last executing test programs: 4m57.334463725s ago: executing program 3 (id=2911): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x4000) 4m55.556671398s ago: executing program 3 (id=2937): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') writev(r0, &(0x7f0000002500)=[{&(0x7f0000000440)="327f43c1", 0x4}], 0x1) 4m55.405442307s ago: executing program 3 (id=2942): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 4m55.219414838s ago: executing program 3 (id=2944): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f000000ad80)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@quota}, {@noquota}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x62cf, &(0x7f0000000200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m54.15653244s ago: executing program 3 (id=2960): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) 4m53.204885105s ago: executing program 3 (id=2971): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 4m52.767629961s ago: executing program 32 (id=2971): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 2m16.481907958s ago: executing program 1 (id=5377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m16.351018506s ago: executing program 1 (id=5378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0xe0, 0x30, 0x107, 0x70bd2a, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0xbd, 0x136, 0x0, 0x1, [@generic="f3a830d6f6018390d28caad5a500fa272eccfdbc07fda8af7bd71e3980223dcadceacc2e52a844eb1b016ae40b90581b9ac8464bd6fda6a8efdfc2a84afc89f2d341c421570a4be93a6ff598910b0fd30685db50aa62722032a0f9b5ad3f2d179d185db74c751256852903a9f5bd3bd9f702950830d363686525ae305850de3cf5709f65ea5a7397b8393455ccf08f8ebfff70ffe6ebce43c134bd768b255f635a55368922e9ce943288a2cbdd6e72344c0dc79b10d0bc1f1b"]}, @nested={0xc, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2m16.308348008s ago: executing program 1 (id=5380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 2m16.232623333s ago: executing program 1 (id=5382): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m15.895933432s ago: executing program 1 (id=5388): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 2m15.438970829s ago: executing program 1 (id=5391): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) poll(0x0, 0x0, 0x7) 2m15.057548401s ago: executing program 33 (id=5391): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) poll(0x0, 0x0, 0x7) 4.011012466s ago: executing program 5 (id=7563): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x7f7c2739efff) 3.861266035s ago: executing program 5 (id=7566): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x29, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4042806}, 0x84) 3.513618525s ago: executing program 5 (id=7571): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x13, 0x3, "22a855"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.796236457s ago: executing program 2 (id=7581): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x32180c8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cd, &(0x7f0000002080)="$eJzs3T+LHGUcB/Df3O3Njn9gr7ASIQOmsApeOrHZIAmIVxmuUAs9TAJyuwgJHPgH11S2NhYWvgJB8IWk8R0ItoKdEQIjz/xx5uJm3ZVsxNznU9z9eJ7nO/M8s3N7c8U+98FL85MbZdy6+/nPURRZ7ExjGvez2I+d6HwZZ0y/DgDg/+x+VcVvVWOTXBYRxfamBQBs0Xq//0d9+eMTmRYAsEXX33n3rSuHh1ffLqKIa/OvTo/SX/bpe9Ofpy+zuBmvxiQeRNQPCntRPy2k8lpVVYtRmezHxfni9Cgl5+/fa49/5dc2fxCT2K+b/nraqPNvHl49KBuD/CLN49mUvxUfTVP+ckzihTb8/Nn85SX5OMrjlZebfH3+SzGJnz6Mj2MWN+pJ9PkvDsryjeqb3z97L00v5bPF6dG4Hterdp/sKwMAAAAAAAAAAAAAAAAAAAAAwNPsUrt3zjjKC3Fxnpra/Xd2HzSb/5Sd/T6V+psq65qG+wNVVbWo4rvBloJl1Q7s9/cZxYuj4caCAAAAAAAAAAAAAAAAAAAAcH7d+eTTk+PZ7Obtx1J0uwGMIuKP6xH/9jjTQcuFWD143J7zeDbbacszY+7lw5bY7cZkESunkRbxmC7LPxXPPDznrvj+h7TAdY6zF81yikHXa8sXuLf9dXV318lxtvxc4+haivYm+TaP6Mfksea58kd1VbHJ7Zcv7ZpsvPb8ubpYrBgT2aqJvf5Lc+XaluzhVeT1VV0a32uLQfzsmOKRr3v6ee1aomjif3+vyOrdOsbbezMCAAAAAAAAAAAAAAAAAIBzrv8Y8JLOuyujO5WPAgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwlOj///8GxaINrzE4j9t3/uMlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcA78GQAA///qm1DN") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x102004, 0x0, 0x1, 0x0, &(0x7f0000000040)) 2.605239358s ago: executing program 2 (id=7582): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x3200000, &(0x7f00000004c0)=ANY=[], 0x6, 0x244, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103040, 0x100) 2.419865309s ago: executing program 2 (id=7585): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x141, 0xaf, 0xb4, 0xf2, 0x10, 0x525, 0xa4a0, 0x2bf1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfe, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0xeb, 0x2, 0x2, 0x7f, 0x9c, 0x1f, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x20, 0x2, 0x0, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x1, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.622883465s ago: executing program 5 (id=7600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4a) 1.434065697s ago: executing program 5 (id=7602): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f086dd", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.183519631s ago: executing program 0 (id=7607): setreuid(0xffffffffffffffff, 0xee00) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.03172631s ago: executing program 6 (id=7609): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5760, 0x0) 962.843704ms ago: executing program 0 (id=7610): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) 867.324989ms ago: executing program 0 (id=7612): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0xde4f86523c53354a}}], 0x1, 0xc001) 841.996021ms ago: executing program 6 (id=7613): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x44, 0x0, '.\x00'}}) 758.785625ms ago: executing program 4 (id=7614): r0 = socket(0x2000000000000021, 0x2, 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) 716.545998ms ago: executing program 6 (id=7615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 707.442879ms ago: executing program 0 (id=7616): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 671.831831ms ago: executing program 4 (id=7617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:', @ANYRESOCT=r0], 0xd) 542.520208ms ago: executing program 0 (id=7618): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000011c0), 0x8102, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0x0) 515.6164ms ago: executing program 4 (id=7619): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0xffffffff, 0x9, 0x1, "c79ff78f5325eac74c0cc7d0e155443a958eca3d1d521dada0c757aa0fa46e4b", 0x4745504a}) 514.69322ms ago: executing program 6 (id=7620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 450.972524ms ago: executing program 2 (id=7621): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000044c0), 0x0, 0x0) lseek(r0, 0x9b6, 0x1) 354.80346ms ago: executing program 2 (id=7622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 344.21892ms ago: executing program 4 (id=7623): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0), &(0x7f0000000940)=0x4) 286.848823ms ago: executing program 0 (id=7624): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) 245.176076ms ago: executing program 5 (id=7625): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x243, &(0x7f00000002c0)="$eJzs3U9u00wYx/HfTPK+DaQq7h+ExLJQiRVqywaxiYRyCFYIaIJUERUJigSsEGvEAdhzBQ7BCnEBWLHiAGFlNOMJdRPHDlGTIen3I8Uy8Tz2M3jcmcdSVQE4t+62v3289cN9jFRTTdIdyUpqSHVJl3Wl8eLo+PC41+2UnajmI9zHKIs0I20OjrpFoS7ORwSJ+1ddq/nvMBtpmqbfYyeB6PzTX8BKK+Hp9Mcbc89sNt7ETiAy01dfL7UWOw8AQFxh/rdhnl8N63drpZ0w7S/V/N+PnUBkufnfV1mpcff3kj90Uu/5Es4dt4MqcZpr/a9sZJ1aYJqqqtLnYi88Pux1bx48/ZVmWl6u2ZbfdrKhO1CR7XZBbVpi+r43fR/+c33Yt3qrVmsk/82zvWI189l8qd03iT6o82f9V0+Nu03+TiVDdyrLf3f8GX0vk6zVmF6u+4tcDVcIKnrZKK5INBhR6zr9giCpytNHbQxFZb3bq4jaLIzar4jaGo4ajOZe6auUM2RHvzLvzT2zrZ/6pHZu/W/d//aOJnkyXRvfMoyM0v7UfctkulwxM+/0SLe19vzV6ycPe73us4Xbaa78E2mww85S7sT+AYV5OLnpsTNBJG7dZbL6L1ev7PoSyW2SknV6WnXy3Bn3xtQGG3578a8quOb4Cm7SmuvaDen65FdMQp5LwrT1VQ94/w8AAAAAAAAAAAAAAAAAALBo5vDrBK3YfQQAAAAAAAAAAAAAAAAAAAAAYNHx93+B8+t3AAAA///VEYdJ") truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) 179.258619ms ago: executing program 6 (id=7626): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001100)={0xa, 0x2, 0x3, "f7b817716daef7e53fa40c98da1907309f97630a33ea3b6bd13c74c37001fd36", 0x30314442}) 111.682334ms ago: executing program 4 (id=7627): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000004c0), 0x0) 45.569637ms ago: executing program 2 (id=7628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 9.983959ms ago: executing program 4 (id=7629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_PORT_SELF={0x4}, @IFLA_IFALIASn={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42080}, 0x48000) 0s ago: executing program 6 (id=7630): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0x97e, 0x0, 0x101b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) kernel console output (not intermixed with test programs): interface number: 2 but max is 0 [ 584.297042][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 584.306401][ T8451] usb 7-1: config 6 has no interface number 0 [ 584.312984][ T8451] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 584.323076][ T8451] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 584.347896][ T8451] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 584.360364][ T22] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 584.392659][ T8451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.417152][ T8451] usb 7-1: Product: syz [ 584.424203][ T8451] usb 7-1: Manufacturer: syz [ 584.429797][ T8451] usb 7-1: SerialNumber: syz [ 584.434664][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6021'. [ 584.451894][ T8450] usb 1-1: USB disconnect, device number 72 [ 584.460839][ T8451] hso 7-1:6.2: Failed to find INT IN ep [ 584.546901][T18739] loop2: detected capacity change from 0 to 32768 [ 584.564560][ T22] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 584.576663][T18739] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.6020 (18739) [ 584.590033][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.616605][ T22] usb 6-1: Product: syz [ 584.621776][ T22] usb 6-1: Manufacturer: syz [ 584.627358][ T22] usb 6-1: SerialNumber: syz [ 584.656240][ T22] usb 6-1: config 0 descriptor?? [ 584.669173][ T22] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 584.685517][T18739] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 584.685583][ T4632] usb 7-1: USB disconnect, device number 3 [ 584.713048][T18739] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 584.723132][T18739] BTRFS info (device loop2): enabling auto defrag [ 584.730108][T18739] BTRFS info (device loop2): force clearing of disk cache [ 584.743168][T18739] BTRFS info (device loop2): max_inline at 0 [ 584.749884][T18739] BTRFS info (device loop2): turning on sync discard [ 584.759819][T18739] BTRFS info (device loop2): disabling free space tree [ 584.940573][T18739] BTRFS info (device loop2): enabling ssd optimizations [ 584.953385][T18739] BTRFS info (device loop2): rebuilding free space tree [ 584.969602][T18769] binder: 18767:18769 unknown command 0 [ 585.008272][T18769] binder: 18767:18769 ioctl c0306201 200000000480 returned -22 [ 585.029973][T18739] BTRFS info (device loop2): disabling free space tree [ 585.037110][T18739] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 585.052172][T18739] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 585.070276][ T8450] usb 6-1: USB disconnect, device number 14 [ 585.301461][ T4276] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 585.386048][ T4382] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (4382) [ 585.460814][ T4632] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 585.650355][ T4632] usb 5-1: Using ep0 maxpacket: 32 [ 585.678353][ T4632] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.696324][ T4632] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 585.715785][ T4632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.744678][ T4632] usb 5-1: config 0 descriptor?? [ 585.777484][ T4632] usb 5-1: bad CDC descriptors [ 585.815414][ T4632] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 585.988677][ T7416] usb 5-1: USB disconnect, device number 64 [ 586.014509][T18800] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6040'. [ 586.020513][ T4632] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 586.213018][ T4632] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 586.231546][T18810] sctp: [Deprecated]: syz.0.6046 (pid 18810) Use of int in maxseg socket option. [ 586.231546][T18810] Use struct sctp_assoc_value instead [ 586.793399][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 586.793413][ T27] audit: type=1326 audit(1769250669.969:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 586.821632][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.944888][T18848] xt_hashlimit: size too large, truncated to 1048576 [ 586.990437][ T27] audit: type=1326 audit(1769250670.009:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 587.006710][T18848] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 587.078225][ T27] audit: type=1326 audit(1769250670.009:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 587.165246][ T27] audit: type=1326 audit(1769250670.009:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 587.243163][ T27] audit: type=1326 audit(1769250670.009:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 587.290474][ T27] audit: type=1326 audit(1769250670.009:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 587.290892][ T4632] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 587.379380][T18862] loop6: detected capacity change from 0 to 2048 [ 587.409336][ T27] audit: type=1326 audit(1769250670.009:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 587.411682][ T4632] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 587.487955][ T27] audit: type=1326 audit(1769250670.009:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 587.513237][T18867] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 587.543349][T18862] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 587.576629][ T27] audit: type=1326 audit(1769250670.009:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 587.645529][ T8667] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 587.670554][T18862] Remounting filesystem read-only [ 587.691026][ T27] audit: type=1326 audit(1769250670.009:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.5.6062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x50000 [ 587.843948][T18878] tmpfs: Bad value for 'size' [ 588.091381][T18890] Unknown options in mask b7f2 [ 588.740524][ T4632] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 588.777223][T18927] loop2: detected capacity change from 0 to 64 [ 588.932460][ T4632] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 588.952107][ T4632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.993837][ T4632] usb 6-1: config 0 descriptor?? [ 589.422941][ T4632] [drm:udl_init] *ERROR* Selecting channel failed [ 589.461321][ T4632] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 589.490564][ T4632] [drm] Initialized udl on minor 2 [ 589.507163][ T4632] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 589.534258][ T4632] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 589.555142][ T4632] usb 6-1: USB disconnect, device number 15 [ 589.561927][T18960] loop2: detected capacity change from 0 to 2048 [ 589.591571][ T8667] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 589.613482][T18960] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359 [ 589.630148][ T8667] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 589.658834][ T8667] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 589.675920][T18960] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 589.948180][T18974] loop4: detected capacity change from 0 to 1024 [ 589.990458][ T8667] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 590.057464][T18980] IPv6: sit1: Disabled Multicast RS [ 590.202241][ T8667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.238553][ T8667] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.259324][ T8667] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 590.281894][ T8667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 590.313770][ T8667] usb 1-1: SerialNumber: syz [ 590.438849][T18990] loop4: detected capacity change from 0 to 2048 [ 590.543633][ T8667] usb 1-1: 0:2 : does not exist [ 590.559040][T18995] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 590.559081][ T8667] usb 1-1: unit 5: unexpected type 0x03 [ 590.606527][T18990] NILFS (loop4): error -2 truncating bmap (ino=16) [ 590.656972][ T8667] usb 1-1: USB disconnect, device number 73 [ 590.944680][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.122249][T19017] loop2: detected capacity change from 0 to 64 [ 591.314572][T19023] loop6: detected capacity change from 0 to 4096 [ 591.353451][T19023] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 591.395282][T19029] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6151'. [ 591.450401][ T4632] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 591.479997][T19023] ntfs3: loop6: failed to convert "c46c" to cp850 [ 591.612476][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 591.632164][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.650417][ T4632] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.670796][ T4632] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 591.690096][ T4632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 591.730068][ T4632] usb 6-1: SerialNumber: syz [ 591.902948][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 591.902963][ T27] audit: type=1326 audit(1769250675.079:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19049 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02979acb9 code=0x7ffc0000 [ 591.937755][ T27] audit: type=1326 audit(1769250675.079:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19049 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff02979acb9 code=0x7ffc0000 [ 591.971541][ T4632] usb 6-1: 0:2 : does not exist [ 591.992946][ T4632] usb 6-1: USB disconnect, device number 16 [ 592.009345][ T27] audit: type=1326 audit(1769250675.079:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19049 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff02979acb9 code=0x7ffc0000 [ 592.240886][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.585911][T19073] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6174'. [ 592.858537][T19088] netlink: 'syz.6.6180': attribute type 3 has an invalid length. [ 592.872460][ T27] audit: type=1326 audit(1769250676.049:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.0.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fd79acb9 code=0x7ffc0000 [ 592.947251][ T27] audit: type=1326 audit(1769250676.049:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.0.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fd79acb9 code=0x7ffc0000 [ 593.020392][ T27] audit: type=1326 audit(1769250676.079:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.0.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f74fd79acb9 code=0x7ffc0000 [ 593.102460][ T27] audit: type=1326 audit(1769250676.079:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.0.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fd79acb9 code=0x7ffc0000 [ 593.175932][ T27] audit: type=1326 audit(1769250676.079:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.0.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fd79acb9 code=0x7ffc0000 [ 593.240510][ T8450] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 593.270405][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6190'. [ 593.318712][T19106] loop0: detected capacity change from 0 to 4096 [ 593.342672][T19108] loop6: detected capacity change from 0 to 4096 [ 593.351032][T19106] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 593.361985][T19108] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 593.384447][T19106] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 593.395974][T19108] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 593.440488][ T8450] usb 5-1: Using ep0 maxpacket: 8 [ 593.448746][ T8450] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 593.456575][T19108] ntfs: volume version 3.1. [ 593.491404][ T8450] usb 5-1: config 0 interface 0 has no altsetting 0 [ 593.498200][T19117] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 593.538372][ T8450] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 593.567976][ T8450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.596473][ T8450] usb 5-1: Product: syz [ 593.609454][ T8450] usb 5-1: Manufacturer: syz [ 593.626834][ T8450] usb 5-1: SerialNumber: syz [ 593.648584][ T8450] usb 5-1: config 0 descriptor?? [ 593.669992][ T8450] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 593.734048][T19123] netlink: 'syz.6.6195': attribute type 2 has an invalid length. [ 593.740389][ T8667] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 593.762183][T19123] netlink: 'syz.6.6195': attribute type 1 has an invalid length. [ 593.817964][T19125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6197'. [ 593.887852][ T8450] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 593.906794][ T8450] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 593.946029][ T8667] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 593.966911][ T8667] usb 6-1: config 0 has no interface number 0 [ 593.989477][ T8667] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 594.015448][ T8667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.024123][ T8667] usb 6-1: Product: syz [ 594.040426][ T8667] usb 6-1: Manufacturer: syz [ 594.045236][ T8667] usb 6-1: SerialNumber: syz [ 594.056210][ T8667] usb 6-1: config 0 descriptor?? [ 594.127733][ T8450] usb 5-1: USB disconnect, device number 65 [ 594.246092][T19139] netlink: 'syz.0.6204': attribute type 10 has an invalid length. [ 594.264245][T19139] team0: Device ipvlan1 failed to register rx_handler [ 594.275322][T19141] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6205'. [ 594.311076][ T8667] usb 6-1: USB disconnect, device number 17 [ 594.329271][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.360517][T19141] netlink: 'syz.2.6205': attribute type 3 has an invalid length. [ 594.705830][T19143] loop6: detected capacity change from 0 to 32768 [ 594.799969][T19143] syz.6.6206: attempt to access beyond end of device [ 594.799969][T19143] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 594.849464][T19145] loop0: detected capacity change from 0 to 32768 [ 594.862913][T19143] metapage_write_end_io: I/O error [ 594.931381][T19143] blkno = 8ed2c, nblocks = 1 [ 594.936030][T19143] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 594.936030][T19143] [ 594.967068][T19145] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 594.967068][T19145] [ 595.001464][T19143] ERROR: (device loop6): remounting filesystem as read-only [ 595.042961][T19143] ERROR: (device loop6): duplicateIXtree: [ 595.042961][T19143] [ 595.052086][T19145] ERROR: (device loop0): remounting filesystem as read-only [ 595.080670][T19145] ialloc: diAlloc returned -5! [ 595.233972][T19163] loop5: detected capacity change from 0 to 1024 [ 595.260033][ T106] blkno = 8ed2c, nblocks = 4 [ 595.278380][ T106] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 595.278380][ T106] [ 595.330184][T17169] syz-executor: attempt to access beyond end of device [ 595.330184][T17169] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 595.370346][T17169] metapage_write_end_io: I/O error [ 595.375886][T17169] JFS: metapage_get_blocks failed [ 595.392164][T17169] JFS: metapage_get_blocks failed [ 595.397429][T17169] JFS: metapage_get_blocks failed [ 595.423250][T17169] JFS: metapage_get_blocks failed [ 595.539697][T19173] xt_TCPMSS: Only works on TCP SYN packets [ 595.613269][ T8667] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 595.646797][T19171] loop5: detected capacity change from 0 to 4096 [ 595.674365][T19171] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 595.733993][T19177] loop0: detected capacity change from 0 to 512 [ 595.801906][T19171] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 595.811218][ T8667] usb 5-1: Using ep0 maxpacket: 8 [ 595.823413][ T8667] usb 5-1: config 0 interface 0 has no altsetting 0 [ 595.835732][T19171] ntfs3: loop5: ino=1b, "file0" attr_set_size [ 595.853028][ T8667] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 595.877425][T19177] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.6224: Failed to acquire dquot type 1 [ 595.892059][T11526] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 595.909235][T11526] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 595.912740][ T8667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.930140][T19177] EXT4-fs (loop0): 1 truncate cleaned up [ 595.966801][T19177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 595.978215][ T8667] usb 5-1: Product: syz [ 595.998506][ T8667] usb 5-1: Manufacturer: syz [ 596.007096][T19177] ext4 filesystem being mounted at /1228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.021080][ T8667] usb 5-1: SerialNumber: syz [ 596.044665][ T8667] usb 5-1: config 0 descriptor?? [ 596.054110][ T8667] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 596.083762][T19177] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.6224: Failed to acquire dquot type 1 [ 596.097712][T19188] loop6: detected capacity change from 0 to 128 [ 596.216726][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 596.260458][ T8667] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 596.290029][ T8667] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 596.300470][ T7416] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 596.413105][T19192] loop5: detected capacity change from 0 to 4096 [ 596.442943][T19192] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 596.502096][ T8450] usb 5-1: USB disconnect, device number 66 [ 596.510737][ T7416] usb 3-1: Using ep0 maxpacket: 32 [ 596.529825][ T7416] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 596.572511][ T7416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.589527][ T7416] usb 3-1: Product: syz [ 596.594103][T19192] ntfs3: loop5: failed to convert "c46c" to cp850 [ 596.610734][ T7416] usb 3-1: Manufacturer: syz [ 596.640357][ T7416] usb 3-1: SerialNumber: syz [ 596.646742][ T7416] usb 3-1: config 0 descriptor?? [ 596.674914][ T7416] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 597.081358][ T7416] gspca_topro: reg_w err -71 [ 597.120346][ T7416] gspca_topro: Sensor soi763a [ 597.136263][ T7416] usb 3-1: USB disconnect, device number 71 [ 597.275339][T19220] loop6: detected capacity change from 0 to 4096 [ 597.288484][T19220] __ntfs_warning: 28 callbacks suppressed [ 597.288500][T19220] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 597.351265][T19220] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 597.393705][T19220] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 597.426207][T19220] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 597.460709][T19220] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 597.523851][T19220] ntfs: volume version 3.1. [ 597.544375][T19220] ntfs: (device loop6): load_and_init_quota(): Failed to find inode number for $Quota. [ 597.585636][T19220] ntfs: (device loop6): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 597.614256][T19220] ntfs: (device loop6): ntfs_nlstoucs(): Name using character set cp932 contains characters that cannot be converted to Unicode. [ 597.631033][T19220] ntfs: (device loop6): ntfs_lookup(): Failed to convert name to Unicode. [ 597.716629][T19233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 598.140819][T19255] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.258818][T19260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6261'. [ 598.302487][ T8450] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 598.520440][ T8450] usb 7-1: Using ep0 maxpacket: 32 [ 598.527282][ T8450] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 598.551653][ T8450] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.566426][ T8450] usb 7-1: config 0 descriptor?? [ 598.574605][ T8450] gspca_main: sunplus-2.14.0 probing 041e:400b [ 598.598840][T19269] set_capacity_and_notify: 1 callbacks suppressed [ 598.598858][T19269] loop0: detected capacity change from 0 to 4096 [ 598.645435][T19269] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 598.799316][T19269] ntfs3: loop0: failed to convert "c46c" to cp850 [ 598.931277][T19283] loop5: detected capacity change from 0 to 2048 [ 598.981411][ T8450] gspca_sunplus: reg_w_riv err -71 [ 598.988210][ T8450] sunplus: probe of 7-1:0.0 failed with error -71 [ 598.988349][T19283] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 599.025783][ T8450] usb 7-1: USB disconnect, device number 4 [ 599.084743][T19285] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 599.370441][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 599.403927][T19296] binder: 19295:19296 ioctl c018620b 0 returned -14 [ 600.216173][T19338] loop0: detected capacity change from 0 to 1024 [ 600.452596][T19346] loop2: detected capacity change from 0 to 1764 [ 600.516254][ T4382] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 600.528296][T19346] CIFS mount error: No usable UNC path provided in device string! [ 600.528296][T19346] [ 600.570986][T19346] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 600.603125][T19357] loop5: detected capacity change from 0 to 256 [ 600.707852][T19357] FAT-fs (loop5): Directory bread(block 64) failed [ 600.728253][T19357] FAT-fs (loop5): Directory bread(block 65) failed [ 600.756660][T19357] FAT-fs (loop5): Directory bread(block 66) failed [ 600.781584][T19357] FAT-fs (loop5): Directory bread(block 67) failed [ 600.802473][T19357] FAT-fs (loop5): Directory bread(block 68) failed [ 600.818117][T19357] FAT-fs (loop5): Directory bread(block 69) failed [ 600.838712][T19357] FAT-fs (loop5): Directory bread(block 70) failed [ 600.856110][T19357] FAT-fs (loop5): Directory bread(block 71) failed [ 600.874940][T19357] FAT-fs (loop5): Directory bread(block 72) failed [ 600.889566][T19357] FAT-fs (loop5): Directory bread(block 73) failed [ 600.938709][T19368] loop4: detected capacity change from 0 to 4096 [ 600.960819][T19368] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 601.040623][ T8450] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 601.076186][T19368] ntfs3: loop4: failed to convert "c46c" to cp850 [ 601.270617][ T8450] usb 3-1: Using ep0 maxpacket: 8 [ 601.292623][ T8450] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 601.321666][ T8450] usb 3-1: config 179 has no interface number 0 [ 601.350417][ T8450] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 601.376171][ T8450] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 601.422750][ T8450] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 601.455003][ T8450] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 601.481726][T19386] loop4: detected capacity change from 0 to 4096 [ 601.492352][ T8450] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 601.509400][T19386] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 601.516791][ T8450] usb 3-1: config 179 interface 65 has no altsetting 0 [ 601.543582][ T8450] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 601.574754][ T8450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.619270][ T8450] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input32 [ 601.680420][ T7416] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 601.698081][T19386] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 601.748681][T19386] ntfs3: loop4: ino=1b, "file0" attr_set_size [ 601.836393][ T8450] usb 3-1: USB disconnect, device number 72 [ 601.842482][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 601.858793][ T8450] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 601.885543][ T7416] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 601.888341][ T4268] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 601.903512][ T4268] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 601.908058][ T7416] usb 1-1: config 1 has no interface number 0 [ 601.946112][ T7416] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 601.990372][ T7416] usb 1-1: config 1 interface 105 has no altsetting 0 [ 602.020664][ T7416] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 602.029753][ T7416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.069973][ T7416] usb 1-1: Product: syz [ 602.074522][ T7416] usb 1-1: Manufacturer: syz [ 602.079150][ T7416] usb 1-1: SerialNumber: syz [ 602.320660][ T7416] aqc111: probe of 1-1:1.105 failed with error -22 [ 602.435268][T19416] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6340'. [ 602.534789][ T7416] usb 1-1: USB disconnect, device number 74 [ 602.845175][T19438] netlink: 'syz.2.6339': attribute type 1 has an invalid length. [ 602.865614][T19438] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.6339'. [ 602.953498][T19443] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6343'. [ 603.503694][T19473] loop5: detected capacity change from 0 to 512 [ 603.517180][T19470] loop2: detected capacity change from 0 to 2048 [ 603.564997][T19470] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 603.577663][T19473] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 603.612245][T19479] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 603.675578][T19473] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 603.688139][T19471] loop6: detected capacity change from 0 to 4096 [ 603.736052][T19473] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6358: bg 0: block 248: padding at end of block bitmap is not set [ 603.754970][T19471] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 603.802750][T19471] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 603.825057][T19473] Quota error (device loop5): write_blk: dquota write failed [ 603.844179][T19489] netlink: 'syz.4.6362': attribute type 8 has an invalid length. [ 603.859608][T19473] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 603.885528][T19473] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.6358: Failed to acquire dquot type 1 [ 603.898267][T19488] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6361'. [ 603.931171][T19488] 0ŞXšŚŔ: renamed from caif0 [ 603.933553][T19473] EXT4-fs (loop5): 1 truncate cleaned up [ 603.958253][T19488] A link change request failed with some changes committed already. Interface 60ŞXšŚŔ may have been left with an inconsistent configuration, please check. [ 603.965998][T19473] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 603.986665][ T9] ntfs3: loop6: ntfs3_write_inode r=3 failed, -22. [ 604.011673][T17169] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 604.018020][T17169] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 604.030496][T17169] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 604.047112][ T6427] ntfs3: loop6: ntfs3_write_inode r=3 failed, -22. [ 604.063605][T17169] ntfs3: loop6: ntfs_evict_inode r=3 failed, -22. [ 604.322033][T11526] EXT4-fs (loop5): unmounting filesystem. [ 604.331039][ T9] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 604.340096][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 1 [ 604.504617][T19511] loop5: detected capacity change from 0 to 64 [ 605.910647][T19565] loop2: detected capacity change from 0 to 4096 [ 606.257825][T19553] loop0: detected capacity change from 0 to 32768 [ 606.364802][T19553] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 606.375173][T19594] netlink: 'syz.2.6410': attribute type 4 has an invalid length. [ 606.383936][T19553] XFS (loop0): Mounting V5 Filesystem [ 606.390479][T19594] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6410'. [ 606.505535][T19553] XFS (loop0): Ending clean mount [ 606.560366][ T8450] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 606.609693][ T4270] XFS (loop0): Unmounting Filesystem [ 606.615403][ T4632] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 606.800420][ T8450] usb 7-1: Using ep0 maxpacket: 32 [ 606.813788][ T8450] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 606.830340][ T4632] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 606.844723][ T4632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.845584][ T8450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.865488][ T4632] usb 5-1: config 0 descriptor?? [ 606.881709][ T8450] usb 7-1: Product: syz [ 606.886009][ T8450] usb 7-1: Manufacturer: syz [ 606.890914][ T8450] usb 7-1: SerialNumber: syz [ 606.903782][ T27] audit: type=1326 audit(1769250690.079:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19612 comm="syz.2.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5b39acb9 code=0x7ffc0000 [ 606.940881][ T8450] usb 7-1: config 0 descriptor?? [ 607.022455][ T27] audit: type=1326 audit(1769250690.079:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19612 comm="syz.2.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5b39acb9 code=0x7ffc0000 [ 607.105678][ T27] audit: type=1326 audit(1769250690.079:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19612 comm="syz.2.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f1b5b39acb9 code=0x7ffc0000 [ 607.146324][ T27] audit: type=1326 audit(1769250690.079:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19612 comm="syz.2.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5b39acb9 code=0x7ffc0000 [ 607.153103][ T8450] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device: [ 607.186816][ T27] audit: type=1326 audit(1769250690.079:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19612 comm="syz.2.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5b39acb9 code=0x7ffc0000 [ 607.223915][ T8450] 00 00 00 00 00 00 00 00 [ 607.234084][ T8450] snd-usb-6fire: probe of 7-1:0.0 failed with error -5 [ 607.286573][ T4632] [drm:udl_init] *ERROR* Selecting channel failed [ 607.319829][ T4632] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 607.360328][ T4632] [drm] Initialized udl on minor 2 [ 607.366228][ T4632] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 607.384135][ T4632] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 607.414368][ T4632] usb 5-1: USB disconnect, device number 67 [ 607.420817][ T7416] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 607.429092][ T7416] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 607.491139][ T7416] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 607.526930][ T7416] usb 7-1: USB disconnect, device number 5 [ 607.649886][ T27] audit: type=1326 audit(1769250690.819:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19633 comm="syz.5.