5zI54jcb9wWAq7cWyvzt+qwzynX5fx33F/HtIwDwVO+uD15catRI+r/bZkgIis0FuPgvQVli4FK8GNrBE5AIbaHsZevvL7qfpT/On5T0m/mjtwDk+k1OLFyKL83/BQAmXWb+Rx8ftaBCeDruv5h/LkCJYpdycsKleDG0++X+Slso9w/qL9D6n9Sf88sUgDa/yckNl+JL9SfAY/A0JP5uS8YYY4wxxhhj7Ff9ReXOF68/L/6Pz7+/vs26Po9Xl3JywKX4n12fM8YYY4wxxhhj7Mp7pnuPJx9NTGzb+d8fVPt/yvqXB03hv2tmHlx24D3AxUcUAPyHEwJkDeRfeRSb/5J9JV946/z9qmVnfAD/M1r5Zwyu8C8mxhhjjDHG2J/u0kn/7x9XV6ogxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/orvk6Mv02AMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYdvd/AgAA//8vzfwg") mount(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x11, 0x0) 9m34.384451043s ago: executing program 0 (id=1279): r0 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 9m29.396435388s ago: executing program 0 (id=1339): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 9m28.807600417s ago: executing program 32 (id=1339): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 8m11.717867602s ago: executing program 2 (id=1836): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x803, 0xfffffffd, 0xffffffff, 0x10, 0xfffffffd, 0x3, 0x800, 0x2], [0x0, 0x7ff, 0xfffffffd, 0x37d7, 0x3ff, 0x0, 0x0, 0x4], [0xffffffff, 0x20000232, 0x8001, 0x0, 0xfffffffd, 0x0, 0x1, 0x7]], '\x00', [{0x1, 0x1, 0x1}, {0x9, 0x4}, {}, {0x0, 0xffffffff}, {0xc00000, 0xfffffffe}, {0xfffffffe}, {0x0, 0x3}, {0xc, 0x5}, {0x0, 0x405}, {0x0, 0xffffffff}, {0xe, 0x2}]}) 8m11.57024414s ago: executing program 2 (id=1837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x40442, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) 8m11.353038223s ago: executing program 2 (id=1839): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getgid() 8m11.0841666s ago: executing program 2 (id=1840): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 8m9.21208838s ago: executing program 2 (id=1858): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x8000000, 0x1], [0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {}, {0xfffffffd}, {0xffffffe, 0xfffffff, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4}, {0x0, 0x7f}, {0x2}, {0x0, 0x1}, {0x401}], '\x00', 0x1, 0x0, 0x0, 0xf8}) 8m4.940600596s ago: executing program 2 (id=1873): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) 8m4.56529363s ago: executing program 33 (id=1873): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) 2.196454867s ago: executing program 5 (id=7153): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f000012c000/0x4000)=nil, 0x4000, 0x67) 1.96356144s ago: executing program 5 (id=7158): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 1.878002712s ago: executing program 6 (id=7160): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d1, &(0x7f00000000c0)={0x0, 0x0, 0x41a2, 0x2082, 0x2, 0x2, 0x56afe046}) 1.680416223s ago: executing program 5 (id=7164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_DELTABLE={0x280, 0x2, 0xa, 0x301, 0x0, 0x0, {0x8}, [@NFTA_TABLE_USERDATA={0xf4, 0x6, "e80cfb5f0c5860e19517a1742e9f70ace2607a134791cea703e2b4bf699c2ec367158d443b9073268118679256a62017ab3ab3e4f94a307aa6a9a2e5c4ec2b4cb621264efaf3db5f9456bcb6d372e3dcfcf842fe246c62a1cacd5220d06c83bbdc138fc55659b5888ae31d0d566295d931e1ce44fc44e1b2dcc09995cdcefbae002bacf450cd616b53ca384e08540da9fc739fb89fdf6907067c3f900ce7113191db5a1b9369df9a57321b532aae772ab2e1d433add3107042c6951ff1db3d8054ad91767ba2214582d976d519aa1ca58bb2fe2bcd5c88e7d71889da1b857152d09ef88cd8cc147b32f8afdc5b839877"}, @NFTA_TABLE_USERDATA={0x3e, 0x6, "2d203686b06796d9eb4cc9f1fdc7bb02d7c670e81850b1d852f61e8b14cb8b23baa3ec86cd255898e068769c992cee90ffb7c763787cc84e97ad"}, @NFTA_TABLE_USERDATA={0x16, 0x6, "cda07b23a1f52267fc1a66064124751b3371"}, @NFTA_TABLE_USERDATA={0x88, 0x6, "7fc6fdb46c5d6f270a29a97a9b5fc6a76bb8d67eeeda604cb0f134f33959ff4edaf6ba31705abca549518b0f4dbb9c2be8a7448e4f0d690f73ee36cfbd0e30bcf4a0d5c0632c231e896445f128fd421428745f75fb9790429b68600e68f74939896c10c355b88678d796d6556a256a348ae82c6ab1d6e27243dda9bfc23d2d85eff6f9f9"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x6d, 0x6, "2f8149832e75a802afcb548f9eeb6529fdeee4623f73b42e89df11e80e951d4628815fb3e599b7e3821f476426b3571bb2616f72c9f12573d9fb43793405b7c837aa4e34d8cb890cc712e71e871f1fa0a1f2bc33a2627bc04a2bd7b27e5f38ded256154ef386c87e57"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x6c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1d}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8000}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELCHAIN={0xf4, 0x5, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xff}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x53f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2092d267}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68171b93}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf2e3833}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x482a5800}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f808879}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x13, 0x6, "278c8ae39a65c72700d9742c08d3b4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0xc8, 0x2, 0xa, 0x807, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x86, 0x6, "4dbf3406ae41d37321e512bfc6e314ce0a115f69a8c38fb5eb14088008d3761c1a61c23d72197f752f9c53bf62d2f9ffd87dd270ed88184364bbdbb58122ded7caf9a73d78e5f14bf2a837ad8023eb360d551a91b348facea61c58c2cee4f394f11d847aea80aa9ad16fe7a64fcb85cf25cb9f0a91676353239e5c5e4e0b94d61efd"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x538}, 0x1, 0x0, 0x0, 0x20000014}, 0x200088c0) 1.574085848s ago: executing program 6 (id=7167): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408819, &(0x7f0000000800)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESDEC, @ANYBLOB="000800139e6ec30b2b99f47f097f267d35dc81666a63e7768c00aeecc11e3d8dd215e24988d111429ce29e60b1481b4454b6c882e8b9de8fa5ff541d3f0470f9a71ac6e14f74c9c65ca943b2e922748c5955a3428550d6fdae754bea64db124b811d06bda34e3f366148a417d90f5120", @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x5, 0x6ca, &(0x7f0000001400)="$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") prctl$PR_GET_NAME(0x10, &(0x7f0000000300)=""/240) 1.554716947s ago: executing program 3 (id=7168): madvise(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x66) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4) 1.407587288s ago: executing program 1 (id=7169): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0}) 1.378220086s ago: executing program 4 (id=7170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.325062347s ago: executing program 3 (id=7171): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x10}]}, 0x3c}}, 0x40010) 1.319317509s ago: executing program 6 (id=7172): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x7, [0x58, 0x1000, 0x1, 0x1, 0x2, 0x1, 0x7, 0x7, 0x10, 0x1, 0x3, 0x1, 0x28, 0x385, 0xef9a, 0xfff, 0x3, 0x1, 0x1, 0x0, 0x7fff, 0x4, 0x1ff, 0x0, 0xfffc, 0x0, 0x2, 0x10, 0x6, 0xd, 0x3f1, 0x79, 0x5, 0x5, 0x101, 0x6, 0x6, 0x1ff, 0x8000, 0x9, 0x0, 0x2, 0x423, 0xfff, 0x86, 0xe, 0x20, 0x9], 0x2}) 1.310414125s ago: executing program 5 (id=7173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.125633971s ago: executing program 4 (id=7174): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_get$uid(0x3, 0xee01) 1.105011396s ago: executing program 1 (id=7175): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x3008018, &(0x7f00000000c0)=ANY=[], 0xd0, 0x599, &(0x7f00000005c0)="$eJzs3cFvHFcZAPDvTbzOOk3abRISQgqyBBJREZHjpA7giBLqWkKKqNXEOXDCxE5qdWNHdoqSqoIcEFz4Hzj1AhKqBFyQOMCVA9wQqsQJccWgShUgEjST2Z3djcEO6429ze8nJTs7882bNyPb0vfem/cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj46qsXJ86k3a4FAAAAMEhfv/z6xGRP/j+2W5UBAAAABuKK/n8AAAAAAAAAGHYpsvh+pLhzaCMdLL4/VL+0vPLWnfmZ2c1PG0vFmfuK+Pxf/czk2XMvTZ3/Quvzf5+/007Ea5evXBx/ZfXmrbWl9fWlxfH5leVrq4tL2y6h3/N7vVg8gPGbb761eP36+vjk6bNdh+80/rL/mWON6S++evRSK3Z+Znb2ckfMSO3/vvojjPAAAAB4uo1GFucixZWTP02HIiKL/nPhLdoOBm0sGnn+XdzE/MxscSPN5YWV2/nBuVYi3OjOiUdbOfITyMX70og4nNd1VEYPAADA9tUii09FihP3N9KzEbGvlQd/rpgYcOsCGk+gkpsYiYgjEXEqhiBnBwAAgF22P7J4PVL8qtmI58q8usj/vxIxvduVAwAAAHbESGRxPlJ8ML2RGsV4gIh4cX5mdvzS1fGvrVxf7YidS2WP+rC/H/AkGZsAAADAHlCPLA4VPf4b6fnHPvsfDx48GEi1AAAAgB00Fln8M1J89uVvF/PKRTEv/XPTXzp4YbZzhrnjW5STx56OiJPbfCe/Vs41OJfmUsoeKe3ejtwcAAAAUKinLP4cKT78Y734fqrMzdPIbtcMAAAA2DEpi+9Fii/PbaTUsy79vo71/duG/d3/wdZ/rP7K6q27a8s33ri96fED9YvfWr+9tnBt88MP1y7sGg6x1TqGAAAAsA21lMXfI8Vvm++1885yDYByBECVaL57ocpN66nnaNFu8GzRbtB+h+CZycnO7U1T1seYH69RXndf/7cNAAAAT5WUshiNFJ/5zcfLtf8PxCN90GXc7yLFhdUXyrhsNBrVXPqN4v/69eXm0kQeOxMpft5sxUYeG/vL2CNV7Jk89td5uQvdsfUy9mgRGnnsZB57P1K8sbZ57Meqcs/msWuR4ic/Gm/FHshjD5axx6rY09dWm4sDe8AAAACwB9RSFr+IFD/813j7lf/u/v+qt/3dd6r+/kcm6Psvff799v83OvbdK9sh9pftFSNbtFe8FilOPP9C636KtoLWsIKHax1U7RV/ixRr3+iOHS1jD1exZ7b9YAEAAGAPaY3///3VX7aH3Jc5cPl18/z/E73zAw4o/+9ckzC/5vrdt99caDaX1oZp47sR0bUn7ZGK2XisjfyHcA9UY2c2yl+qe3ulPv1u9PVnEAAAngp5/n81Utz54P12f3eZ/5dD5av8/8PvVPn/dG9BA8r/D3fsmy7nG6iNRNRv37xVOx5RX7/79ueXby7cWLqxtHJ26qWpiamp8+cma6Otzv1qq+9nBQAAAMMqz/8nIsVff/Dj9vv52+n/P9Bb0IDy/yMd+/JrVp1++Z4/9Xv7AAAA8FTI8/+fRYo/nHyvPY9ed/7fMf//O9V79qc+/XC0QLt1YED5/9GOfY3iulFNOggAAAAAAAAAAAAAAAAAAAAfEbWUxb8jxfv1kVRO+L+t+f8Wewsa0Pv/xzr2LcaTWf+v74cKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQyqLLJYjxSePb6SX8x3fjDjY+QkAAAAMvf8EAAD//1T3HVY=") creat(&(0x7f0000000100)='./file0\x00', 0x7a) 1.060944196s ago: executing program 6 (id=7176): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.060802767s ago: executing program 5 (id=7177): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) 933.742087ms ago: executing program 3 (id=7178): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002000f000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 893.494702ms ago: executing program 4 (id=7179): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x55, 0x3, 0x4, 0x80, 0x8, {}, {0x5, 0x0, 0x6, 0x5, 0xf7, 0x5, "1baf1864"}, 0x9, 0x4, {}, 0x3}) 752.674312ms ago: executing program 5 (id=7180): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 752.481822ms ago: executing program 1 (id=7181): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x62280) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0xe, 0x3}, 0x3, 0x4}) 752.347663ms ago: executing program 3 (id=7182): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x2, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) 663.33206ms ago: executing program 4 (id=7183): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80800) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x1) 659.598188ms ago: executing program 6 (id=7184): r0 = open(&(0x7f0000000000)='./file1\x00', 0x64842, 0x86) vmsplice(r0, &(0x7f0000002400)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x2) 520.568348ms ago: executing program 1 (id=7185): r0 = socket$nl_generic(0x10, 0x3, 0x10) cachestat(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0xc}, &(0x7f000009de80), 0x0) 520.450029ms ago: executing program 3 (id=7186): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="4000520006"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 495.028946ms ago: executing program 6 (id=7187): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 420.814581ms ago: executing program 4 (id=7188): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 340.966505ms ago: executing program 1 (id=7189): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') lseek(r0, 0x3, 0x1) 340.841559ms ago: executing program 3 (id=7190): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 11.106415ms ago: executing program 4 (id=7191): r0 = io_uring_setup(0x7242, &(0x7f0000000380)={0x0, 0xd179, 0x40, 0x3, 0x292}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000400)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x18}, @ioring_restriction_sqe_flags_required={0x3, 0x16}], 0x2) 0s ago: executing program 1 (id=7192): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006c0015000000d9fece23", @ANYRES32=r0, @ANYBLOB="000080"], 0x38}, 0x1, 0x300}, 0x0) kernel console output (not intermixed with test programs): [ 704.020381][T17704] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 704.568451][T17692] EXT4-fs (loop4): 1 truncate cleaned up [ 704.571452][T17692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 704.725132][T17692] Quota error (device loop4): write_blk: dquota write failed [ 704.725161][T17692] Quota error (device loop4): find_free_dqentry: Can't write quota data block 4 [ 704.725341][T17692] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 704.725390][T17692] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.4995: Failed to acquire dquot type 1 [ 705.034087][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 706.046575][T17761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5023'. [ 706.132423][T17764] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5025'. [ 706.577798][T17780] AppArmor: change_hat: Invalid input '0' [ 706.630513][T17779] loop5: detected capacity change from 0 to 512 [ 706.653706][T17779] EXT4-fs: Ignoring removed orlov option [ 706.669741][T17779] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 706.978581][T17779] EXT4-fs (loop5): 1 orphan inode deleted [ 706.978616][T17779] EXT4-fs (loop5): 1 truncate cleaned up [ 706.981723][T17779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.356459][ T9075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.906817][T17822] netlink: 'syz.3.5052': attribute type 1 has an invalid length. [ 707.963626][T17823] loop4: detected capacity change from 0 to 512 [ 707.968400][T17823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 708.050229][T17823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.050397][T17823] ext4 filesystem being mounted at /1033/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 708.183464][T17831] netlink: 'syz.1.5055': attribute type 61 has an invalid length. [ 708.183490][T17831] netlink: 'syz.1.5055': attribute type 62 has an invalid length. [ 708.288321][T17833] loop6: detected capacity change from 0 to 256 [ 708.346937][T17835] loop3: detected capacity change from 0 to 1024 [ 708.446814][T17833] FAT-fs (loop6): Directory bread(block 64) failed [ 708.446855][T17833] FAT-fs (loop6): Directory bread(block 65) failed [ 708.446961][T17833] FAT-fs (loop6): Directory bread(block 66) failed [ 708.447123][T17833] FAT-fs (loop6): Directory bread(block 67) failed [ 708.447228][T17833] FAT-fs (loop6): Directory bread(block 68) failed [ 708.447255][T17833] FAT-fs (loop6): Directory bread(block 69) failed [ 708.447363][T17833] FAT-fs (loop6): Directory bread(block 70) failed [ 708.447405][T17833] FAT-fs (loop6): Directory bread(block 71) failed [ 708.447510][T17833] FAT-fs (loop6): Directory bread(block 72) failed [ 708.447544][T17833] FAT-fs (loop6): Directory bread(block 73) failed [ 708.642756][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5059'. [ 708.880263][T17841] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5061'. [ 709.083407][T17835] hfsplus: bad catalog file entry [ 709.090374][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.238390][T17360] hfsplus: bad catalog file entry [ 709.545524][T17855] netlink: 'syz.5.5070': attribute type 10 has an invalid length. [ 709.962421][T17859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.963428][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5072'. [ 709.963458][T17866] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5072'. [ 709.992587][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5072'. [ 709.992954][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5072'. [ 709.992980][T17866] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5072'. [ 709.993707][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5072'. [ 710.093438][T17873] loop6: detected capacity change from 0 to 64 [ 710.325425][T17876] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 710.694562][ T5915] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 710.843896][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 710.846983][ T5915] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 710.847015][ T5915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.847038][ T5915] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 710.847062][ T5915] usb 5-1: config 1 has no interface number 1 [ 710.847146][ T5915] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 