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x7ffc0000 [ 607.683027][ T27] audit: type=1326 audit(1769250690.819:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19633 comm="syz.5.6429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x7ffc0000 [ 608.237732][T19654] befs: (nbd5): No write support. Marking filesystem read-only [ 608.264760][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 608.264785][ T52] block nbd5: Attempted send on invalid socket [ 608.276845][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.294276][T19654] befs: (nbd5): unable to read superblock [ 608.429814][T19636] loop2: detected capacity change from 0 to 32768 [ 608.581696][T19636] XFS (loop2): Mounting V5 Filesystem [ 608.668845][T19636] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 608.709482][T19636] XFS (loop2): Starting recovery (logdev: internal) [ 608.805288][T19636] XFS (loop2): Ending recovery (logdev: internal) [ 608.812525][T19688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6449'. [ 608.871207][T19684] loop0: detected capacity change from 0 to 2048 [ 608.924340][T19636] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 608.968745][T19693] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 609.083128][ T4276] XFS (loop2): Unmounting Filesystem [ 609.146704][T19693] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 609.190318][T19693] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 609.247050][T19693] Remounting filesystem read-only [ 609.256638][T19701] netlink: 'syz.6.6459': attribute type 27 has an invalid length. [ 609.265308][ T4270] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 609.322611][T19701] netlink: 'syz.6.6459': attribute type 3 has an invalid length. [ 609.331102][T19701] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6459'. [ 609.899337][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6472'. [ 610.104935][T19737] netlink: 'syz.5.6474': attribute type 1 has an invalid length. [ 610.150387][T19737] netlink: 216 bytes leftover after parsing attributes in process `syz.5.6474'. [ 610.175248][T19737] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6474'. [ 610.185121][T19744] delete_channel: no stack [ 610.284324][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6480'. [ 610.377312][T19755] loop5: detected capacity change from 0 to 512 [ 610.477873][T19755] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.6484: bg 0: block 248: padding at end of block bitmap is not set [ 610.502838][T19764] loop2: detected capacity change from 0 to 256 [ 610.534046][T19761] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6485'. [ 610.569439][T19755] __quota_error: 3 callbacks suppressed [ 610.569456][T19755] Quota error (device loop5): write_blk: dquota write failed [ 610.583368][T19755] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 610.598170][T19755] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.6484: Failed to acquire dquot type 1 [ 610.612755][T19764] FAT-fs (loop2): Directory bread(block 64) failed [ 610.625883][T19755] EXT4-fs (loop5): 1 truncate cleaned up [ 610.647084][T19755] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 610.674012][T19764] FAT-fs (loop2): Directory bread(block 65) failed [ 610.681698][T19755] ext4 filesystem being mounted at /691/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.705793][T19764] FAT-fs (loop2): Directory bread(block 66) failed [ 610.742589][T19764] FAT-fs (loop2): Directory bread(block 67) failed [ 610.749373][T19764] FAT-fs (loop2): Directory bread(block 68) failed [ 610.787014][T19764] FAT-fs (loop2): Directory bread(block 69) failed [ 610.804319][T19764] FAT-fs (loop2): Directory bread(block 70) failed [ 610.813366][T19755] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 610.822586][T19764] FAT-fs (loop2): Directory bread(block 71) failed [ 610.842863][T19764] FAT-fs (loop2): Directory bread(block 72) failed [ 610.867060][T19755] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 610.884562][T19764] FAT-fs (loop2): Directory bread(block 73) failed [ 610.910204][T19755] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.6484: Failed to acquire dquot type 1 [ 610.978043][T19777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 611.073370][T11526] EXT4-fs (loop5): unmounting filesystem. [ 611.090788][ T9] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 611.099812][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 1 [ 611.379417][T19792] misc userio: The device must be registered before sending interrupts [ 612.061972][T19831] netlink: 'syz.6.6520': attribute type 2 has an invalid length. [ 612.201105][T19838] netlink: 'syz.2.6524': attribute type 27 has an invalid length. [ 612.219926][T19838] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 612.755868][T19832] loop0: detected capacity change from 0 to 32768 [ 612.784931][T19832] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 612.823435][T19866] xt_TCPMSS: Only works on TCP SYN packets [ 612.827110][T19832] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 612.977620][T19868] loop5: detected capacity change from 0 to 2044 [ 613.065737][T19868] Alternate GPT is invalid, using primary GPT. [ 613.095698][T19868] loop5: p1 p2 p3 [ 613.101121][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 613.314892][T19876] tmpfs: Bad value for 'mpol' [ 613.428646][ T4813] udevd[4813]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 613.443716][ T4487] udevd[4487]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 613.495944][ T7131] udevd[7131]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 613.642668][T19860] loop2: detected capacity change from 0 to 32768 [ 613.739421][T19860] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 613.769509][T19860] (syz.2.6535,19860,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=280, name_len=10 [ 613.789592][T19860] (syz.2.6535,19860,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 613.799250][T19860] (syz.2.6535,19860,0):ocfs2_mknod:298 ERROR: status = -2 [ 613.806819][T19860] (syz.2.6535,19860,0):ocfs2_mknod:502 ERROR: status = -2 [ 613.814666][T19860] (syz.2.6535,19860,0):ocfs2_create:676 ERROR: status = -2 [ 613.879029][ T4276] ocfs2: Unmounting device (7,2) on (node local) [ 614.141640][ T8450] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 614.217162][T19914] loop6: detected capacity change from 0 to 2048 [ 614.312545][T19918] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 614.333862][ T8450] usb 6-1: config index 0 descriptor too short (expected 897, got 27) [ 614.342559][ T8450] usb 6-1: config 2 has an invalid interface number: 1 but max is -1 [ 614.356775][ T8450] usb 6-1: config 2 has an invalid interface number: 1 but max is -1 [ 614.380616][ T8450] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 614.402644][ T8450] usb 6-1: config 2 has no interface number 0 [ 614.424524][ T8450] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 614.452866][ T8450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.492404][ T8450] usb 6-1: Product: syz [ 614.496621][ T8450] usb 6-1: Manufacturer: syz [ 614.518872][ T8450] usb 6-1: SerialNumber: syz [ 614.550662][T19918] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 614.564655][T19918] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 614.597700][T19918] Remounting filesystem read-only [ 614.604079][T17169] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 614.634859][T19929] dlm: non-version read from control device 36 [ 614.783568][ T8450] cdc_ncm 6-1:2.1: CDC Union missing and no IAD found [ 614.802489][ T8450] cdc_ncm 6-1:2.1: bind() failure [ 614.809281][ T8450] usb 6-1: no audio or video endpoints found [ 614.851781][ T8450] usb 6-1: USB disconnect, device number 18 [ 614.881926][T19939] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6572'. [ 614.921947][T19937] loop0: detected capacity change from 0 to 4096 [ 614.927544][T19943] loop6: detected capacity change from 0 to 128 [ 614.992655][T19943] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 615.018579][T19943] FAT-fs (loop6): Filesystem has been set read-only [ 615.029005][T19937] ntfs3: loop0: ino=5, "/" directory corrupted [ 615.164579][T17169] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 615.370410][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 616.090322][ T4632] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 616.242014][T19991] loop4: detected capacity change from 0 to 8192 [ 616.268840][T19973] loop5: detected capacity change from 0 to 32768 [ 616.292213][ T4632] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 616.322534][ T4632] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.364225][ T4632] usb 7-1: config 0 descriptor?? [ 616.378897][T19973] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.413321][T19973] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 616.422813][T19973] BTRFS info (device loop5): using free space tree [ 616.455816][T19973] BTRFS info (device loop5): enabling ssd optimizations [ 616.661336][T11526] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.794214][ T4632] [drm:udl_init] *ERROR* Selecting channel failed [ 616.826746][ T4632] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 616.857807][ T4632] [drm] Initialized udl on minor 2 [ 616.882038][ T4632] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 616.902808][ T4632] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 616.931782][ T4632] usb 7-1: USB disconnect, device number 6 [ 617.232922][T20039] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 617.249384][ T8799] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 617.280995][ T8799] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 617.289349][ T8799] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 617.540180][T20048] loop6: detected capacity change from 0 to 1764 [ 617.581827][T20053] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 617.614778][T20053] (unnamed net_device) (uninitialized): peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 617.655448][T20048] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 617.708746][T20056] netlink: 71 bytes leftover after parsing attributes in process `syz.2.6621'. [ 617.725663][T20053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.841693][ T8451] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 618.050367][ T8451] usb 1-1: Using ep0 maxpacket: 16 [ 618.060926][ T8451] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 618.092910][ T8451] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 618.098868][T20068] loop4: detected capacity change from 0 to 2048 [ 618.100728][ T8451] usb 1-1: config 0 has no interface number 0 [ 618.150895][ T8451] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 618.162548][ T8451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.186783][ T8451] usb 1-1: Product: syz [ 618.191402][ T8451] usb 1-1: Manufacturer: syz [ 618.196128][ T8451] usb 1-1: SerialNumber: syz [ 618.201318][T20071] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 618.244298][ T8451] usb 1-1: config 0 descriptor?? [ 618.296394][T20073] loop2: detected capacity change from 0 to 1024 [ 618.314984][T20071] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 618.347119][T20071] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 618.363616][ T8450] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 618.382612][T20071] Remounting filesystem read-only [ 618.412360][ T4268] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 618.460794][ T8451] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 618.488634][ T8451] usb 1-1: No valid video chain found. [ 618.528978][ T8451] usb 1-1: USB disconnect, device number 75 [ 618.560566][ T8450] usb 6-1: Using ep0 maxpacket: 16 [ 618.573538][ T8450] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 618.608675][T20081] netlink: 'syz.2.6633': attribute type 21 has an invalid length. [ 618.635933][ T8450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.644245][T20081] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6633'. [ 618.656609][ T8450] usb 6-1: Product: syz [ 618.660924][ T8450] usb 6-1: Manufacturer: syz [ 618.666392][ T8450] usb 6-1: SerialNumber: syz [ 618.681242][T20079] loop4: detected capacity change from 0 to 4096 [ 618.697083][ T8450] usb 6-1: config 0 descriptor?? [ 618.819467][T20079] ntfs3: loop4: ino=5, "/" directory corrupted [ 618.826626][T20079] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 618.917861][ T8450] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 618.938260][ T8450] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 618.986198][T20090] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.126867][ T26] usb 6-1: USB disconnect, device number 19 [ 619.176716][T20101] loop0: detected capacity change from 0 to 64 [ 619.214742][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6642'. [ 619.480777][T20111] xt_limit: Overflow, try lower: 1207959552/384 [ 619.504805][T20107] loop0: detected capacity change from 0 to 4096 [ 619.549073][T20107] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 619.580388][T20107] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 619.613773][T20107] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 619.656281][T20107] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 619.730412][T20107] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 619.780905][T20107] ntfs: volume version 3.1. [ 619.814323][T20107] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 619.850750][T20107] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 619.918165][T20107] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 619.970331][T20107] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 619.995183][T20123] loop4: detected capacity change from 0 to 4096 [ 620.006501][T20107] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 620.109165][T20123] ntfs: volume version 3.1. [ 620.149007][T20135] loop2: detected capacity change from 0 to 16 [ 620.203293][T20135] erofs: (device loop2): mounted with root inode @ nid 36. [ 620.305358][T20135] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 621.076670][T20169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6675'. [ 621.097014][T20137] loop5: detected capacity change from 0 to 32768 [ 621.106380][T20169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6675'. [ 621.150308][ T26] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 621.195727][T20137] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 621.310370][T20137] (syz.5.6660,20137,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=280, name_len=10 [ 621.340889][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 621.350370][ T26] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 621.380599][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.388647][ T26] usb 5-1: Product: syz [ 621.393153][T20137] (syz.5.6660,20137,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 621.406299][T20181] netlink: 'syz.2.6680': attribute type 2 has an invalid length. [ 621.411048][ T26] usb 5-1: Manufacturer: syz [ 621.418891][ T26] usb 5-1: SerialNumber: syz [ 621.426651][T20137] (syz.5.6660,20137,0):ocfs2_mknod:298 ERROR: status = -2 [ 621.441113][ T26] usb 5-1: config 0 descriptor?? [ 621.460349][T20181] netlink: 'syz.2.6680': attribute type 2 has an invalid length. [ 621.503758][T20137] (syz.5.6660,20137,0):ocfs2_mknod:502 ERROR: status = -2 [ 621.521462][T20137] (syz.5.6660,20137,0):ocfs2_create:676 ERROR: status = -2 [ 621.593991][T20185] loop0: detected capacity change from 0 to 2048 [ 621.643553][T20190] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 621.647178][T11526] ocfs2: Unmounting device (7,5) on (node local) [ 621.660361][ T26] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 621.676566][T20185] syz.0.6682: attempt to access beyond end of device [ 621.676566][T20185] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 621.680443][ T26] eb aa 3b 80 9b e4 7a f0 [ 621.724884][ T26] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 621.732326][T20185] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 621.763472][T20185] syz.0.6682: attempt to access beyond end of device [ 621.763472][T20185] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 621.809899][T20185] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 621.851725][T20185] NILFS (loop0): error -5 truncating bmap (ino=16) [ 621.959206][ T26] usb 5-1: USB disconnect, device number 68 [ 622.253559][T20212] libceph: resolve '0' (ret=-3): failed [ 622.447172][T20220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6699'. [ 622.451654][T20222] loop5: detected capacity change from 0 to 256 [ 622.482962][T20220] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 622.499590][T20222] exfat: Deprecated parameter 'utf8' [ 622.555075][T20222] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 623.258800][T20259] loop6: detected capacity change from 0 to 1764 [ 623.742248][T20280] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.889229][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6734'. [ 623.951944][T20293] delete_channel: no stack [ 624.219438][T20309] loop0: detected capacity change from 0 to 64 [ 624.276704][T20309] Trying to free block not in datazone [ 624.316666][T20309] Trying to free block not in datazone [ 624.333662][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.339999][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.356470][T20309] Trying to free block not in datazone [ 624.377823][T20315] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 625.419401][T20368] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 625.476011][T20368] (unnamed net_device) (uninitialized): peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 625.484462][T20370] loop0: detected capacity change from 0 to 256 [ 625.559377][T20375] loop6: detected capacity change from 0 to 256 [ 625.577499][T20375] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 625.588668][T20375] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 625.605199][T20368] 8021q: adding VLAN 0 to HW filter on device bond4 [ 625.629940][T20375] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 625.649383][T20370] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dd1dd, utbl_chksum : 0xe619d30d) [ 625.732995][T20370] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00) [ 625.750368][T20370] exFAT-fs (loop0): Filesystem has been set read-only [ 625.767552][T20370] exFAT-fs (loop0): failed to initialize root inode [ 625.790625][T20375] loop6: Can't mount, would change RO state [ 625.824142][T20379] loop5: detected capacity change from 0 to 4096 [ 625.949581][T20379] ntfs: volume version 3.1. [ 626.199799][T20389] netlink: 'syz.2.6781': attribute type 21 has an invalid length. [ 626.256708][T20389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6781'. [ 626.513098][T20407] loop2: detected capacity change from 0 to 2048 [ 626.561481][T20407] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 626.644584][T20407] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.6790: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 626.817249][T20424] overlayfs: missing 'workdir' [ 626.869800][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 627.213799][T20442] loop4: detected capacity change from 0 to 128 [ 627.249953][T20442] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 627.288022][T20442] sysv_free_block: flc_count > flc_size [ 627.320446][T20442] sysv_free_block: flc_count > flc_size [ 627.326056][T20442] sysv_free_block: flc_count > flc_size [ 627.353564][T20442] sysv_free_block: flc_count > flc_size [ 627.359184][T20442] sysv_free_block: flc_count > flc_size [ 627.379467][T20442] sysv_free_block: flc_count > flc_size [ 627.402868][T20442] sysv_free_block: flc_count > flc_size [ 627.419987][T20442] sysv_free_block: flc_count > flc_size [ 627.430683][T20453] loop2: detected capacity change from 0 to 256 [ 627.447273][T20442] sysv_free_block: flc_count > flc_size [ 627.463477][T20442] sysv_free_block: flc_count > flc_size [ 627.513522][T20442] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 627.531913][T20453] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 627.864116][T20469] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 628.151158][T20482] loop5: detected capacity change from 0 to 2048 [ 628.192692][T20482] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 628.248916][T20486] netlink: 'syz.0.6827': attribute type 32 has an invalid length. [ 628.263239][T20482] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.453636][T20495] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 628.580000][T20502] netlink: 'syz.6.6835': attribute type 12 has an invalid length. [ 629.237167][T20531] Error parsing options; rc = [-22] [ 629.304162][T20500] loop5: detected capacity change from 0 to 32768 [ 629.433863][T20500] XFS (loop5): Mounting V5 Filesystem [ 629.461563][T20545] netlink: 'syz.4.6853': attribute type 39 has an invalid length. [ 629.649753][T20544] loop6: detected capacity change from 0 to 8192 [ 629.692887][T20544] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 629.741263][T20500] XFS (loop5): Ending clean mount [ 629.756249][T20544] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 629.858841][T20544] FAT-fs (loop6): Filesystem has been set read-only [ 629.934948][T11526] XFS (loop5): Unmounting Filesystem [ 630.278238][T20571] loop4: detected capacity change from 0 to 256 [ 630.379245][T20571] FAT-fs (loop4): Directory bread(block 64) failed [ 630.430327][T20571] FAT-fs (loop4): Directory bread(block 65) failed [ 630.437004][T20571] FAT-fs (loop4): Directory bread(block 66) failed [ 630.478368][T20571] FAT-fs (loop4): Directory bread(block 67) failed [ 630.506360][T20571] FAT-fs (loop4): Directory bread(block 68) failed [ 630.536660][T20571] FAT-fs (loop4): Directory bread(block 69) failed [ 630.560482][T20571] FAT-fs (loop4): Directory bread(block 70) failed [ 630.592930][T20571] FAT-fs (loop4): Directory bread(block 71) failed [ 630.599604][T20571] FAT-fs (loop4): Directory bread(block 72) failed [ 630.676307][T20571] FAT-fs (loop4): Directory bread(block 73) failed [ 630.684537][T20583] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 631.061477][T20596] loop4: detected capacity change from 0 to 512 [ 631.086006][T20596] EXT4-fs: Ignoring removed i_version option [ 631.112834][T20596] EXT4-fs: Ignoring removed mblk_io_submit option [ 631.188509][T20596] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.6876: inode #13: comm syz.4.6876: iget: illegal inode # [ 631.281283][T20596] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6876: couldn't read orphan inode 13 (err -117) [ 631.393873][T20596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 631.543848][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 631.734954][T20630] netlink: 'syz.6.6892': attribute type 21 has an invalid length. [ 631.780582][T20630] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6892'. [ 631.834710][T20630] netlink: 'syz.6.6892': attribute type 1 has an invalid length. [ 631.849354][T20636] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 631.879542][T20640] loop4: detected capacity change from 0 to 256 [ 631.934783][T20640] FAT-fs (loop4): Directory bread(block 64) failed [ 631.983261][T20640] FAT-fs (loop4): Directory bread(block 65) failed [ 631.989945][T20640] FAT-fs (loop4): Directory bread(block 66) failed [ 632.050370][T20640] FAT-fs (loop4): Directory bread(block 67) failed [ 632.054278][T20644] loop2: detected capacity change from 0 to 256 [ 632.065092][T20640] FAT-fs (loop4): Directory bread(block 68) failed [ 632.084107][T20640] FAT-fs (loop4): Directory bread(block 69) failed [ 632.130456][T20640] FAT-fs (loop4): Directory bread(block 70) failed [ 632.136938][T20644] exfat: Deprecated parameter 'utf8' [ 632.150483][T20640] FAT-fs (loop4): Directory bread(block 71) failed [ 632.157341][T20640] FAT-fs (loop4): Directory bread(block 72) failed [ 632.195932][T20640] FAT-fs (loop4): Directory bread(block 73) failed [ 632.214963][T20644] exfat: Deprecated parameter 'namecase' [ 632.257780][T20644] exfat: Deprecated parameter 'namecase' [ 632.300479][T20644] exfat: Deprecated parameter 'utf8' [ 632.335971][T20644] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x98e76a8c, utbl_chksum : 0xe619d30d) [ 632.790369][ T4399] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 633.010640][ T4399] usb 1-1: Using ep0 maxpacket: 32 [ 633.023540][ T4399] usb 1-1: unable to get BOS descriptor or descriptor too short [ 633.043550][ T4399] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 633.071349][ T4399] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 633.091917][ T4399] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 633.119486][ T4399] usb 1-1: config 128 has no interface number 0 [ 633.151399][ T4399] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 633.182348][ T4399] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.220396][ T4399] usb 1-1: config 128 interface 127 has no altsetting 0 [ 633.243988][ T4399] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 633.276943][ T4399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.300504][ T4399] usb 1-1: Product: syz [ 633.304721][ T4399] usb 1-1: Manufacturer: syz [ 633.322741][ T4399] usb 1-1: SerialNumber: syz [ 633.443245][T20699] netlink: 'syz.2.6923': attribute type 10 has an invalid length. [ 633.480555][T20699] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 633.544235][T20701] Lens A: ================= START STATUS ================= [ 633.575388][T20698] loop5: detected capacity change from 0 to 4096 [ 633.586802][T20701] Lens A: Focus, Absolute: 0 [ 633.594524][ T4399] usb 1-1: USB disconnect, device number 76 [ 633.617121][T20698] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 633.643647][T20701] Lens A: ================== END STATUS ================== [ 633.772529][T20707] loop2: detected capacity change from 0 to 64 [ 633.853244][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.050766][T20754] loop5: detected capacity change from 0 to 4096 [ 635.086621][T20754] __ntfs_error: 10 callbacks suppressed [ 635.086639][T20754] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 635.149906][T20754] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 635.220007][T20754] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 635.255198][T20754] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 635.306501][T20754] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 635.338675][T20754] ntfs: volume version 3.1. [ 635.372470][T20754] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 635.410636][T20754] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 635.454631][T20754] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 635.507934][T20754] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 635.557717][T20754] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 635.776809][T20783] netlink: 'syz.6.6968': attribute type 7 has an invalid length. [ 636.345388][T20813] loop5: detected capacity change from 0 to 256 [ 636.394607][T20813] exfat: Deprecated parameter 'utf8' [ 636.402869][T20813] exfat: Deprecated parameter 'namecase' [ 636.427656][T20813] exfat: Deprecated parameter 'namecase' [ 636.447695][T20813] exfat: Deprecated parameter 'utf8' [ 636.481947][T20813] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 636.506662][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6983'. [ 636.524906][T20819] netlink: 'syz.2.6982': attribute type 29 has an invalid length. [ 636.585757][T20819] netlink: 'syz.2.6982': attribute type 29 has an invalid length. [ 636.605379][T20815] loop4: detected capacity change from 0 to 4096 [ 636.655040][T20815] ntfs: volume version 3.1. [ 636.783897][T20823] loop5: detected capacity change from 0 to 128 [ 636.822276][T20823] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 637.015605][T20797] loop6: detected capacity change from 0 to 32768 [ 637.063627][T20797] (syz.6.6972,20797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 637.160824][T20797] (syz.6.6972,20797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 637.164967][T11526] sysv_free_block: flc_count > flc_size [ 