710.847179][ T5915] usb 5-1: config 1 interface 105 has no altsetting 0 [ 710.850242][ T5915] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 710.850275][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 710.850299][ T5915] usb 5-1: Product: syz [ 710.850317][ T5915] usb 5-1: Manufacturer: syz [ 710.850335][ T5915] usb 5-1: SerialNumber: syz [ 711.191017][ T5915] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 711.457817][ T5809] usb 5-1: USB disconnect, device number 33 [ 711.926788][T17885] loop3: detected capacity change from 0 to 32768 [ 711.928713][T17885] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 27d4562c-ab72-49ff-8d32-d89a732709db [ 711.928789][T17885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5083 (17885) [ 711.988534][T17920] loop6: detected capacity change from 0 to 512 [ 711.990643][T17920] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 712.212054][T17920] EXT4-fs (loop6): 1 truncate cleaned up [ 712.250772][T17885] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 712.250811][T17885] BTRFS info (device loop3): using sha256 checksum algorithm [ 712.282653][T17920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.345985][T17920] EXT4-fs error (device loop6): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.6.5100: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 712.346805][T17920] EXT4-fs (loop6): Remounting filesystem read-only [ 712.346918][T17920] EXT4-fs warning (device loop6): ext4_rename_delete:3739: inode #2: comm syz.6.5100: Deleting old file: nlink 4, error=-117 [ 712.642836][T10447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.901531][T17885] BTRFS info (device loop3): enabling ssd optimizations [ 712.901561][T17885] BTRFS info (device loop3): turning on async discard [ 712.901582][T17885] BTRFS info (device loop3): enabling free space tree [ 712.901876][T17951] netlink: 'syz.6.5107': attribute type 1 has an invalid length. [ 712.901906][T17951] netlink: 'syz.6.5107': attribute type 1 has an invalid length. [ 712.912774][T17945] loop4: detected capacity change from 0 to 4096 [ 712.961979][T17945] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 713.150841][T17956] : entered promiscuous mode [ 713.308410][T17945] ntfs3(loop4): ino=19, mi_enum_attr [ 713.308448][T17945] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 713.328133][ T5823] BTRFS info (device loop3): last unmount of filesystem 27d4562c-ab72-49ff-8d32-d89a732709db [ 713.378742][T17962] loop6: detected capacity change from 0 to 764 [ 713.411742][T17945] ntfs3(loop4): failed to convert "c46c" to cp863 [ 713.496968][T17945] ntfs3(loop4): ino=20, mi_enum_attr [ 714.203901][ T5831] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 714.392430][ T5831] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 714.392465][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.392488][ T5831] usb 2-1: Product: syz [ 714.392505][ T5831] usb 2-1: Manufacturer: syz [ 714.392521][ T5831] usb 2-1: SerialNumber: syz [ 714.456542][ T5831] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 714.573319][ T822] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 715.273864][T17984] netlink: 'syz.6.5122': attribute type 64 has an invalid length. [ 716.049032][ T822] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 716.049242][ T822] ath9k_htc: Failed to initialize the device [ 716.069815][ T5835] usb 2-1: USB disconnect, device number 43 [ 716.166159][ T5835] usb 2-1: ath9k_htc: USB layer deinitialized [ 716.425409][T17993] loop4: detected capacity change from 0 to 32768 [ 716.700811][T17993] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 717.363105][ T5825] ocfs2: Unmounting device (7,4) on (node local) [ 718.088550][T18025] loop5: detected capacity change from 0 to 4096 [ 718.094356][T18025] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 718.404058][T18025] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 718.404093][T18025] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 718.845635][T18048] dlm: Unknown command passed to DLM device : 0 [ 718.845635][T18048] [ 719.204958][ T32] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 719.356244][ T32] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 719.356274][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.356293][ T32] usb 5-1: config 0 has no interface number 0 [ 719.356331][ T32] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 719.356355][ T32] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0 [ 719.356377][ T32] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.356403][ T32] usb 5-1: config 0 interface 52 has no altsetting 0 [ 719.357459][ T32] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 719.357577][ T32] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 719.357597][ T32] usb 5-1: Manufacturer: syz [ 719.455798][ T32] usb 5-1: config 0 descriptor?? [ 719.463507][ T32] hub 5-1:0.52: bad descriptor, ignoring hub [ 719.463551][ T32] hub 5-1:0.52: probe with driver hub failed with error -5 [ 719.703609][ T32] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 719.712711][ T32] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 719.730014][ T1517] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 719.730318][ T9075] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 719.730344][ T9075] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 719.730363][ T9075] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 719.960804][T18033] loop6: detected capacity change from 0 to 32768 [ 720.044791][ T32] usb 5-1: USB disconnect, device number 34 [ 720.070517][T18033] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 720.147740][ T1517] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 720.189910][T18033] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 720.221753][T18033] XFS (loop6): Starting recovery (logdev: internal) [ 720.459748][T18033] XFS (loop6): Ending recovery (logdev: internal) [ 721.009262][T18033] XFS (loop6): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 [ 721.009318][T18033] XFS (loop6): Unmount and run xfs_repair [ 721.009333][T18033] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 721.009352][T18033] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 721.009369][T18033] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 721.009386][T18033] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 721.009404][T18033] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 721.009420][T18033] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 721.009438][T18033] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 721.009455][T18033] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 721.009473][T18033] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 721.009773][T18033] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x8 len 8 error 117 [ 721.504479][ T32] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 721.509240][T10447] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 721.510117][T10447] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 721.677195][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 721.680418][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 721.681752][ T32] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.681785][ T32] usb 5-1: config 1 interface 0 has no altsetting 0 [ 721.727083][ T32] usb 5-1: New USB device found, idVendor=1a34, idProduct=0002, bcdDevice= 0.40 [ 721.727118][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.727140][ T32] usb 5-1: Product: syz [ 721.727160][ T32] usb 5-1: Manufacturer: syz [ 721.727177][ T32] usb 5-1: SerialNumber: syz [ 722.120539][ T32] usbhid 5-1:1.0: can't add hid device: -71 [ 722.120676][ T32] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 722.130303][T18111] __nla_validate_parse: 24 callbacks suppressed [ 722.130325][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5177'. [ 722.156951][ T32] usb 5-1: USB disconnect, device number 35 [ 722.449486][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5179'. [ 722.787756][T18119] loop5: detected capacity change from 0 to 1024 [ 723.076884][T18119] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 723.076937][T18119] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 723.077389][T18119] EXT4-fs (loop5): invalid journal inode [ 723.077490][T18119] EXT4-fs (loop5): can't get journal size [ 723.267902][T18119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 723.712269][ T9075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.992806][T18151] loop4: detected capacity change from 0 to 736 [ 725.047919][T18173] nvme_fabrics: missing parameter 'transport=%s' [ 725.047939][T18173] nvme_fabrics: missing parameter 'nqn=%s' [ 725.418327][T18192] loop3: detected capacity change from 0 to 256 [ 725.589621][T18192] FAT-fs (loop3): Directory bread(block 64) failed [ 725.589662][T18192] FAT-fs (loop3): Directory bread(block 65) failed [ 725.589777][T18192] FAT-fs (loop3): Directory bread(block 66) failed [ 725.589805][T18192] FAT-fs (loop3): Directory bread(block 67) failed [ 725.589913][T18192] FAT-fs (loop3): Directory bread(block 68) failed [ 725.589939][T18192] FAT-fs (loop3): Directory bread(block 69) failed [ 725.590050][T18192] FAT-fs (loop3): Directory bread(block 70) failed [ 725.590076][T18192] FAT-fs (loop3): Directory bread(block 71) failed [ 725.590177][T18192] FAT-fs (loop3): Directory bread(block 72) failed [ 725.590202][T18192] FAT-fs (loop3): Directory bread(block 73) failed [ 726.010398][T18202] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5219'. [ 726.235764][T18210] netlink: 'syz.3.5220': attribute type 2 has an invalid length. [ 726.235787][T18210] netlink: 'syz.3.5220': attribute type 1 has an invalid length. [ 726.235821][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5220'. [ 726.934995][T18236] netlink: 476 bytes leftover after parsing attributes in process `syz.5.5236'. [ 727.246571][ T38] audit: type=1400 audit(1776497130.910:1842): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=18242 comm="syz.6.5239" [ 727.477169][T18253] netlink: 'syz.5.5244': attribute type 2 has an invalid length. [ 728.085233][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5255'. [ 728.468379][T18282] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5259'. [ 728.739879][T18288] loop6: detected capacity change from 0 to 256 [ 728.745381][T18288] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 729.426899][T18309] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5272'. [ 729.964676][ T38] audit: type=1326 audit(1776497133.630:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49548ac819 code=0x7ffc0000 [ 729.964735][ T38] audit: type=1326 audit(1776497133.630:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49548ac819 code=0x7ffc0000 [ 729.966950][ T38] audit: type=1326 audit(1776497133.640:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f49548ac819 code=0x7ffc0000 [ 729.969805][ T38] audit: type=1326 audit(1776497133.640:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.5281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49548ac819 code=0x7ffc0000 [ 730.348267][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5285'. [ 730.348316][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5285'. [ 730.789796][T18348] loop5: detected capacity change from 0 to 1024 [ 730.813898][ T822] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 730.913913][T18348] hfsplus: extend alloc file! (16384,256,150995124) [ 731.016537][ T822] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 731.016596][ T822] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.016628][ T822] usb 5-1: config 2 interface 0 has no altsetting 0 [ 731.033675][T18357] netlink: 'syz.6.5296': attribute type 1 has an invalid length. [ 731.059892][ T822] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 731.059926][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.059949][ T822] usb 5-1: Product: syz [ 731.059965][ T822] usb 5-1: Manufacturer: syz [ 731.059982][ T822] usb 5-1: SerialNumber: syz [ 731.391869][ T822] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22 [ 731.414528][ T822] usb 5-1: USB disconnect, device number 36 [ 731.467508][T18364] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5300'. [ 731.700988][T18370] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5302'. [ 732.029613][T18382] loop3: detected capacity change from 0 to 128 [ 732.126162][ T38] audit: type=1326 audit(1776497135.800:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18386 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5695c819 code=0x7ffc0000 [ 732.150821][ T38] audit: type=1326 audit(1776497135.820:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18386 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5695c819 code=0x7ffc0000 [ 732.153130][ T38] audit: type=1326 audit(1776497135.820:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18386 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f0b5695c819 code=0x7ffc0000 [ 732.200166][ T38] audit: type=1326 audit(1776497135.840:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18386 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5695c819 code=0x7ffc0000 [ 732.272331][T18391] loop6: detected capacity change from 0 to 16 [ 732.291088][T18393] netlink: 'syz.4.5314': attribute type 1 has an invalid length. [ 732.390301][T18391] erofs (device loop6): mounted with root inode @ nid 36. [ 732.419410][T18391] erofs (device loop6): not enough plain data on disk @ la 4096 of nid 89 [ 732.419439][T18391] erofs (device loop6): readahead error at folio 1 @ nid 89 [ 732.542915][T18396] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 732.542979][T18396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 732.776294][T18391] syz.6.5312: attempt to access beyond end of device [ 732.776294][T18391] loop6: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 732.803921][ T822] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 732.957350][ T822] usb 5-1: Using ep0 maxpacket: 8 [ 733.074715][T18396] vhci_hcd vhci_hcd.0: Device attached [ 733.138199][T18391] syz.6.5312: attempt to access beyond end of device [ 733.138199][T18391] loop6: rw=524288, sector=0, nr_sectors = 1792 limit=16 [ 733.163366][T18391] erofs (device loop6): not enough plain data on disk @ la 4096 of nid 89 [ 733.163401][T18391] erofs (device loop6): not enough plain data on disk @ la 4096 of nid 89 [ 733.163425][T18391] erofs (device loop6): read error -117 @ 1 of nid 89 [ 733.163662][ T38] audit: type=1800 audit(1776497136.830:1851): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5312" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 733.226835][ T822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 733.252543][ T822] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 733.252584][ T822] usb 5-1: can't read configurations, error -71 [ 733.271863][T18397] vhci_hcd: connection closed [ 733.381091][T18410] netlink: zone id is out of range [ 733.381104][T18410] netlink: zone id is out of range [ 733.381111][T18410] netlink: zone id is out of range [ 733.381118][T18410] netlink: zone id is out of range [ 733.381124][T18410] netlink: zone id is out of range [ 733.381130][T18410] netlink: zone id is out of range [ 733.381137][T18410] netlink: zone id is out of range [ 733.381143][T18410] netlink: zone id is out of range [ 733.381164][T18410] netlink: zone id is out of range [ 733.381175][T18410] netlink: get zone limit has 8 unknown bytes [ 733.524860][ T12] vhci_hcd vhci_hcd.4: stop threads [ 733.576070][ T12] vhci_hcd vhci_hcd.4: release socket [ 733.623925][ T32] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 733.669412][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 733.908517][T18420] ip6erspan0: entered allmulticast mode [ 733.972311][T18427] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5326'. [ 734.464566][T18446] loop4: detected capacity change from 0 to 128 [ 734.526086][T18448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.526113][T18448] IPv6: NLM_F_CREATE should be set when creating new route [ 734.526211][T18448] IPv6: NLM_F_CREATE should be set when creating new route [ 734.526241][T18448] IPv6: NLM_F_CREATE should be set when creating new route [ 734.705402][T18446] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 734.708484][T18446] ext4 filesystem being mounted at /1074/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 734.782883][T18446] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 734.883564][ T5825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 735.190354][T18467] netlink: 'syz.4.5346': attribute type 1 has an invalid length. [ 735.229200][T18464] netlink: 'syz.6.5344': attribute type 30 has an invalid length. [ 735.749112][T18478] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 735.801518][T18478] bond3 (unregistering): Released all slaves [ 735.902672][ T38] audit: type=1326 audit(1776497139.570:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 735.902732][ T38] audit: type=1326 audit(1776497139.570:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 735.962358][ T38] audit: type=1326 audit(1776497139.630:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 735.963543][ T38] audit: type=1326 audit(1776497139.630:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 735.963597][ T38] audit: type=1326 audit(1776497139.630:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 735.970858][T18495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5354'. [ 736.424756][T18505] loop5: detected capacity change from 0 to 256 [ 736.506789][T18505] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 736.888950][T18510] loop4: detected capacity change from 0 to 4096 [ 736.912680][T18510] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 737.058198][T18510] ntfs3(loop4): ino=19, mi_enum_attr [ 737.058232][T18510] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 737.388246][T18529] ip6gre3: entered allmulticast mode [ 737.809552][T18537] loop3: detected capacity change from 0 to 4096 [ 738.014148][T18547] netlink: 'syz.5.5383': attribute type 4 has an invalid length. [ 738.218261][T18537] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 738.218596][T18537] ntfs3(loop3): Failed to load $Extend (-22). [ 738.218620][T18537] ntfs3(loop3): Failed to initialize $Extend. [ 738.711643][ T5823] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 738.714391][ T32] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 738.838831][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5397'. [ 738.838892][T18573] net_ratelimit: 1 callbacks suppressed [ 738.838907][T18573] openvswitch: netlink: Missing key (keys=40, expected=80) [ 739.302360][T18591] loop6: detected capacity change from 0 to 1024 [ 739.405617][T18591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.634871][T10447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.138926][T18615] loop3: detected capacity change from 0 to 128 [ 740.173489][T18615] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 740.190548][T18615] ext4 filesystem being mounted at /1064/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 740.210781][T18619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5416'. [ 740.300236][T18622] loop4: detected capacity change from 0 to 1024 [ 740.493513][ T5823] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 740.894872][ T822] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 741.043933][ T822] usb 6-1: Using ep0 maxpacket: 32 [ 741.046295][ T822] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 741.046326][ T822] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 741.046350][ T822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 741.046376][ T822] usb 6-1: config 1 has no interface number 0 [ 741.046431][ T822] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.046460][ T822] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17412, setting to 1024 [ 741.046490][ T822] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 741.046534][ T822] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 741.046561][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.156260][T18628] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 741.170682][ T822] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 741.381616][T18628] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 741.416080][ T822] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 741.447668][T18643] loop6: detected capacity change from 0 to 4096 [ 741.584072][ T5831] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 741.734145][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 741.749443][ T5831] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 741.749476][ T5831] usb 4-1: config 0 has no interface number 0 [ 741.749655][ T5831] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 741.802392][ T5831] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 741.802431][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.802455][ T5831] usb 4-1: Product: syz [ 741.802472][ T5831] usb 4-1: Manufacturer: syz [ 741.832548][ T5831] usb 4-1: SerialNumber: syz [ 741.870943][ T5835] usb 6-1: USB disconnect, device number 10 [ 741.946521][ T5835] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 741.967371][ T5831] usb 4-1: config 0 descriptor?? [ 741.968630][T18646] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 742.068491][T18643] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 742.081451][T18643] ntfs3(loop6): Failed to load $Extend (-22). [ 742.081906][T18643] ntfs3(loop6): Failed to initialize $Extend. [ 742.207116][T18646] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 742.413286][ T5831] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 742.413615][ T5831] asix 4-1:0.188: probe with driver asix failed with error -71 [ 742.444146][T18643] ntfs3(loop6): ino=21, The size of extended attributes must not exceed 64KiB [ 742.490940][ T5831] usb 4-1: USB disconnect, device number 39 [ 742.853955][ T5841] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 743.006648][ T5841] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 743.006683][ T5841] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 743.006713][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 743.006743][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 743.006768][ T5841] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 743.011776][ T5841] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 743.011810][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.011833][ T5841] usb 6-1: Product: syz [ 743.011850][ T5841] usb 6-1: Manufacturer: syz [ 743.011867][ T5841] usb 6-1: SerialNumber: syz [ 743.112152][ T5841] usb 6-1: config 0 descriptor?? [ 743.139567][ T5841] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input25 [ 743.597364][ T5915] usb 6-1: USB disconnect, device number 11 [ 744.880101][T18721] netlink: 'syz.1.5465': attribute type 1 has an invalid length. [ 745.370117][T18730] loop3: detected capacity change from 0 to 2048 [ 745.416419][T18704] loop4: detected capacity change from 0 to 32768 [ 745.468200][T18704] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 745.530412][T18730] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.602300][T18704] XFS (loop4): Ending clean mount [ 745.690842][ T38] audit: type=1800 audit(1776497149.360:1857): pid=18730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5469" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 745.785985][ T5825] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 746.410172][T18761] loop3: detected capacity change from 0 to 256 [ 746.931332][T18769] loop5: detected capacity change from 0 to 128 [ 746.948890][T18769] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 747.034662][T18769] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 747.119776][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.119930][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.189922][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5488'. [ 747.368332][T18773] bridge6: entered promiscuous mode [ 747.521166][ T5841] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 747.523924][ T37] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 747.708958][ T5841] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 747.708987][ T5841] usb 2-1: config 0 has no interface number 0 [ 747.709036][ T5841] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 747.709066][ T5841] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 747.727189][ T5841] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 747.727224][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.727247][ T5841] usb 2-1: Product: syz [ 747.727263][ T5841] usb 2-1: Manufacturer: syz [ 747.727279][ T5841] usb 2-1: SerialNumber: syz [ 747.833303][ T5841] usb 2-1: config 0 descriptor?? [ 747.882154][T18782] delete_channel: no stack [ 747.883686][ T5841] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 747.973743][ T37] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 747.973775][ T37] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.973796][ T37] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 747.973847][ T37] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.973876][ T37] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.200539][ T37] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 748.200582][ T37] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 748.200606][ T37] usb 4-1: Product: syz [ 748.200622][ T37] usb 4-1: Manufacturer: syz [ 748.249569][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5494'. [ 748.390084][ T5841] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 748.402563][ T37] cdc_wdm 4-1:1.0: skipping garbage [ 748.402585][ T37] cdc_wdm 4-1:1.0: skipping garbage [ 748.480715][ T5841] usb 2-1: USB disconnect, device number 44 [ 748.520872][ T5841] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 748.523043][ T5841] cypress_m8 2-1:0.35: device disconnected [ 748.777526][ T37] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 748.777573][ T37] cdc_wdm 4-1:1.0: Unknown control protocol [ 748.842763][ T37] usb 4-1: USB disconnect, device number 40 [ 749.215839][T18800] affs: No valid root block on device nbd4 [ 749.454949][T18792] bridge0: port 3(hsr0) entered disabled state [ 749.455282][T18792] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.519596][T18812] loop4: detected capacity change from 0 to 1764 [ 750.088324][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5513'. [ 750.088359][T18827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5513'. [ 750.236970][T18792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.283159][T18792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.119340][T18793] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 751.120130][T18804] netlink: 'syz.3.5501': attribute type 6 has an invalid length. [ 751.180493][T18831] ip6tnl2: entered promiscuous mode [ 751.306713][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.306888][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.306933][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.306975][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.386013][T18833] netlink: 'syz.6.5517': attribute type 3 has an invalid length. [ 751.386038][T18833] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5517'. [ 751.797368][ T37] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 752.014196][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 752.026058][ T37] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.026087][ T37] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 752.051106][ T37] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 752.051139][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.051162][ T37] usb 5-1: Product: syz [ 752.051178][ T37] usb 5-1: Manufacturer: syz [ 752.051194][ T37] usb 5-1: SerialNumber: syz [ 752.113107][ T37] usb 5-1: 0:2 : does not exist [ 752.358981][T18860] netlink: 'syz.6.5529': attribute type 1 has an invalid length. [ 752.359009][T18860] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5529'. [ 752.536855][ T37] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 752.650967][ T37] usb 5-1: USB disconnect, device number 39 [ 752.940924][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.189825][T18876] loop6: detected capacity change from 0 to 128 [ 753.206408][T18876] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 753.229204][T18876] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 753.417225][T18876] FAT-fs (loop6): error, invalid access to FAT (entry 0x0f0003ff) [ 753.417272][T18876] FAT-fs (loop6): Filesystem has been set read-only [ 753.562610][T18883] loop4: detected capacity change from 0 to 8192 [ 753.653262][T18883] syz.4.5540: attempt to access beyond end of device [ 753.653262][T18883] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 753.653299][T18883] Buffer I/O error on dev loop4, logical block 57847, async page read [ 753.707982][T18883] syz.4.5540: attempt to access beyond end of device [ 753.707982][T18883] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 753.708024][T18883] Buffer I/O error on dev loop4, logical block 57847, async page read [ 753.720335][ T38] audit: type=1800 audit(1776497157.380:1858): pid=18883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5540" name="file2" dev="loop4" ino=1048699 res=0 errno=0 [ 753.796156][T18888] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5543'. [ 753.796180][T18888] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5543'. [ 754.887352][T18924] loop6: detected capacity change from 0 to 8 [ 755.361523][T18940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5568'. [ 755.361553][T18940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5568'. [ 755.520104][T18944] loop5: detected capacity change from 0 to 256 [ 755.540882][T18944] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 755.667475][T18947] loop6: detected capacity change from 0 to 164 [ 755.737537][T18947] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 756.060554][T18954] veth4: entered allmulticast mode [ 756.197012][T18958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5575'. [ 756.675034][ T5831] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 756.746014][T18977] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 756.838281][T18982] usb usb9: usbfs: process 18982 (syz.4.5588) did not claim interface 1 before use [ 756.864154][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 756.889141][ T5831] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 756.889166][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 756.889182][ T5831] usb 2-1: Product: syz [ 756.889194][ T5831] usb 2-1: Manufacturer: syz [ 756.889206][ T5831] usb 2-1: SerialNumber: syz [ 756.938294][ T5831] usb 2-1: config 0 descriptor?? [ 757.038188][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5591'. [ 757.048846][ T5831] gspca_main: sq905-2.14.0 probing 2770:9120 [ 757.362913][ T5831] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 757.363015][ T5831] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 757.397219][ T5831] usb 2-1: USB disconnect, device number 45 [ 757.683576][T19011] loop4: detected capacity change from 0 to 8 [ 757.711379][T19011] SQUASHFS error: Unable to read inode 0xa7 [ 757.828852][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5604'. [ 758.252569][T19030] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 758.335057][T19030] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 758.883894][ T5841] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 759.133966][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 759.136724][ T5841] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 759.139382][ T5841] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 759.139413][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.139436][ T5841] usb 2-1: Product: syz [ 759.139451][ T5841] usb 2-1: Manufacturer: syz [ 759.139467][ T5841] usb 2-1: SerialNumber: syz [ 759.246231][T19067] loop4: detected capacity change from 0 to 16 [ 759.247380][T19067] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 759.279981][ T5841] usb 2-1: config 0 descriptor?? [ 759.301821][ T5841] usb 2-1: No union descriptors [ 759.304283][T19067] cramfs: empty filesystem [ 