637.232417][T11526] sysv_free_block: flc_count > flc_size [ 637.247943][T20797] JBD2: Ignoring recovery information on journal [ 637.273929][T11526] sysv_free_block: flc_count > flc_size [ 637.279614][T11526] sysv_free_block: flc_count > flc_size [ 637.334549][T11526] sysv_free_block: flc_count > flc_size [ 637.364524][T11526] sysv_free_block: flc_count > flc_size [ 637.374051][T20797] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 637.403644][T20797] ocfs2: Unmounting device (7,6) on (node local) [ 637.431918][T11526] sysv_free_block: flc_count > flc_size [ 637.437515][T11526] sysv_free_block: flc_count > flc_size [ 637.458054][T11526] sysv_free_block: flc_count > flc_size [ 637.467137][T11526] sysv_free_block: flc_count > flc_size [ 637.493230][T11526] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 637.738485][T20845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6995'. [ 637.756540][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6997'. [ 637.839649][T20845] netlink: set zone limit has 4 unknown bytes [ 637.952723][T20851] delete_channel: no stack [ 638.554009][T20880] loop5: detected capacity change from 0 to 164 [ 638.878194][T20895] loop4: detected capacity change from 0 to 128 [ 638.909040][T20895] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 639.027554][T20898] [U] [ 639.030312][T20898] [U] [ 639.033029][T20898] [U] [ 639.035828][T20898] [U] [ 639.081603][T20898] [U] [ 639.084356][T20898] [U] [ 639.087064][T20898] [U] [ 639.089770][T20898] [U] [ 639.169833][T20898] [U] [ 639.172630][T20898] [U] [ 639.175348][T20898] [U] [ 639.196877][ T4268] sysv_free_block: flc_count > flc_size [ 639.203527][ T4268] sysv_free_block: flc_count > flc_size [ 639.215981][T20896] [U] [ 639.220538][ T4268] sysv_free_block: flc_count > flc_size [ 639.226109][ T4268] sysv_free_block: flc_count > flc_size [ 639.250408][ T4268] sysv_free_block: flc_count > flc_size [ 639.256008][ T4268] sysv_free_block: flc_count > flc_size [ 639.306139][ T4268] sysv_free_block: flc_count > flc_size [ 639.312985][ T4268] sysv_free_block: flc_count > flc_size [ 639.320635][ T4268] sysv_free_block: flc_count > flc_size [ 639.360377][ T4268] sysv_free_block: flc_count > flc_size [ 639.367777][ T4268] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 639.551682][T20914] loop5: detected capacity change from 0 to 1764 [ 639.637529][T20914] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 639.782599][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7033'. [ 639.828220][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7033'. [ 639.881996][T20929] misc userio: No port type given on /dev/userio [ 640.375127][T20951] loop4: detected capacity change from 0 to 16 [ 640.423243][T20951] erofs: (device loop4): mounted with root inode @ nid 36. [ 640.448222][T20951] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 640.700517][ T26] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 640.892067][ T26] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 640.920370][ T26] usb 6-1: config 0 has no interface number 0 [ 640.926610][ T26] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 640.980047][ T26] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 640.986429][T20976] loop6: detected capacity change from 0 to 1764 [ 641.012411][ T26] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 641.040078][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.075241][T20976] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 641.091213][ T26] usb 6-1: config 0 descriptor?? [ 641.131514][ T26] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input33 [ 641.350143][ T26] usb 6-1: USB disconnect, device number 20 [ 641.954186][T21016] loop4: detected capacity change from 0 to 256 [ 642.023781][T21022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7081'. [ 642.228031][T21028] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7085'. [ 642.434206][T21040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7090'. [ 642.464014][T21040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7090'. [ 642.659735][T21048] loop6: detected capacity change from 0 to 2048 [ 642.684442][T21050] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (253) [ 642.720276][T21051] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 642.736465][T21048] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 642.792328][T21048] Remounting filesystem read-only [ 643.018888][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7100'. [ 643.066765][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 643.066780][ T27] audit: type=1326 audit(1769250726.239:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21062 comm="syz.0.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fd79acb9 code=0x7ffc0000 [ 643.095369][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.205289][ T27] audit: type=1326 audit(1769250726.279:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21062 comm="syz.0.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f74fd79acb9 code=0x7ffc0000 [ 643.321311][ T27] audit: type=1326 audit(1769250726.279:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21062 comm="syz.0.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fd79acb9 code=0x7ffc0000 [ 643.417419][ T27] audit: type=1326 audit(1769250726.279:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21062 comm="syz.0.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fd79acb9 code=0x7ffc0000 [ 643.720258][T21088] ieee802154 phy0 wpan0: encryption failed: -22 [ 644.150433][ T8451] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 644.235373][T21112] loop0: detected capacity change from 0 to 4096 [ 644.258938][T21112] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 644.340425][ T8451] usb 6-1: Using ep0 maxpacket: 32 [ 644.348283][ T8451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.383412][T21112] ntfs3: loop0: failed to convert "c46c" to maccenteuro [ 644.403249][ T8451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.433756][ T8451] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 644.466556][ T8451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.492227][ T8451] usb 6-1: config 0 descriptor?? [ 644.519543][ T8451] hub 6-1:0.0: USB hub found [ 644.724975][ T8451] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 644.942433][ T8451] usbhid 6-1:0.0: can't add hid device: -71 [ 644.949037][ T8451] usbhid: probe of 6-1:0.0 failed with error -71 [ 644.974065][T21120] loop4: detected capacity change from 0 to 32768 [ 644.991605][ T8451] usb 6-1: USB disconnect, device number 21 [ 645.016650][T21120] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.7127 (21120) [ 645.165921][T21120] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 645.184468][T21120] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 645.199807][T21120] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 645.212324][T21120] BTRFS info (device loop4): use lzo compression, level 0 [ 645.221864][T21120] BTRFS info (device loop4): max_inline at 0 [ 645.260296][T21120] BTRFS info (device loop4): using free space tree [ 645.450460][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 645.685399][T21120] BTRFS info (device loop4): enabling ssd optimizations [ 645.769846][T21120] BTRFS error (device loop4: state M): unrecognized mount option '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 645.933851][ T4268] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 646.258682][ T4487] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop4 scanned by udevd (4487) [ 646.477283][T21196] loop0: detected capacity change from 0 to 128 [ 646.491348][T21198] xt_ecn: cannot match TCP bits for non-tcp packets [ 646.576402][T21196] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 646.618143][T21196] FAT-fs (loop0): Filesystem has been set read-only [ 646.942372][T21184] loop6: detected capacity change from 0 to 40427 [ 646.975000][T21213] netlink: 'syz.4.7161': attribute type 1 has an invalid length. [ 646.984674][T21184] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 647.007541][T21184] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 647.016341][T21213] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.7161'. [ 647.095095][T21184] F2FS-fs (loop6): Found nat_bits in checkpoint [ 647.264122][T21184] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 647.280877][T21184] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 647.286137][T21226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7166'. [ 648.470320][ T26] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 648.670393][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 648.677454][ T26] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 648.713682][ T26] usb 1-1: config 0 has no interface number 0 [ 648.722586][ T26] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 648.742172][ T26] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 648.770356][ T26] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 648.798998][ T26] usb 1-1: Product: syz [ 648.829391][ T26] usb 1-1: SerialNumber: syz [ 648.842932][ T26] usb 1-1: config 0 descriptor?? [ 648.891998][ T26] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input35 [ 648.959679][T21281] netlink: 'syz.4.7193': attribute type 5 has an invalid length. [ 649.007181][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7193'. [ 649.089001][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 649.095927][ T8451] usb 1-1: USB disconnect, device number 77 [ 649.096376][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 649.142203][ T8451] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 649.800397][ T26] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 649.993042][ T26] usb 6-1: config 2 has an invalid interface number: 93 but max is 0 [ 650.023556][ T26] usb 6-1: config 2 has no interface number 0 [ 650.034837][T21323] xt_hashlimit: size too large, truncated to 1048576 [ 650.060264][ T26] usb 6-1: config 2 interface 93 has no altsetting 0 [ 650.072260][ T26] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00ab, bcdDevice=70.6e [ 650.091841][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.099888][ T26] usb 6-1: Product: syz [ 650.150813][ T26] usb 6-1: Manufacturer: syz [ 650.155464][ T26] usb 6-1: SerialNumber: syz [ 650.238865][T21331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7218'. [ 650.400684][ T26] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 650.431216][ T26] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 650.439294][ T26] dib0700: firmware download failed at 7 with -22 [ 650.496412][ T26] usb 6-1: USB disconnect, device number 22 [ 650.845877][T21354] loop4: detected capacity change from 0 to 1024 [ 650.994202][ T11] hfsplus: b-tree write err: -5, ino 4 [ 651.118101][T21369] loop4: detected capacity change from 0 to 16 [ 651.151303][T21369] erofs: (device loop4): mounted with root inode @ nid 36. [ 651.209270][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 87 @ nid 36 [ 651.260351][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 86 @ nid 36 [ 651.270100][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 85 @ nid 36 [ 651.344173][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 84 @ nid 36 [ 651.390311][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 83 @ nid 36 [ 651.407586][T21377] loop5: detected capacity change from 0 to 2048 [ 651.442384][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 82 @ nid 36 [ 651.477195][T21377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.483755][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 81 @ nid 36 [ 651.529839][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 80 @ nid 36 [ 651.571472][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 79 @ nid 36 [ 651.617375][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 78 @ nid 36 [ 651.647122][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 77 @ nid 36 [ 651.688541][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 76 @ nid 36 [ 651.740942][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 75 @ nid 36 [ 651.754918][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 74 @ nid 36 [ 651.769343][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 73 @ nid 36 [ 651.825522][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 72 @ nid 36 [ 651.870398][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 71 @ nid 36 [ 651.885871][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 70 @ nid 36 [ 651.924999][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 69 @ nid 36 [ 652.002828][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 68 @ nid 36 [ 652.047491][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 67 @ nid 36 [ 652.072761][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 66 @ nid 36 [ 652.072809][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 65 @ nid 36 [ 652.072849][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 64 @ nid 36 [ 652.072884][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 63 @ nid 36 [ 652.178474][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 62 @ nid 36 [ 652.201112][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 61 @ nid 36 [ 652.218833][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 60 @ nid 36 [ 652.269265][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 59 @ nid 36 [ 