759.318048][ T5841] usb 2-1: unsupported MDLM descriptors [ 759.512546][ T5809] usb 2-1: USB disconnect, device number 46 [ 759.583255][T19075] loop5: detected capacity change from 0 to 1024 [ 759.592780][T19075] EXT4-fs: Ignoring removed oldalloc option [ 759.592807][T19075] EXT4-fs: Ignoring removed bh option [ 759.658014][T19075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 760.051897][ T9075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.334954][T19092] netdevsim netdevsim1 : renamed from netdevsim0 [ 760.430498][T19097] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 760.845155][T19110] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 760.875209][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5655'. [ 760.876130][T19116] loop3: detected capacity change from 0 to 512 [ 760.880096][T19116] EXT4-fs: Ignoring removed oldalloc option [ 760.916994][T19116] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.5654: Parent and EA inode have the same ino 15 [ 760.917047][T19116] loop3: lost filesystem error report for type 5 error -117 [ 760.923819][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 760.923849][ C1] EXT4-fs (loop3): initial error at time 1776497164: ext4_xattr_inode_iget:437 [ 760.923878][ C1] EXT4-fs (loop3): last error at time 1776497164: ext4_xattr_inode_iget:437 [ 760.969151][T19116] EXT4-fs (loop3): Remounting filesystem read-only [ 760.969269][T19116] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -30) [ 760.969370][T19116] EXT4-fs (loop3): 1 orphan inode deleted [ 761.049597][T19116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.145909][T19124] loop5: detected capacity change from 0 to 8 [ 761.222693][T19128] loop4: detected capacity change from 0 to 8 [ 761.240268][T19128] SQUASHFS error: lzo decompression failed, data probably corrupt [ 761.240308][T19128] SQUASHFS error: Failed to read block 0x1dd: -5 [ 761.240328][T19128] SQUASHFS error: Unable to read metadata cache entry [1db] [ 761.272115][T19128] SQUASHFS error: Unable to read inode 0xa7 [ 761.284404][T19127] loop6: detected capacity change from 0 to 64 [ 761.313984][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.682383][T19135] netlink: 'syz.3.5660': attribute type 4 has an invalid length. [ 761.877013][T19138] netlink: 'syz.1.5665': attribute type 21 has an invalid length. [ 761.877115][T19138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5665'. [ 762.461979][T19163] netlink: 'syz.1.5675': attribute type 3 has an invalid length. [ 762.560239][T19168] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 762.840217][T19176] netlink: 'syz.4.5683': attribute type 1 has an invalid length. [ 762.840243][T19176] netlink: 'syz.4.5683': attribute type 11 has an invalid length. [ 762.840708][T19176] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5683'. [ 763.213564][ T5809] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 763.226606][T19189] loop5: detected capacity change from 0 to 128 [ 763.388268][ T5809] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 763.388299][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 110, changing to 7 [ 763.388325][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 25973, setting to 1024 [ 763.388356][ T5809] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 763.390199][ T5809] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 763.390226][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 763.390246][ T5809] usb 4-1: SerialNumber: syz [ 763.749148][ T5809] usbtest 4-1:1.0: Linux user mode ISO test driver [ 763.749173][ T5809] usbtest 4-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 763.793281][ T5809] usb 4-1: USB disconnect, device number 41 [ 763.809951][T19199] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5694'. [ 764.232117][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5701'. [ 764.232157][T19213] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 765.065316][T19246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5716'. [ 765.424563][T19255] vivid-007: ================= START STATUS ================= [ 765.424605][T19255] vivid-007: Generate PTS: true [ 765.424637][T19255] vivid-007: Generate SCR: true [ 765.424660][T19255] tpg source WxH: 320x240 (Y'CbCr) [ 765.424676][T19255] tpg field: 1 [ 765.424685][T19255] tpg crop: (0,0)/320x240 [ 765.424700][T19255] tpg compose: (0,0)/320x240 [ 765.424716][T19255] tpg colorspace: 8 [ 765.424725][T19255] tpg transfer function: 0/0 [ 765.424748][T19255] tpg Y'CbCr encoding: 0/0 [ 765.424759][T19255] tpg quantization: 0/0 [ 765.424770][T19255] tpg RGB range: 0/2 [ 765.424780][T19255] vivid-007: ================== END STATUS ================== [ 765.714645][T19266] overlay: Bad value for 'upperdir' [ 765.740209][T19269] openvswitch: netlink: Unexpected mask (mask=400440, allowed=410048) [ 766.107203][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5734'. [ 766.238575][T19290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5739'. [ 766.396810][T19294] netlink: 'syz.3.5738': attribute type 1 has an invalid length. [ 766.716689][T19310] ieee802154 phy0 wpan0: encryption failed: -22 [ 766.873013][T19318] netlink: 'syz.1.5752': attribute type 58 has an invalid length. [ 766.873039][T19318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5752'. [ 766.903933][ T5809] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 767.115428][ T5809] usb 7-1: Using ep0 maxpacket: 8 [ 767.118590][ T5809] usb 7-1: unable to get BOS descriptor or descriptor too short [ 767.120256][ T5809] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 767.120285][ T5809] usb 7-1: config 0 has no interface number 0 [ 767.120333][ T5809] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 767.120363][ T5809] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 767.120388][ T5809] usb 7-1: config 0 interface 88 has no altsetting 0 [ 767.230211][ T5809] usb 7-1: string descriptor 0 read error: -22 [ 767.230445][ T5809] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 767.230474][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 767.274989][ T5809] usb 7-1: config 0 descriptor?? [ 767.299495][ T5809] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input26 [ 767.597834][ T5809] usb 7-1: USB disconnect, device number 15 [ 767.810456][ T5964] udevd[5964]: Error opening device "/dev/input/event4": No such file or directory [ 767.812205][ T5964] udevd[5964]: Unable to EVIOCGABS device "/dev/input/event4" [ 767.812339][ T5964] udevd[5964]: Unable to EVIOCGABS device "/dev/input/event4" [ 768.257662][T19356] loop4: detected capacity change from 0 to 2048 [ 768.462809][T19362] netlink: 'syz.3.5774': attribute type 11 has an invalid length. [ 768.614657][T19356] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255 [ 769.352588][ T32] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 769.508819][T19395] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 769.532743][ T32] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 769.532775][ T32] usb 7-1: config 0 has no interface number 0 [ 769.532822][ T32] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 769.593377][ T32] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 769.593410][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.593432][ T32] usb 7-1: Product: syz [ 769.593449][ T32] usb 7-1: Manufacturer: syz [ 769.593465][ T32] usb 7-1: SerialNumber: syz [ 769.631362][ T32] usb 7-1: config 0 descriptor?? [ 769.638826][T19381] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 769.746289][ T32] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3a:f9:0b:31:1c:99 [ 769.875998][ T5809] usb 7-1: USB disconnect, device number 16 [ 769.890991][ T5809] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 770.368137][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5797'. [ 770.368166][T19410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.174925][T19443] openvswitch: netlink: Multiple metadata blocks provided [ 771.285842][T19446] loop3: detected capacity change from 0 to 512 [ 771.293384][T19446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 771.354844][T19446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 771.355038][T19446] ext4 filesystem being mounted at /1136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.428647][T19446] EXT4-fs error (device loop3): __ext4_remount:6837: comm syz.3.5815: Abort forced by user [ 771.430630][T19446] EXT4-fs (loop3): Remounting filesystem read-only [ 771.430651][T19446] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 771.543202][T19457] loop4: detected capacity change from 0 to 512 [ 771.565437][T19457] FAT-fs (loop4): Directory bread(block 199916) failed [ 771.565464][T19457] FAT-fs (loop4): Directory bread(block 199917) failed [ 771.565494][T19457] FAT-fs (loop4): Directory bread(block 199918) failed [ 771.565512][T19457] FAT-fs (loop4): Directory bread(block 199919) failed [ 771.565529][T19457] FAT-fs (loop4): Directory bread(block 199920) failed [ 771.565547][T19457] FAT-fs (loop4): Directory bread(block 199921) failed [ 771.565564][T19457] FAT-fs (loop4): Directory bread(block 199922) failed [ 771.565581][T19457] FAT-fs (loop4): Directory bread(block 199923) failed [ 771.642908][T19457] FAT-fs (loop4): Directory bread(block 199916) failed [ 771.642947][T19457] FAT-fs (loop4): Directory bread(block 199917) failed [ 771.766221][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 771.886002][T19462] netlink: 'syz.1.5821': attribute type 1 has an invalid length. [ 771.886028][T19462] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5821'. [ 772.061593][T19468] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 772.139214][T19472] loop5: detected capacity change from 0 to 1024 [ 772.152477][T19473] netlink: 'syz.6.5826': attribute type 2 has an invalid length. [ 772.241412][T19472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.256300][T19472] EXT4-fs: Ignoring sb option on remount [ 772.281419][T19472] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 772.593052][ T9075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.988656][T19492] netlink: 'syz.6.5836': attribute type 2 has an invalid length. [ 772.988683][T19492] netlink: 'syz.6.5836': attribute type 11 has an invalid length. [ 772.988700][T19492] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5836'. [ 774.272334][T19531] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5854'. [ 774.644826][T19541] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5859'. [ 774.750085][T19521] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.806631][T19569] netlink: 'syz.6.5873': attribute type 58 has an invalid length. [ 775.960484][T19521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.981802][T19521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.863004][T12279] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.876464][T12279] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.876518][T12279] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.876558][T12279] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.076430][T19579] qrtr: Invalid version 17 [ 777.428889][ T38] audit: type=1326 audit(1776497181.100:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19588 comm="syz.3.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49548ac819 code=0x7ffc0000 [ 777.465360][ T38] audit: type=1326 audit(1776497181.100:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19588 comm="syz.3.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49548ac819 code=0x7ffc0000 [ 777.744695][T19600] sctp: [Deprecated]: syz.6.5887 (pid 19600) Use of int in maxseg socket option. [ 777.744695][T19600] Use struct sctp_assoc_value instead [ 778.637235][T19633] loop6: detected capacity change from 0 to 512 [ 778.683381][T19633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.683557][T19633] ext4 filesystem being mounted at /745/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.938186][T19646] loop5: detected capacity change from 0 to 256 [ 779.080667][T19646] FAT-fs (loop5): Directory bread(block 64) failed [ 779.080709][T19646] FAT-fs (loop5): Directory bread(block 65) failed [ 779.080818][T19646] FAT-fs (loop5): Directory bread(block 66) failed [ 779.080844][T19646] FAT-fs (loop5): Directory bread(block 67) failed [ 779.080950][T19646] FAT-fs (loop5): Directory bread(block 68) failed [ 779.080977][T19646] FAT-fs (loop5): Directory bread(block 69) failed [ 779.081078][T19646] FAT-fs (loop5): Directory bread(block 70) failed [ 779.081104][T19646] FAT-fs (loop5): Directory bread(block 71) failed [ 779.081203][T19646] FAT-fs (loop5): Directory bread(block 72) failed [ 779.081228][T19646] FAT-fs (loop5): Directory bread(block 73) failed [ 779.396422][ T38] audit: type=1326 audit(1776497183.060:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19652 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 779.400134][ T38] audit: type=1326 audit(1776497183.060:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19652 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 779.441526][ T38] audit: type=1326 audit(1776497183.110:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19652 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 779.610279][ T38] audit: type=1326 audit(1776497183.260:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19652 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 780.517848][T10447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.883313][T19690] binder: 19687:19690 ioctl c018620b 0 returned -14 [ 781.231873][T19701] netlink: 'syz.3.5931': attribute type 1 has an invalid length. [ 781.231898][T19701] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5931'. [ 781.454273][T19709] netlink: 'syz.3.5936': attribute type 1 has an invalid length. [ 781.511540][T19711] netlink: 'syz.4.5938': attribute type 2 has an invalid length. [ 781.954400][T19724] loop4: detected capacity change from 0 to 256 [ 782.087704][T19731] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5945'. [ 782.800000][T19726] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.800628][T19726] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.362401][T19726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.378298][T19726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.967224][ T69] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.973034][ T162] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.973091][ T162] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.973134][ T162] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.310200][T19758] loop6: detected capacity change from 0 to 512 [ 784.317930][T19758] EXT4-fs: Ignoring removed nobh option [ 784.338814][T19758] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 784.523355][T19758] EXT4-fs (loop6): 1 truncate cleaned up [ 784.538775][T19758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.780839][T10447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.025854][T19790] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 785.103864][ T822] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 785.253818][ T822] usb 6-1: Using ep0 maxpacket: 8 [ 785.256310][ T822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 785.256349][ T822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 785.360686][T19800] loop4: detected capacity change from 0 to 512 [ 785.423171][T19800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 785.440526][ T822] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 785.440562][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.440577][ T822] usb 6-1: Product: syz [ 785.440589][ T822] usb 6-1: Manufacturer: syz [ 785.440600][ T822] usb 6-1: SerialNumber: syz [ 785.503007][ T822] usb 6-1: config 0 descriptor?? [ 785.503500][ T38] audit: type=1326 audit(1776497189.170:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19803 comm="syz.1.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 785.503558][ T38] audit: type=1326 audit(1776497189.170:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19803 comm="syz.1.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 785.559103][ T38] audit: type=1326 audit(1776497189.230:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19803 comm="syz.1.