652.323925][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 58 @ nid 36 [ 652.360517][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 57 @ nid 36 [ 652.374741][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 56 @ nid 36 [ 652.375752][T21411] loop6: detected capacity change from 0 to 2048 [ 652.385158][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 55 @ nid 36 [ 652.411689][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 54 @ nid 36 [ 652.416633][T21415] loop0: detected capacity change from 0 to 1764 [ 652.424628][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 53 @ nid 36 [ 652.465076][T21411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.494288][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 52 @ nid 36 [ 652.557733][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 51 @ nid 36 [ 652.578298][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 50 @ nid 36 [ 652.630360][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 49 @ nid 36 [ 652.657836][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 48 @ nid 36 [ 652.708527][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 47 @ nid 36 [ 652.752986][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 46 @ nid 36 [ 652.786636][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 45 @ nid 36 [ 652.811051][T21425] libceph: resolve '400' (ret=-3): failed [ 652.845840][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 44 @ nid 36 [ 652.890461][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 87 @ nid 36 [ 652.920298][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 86 @ nid 36 [ 652.955161][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 85 @ nid 36 [ 652.990485][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 84 @ nid 36 [ 653.027323][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 83 @ nid 36 [ 653.060459][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 82 @ nid 36 [ 653.090331][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 81 @ nid 36 [ 653.100027][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 80 @ nid 36 [ 653.146791][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 79 @ nid 36 [ 653.168703][T21440] loop6: detected capacity change from 0 to 256 [ 653.180359][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 78 @ nid 36 [ 653.192844][T21440] exfat: Deprecated parameter 'namecase' [ 653.202263][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 77 @ nid 36 [ 653.226040][T21440] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 653.240345][ T26] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 653.252322][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 76 @ nid 36 [ 653.276515][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 75 @ nid 36 [ 653.321709][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 74 @ nid 36 [ 653.352737][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 73 @ nid 36 [ 653.394411][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 72 @ nid 36 [ 653.430392][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 71 @ nid 36 [ 653.440517][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 653.460179][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 653.474095][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 70 @ nid 36 [ 653.513511][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.524061][ T26] usb 6-1: Product: syz [ 653.524306][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 69 @ nid 36 [ 653.528328][ T26] usb 6-1: Manufacturer: syz [ 653.553686][ T26] usb 6-1: SerialNumber: syz [ 653.577087][ T26] usb 6-1: config 0 descriptor?? [ 653.583927][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 68 @ nid 36 [ 653.611541][ T26] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 653.613730][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 67 @ nid 36 [ 653.650558][T21456] netlink: 'syz.6.7280': attribute type 5 has an invalid length. [ 653.660653][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 66 @ nid 36 [ 653.692080][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 65 @ nid 36 [ 653.724095][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 64 @ nid 36 [ 653.764730][ T27] audit: type=1400 audit(1769250736.939:275): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=21459 comm="syz.0.7282" [ 653.787859][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 63 @ nid 36 [ 653.799896][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 62 @ nid 36 [ 653.817850][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 61 @ nid 36 [ 653.849370][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 60 @ nid 36 [ 653.879667][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 59 @ nid 36 [ 653.920587][T21464] netlink: 'syz.2.7284': attribute type 1 has an invalid length. [ 653.928847][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 58 @ nid 36 [ 653.940124][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 57 @ nid 36 [ 653.952403][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 56 @ nid 36 [ 653.962981][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 55 @ nid 36 [ 653.973249][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 54 @ nid 36 [ 653.977616][T21467] netlink: 'syz.0.7285': attribute type 29 has an invalid length. [ 653.984038][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 53 @ nid 36 [ 654.002605][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 52 @ nid 36 [ 654.008561][T21467] netlink: 'syz.0.7285': attribute type 29 has an invalid length. [ 654.021372][ T26] gspca_vc032x: reg_w err -71 [ 654.030458][ T26] vc032x: probe of 6-1:0.0 failed with error -71 [ 654.051703][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 51 @ nid 36 [ 654.067027][ T26] usb 6-1: USB disconnect, device number 23 [ 654.097726][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 50 @ nid 36 [ 654.160253][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 49 @ nid 36 [ 654.165176][T21472] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7288'. [ 654.188032][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 48 @ nid 36 [ 654.198702][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 47 @ nid 36 [ 654.236976][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 46 @ nid 36 [ 654.247195][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 45 @ nid 36 [ 654.257892][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 44 @ nid 36 [ 654.270926][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 43 @ nid 36 [ 654.322805][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 42 @ nid 36 [ 654.334339][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 41 @ nid 36 [ 654.351524][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 40 @ nid 36 [ 654.371365][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 39 @ nid 36 [ 654.387422][T21480] loop6: detected capacity change from 0 to 1024 [ 654.404338][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 38 @ nid 36 [ 654.420530][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 37 @ nid 36 [ 654.463348][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 36 @ nid 36 [ 654.500621][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 35 @ nid 36 [ 654.520009][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 34 @ nid 36 [ 654.534091][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 33 @ nid 36 [ 654.545420][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 32 @ nid 36 [ 654.585807][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 31 @ nid 36 [ 654.616283][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 30 @ nid 36 [ 654.642619][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 29 @ nid 36 [ 654.701403][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 28 @ nid 36 [ 654.721571][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 27 @ nid 36 [ 654.761161][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 26 @ nid 36 [ 654.772419][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 25 @ nid 36 [ 654.782928][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 24 @ nid 36 [ 654.799064][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 23 @ nid 36 [ 654.819482][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 22 @ nid 36 [ 654.850490][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 21 @ nid 36 [ 654.890624][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 20 @ nid 36 [ 654.915589][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 19 @ nid 36 [ 654.950571][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 18 @ nid 36 [ 654.979847][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 17 @ nid 36 [ 655.032205][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 16 @ nid 36 [ 655.070437][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 15 @ nid 36 [ 655.103785][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 14 @ nid 36 [ 655.161016][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 13 @ nid 36 [ 655.192453][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 12 @ nid 36 [ 655.229888][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 11 @ nid 36 [ 655.292396][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 10 @ nid 36 [ 655.349901][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 9 @ nid 36 [ 655.389943][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 655.436241][T21486] loop6: detected capacity change from 0 to 32768 [ 655.452178][T21486] diRead: diIAGRead returned -5 [ 655.457309][T21486] jfs_lookup: iget failed on inum 1048352 [ 655.458942][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 7 @ nid 36 [ 655.503874][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 36 [ 655.554398][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 5 @ nid 36 [ 655.556264][T21516] loop5: detected capacity change from 0 to 4096 [ 655.568591][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 36 [ 655.571566][T21518] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 655.580714][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 36 [ 655.609013][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 2 @ nid 36 [ 655.619880][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 36 [ 655.630979][T21369] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 655.641393][T21369] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 655.654442][T21516] NILFS (loop5): invalid segment: Checksum error in segment payload [ 655.683079][T21516] NILFS (loop5): trying rollback from an earlier position [ 655.728272][T21516] NILFS (loop5): norecovery option specified, skipping roll-forward recovery [ 655.789117][T21516] NILFS (loop5): couldn't remount because the filesystem is in an incomplete recovery state [ 656.306887][T21545] netlink: 'syz.5.7322': attribute type 5 has an invalid length. [ 657.034902][ T27] audit: type=1326 audit(1769250740.209:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21571 comm="syz.5.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x7ffc0000 [ 657.042385][T21543] loop6: detected capacity change from 0 to 32768 [ 657.088097][ T27] audit: type=1326 audit(1769250740.209:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21571 comm="syz.5.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f382219acb9 code=0x7ffc0000 [ 657.149620][T21543] ERROR: (device loop6): diNewExt: no free extents [ 657.149620][T21543] [ 657.193972][ T27] audit: type=1326 audit(1769250740.209:278): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=21571 comm="syz.5.