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 785.560652][ T38] audit: type=1326 audit(1776497189.230:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19803 comm="syz.1.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 785.560706][ T38] audit: type=1326 audit(1776497189.230:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19803 comm="syz.1.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 785.560755][ T38] audit: type=1326 audit(1776497189.230:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19803 comm="syz.1.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 785.560806][ T38] audit: type=1326 audit(1776497189.230:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19803 comm="syz.1.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 785.560857][ T38] audit: type=1326 audit(1776497189.230:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19803 comm="syz.1.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 785.560925][ T38] audit: type=1326 audit(1776497189.230:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19803 comm="syz.1.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f98b688c819 code=0x7ffc0000 [ 785.766955][T19800] EXT4-fs (loop4): 1 truncate cleaned up [ 785.807235][T19800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.962953][T19800] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.5971: invalid fast symlink length 39 [ 786.153408][ T822] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 786.229674][T19809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5974'. [ 786.321809][T19800] EXT4-fs (loop4): Remounting filesystem read-only [ 786.354874][ T822] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 786.371322][ T822] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 786.423920][ T822] usb 6-1: USB disconnect, device number 12 [ 786.740959][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.267552][T19851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5990'. [ 787.812194][ T38] audit: type=1400 audit(1776497191.480:1874): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620FFFFFFFFFFFFFFFF pid=19863 comm="syz.3.5996" [ 788.202581][T19879] loop6: detected capacity change from 0 to 2048 [ 788.266760][T19879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 788.677176][T19892] loop5: detected capacity change from 0 to 64 [ 789.772572][T19912] loop6: detected capacity change from 0 to 1764 [ 789.823954][T19912] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 789.882810][T19918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.929818][T19910] loop5: detected capacity change from 0 to 2048 [ 789.977772][T19910] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 789.981370][T19910] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 789.981402][T19910] UDF-fs: Scanning with blocksize 512 failed [ 790.061520][T19910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.223336][T19927] loop6: detected capacity change from 0 to 164 [ 790.245998][T19927] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 790.414469][ T32] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 790.624219][ T32] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 790.624251][ T32] usb 4-1: config 0 has no interface number 0 [ 790.624296][ T32] usb 4-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 790.624324][ T32] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 790.624354][ T32] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 790.624399][ T32] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 790.624425][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.678249][ T32] usb 4-1: config 0 descriptor?? [ 790.711990][T19925] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 790.956892][ T32] usb 4-1: string descriptor 0 read error: -71 [ 790.958947][ T32] keyspan 4-1:0.168: Keyspan 2 port adapter converter detected [ 790.959299][ T32] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 1 [ 790.961872][ T32] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 84 [ 790.961968][ T32] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 2 [ 791.047809][ T32] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 791.064168][ T32] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 88 [ 791.064271][ T32] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 6 [ 791.069335][ T32] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 791.105048][ T32] usb 4-1: USB disconnect, device number 42 [ 791.199244][ T32] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 791.418468][ T32] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 791.419432][ T32] keyspan 4-1:0.168: device disconnected [ 791.421980][ T6598] udevd[6598]: setting owner of /dev/ttyUSB1 to uid=0, gid=18 failed: No such file or directory [ 791.617544][T19953] batadv1: entered promiscuous mode [ 791.617574][T19953] batadv1: entered allmulticast mode [ 791.718609][T19955] loop6: detected capacity change from 0 to 2048 [ 791.864979][T19955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 792.333559][T19973] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6044'. [ 792.419398][T19975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.461366][T19970] loop4: detected capacity change from 0 to 4096 [ 792.625702][T19978] loop6: detected capacity change from 0 to 1024 [ 792.629845][T19978] EXT4-fs: Ignoring removed mblk_io_submit option [ 792.655405][T19978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 792.655786][T19978] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 792.769851][T19978] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.6046: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 792.769908][T19978] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 792.770293][T19978] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6046: couldn't read orphan inode 11 (err -117) [ 792.770327][T19978] loop6: lost filesystem error report for type 5 error -117 [ 792.782731][T19978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.007234][T10447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.188340][T19991] MTD: Couldn't look up '/dev/sg0': -15 [ 793.533899][ T37] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 793.701435][ T38] audit: type=1326 audit(1776497197.370:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524cac819 code=0x7ffc0000 [ 793.702459][ T38] audit: type=1326 audit(1776497197.370:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524cac819 code=0x7ffc0000 [ 793.716721][ T37] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 793.716753][ T37] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 793.716776][ T37] usb 4-1: config 128 has no interface number 0 [ 793.717393][ T38] audit: type=1326 audit(1776497197.390:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb524cac819 code=0x7ffc0000 [ 793.721080][ T37] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 793.721114][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.721138][ T37] usb 4-1: Product: syz [ 793.721155][ T37] usb 4-1: Manufacturer: syz [ 793.721171][ T37] usb 4-1: SerialNumber: syz [ 793.733130][ T38] audit: type=1326 audit(1776497197.390:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524cac819 code=0x7ffc0000 [ 793.745014][ T38] audit: type=1326 audit(1776497197.410:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20000 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524cac819 code=0x7ffc0000 [ 794.136123][ T37] usb 4-1: USB disconnect, device number 43 [ 794.369361][T20013] __vm_enough_memory: pid: 20013, comm: syz.4.6062, bytes: 21199701196800 not enough memory for the allocation [ 794.576068][T20020] netlink: 'syz.5.6066': attribute type 11 has an invalid length. [ 795.219621][T20036] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 795.399492][T20041] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6077'. [ 795.641867][T20046] loop3: detected capacity change from 0 to 4096 [ 795.654126][T20046] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 795.808598][T20046] ntfs3(loop3): ino=19, mi_enum_attr [ 795.896160][T20046] ntfs3(loop3): failed to convert "c46c" to cp861 [ 795.898307][T20046] ntfs3(loop3): ino=20, mi_enum_attr [ 797.028294][T20085] batadv1: entered promiscuous mode [ 797.028326][T20085] batadv1: entered allmulticast mode [ 798.001899][T20113] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6121'. [ 798.725590][T20133] batadv2: entered promiscuous mode [ 798.725617][T20133] batadv2: entered allmulticast mode [ 799.073991][T20141] loop5: detected capacity change from 0 to 256 [ 799.229357][T20141] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 799.281768][T20141] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 799.469499][T20144] bond3: entered allmulticast mode [ 799.714487][T20156] openvswitch: netlink: Missing valid actions attribute. [ 799.714521][T20156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.992688][T20165] loop3: detected capacity change from 0 to 512 [ 800.204098][T20165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.204216][T20165] ext4 filesystem being mounted at /1205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.320250][T20179] loop6: detected capacity change from 0 to 128 [ 800.415759][T20179] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 800.415792][T20179] FAT-fs (loop6): Filesystem has been set read-only [ 800.554331][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.881854][ T162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.883137][ T162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.883178][ T162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.883229][ T162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.448639][T20209] loop6: detected capacity change from 0 to 1024 [ 801.571672][T20209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.743248][T20209] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 623: comm syz.6.6157: Attempting to read directory block (623) that is past i_size (638464) [ 801.894204][T10447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.985929][T20228] IPv6: sit1: Disabled Multicast RS [ 802.232381][T20232] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6169'. [ 802.429703][T20241] loop5: detected capacity change from 0 to 164 [ 802.576576][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6174'. [ 802.720149][T20247] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 803.127697][T20263] netlink: 'syz.3.6182': attribute type 3 has an invalid length. [ 803.127722][T20263] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6182'. [ 803.207217][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6184'. [ 803.377169][T20271] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6187'. [ 803.842556][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6195'. [ 803.881300][T20288] ip6tnl3: entered promiscuous mode [ 803.881330][T20288] ip6tnl3: entered allmulticast mode [ 803.893303][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6197'. [ 804.219828][T20302] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6203'. [ 804.677392][T20309] loop4: detected capacity change from 0 to 4096 [ 804.903227][T20309] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 805.026953][T20323] netlink: 'syz.3.6212': attribute type 2 has an invalid length. [ 805.290611][T20330] netlink: 'syz.3.6218': attribute type 33 has an invalid length. [ 805.290637][T20330] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6218'. [ 805.290672][T20330] `: renamed from team0 [ 805.316551][T20331] tmpfs: Bad value for 'mpol' [ 805.629018][T20341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 806.735598][ T5831] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 806.858421][ T5841] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 806.883900][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 806.886458][ T5831] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 806.892684][ T5831] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 806.892719][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.892742][ T5831] usb 2-1: Product: syz [ 806.892759][ T5831] usb 2-1: Manufacturer: syz [ 806.892781][ T5831] usb 2-1: SerialNumber: syz [ 806.952412][ T5831] r8152-cfgselector 2-1: Unknown version 0x0000 [ 806.952443][ T5831] r8152-cfgselector 2-1: config 0 descriptor?? [ 807.086634][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 807.086976][ T5841] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 807.087067][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 807.087094][ T5841] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 807.087140][ T5841] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 807.087229][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.134456][ T37] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 807.166158][ T5841] usb 7-1: config 0 descriptor?? [ 807.305139][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 807.314024][ T37] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 807.314053][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.314075][ T37] usb 4-1: Product: syz [ 807.314091][ T37] usb 4-1: Manufacturer: syz [ 807.314106][ T37] usb 4-1: SerialNumber: syz [ 807.414985][ T37] usb 4-1: config 0 descriptor?? [ 807.468394][ T822] r8152-cfgselector 2-1: USB disconnect, device number 47 [ 807.499549][ T5841] hdpvr 7-1:0.0: firmware version 0x0 dated [ 807.499585][ T5841] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 807.630037][ T5841] hdpvr 7-1:0.0: device init failed [ 807.630136][ T5841] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 807.649000][ T5841] usb 7-1: USB disconnect, device number 17 [ 807.660243][ T37] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 807.660265][ T37] ab 43 1e 80 9b f8 7a f0 [ 807.660407][ T37] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 807.881708][ T822] usb 4-1: USB disconnect, device number 44 [ 808.580418][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.580534][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.692497][T20424] loop4: detected capacity change from 0 to 2048 [ 808.711582][T20424] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 808.735398][T20424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 808.919056][T20434] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6267'. [ 809.183925][T20442] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 809.225032][T20443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6270'. [ 809.225065][T20443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6270'. [ 809.300365][T20445] netlink: 'syz.1.6273': attribute type 3 has an invalid length. [ 810.356994][T20491] Zero length message leads to an empty skb [ 810.599299][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 810.870812][T20511] loop3: detected capacity change from 0 to 64 [ 811.363880][ T5841] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 811.515823][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 811.518473][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.518533][ T5841] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 811.518560][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.561688][ T5841] usb 2-1: config 0 descriptor?? [ 811.587560][ T5841] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 811.851855][T20537] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 811.952415][T20539] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6319'. [ 811.987920][ T5841] gspca_vc032x: reg_w err -71 [ 811.988029][ T5841] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 812.009566][ T5841] usb 2-1: USB disconnect, device number 48 [ 812.084464][T20541] loop4: detected capacity change from 0 to 256 [ 812.090025][T20541] exfat: Deprecated parameter 'namecase' [ 812.165247][T20541] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 813.112591][T20579] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6337'. [ 813.643216][T20597] overlayfs: workdir and upperdir must be separate subtrees [ 814.214193][T20605] syz.5.6352 (20605) used greatest stack depth: 18584 bytes left [ 814.553259][ T38] audit: type=1107 audit(1776497217.910:1880): pid=20621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 815.668163][T20674] loop6: detected capacity change from 0 to 1024 [ 815.694808][T20674] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 815.910283][T20674] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.6385: lblock 2 mapped to illegal pblock 2 (length 1) [ 815.910331][T20674] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 815.913754][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 815.913778][ C0] EXT4-fs (loop6): initial error at time 1776497219: ext4_map_blocks:791: inode 3: block 2 [ 815.913814][ C0] EXT4-fs (loop6): last error at time 1776497219: ext4_map_blocks:791: inode 3: block 2 [ 815.926014][T20674] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 815.926231][T20674] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.6385: lblock 0 mapped to illegal pblock 48 (length 1) [ 815.926269][T20674] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 815.984395][T20674] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 815.984426][T20674] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.6385: Failed to acquire dquot type 0 [ 815.984454][T20674] loop6: lost filesystem error report for type 5 error -117 [ 815.987166][T20674] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 815.987194][T20674] loop6: lost filesystem error report for type 5 error -117 [ 816.187473][T20674] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.6385: mark_inode_dirty error [ 816.187512][T20674] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 816.187783][T20674] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 816.313069][T20674] EXT4-fs (loop6): 1 orphan inode deleted [ 816.333577][T20674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.382446][ T1213] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 816.616301][ T1213] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 816.640533][ T1213] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 816.932477][T20696] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6394'. [ 817.182961][T20701] netlink: 'syz.4.6397': attribute type 4 has an invalid length. [ 817.337045][T10447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.375744][ T68] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 817.375788][ T68] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 817.422448][T20706] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 817.422481][T20706] overlayfs: missing 'lowerdir' [ 817.534876][ T68] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 817.534934][ T68] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 817.534958][ T68] loop6: lost filesystem error report for type 5 error -117 [ 817.560728][T10447] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 817.560842][T10447] loop6: lost filesystem error report for type 5 error -117 [ 817.976726][T10447] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 817.976756][T10447] loop6: lost filesystem error report for type 5 error -117 [ 818.078892][T10447] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 818.078926][T10447] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 818.256947][T20723] loop3: detected capacity change from 0 to 16 [ 818.325289][T20723] erofs (device loop3): mounted with root inode @ nid 36. [ 818.638912][T20723] syz.3.6409: attempt to access beyond end of device [ 818.638912][T20723] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 818.819251][T20723] syz.3.6409: attempt to access beyond end of device [ 818.819251][T20723] loop3: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 818.821963][T20723] syz.3.6409: attempt to access beyond end of device [ 818.821963][T20723] loop3: rw=524288, sector=1572872, nr_sectors = 112 limit=16 [ 819.114953][T20723] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 819.115004][T20723] erofs (device loop3): read error -117 @ 1 of nid 89 [ 819.150293][ T38] audit: type=1800 audit(1776497222.790:1881): pid=20723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6409" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 819.374474][T20753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6421'. [ 819.853502][T20759] loop6: detected capacity change from 0 to 4096 [ 819.871358][T20759] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 819.886839][T20766] netlink: 'syz.3.6428': attribute type 1 has an invalid length. [ 819.886863][T20766] netlink: 'syz.3.6428': attribute type 3 has an invalid length. [ 819.886879][T20766] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6428'. [ 819.893328][T20765] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 819.893353][T20765] openvswitch: netlink: Message has 16 unknown bytes. [ 820.296788][T20759] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 820.298665][T20759] ntfs3(loop6): ino=19, mi_enum_attr [ 820.665389][T20782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6438'. [ 820.684328][T20782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6438'. [ 820.684704][T20782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6438'. [ 820.699669][T20782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6438'. [ 820.705370][T20782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6438'. [ 820.758454][T20784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6439'. [ 820.812751][T20782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6438'. [ 820.898337][T20782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.901618][T20782] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.964795][T20782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.070589][T20666] syz.1.6381 (20666): drop_caches: 2 [ 821.293469][T20796] netlink: 'syz.4.6444': attribute type 1 has an invalid length. [ 821.558449][T20801] loop4: detected capacity change from 0 to 4096 [ 821.564282][T20801] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 821.737409][T20801] ntfs3(loop4): ino=b, mi_enum_attr [ 821.740522][T20801] ntfs3(loop4): Failed to load $Extend (-22). [ 821.740550][T20801] ntfs3(loop4): Failed to initialize $Extend. [ 821.927348][T20801] ntfs3(loop4): ino=5, "/" indx_read_ra [ 822.261293][T20820] loop5: detected capacity change from 0 to 4096 [ 822.341307][T20820] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 822.459418][T20820] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 822.459451][T20820] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 822.891091][ T1517] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 822.891218][ T9075] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 822.891239][ T9075] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 822.891266][ T9075] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 822.891543][ T1517] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 823.454842][ T5841] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 823.611196][T20864] netlink: 'syz.3.6476': attribute type 1 has an invalid length. [ 823.611224][T20864] __nla_validate_parse: 31 callbacks suppressed [ 823.611238][T20864] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6476'. [ 823.611256][T20864] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6476'. [ 823.611273][T20864] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6476'. [ 823.612882][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 823.631246][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.631373][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0 [ 823.693398][ T5841] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 823.693445][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.693468][ T5841] usb 2-1: Product: syz [ 823.693484][ T5841] usb 2-1: Manufacturer: syz [ 823.693501][ T5841] usb 2-1: SerialNumber: syz [ 823.741961][ T5841] usb 2-1: config 0 descriptor?? [ 823.770901][ T5841] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 823.912753][ T38] audit: type=1326 audit(1776497227.580:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.6.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524cac819 code=0x7ffc0000 [ 823.915217][ T38] audit: type=1326 audit(1776497227.580:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.6.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524cac819 code=0x7ffc0000 [ 823.973556][ T38] audit: type=1326 audit(1776497227.630:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.6.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fb524cac819 code=0x7ffc0000 [ 823.997604][ T38] audit: type=1326 audit(1776497227.670:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20867 comm="syz.6.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb524cac819 code=0x7ffc0000 [ 824.030262][ T5841] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 824.100393][ T5841] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 824.123991][ T5841] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 824.208398][ T37] usb 2-1: USB disconnect, device number 49 [ 824.399389][T20884] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 824.568106][T20893] loop3: detected capacity change from 0 to 1024 [ 824.618462][T20893] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 824.622100][T20893] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 824.623966][T20893] EXT4-fs (loop3): orphan cleanup on readonly fs [ 824.696389][T20893] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.6490: Invalid inode table block 0 in block_group 0 [ 824.696429][T20893] loop3: lost filesystem error report for type 5 error -117 [ 824.697083][T20893] EXT4-fs (loop3): Remounting filesystem read-only [ 824.697107][T20893] Quota error (device loop3): write_blk: dquota write failed [ 824.697204][T20893] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 824.697358][T20893] EXT4-fs (loop3): 1 truncate cleaned up [ 824.703812][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 824.703836][ C1] EXT4-fs (loop3): initial error at time 1776497228: __ext4_get_inode_loc:4885 [ 824.703863][ C1] EXT4-fs (loop3): last error at time 1776497228: __ext4_get_inode_loc:4885 [ 824.818249][T20893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 825.504016][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.615638][T20961] netlink: 'syz.1.6522': attribute type 21 has an invalid length. [ 826.811733][T20925] loop5: detected capacity change from 0 to 40427 [ 828.131872][T20996] loop4: detected capacity change from 0 to 256 [ 828.272421][T20925] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 828.679486][T20980] loop3: detected capacity change from 0 to 32768 [ 828.699627][T20980] BTRFS warning: excessive commit interval 65536, use with care [ 828.701618][T20980] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 94a8dcd2-f7b7-4ded-8f28-332ecc3d0b7c [ 828.833176][T20980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6530 (20980) [ 828.968552][T20980] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 828.968591][T20980] BTRFS info (device loop3): using sha256 checksum algorithm [ 829.646001][T20980] BTRFS info (device loop3): enabling ssd optimizations [ 829.646033][T20980] BTRFS info (device loop3): turning on async discard [ 829.646053][T20980] BTRFS info (device loop3): enabling free space tree [ 829.972112][ T5823] BTRFS info (device loop3): last unmount of filesystem 94a8dcd2-f7b7-4ded-8f28-332ecc3d0b7c [ 830.104621][T21036] loop4: detected capacity change from 0 to 4096 [ 830.123353][T21036] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 830.935483][T21059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6559'. [ 831.085864][T21054] loop6: detected capacity change from 0 to 1024 [ 831.238501][T21054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.327350][T21068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6562'. [ 831.454234][T21054] EXT4-fs error (device loop6): ext4_lookup:1782: inode #2: comm syz.6.6558: 'file2' linked to parent dir [ 831.493388][T21054] EXT4-fs (loop6): Remounting filesystem read-only [ 831.684080][T21069] loop4: detected capacity change from 0 to 512 [ 831.945768][T21083] Bf#: renamed from hsr_slave_0 [ 832.121707][T21069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.121883][T21069] ext4 filesystem being mounted at /1337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 832.151389][T10447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.133090][T21069] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.6563: corrupted inode contents [ 833.245842][T21109] loop5: detected capacity change from 0 to 512 [ 833.262418][T21109] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 833.348511][T21069] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.6563: mark_inode_dirty error [ 833.375057][T21069] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.6563: corrupted inode contents [ 833.375695][T21069] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.6563: mark_inode_dirty error [ 833.564571][T21109] EXT4-fs (loop5): 1 truncate cleaned up [ 833.569181][T21109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.846742][ T9075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.177189][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.945569][T21134] netlink: 'syz.5.6593': attribute type 1 has an invalid length. [ 835.151036][T21114] loop3: detected capacity change from 0 to 32768 [ 835.194439][T21114] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 835.220689][T21144] loop4: detected capacity change from 0 to 256 [ 835.290599][T21114] XFS (loop3): Ending clean mount [ 835.415836][T21144] FAT-fs (loop4): Directory bread(block 64) failed [ 835.415870][T21144] FAT-fs (loop4): Directory bread(block 65) failed [ 835.415955][T21144] FAT-fs (loop4): Directory bread(block 66) failed [ 835.415977][T21144] FAT-fs (loop4): Directory bread(block 67) failed [ 835.416058][T21144] FAT-fs (loop4): Directory bread(block 68) failed [ 835.416079][T21144] FAT-fs (loop4): Directory bread(block 69) failed [ 835.416160][T21144] FAT-fs (loop4): Directory bread(block 70) failed [ 835.416181][T21144] FAT-fs (loop4): Directory bread(block 71) failed [ 835.416271][T21144] FAT-fs (loop4): Directory bread(block 72) failed [ 835.416292][T21144] FAT-fs (loop4): Directory bread(block 73) failed [ 835.598236][ T38] audit: type=1800 audit(1776497239.220:1886): pid=21144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6595" name="file1" dev="loop4" ino=1048706 res=0 errno=0 [ 835.800773][T21114] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 [ 835.800835][T21114] XFS (loop3): Unmount and run xfs_repair [ 835.800851][T21114] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 835.800873][T21114] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 835.800891][T21114] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 835.800909][T21114] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 835.800926][T21114] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 835.800943][T21114] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 835.800960][T21114] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 835.800977][T21114] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 835.800994][T21114] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 835.801012][T21114] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 4 error 74 [ 835.967173][T21114] loop3: lost filesystem error report for type 5 error -117 [ 835.967322][T21114] XFS (loop3): Failed to initialize disk quotas, err -117. [ 836.127504][ T5823] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 836.128268][ T5823] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 837.451332][ T38] audit: type=1326 audit(1776497241.120:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21189 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc35c819 code=0x7ffc0000 [ 837.477631][ T38] audit: type=1326 audit(1776497241.120:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21189 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc35c819 code=0x7ffc0000 [ 837.558576][ T38] audit: type=1326 audit(1776497241.230:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21189 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc35c819 code=0x7ffc0000 [ 837.558638][ T38] audit: type=1326 audit(1776497241.230:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21189 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f82bc35c819 code=0x7ffc0000 [ 837.558687][ T38] audit: type=1326 audit(1776497241.230:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21189 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc35c819 code=0x7ffc0000 [ 837.558736][ T38] audit: type=1326 audit(1776497241.230:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21189 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc35c819 code=0x7ffc0000 [ 837.575990][ T38] audit: type=1326 audit(1776497241.230:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21189 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc35c819 code=0x7ffc0000 [ 837.576162][ T38] audit: type=1326 audit(1776497241.250:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21189 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f82bc35c819 code=0x7ffc0000 [ 837.582281][ T38] audit: type=1326 audit(1776497241.250:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21189 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f82bc35c819 code=0x7ffc0000 [ 837.770285][T21194] netlink: 'syz.4.6620': attribute type 30 has an invalid length. [ 837.996879][T21198] loop3: detected capacity change from 0 to 8 [ 837.998114][T21198] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 838.068261][ T5890] udevd[5890]: incorrect cramfs checksum on /dev/loop3 [ 838.229615][T21203] netlink: 'syz.5.6621': attribute type 10 has an invalid length. [ 838.229642][T21203] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6621'. [ 838.230187][T21203] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 838.230570][T21203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.255750][ T5890] udevd[5890]: incorrect cramfs checksum on /dev/loop3 [ 838.562577][T21198] cramfs: Error -3 while decompressing! [ 838.562598][T21198] cramfs: ffffffff999a7208(26)->ffff88806908a000(4096) [ 838.562641][T21198] cramfs: Error -3 while decompressing! [ 838.562653][T21198] cramfs: ffffffff999a7222(26)->ffff88806d751000(4096) [ 838.562678][T21198] cramfs: Error -3 while decompressing! [ 838.562689][T21198] cramfs: ffffffff999a723c(16)->ffff888070e7a000(4096) [ 838.562731][T21198] cramfs: Error -3 while decompressing! [ 838.562742][T21198] cramfs: ffffffff999a7208(26)->ffff88806908a000(4096) [ 839.664403][T21242] loop4: detected capacity change from 0 to 64 [ 840.148646][T21252] loop3: detected capacity change from 0 to 4096 [ 840.169722][T21252] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 840.337883][T21252] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 840.337925][T21252] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 840.549666][ T1517] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 840.549820][ T5823] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 840.549847][ T5823] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 840.549868][ T5823] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 840.550012][ T1517] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 840.739615][T21264] loop4: detected capacity change from 0 to 256 [ 840.751687][T21264] exfat: Deprecated parameter 'utf8' [ 840.838897][T21264] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 840.877966][T21267] loop3: detected capacity change from 0 to 2048 [ 841.072845][T21267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000001000000 r/w without journal. Quota mode: none. [ 841.170699][T21267] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.6654: corrupted in-inode xattr: invalid ea_ino [ 841.274147][T21239] loop5: detected capacity change from 0 to 32768 [ 841.585627][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000001000000. [ 842.911499][T21310] loop5: detected capacity change from 0 to 512 [ 842.991388][T21310] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 842.991497][T21310] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 843.018477][T21310] EXT4-fs (loop5): 1 truncate cleaned up [ 843.038926][T21310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.088771][T21310] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 843.296868][ T9075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.380432][T21320] loop4: detected capacity change from 0 to 2048 [ 843.472471][T21287] loop3: detected capacity change from 0 to 32768 [ 843.506379][T21320] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 843.559159][T21287] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 843.631103][T21287] XFS (loop3): Ending clean mount [ 843.781802][ T5823] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 844.302399][T21345] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6688'. [ 845.202412][T21370] netlink: 'syz.4.6698': attribute type 11 has an invalid length. [ 845.202439][T21370] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6698'. [ 845.788408][T21385] comedi comedi3: 8255: I/O base address not correctly aligned [ 846.540818][T21374] loop6: detected capacity change from 0 to 32768 [ 846.586322][T21377] loop4: detected capacity change from 0 to 32768 [ 846.702176][T21374] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 846.760066][T21377] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 846.880167][T21374] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 846.917089][T21377] XFS (loop4): Ending clean mount [ 847.015537][T21374] XFS (loop6): Starting recovery (logdev: internal) [ 847.177357][T21392] loop3: detected capacity change from 0 to 32768 [ 847.196923][T21392] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6710 (21392) [ 847.235463][T21392] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 847.235500][T21392] BTRFS info (device loop3): using sha256 checksum algorithm [ 847.276753][ T5825] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 847.454318][T21374] XFS (loop6): Ending recovery (logdev: internal) [ 847.566805][T21374] XFS (loop6): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 [ 847.566857][T21374] XFS (loop6): Unmount and run xfs_repair [ 847.566874][T21374] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 847.566895][T21374] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 847.566913][T21374] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 847.566930][T21374] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 847.566947][T21374] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 847.566963][T21374] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 847.566981][T21374] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 847.566998][T21374] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 847.567015][T21374] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 847.567034][T21374] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x8 len 8 error 117 [ 847.792128][T21392] BTRFS info (device loop3): setting nodatasum [ 847.792158][T21392] BTRFS info (device loop3): enabling ssd optimizations [ 847.792180][T21392] BTRFS info (device loop3): enabling free space tree [ 847.792202][T21392] BTRFS info (device loop3): force zlib compression, level 3 [ 847.974313][T10447] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 847.975256][T10447] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 848.494706][T21417] loop5: detected capacity change from 0 to 32768 [ 848.506182][T21417] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 26eae68c-c14c-4c17-b574-f2d8aeba9f8c [ 848.506274][T21417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6716 (21417) [ 848.572352][ T5823] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 848.954734][T21417] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 848.954769][T21417] BTRFS info (device loop5): using sha256 checksum algorithm [ 850.030775][T21417] BTRFS error (device loop5): open_ctree failed: -4 [ 850.422840][T21496] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6737'. [ 850.485135][T21499] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6740'. [ 850.768922][T21505] loop4: detected capacity change from 0 to 64 [ 851.481340][T21526] loop6: detected capacity change from 0 to 8 [ 851.482495][T21526] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 851.502865][ T5964] udevd[5964]: incorrect cramfs checksum on /dev/loop6 [ 851.518751][T21526] cramfs: Error -3 while decompressing! [ 851.518771][T21526] cramfs: ffffffff999a31e8(18)->ffff88806ed80000(4096) [ 851.518807][T21526] cramfs: Error -3 while decompressing! [ 851.518818][T21526] cramfs: ffffffff999a31e8(18)->ffff88806ed80000(4096) [ 851.535686][ T38] audit: type=1800 audit(1776497255.190:1896): pid=21526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6752" name="file1" dev="loop6" ino=324 res=0 errno=0 [ 851.721447][T21534] dlm: no locking on control device [ 851.953762][ T5890] udevd[5890]: incorrect cramfs checksum on /dev/loop6 [ 852.140784][T21547] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6763'. [ 852.159529][T21551] veth1: left promiscuous mode [ 852.159871][T21551] xfrm0: left promiscuous mode [ 853.271112][T21578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6777'. [ 853.395413][T21568] kAFS: unable to lookup cell '' [ 853.518752][T21585] netlink: 'syz.3.6780': attribute type 6 has an invalid length. [ 853.518779][T21585] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6780'. [ 853.838421][T21544] loop6: detected capacity change from 0 to 32768 [ 853.896122][T21544] JBD2: Ignoring recovery information on journal [ 854.410994][T21544] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 854.881367][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6795'. [ 855.168665][T21621] netlink: 'syz.5.6796': attribute type 3 has an invalid length. [ 855.356579][T21629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6800'. [ 855.356604][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6800'. [ 855.356657][T21629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6800'. [ 855.486229][T10447] ocfs2: Unmounting device (7,6) on (node local) [ 855.714933][T21635] loop5: detected capacity change from 0 to 164 [ 856.184236][T21642] delete_channel: no stack [ 856.691056][T21665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 856.691078][T21665] IPv6: NLM_F_CREATE should be set when creating new route [ 856.936851][T21671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6819'. [ 857.178504][T21670] bond0: (slave bond_slave_1): Releasing backup interface [ 857.539525][T21686] netlink: 'syz.1.6827': attribute type 7 has an invalid length. [ 857.594113][T21691] kAFS: unable to lookup cell '.({^@' [ 858.236367][T21706] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 858.236387][T21706] overlayfs: missing 'lowerdir' [ 858.544049][T21692] loop5: detected capacity change from 0 to 32768 [ 858.637126][T21692] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 859.115357][T21692] XFS (loop5): Ending clean mount [ 859.497175][ T9075] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 859.601266][T21750] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 859.601266][T21750] SȘȞZ6' [ 861.352990][T21794] loop4: detected capacity change from 0 to 4096 [ 861.382951][T21794] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 861.516172][T21809] loop5: detected capacity change from 0 to 512 [ 861.520229][T21794] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 861.534685][T21809] EXT4-fs: Ignoring removed oldalloc option [ 861.534777][T21809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 861.570638][T21809] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 861.570664][T21809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 861.571012][T21809] EXT4-fs (loop5): orphan cleanup on readonly fs [ 861.571112][T21809] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 861.571205][T21809] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 861.571234][T21809] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 861.785292][T21806] loop3: detected capacity change from 0 to 4096 [ 861.801497][T21806] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 861.833352][T21806] ntfs3(loop3): ino=19, mi_enum_attr [ 861.873853][T21806] ntfs3(loop3): failed to convert "c46c" to iso8859-4 [ 861.955863][T21806] ntfs3(loop3): ino=20, mi_enum_attr [ 861.991857][T21809] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6884: bg 0: block 40: padding at end of block bitmap is not set [ 861.991896][T21809] loop5: lost filesystem error report for type 5 error -117 [ 861.992946][T21809] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 861.992973][T21809] loop5: lost filesystem error report for type 5 error -117 [ 862.003723][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 862.003748][ C1] EXT4-fs (loop5): initial error at time 1776497265: ext4_validate_block_bitmap:441 [ 862.003773][ C1] EXT4-fs (loop5): last error at time 1776497265: ext4_mb_clear_bb:6679 [ 862.154019][T21809] EXT4-fs (loop5): 1 truncate cleaned up [ 862.157065][T21809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 862.246277][T21809] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.6884: bad symlink. [ 862.388438][ T9075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.595053][T21823] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6891'. [ 862.634230][T21823] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6891'. [ 862.732215][T21829] netlink: 'syz.5.6890': attribute type 37 has an invalid length. [ 863.220506][T21848] netlink: 'syz.6.6901': attribute type 4 has an invalid length. [ 863.220532][T21848] netlink: 'syz.6.6901': attribute type 1 has an invalid length. [ 863.220547][T21848] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6901'. [ 863.628620][T21866] comedi comedi3: 8255: I/O base address not correctly aligned [ 864.463853][ T5841] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 864.620523][ T5841] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 864.620555][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.655866][ T5841] usb 7-1: config 0 descriptor?? [ 864.689374][ T5841] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 864.947208][T21909] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 865.079918][ T5841] gp8psk: usb out operation failed. [ 865.079937][ T5841] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 865.079978][ T5841] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 865.126356][ T5841] usb 7-1: USB disconnect, device number 18 [ 865.447047][T21920] geneve0: entered promiscuous mode [ 865.447075][T21920] geneve0: entered allmulticast mode [ 865.639011][T21880] kexec: Could not allocate control_code_buffer [ 865.676745][T21929] netlink: 320 bytes leftover after parsing attributes in process `syz.4.6941'. [ 865.814435][T21931] loop5: detected capacity change from 0 to 512 [ 865.912356][T21931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.912537][T21931] ext4 filesystem being mounted at /1036/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 866.276326][T21931] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.6942: corrupted inode contents [ 866.355398][T21931] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #2: comm syz.5.6942: mark_inode_dirty error [ 866.359450][T21931] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.6942: corrupted inode contents [ 866.370008][T21931] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.6942: mark_inode_dirty error [ 866.687653][ T9075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.597432][T21994] loop6: detected capacity change from 0 to 2048 [ 867.630993][T21994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 868.261949][T22013] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 868.261973][T22013] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 868.448938][T22010] loop5: detected capacity change from 0 to 4096 [ 868.469403][T22010] ntfs3(loop5): ino=1, mi_enum_attr [ 868.469438][T22010] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 868.700542][T22010] ntfs3(loop5): mft corrupted [ 868.700723][T22010] ntfs3(loop5): Failed to load $MFT. [ 869.760993][T22072] netlink: 'syz.1.7009': attribute type 10 has an invalid length. [ 869.896870][T22072] veth0_vlan: left promiscuous mode [ 869.916078][T22072] veth0_vlan: entered promiscuous mode [ 869.920074][T22072] team0: Device veth0_vlan failed to register rx_handler [ 870.017183][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.017297][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.522566][T22090] PKCS8: Unsupported PKCS#8 version [ 870.964359][T22066] loop6: detected capacity change from 0 to 32768 [ 870.968636][T22107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7027'. [ 871.026740][T22066] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 871.030889][T22117] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7030'. [ 871.206414][T22124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7031'. [ 871.263986][T22066] XFS (loop6): Ending clean mount [ 871.788556][T22143] dlm: non-version read from control device 90 [ 871.839302][T10447] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 872.085599][T22146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.148991][T22146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.122761][T22170] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 873.433926][ T5835] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 873.481408][T22184] netlink: 'syz.1.7062': attribute type 1 has an invalid length. [ 873.481426][T22184] netlink: 'syz.1.7062': attribute type 2 has an invalid length. [ 873.596706][ T5835] usb 6-1: unable to get BOS descriptor or descriptor too short [ 873.598224][ T5835] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 873.631038][ T5835] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 873.631070][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.631092][ T5835] usb 6-1: Product: syz [ 873.631109][ T5835] usb 6-1: Manufacturer: syz [ 873.631125][ T5835] usb 6-1: SerialNumber: syz [ 873.910399][ T5835] ati_remote2 6-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 873.958373][T22191] bond0: (slave bond_slave_1): Releasing backup interface [ 874.021011][ T5835] usb 6-1: USB disconnect, device number 13 [ 874.483895][ T822] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 874.721119][ T822] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 874.726669][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.726699][ T822] usb 2-1: Product: syz [ 874.726717][ T822] usb 2-1: Manufacturer: syz [ 874.726734][ T822] usb 2-1: SerialNumber: syz [ 874.792532][ T822] gspca_main: spca501-2.14.0 probing 0497:c001 [ 875.223457][ T822] gspca_spca501: reg write: error -71 [ 875.223476][ T822] spca501 2-1:68.0: Reg write failed for 0x02,0xa048,0x00 [ 875.223579][ T822] spca501 2-1:68.0: probe with driver spca501 failed with error -22 [ 875.308572][ T822] usb 2-1: USB disconnect, device number 50 [ 875.917520][T22254] nfs: Deprecated parameter 'nointr' [ 876.459541][T22278] binder: 22276:22278 ioctl c00c6211 0 returned -14 [ 876.630655][T22282] netlink: 'syz.1.7111': attribute type 11 has an invalid length. [ 876.630681][T22282] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.7111'. [ 876.803979][ T5809] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 876.904431][T22290] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 876.964051][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 876.969626][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 876.969667][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 876.969692][ T5809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 876.969719][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 876.969748][ T5809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 876.969790][ T5809] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 876.969816][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.030125][T22290] bond4 (unregistering): Released all slaves [ 877.074943][ T5809] usb 5-1: config 0 descriptor?? [ 877.076544][T22280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 877.782181][T22313] i2c i2c-0: Invalid block write size 252 [ 878.171500][ T5809] usb 5-1: USB disconnect, device number 40 [ 878.231470][ T5840] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 878.339570][T22325] loop6: detected capacity change from 0 to 64 [ 879.107050][T22346] loop5: detected capacity change from 0 to 512 [ 879.145267][T22349] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7143'. [ 879.222614][T22348] binder: 22345:22348 ioctl c0306201 200000000040 returned -22 [ 879.947191][T22379] team0: entered allmulticast mode [ 879.947218][T22379] team_slave_0: entered allmulticast mode [ 879.947250][T22379] team_slave_1: entered allmulticast mode [ 880.164711][T22390] netlink: 'syz.3.7165': attribute type 1 has an invalid length. [ 880.164737][T22390] netlink: 'syz.3.7165': attribute type 2 has an invalid length. [ 880.164772][T22390] netlink: 'syz.3.7165': attribute type 1 has an invalid length. [ 880.312521][T22397] loop6: detected capacity change from 0 to 1024 [ 880.320726][T22397] hfsplus: Bad value for 'uid' [ 881.313906][ T5809] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 881.467294][ T5809] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 881.467328][ T5809] usb 6-1: config 0 has no interface number 0 [ 881.467376][ T5809] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 881.467406][ T5809] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 881.467436][ T5809] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 881.474758][ T5809] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 881.474790][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 881.474811][ T5809] usb 6-1: Product: syz [ 881.474825][ T5809] usb 6-1: SerialNumber: syz [ 881.495761][ T822] kernel write not supported for file /2865/net/psched (pid: 822 comm: kworker/0:2) [ 881.630167][ T5809] usb 6-1: config 0 descriptor?? [ 881.667152][ T5809] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 881.685189][ T5809] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input27 [ 881.798232][ T5809] ------------[ cut here ]------------ [ 881.798244][ T5809] URB ffff888021ff0c00 submitted while active [ 881.798258][ T5809] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#1: kworker/1:3/5809 [ 881.798312][ T5809] Modules linked in: [ 881.798336][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 881.798386][ T5809] Tainted: [L]=SOFTLOCKUP [ 881.798396][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 881.798414][ T5809] Workqueue: usb_hub_wq hub_event [ 881.798458][ T5809] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 881.798494][ T5809] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 87 30 6f fb 49 83 3e 00 74 40 e8 ac b9 05 fb 48 8d 3d f5 d0 da 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 b9 05 fb eb 05 e8 8a b9 [ 881.798510][ T5809] RSP: 0018:ffffc900044d6b90 EFLAGS: 00010283 [ 881.798524][ T5809] RAX: ffffffff86beeff4 RBX: ffff888021ff0c00 RCX: 0000000000100000 [ 881.798538][ T5809] RDX: ffffc9001b6a3000 RSI: ffff888021ff0c00 RDI: ffffffff8f99c0f0 [ 881.798551][ T5809] RBP: 000000000000000f R08: ffffffff8f8d41f7 R09: 1ffffffff1f1a83e [ 881.798563][ T5809] R10: dffffc0000000000 R11: fffffbfff1f1a83f R12: 0000000000000cc0 [ 881.798576][ T5809] R13: ffff88803402c848 R14: ffff888021ff0c08 R15: dffffc0000000000 [ 881.798589][ T5809] FS: 0000000000000000(0000) GS:ffff888125fba000(0000) knlGS:0000000000000000 [ 881.798602][ T5809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.798614][ T5809] CR2: 00007f0b577056b8 CR3: 0000000038aa6000 CR4: 00000000003526f0 [ 881.798629][ T5809] Call Trace: [ 881.798640][ T5809] [ 881.798649][ T5809] ? lockdep_hardirqs_on+0x7a/0x110 [ 881.798670][ T5809] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 881.798691][ T5809] ? mutex_lock_nested+0x152/0x1d0 [ 881.798716][ T5809] ? cm109_input_open+0x97/0x480 [ 881.798740][ T5809] cm109_input_open+0x1fb/0x480 [ 881.798765][ T5809] input_open_device+0x1f8/0x3b0 [ 881.798786][ T5809] kbd_connect+0xf6/0x150 [ 881.798829][ T5809] input_register_device+0xce0/0x1140 [ 881.798856][ T5809] cm109_usb_probe+0x11a2/0x16a0 [ 881.798896][ T5809] usb_probe_interface+0x659/0xc70 [ 881.798923][ T5809] ? __pfx_usb_probe_interface+0x10/0x10 [ 881.798939][ T5809] really_probe+0x267/0xaf0 [ 881.798968][ T5809] __driver_probe_device+0x1ef/0x380 [ 881.798993][ T5809] driver_probe_device+0x4f/0x240 [ 881.799019][ T5809] __device_attach_driver+0x279/0x430 [ 881.799045][ T5809] bus_for_each_drv+0x25b/0x2f0 [ 881.799063][ T5809] ? __pfx___device_attach_driver+0x10/0x10 [ 881.799086][ T5809] ? __pfx_bus_for_each_drv+0x10/0x10 [ 881.799103][ T5809] ? rt_spin_unlock+0x160/0x200 [ 881.799142][ T5809] __device_attach+0x2c8/0x450 [ 881.799166][ T5809] ? __pfx___device_attach+0x10/0x10 [ 881.799189][ T5809] ? rt_spin_unlock+0x160/0x200 [ 881.799221][ T5809] device_initial_probe+0xa1/0xd0 [ 881.799245][ T5809] bus_probe_device+0x12d/0x220 [ 881.799264][ T5809] device_add+0x7e9/0xbb0 [ 881.799288][ T5809] usb_set_configuration+0x1a87/0x2110 [ 881.799337][ T5809] usb_generic_driver_probe+0x8d/0x150 [ 881.799366][ T5809] usb_probe_device+0x1c4/0x3b0 [ 881.799386][ T5809] ? __pfx_usb_probe_device+0x10/0x10 [ 881.799401][ T5809] really_probe+0x267/0xaf0 [ 881.799430][ T5809] __driver_probe_device+0x1ef/0x380 [ 881.799455][ T5809] driver_probe_device+0x4f/0x240 [ 881.799480][ T5809] __device_attach_driver+0x279/0x430 [ 881.799528][ T5809] bus_for_each_drv+0x25b/0x2f0 [ 881.799553][ T5809] ? __pfx___device_attach_driver+0x10/0x10 [ 881.799588][ T5809] ? __pfx_bus_for_each_drv+0x10/0x10 [ 881.799613][ T5809] ? rt_spin_unlock+0x160/0x200 [ 881.799657][ T5809] __device_attach+0x2c8/0x450 [ 881.799682][ T5809] ? __pfx___device_attach+0x10/0x10 [ 881.799704][ T5809] ? rt_spin_unlock+0x160/0x200 [ 881.799735][ T5809] device_initial_probe+0xa1/0xd0 [ 881.799759][ T5809] bus_probe_device+0x12d/0x220 [ 881.799797][ T5809] device_add+0x7e9/0xbb0 [ 881.799821][ T5809] usb_new_device+0x9f8/0x16e0 [ 881.799854][ T5809] ? __pfx_usb_new_device+0x10/0x10 [ 881.799887][ T5809] hub_event+0x2a49/0x4f60 [ 881.799954][ T5809] ? __pfx_hub_event+0x10/0x10 [ 881.799979][ T5809] ? process_one_work+0x8b7/0x1710 [ 881.800007][ T5809] ? process_one_work+0x8b7/0x1710 [ 881.800023][ T5809] process_one_work+0x9a3/0x1710 [ 881.800058][ T5809] ? __pfx_process_one_work+0x10/0x10 [ 881.800074][ T5809] ? do_raw_spin_lock+0x12b/0x2f0 [ 881.800107][ T5809] worker_thread+0xba8/0x11e0 [ 881.800152][ T5809] kthread+0x388/0x470 [ 881.800175][ T5809] ? __pfx_worker_thread+0x10/0x10 [ 881.800192][ T5809] ? __pfx_kthread+0x10/0x10 [ 881.800216][ T5809] ret_from_fork+0x514/0xb70 [ 881.800238][ T5809] ? __pfx_ret_from_fork+0x10/0x10 [ 881.800257][ T5809] ? __switch_to+0xc79/0x1410 [ 881.800286][ T5809] ? __pfx_kthread+0x10/0x10 [ 881.800310][ T5809] ret_from_fork_asm+0x1a/0x30 [ 881.800345][ T5809] [ 881.800361][ T5809] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 881.800377][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 881.800400][ T5809] Tainted: [L]=SOFTLOCKUP [ 881.800407][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 881.800419][ T5809] Workqueue: usb_hub_wq hub_event [ 881.800444][ T5809] Call Trace: [ 881.800452][ T5809] [ 881.800458][ T5809] vpanic+0x56c/0xa60 [ 881.800479][ T5809] ? __pfx__printk+0x10/0x10 [ 881.800502][ T5809] ? __pfx_vpanic+0x10/0x10 [ 881.800520][ T5809] ? is_bpf_text_address+0x292/0x2b0 [ 881.800544][ T5809] ? is_bpf_text_address+0x26/0x2b0 [ 881.800574][ T5809] panic+0xc5/0xd0 [ 881.800593][ T5809] ? __pfx_panic+0x10/0x10 [ 881.800621][ T5809] ? ret_from_fork_asm+0x1a/0x30 [ 881.800646][ T5809] __warn+0x315/0x4c0 [ 881.800692][ T5809] ? usb_submit_urb+0x7b/0x18b0 [ 881.800725][ T5809] ? usb_submit_urb+0x7b/0x18b0 [ 881.800761][ T5809] __report_bug+0x29a/0x540 [ 881.800796][ T5809] ? usb_submit_urb+0x7b/0x18b0 [ 881.800825][ T5809] ? __pfx___report_bug+0x10/0x10 [ 881.800842][ T5809] ? add_lock_to_list+0xc7/0x100 [ 881.800887][ T5809] report_bug_entry+0x19a/0x290 [ 881.800907][ T5809] ? usb_submit_urb+0x7e/0x18b0 [ 881.800927][ T5809] ? usb_submit_urb+0x83/0x18b0 [ 881.800948][ T5809] handle_bug+0xce/0x200 [ 881.800971][ T5809] exc_invalid_op+0x1a/0x50 [ 881.800993][ T5809] asm_exc_invalid_op+0x1a/0x20 [ 881.801010][ T5809] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 881.801032][ T5809] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 87 30 6f fb 49 83 3e 00 74 40 e8 ac b9 05 fb 48 8d 3d f5 d0 da 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 b9 05 fb eb 05 e8 8a b9 [ 881.801047][ T5809] RSP: 0018:ffffc900044d6b90 EFLAGS: 00010283 [ 881.801061][ T5809] RAX: ffffffff86beeff4 RBX: ffff888021ff0c00 RCX: 0000000000100000 [ 881.801074][ T5809] RDX: ffffc9001b6a3000 RSI: ffff888021ff0c00 RDI: ffffffff8f99c0f0 [ 881.801087][ T5809] RBP: 000000000000000f R08: ffffffff8f8d41f7 R09: 1ffffffff1f1a83e [ 881.801099][ T5809] R10: dffffc0000000000 R11: fffffbfff1f1a83f R12: 0000000000000cc0 [ 881.801112][ T5809] R13: ffff88803402c848 R14: ffff888021ff0c08 R15: dffffc0000000000 [ 881.801139][ T5809] ? usb_submit_urb+0x74/0x18b0 [ 881.801167][ T5809] ? lockdep_hardirqs_on+0x7a/0x110 [ 881.801186][ T5809] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 881.801207][ T5809] ? mutex_lock_nested+0x152/0x1d0 [ 881.801231][ T5809] ? cm109_input_open+0x97/0x480 [ 881.801255][ T5809] cm109_input_open+0x1fb/0x480 [ 881.801279][ T5809] input_open_device+0x1f8/0x3b0 [ 881.801301][ T5809] kbd_connect+0xf6/0x150 [ 881.801326][ T5809] input_register_device+0xce0/0x1140 [ 881.801353][ T5809] cm109_usb_probe+0x11a2/0x16a0 [ 881.801390][ T5809] usb_probe_interface+0x659/0xc70 [ 881.801418][ T5809] ? __pfx_usb_probe_interface+0x10/0x10 [ 881.801457][ T5809] really_probe+0x267/0xaf0 [ 881.801501][ T5809] __driver_probe_device+0x1ef/0x380 [ 881.801535][ T5809] driver_probe_device+0x4f/0x240 [ 881.801576][ T5809] __device_attach_driver+0x279/0x430 [ 881.801603][ T5809] bus_for_each_drv+0x25b/0x2f0 [ 881.801621][ T5809] ? __pfx___device_attach_driver+0x10/0x10 [ 881.801644][ T5809] ? __pfx_bus_for_each_drv+0x10/0x10 [ 881.801661][ T5809] ? rt_spin_unlock+0x160/0x200 [ 881.801693][ T5809] __device_attach+0x2c8/0x450 [ 881.801717][ T5809] ? __pfx___device_attach+0x10/0x10 [ 881.801739][ T5809] ? rt_spin_unlock+0x160/0x200 [ 881.801770][ T5809] device_initial_probe+0xa1/0xd0 [ 881.801794][ T5809] bus_probe_device+0x12d/0x220 [ 881.801813][ T5809] device_add+0x7e9/0xbb0 [ 881.801858][ T5809] usb_set_configuration+0x1a87/0x2110 [ 881.801931][ T5809] usb_generic_driver_probe+0x8d/0x150 [ 881.801969][ T5809] usb_probe_device+0x1c4/0x3b0 [ 881.801989][ T5809] ? __pfx_usb_probe_device+0x10/0x10 [ 881.802005][ T5809] really_probe+0x267/0xaf0 [ 881.802039][ T5809] __driver_probe_device+0x1ef/0x380 [ 881.802064][ T5809] driver_probe_device+0x4f/0x240 [ 881.802090][ T5809] __device_attach_driver+0x279/0x430 [ 881.802125][ T5809] bus_for_each_drv+0x25b/0x2f0 [ 881.802142][ T5809] ? __pfx___device_attach_driver+0x10/0x10 [ 881.802166][ T5809] ? __pfx_bus_for_each_drv+0x10/0x10 [ 881.802183][ T5809] ? rt_spin_unlock+0x160/0x200 [ 881.802215][ T5809] __device_attach+0x2c8/0x450 [ 881.802239][ T5809] ? __pfx___device_attach+0x10/0x10 [ 881.802261][ T5809] ? rt_spin_unlock+0x160/0x200 [ 881.802293][ T5809] device_initial_probe+0xa1/0xd0 [ 881.802317][ T5809] bus_probe_device+0x12d/0x220 [ 881.802337][ T5809] device_add+0x7e9/0xbb0 [ 881.802360][ T5809] usb_new_device+0x9f8/0x16e0 [ 881.802393][ T5809] ? __pfx_usb_new_device+0x10/0x10 [ 881.802424][ T5809] hub_event+0x2a49/0x4f60 [ 881.802490][ T5809] ? __pfx_hub_event+0x10/0x10 [ 881.802516][ T5809] ? process_one_work+0x8b7/0x1710 [ 881.802615][ T5809] ? process_one_work+0x8b7/0x1710 [ 881.802652][ T5809] process_one_work+0x9a3/0x1710 [ 881.802705][ T5809] ? __pfx_process_one_work+0x10/0x10 [ 881.802730][ T5809] ? do_raw_spin_lock+0x12b/0x2f0 [ 881.802783][ T5809] worker_thread+0xba8/0x11e0 [ 881.802849][ T5809] kthread+0x388/0x470 [ 881.802893][ T5809] ? __pfx_worker_thread+0x10/0x10 [ 881.802931][ T5809] ? __pfx_kthread+0x10/0x10 [ 881.802997][ T5809] ret_from_fork+0x514/0xb70 [ 881.803059][ T5809] ? __pfx_ret_from_fork+0x10/0x10 [ 881.803124][ T5809] ? __switch_to+0xc79/0x1410 [ 881.803188][ T5809] ? __pfx_kthread+0x10/0x10 [ 881.803239][ T5809] ret_from_fork_asm+0x1a/0x30 [ 881.803295][ T5809] [ 881.804153][ T5809] Kernel Offset: disabled