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x7ffc0000 [ 657.198680][T21576] loop5: detected capacity change from 0 to 256 [ 657.230414][ T7416] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 657.244625][T21543] ERROR: (device loop6): remounting filesystem as read-only [ 657.263959][T21543] ialloc: diAlloc returned -5! [ 657.269920][ T27] audit: type=1326 audit(1769250740.209:279): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=21571 comm="syz.5.7332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382219acb9 code=0x7ffc0000 [ 657.373809][T21576] FAT-fs (loop5): Directory bread(block 64) failed [ 657.396487][T21576] FAT-fs (loop5): Directory bread(block 65) failed [ 657.430997][T21576] FAT-fs (loop5): Directory bread(block 66) failed [ 657.438596][ T7416] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 657.456427][ T7416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.479724][T21576] FAT-fs (loop5): Directory bread(block 67) failed [ 657.511167][ T7416] usb 5-1: config 0 descriptor?? [ 657.519453][T21576] FAT-fs (loop5): Directory bread(block 68) failed [ 657.527070][T21576] FAT-fs (loop5): Directory bread(block 69) failed [ 657.562347][T21576] FAT-fs (loop5): Directory bread(block 70) failed [ 657.583861][T21559] loop0: detected capacity change from 0 to 40427 [ 657.600650][T21576] FAT-fs (loop5): Directory bread(block 71) failed [ 657.611934][T21559] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 657.624233][T21576] FAT-fs (loop5): Directory bread(block 72) failed [ 657.650296][T21576] FAT-fs (loop5): Directory bread(block 73) failed [ 657.669121][T21559] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 657.726297][ T7416] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 657.750403][ T7416] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 657.778467][T21559] F2FS-fs (loop0): Found nat_bits in checkpoint [ 657.936275][ T7416] [drm:udl_init] *ERROR* Selecting channel failed [ 657.959923][T21559] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 657.972947][ T7416] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 657.989434][T21559] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 657.990353][ T7416] [drm] Initialized udl on minor 2 [ 658.048726][ T7416] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 658.110476][ T7416] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 658.151688][ T7416] usb 5-1: USB disconnect, device number 69 [ 658.163890][ T4631] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 658.203043][ T4631] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 658.225103][ T4631] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 658.480298][ T8451] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 658.682375][ T8451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 658.720009][ T8451] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.761176][ T8451] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 658.770130][ T8451] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.835908][ T8451] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.864999][ T8451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.900948][ T8451] usb 6-1: Product: syz [ 658.920731][ T8451] usb 6-1: Manufacturer: syz [ 658.925386][ T8451] usb 6-1: SerialNumber: syz [ 658.964874][T21621] loop6: detected capacity change from 0 to 512 [ 658.965696][ T8451] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 659.029533][ T8451] cdc_ncm 6-1:1.0: bind() failure [ 659.042082][T21621] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 659.085033][T21621] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.248082][ T4399] usb 6-1: USB disconnect, device number 24 [ 659.531244][ T8451] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 659.720364][ T4631] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 659.736343][ T8451] usb 7-1: unable to get BOS descriptor or descriptor too short [ 659.751077][ T8451] usb 7-1: not running at top speed; connect to a high speed hub [ 659.799538][ T8451] usb 7-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 659.830275][ T8451] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 659.865245][ T8451] usb 7-1: too many endpoints for config 1 interface 1 altsetting 143: 86, using maximum allowed: 30 [ 659.896881][ T8451] usb 7-1: config 1 interface 1 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 659.916195][ T4631] usb 5-1: Using ep0 maxpacket: 32 [ 659.928258][ T4631] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 659.935021][ T8451] usb 7-1: config 1 interface 1 has no altsetting 0 [ 659.965658][ T8451] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 659.970324][ T4631] usb 5-1: config 4 has no interface number 0 [ 659.997356][ T8451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 659.999772][ T4631] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.017456][ T8451] usb 7-1: Product: syz [ 660.017477][ T8451] usb 7-1: Manufacturer: syz [ 660.023171][ T4631] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.037212][ T4631] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 660.054497][ T8451] usb 7-1: SerialNumber: syz [ 660.074470][T21621] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 660.080460][ T4631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.143428][ T4631] hub 5-1:4.128: USB hub found [ 660.296369][ T8451] cdc_acm: probe of 7-1:1.0 failed with error -22 [ 660.325696][ T8451] usb 7-1: USB disconnect, device number 7 [ 660.343916][ T4631] hub 5-1:4.128: 2 ports detected [ 660.349023][ T4631] hub 5-1:4.128: Using single TT (err -22) [ 660.457840][T21678] loop5: detected capacity change from 0 to 1764 [ 660.482696][T21678] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 660.488817][T21680] loop0: detected capacity change from 0 to 4096 [ 660.545085][T21680] NILFS (loop0): invalid segment: Checksum error in segment payload [ 660.560660][ T4631] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 660.568590][ T4631] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 660.580449][T21680] NILFS (loop0): trying rollback from an earlier position [ 660.598409][T21680] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 660.622739][T21680] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state [ 660.631869][ T4631] usb 5-1: USB disconnect, device number 70 [ 660.989024][T17169] EXT4-fs (loop6): unmounting filesystem. [ 661.072537][T21699] netlink: 'syz.5.7391': attribute type 15 has an invalid length. [ 661.142757][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7389'. [ 661.840274][ T4399] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 661.910418][ T8451] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 661.958122][T21708] loop4: detected capacity change from 0 to 40427 [ 661.982777][T21708] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 661.999715][T21708] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 662.032739][ T4399] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.048587][T21708] F2FS-fs (loop4): Found nat_bits in checkpoint [ 662.054418][ T4399] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 1.ff [ 662.096126][ T4399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 662.106368][ T8451] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 662.129010][ T8451] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 662.150145][ T4399] usb 3-1: SerialNumber: syz [ 662.156561][T21708] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 662.160499][ T8451] usb 1-1: config 220 has no interface number 2 [ 662.166189][T21708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 662.174233][ T4399] usb 3-1: config 0 descriptor?? [ 662.193837][ T8451] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 662.212379][ T4399] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 662.230284][ T8451] usb 1-1: config 220 interface 0 has no altsetting 0 [ 662.237114][ T8451] usb 1-1: config 220 interface 76 has no altsetting 0 [ 662.253558][ T4399] usb 3-1: Detected SIO [ 662.268675][ T4399] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 662.288341][ T8451] usb 1-1: config 220 interface 1 has no altsetting 0 [ 662.304782][ T8451] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 662.327422][ T8451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.345967][ T8451] usb 1-1: Product: syz [ 662.361024][ T8451] usb 1-1: Manufacturer: syz [ 662.367404][ T8451] usb 1-1: SerialNumber: syz [ 662.439722][ T7416] usb 3-1: USB disconnect, device number 73 [ 662.462915][ T7416] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 662.478636][ T7416] ftdi_sio 3-1:0.0: device disconnected [ 662.603298][ T8451] usb 1-1: selecting invalid altsetting 0 [ 662.624868][ T8451] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 662.641698][ T8451] usb 1-1: No valid video chain found. [ 662.668717][T21732] loop5: detected capacity change from 0 to 32768 [ 662.680538][ T8451] usb 1-1: selecting invalid altsetting 0 [ 662.689874][ T8451] usbtest: probe of 1-1:220.1 failed with error -22 [ 662.726632][ T8451] usb 1-1: USB disconnect, device number 78 [ 662.759338][T21732] XFS (loop5): Mounting V5 Filesystem [ 662.866513][T21732] XFS (loop5): Ending clean mount [ 662.897372][T21732] XFS (loop5): Quotacheck needed: Please wait. [ 663.030342][T21732] XFS (loop5): Quotacheck: Done. [ 663.252719][T11526] XFS (loop5): Unmounting Filesystem [ 663.271518][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7417'. [ 663.308693][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7417'. [ 663.532822][T21778] netlink: 'syz.6.7422': attribute type 1 has an invalid length. [ 663.663700][T21782] netlink: 'syz.2.7426': attribute type 21 has an invalid length. [ 663.800277][ T8451] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 663.850535][T21790] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7429'. [ 663.880528][T21790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7429'. [ 663.889535][T21790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7429'. [ 664.001857][ T8451] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 664.028091][ T8451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.058303][ T8451] usb 5-1: config 0 descriptor?? [ 664.080852][T21800] loop6: detected capacity change from 0 to 1024 [ 664.081633][ T8451] pwc: Philips SPC 900NC USB webcam detected. [ 664.129645][T21800] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 664.174880][T21800] EXT4-fs error (device loop6): ext4_get_journal_inode:5756: inode #32: comm syz.6.7434: iget: special inode unallocated [ 664.204901][T21800] EXT4-fs (loop6): no journal found [ 664.240437][T21800] EXT4-fs (loop6): can't get journal size [ 664.267776][T21800] EXT4-fs (loop6): filesystem is read-only [ 664.277861][T21800] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 664.408617][T21800] EXT4-fs error (device loop6): ext4_lookup:1850: inode #2: comm syz.6.7434: bad inode number: 15 [ 664.475879][T17169] EXT4-fs (loop6): unmounting filesystem. [ 664.484755][T21813] IPv6: sit2: Disabled Multicast RS [ 664.488151][ T8451] pwc: send_video_command error -71 [ 664.512413][ T8451] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 664.530401][ T8451] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 664.556019][ T8451] usb 5-1: USB disconnect, device number 71 [ 664.656609][T21816] loop6: detected capacity change from 0 to 1024 [ 664.722418][T21816] hfsplus: invalid btree flag [ 664.727325][T21816] hfsplus: failed to load attributes file [ 665.089279][T21835] loop5: detected capacity change from 0 to 512 [ 665.145932][T21835] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 665.170490][T21839] loop6: detected capacity change from 0 to 64 [ 665.195625][T21839] hfs: unable to locate alternate MDB [ 665.223534][T21839] hfs: continuing without an alternate MDB [ 665.293463][T21843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7455'. [ 665.318968][T21835] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 665.534065][T21852] loop0: detected capacity change from 0 to 64 [ 665.850488][ T8454] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 666.034332][T21875] loop5: detected capacity change from 0 to 256 [ 666.050466][ T8454] usb 3-1: Using ep0 maxpacket: 32 [ 666.059438][ T8454] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 666.090029][ T8454] usb 3-1: config 0 has no interface number 0 [ 666.109349][ T8454] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 666.151819][ T8454] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 26159, setting to 1024 [ 666.178285][ T8454] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 666.209566][ T8454] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 666.229480][ T8454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.263344][ T8454] usb 3-1: Product: syz [ 666.267800][ T8454] usb 3-1: Manufacturer: syz [ 666.282887][ T8454] usb 3-1: SerialNumber: syz [ 666.306113][ T8454] usb 3-1: config 0 descriptor?? [ 666.324059][T21854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 666.341872][T21854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 666.481303][ T4399] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 666.564443][T21896] loop4: detected capacity change from 0 to 2048 [ 666.577760][ T8454] usb 3-1: USB disconnect, device number 74 [ 666.608790][T21894] loop0: detected capacity change from 0 to 4096 [ 666.619705][ T26] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 666.628202][T21894] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 666.636082][T21896] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 666.711636][ T4399] usb 7-1: Using ep0 maxpacket: 16 [ 666.718657][ T4399] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 666.751213][ T4399] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 666.764076][T21894] ntfs3: loop0: ino=5, "/" attr_set_size [ 666.764541][T21898] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 666.769956][T21894] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 666.805570][ T4399] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 666.810339][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 666.825122][ T4399] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.835517][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 666.841034][ T4399] usb 7-1: Product: syz [ 666.857583][ T4399] usb 7-1: Manufacturer: syz [ 666.862746][ T4399] usb 7-1: SerialNumber: syz [ 666.879689][ T4399] usb 7-1: config 0 descriptor?? [ 666.880595][ T26] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 666.905280][ T26] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 666.917673][ T26] usb 6-1: config 4 has no interface number 0 [ 666.942376][ T4399] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 666.944909][ T26] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 666.976819][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.992066][ T26] usb 6-1: Product: syz [ 666.992090][ T26] usb 6-1: Manufacturer: syz [ 666.992104][ T26] usb 6-1: SerialNumber: syz [ 667.155269][ T9] usb 7-1: Failed to submit usb control message: -71 [ 667.163628][ T4399] usb 7-1: USB disconnect, device number 8 [ 667.170628][ T9] usb 7-1: unable to send the bmi data to the device: -71 [ 667.177887][ T9] usb 7-1: unable to get target info from device [ 667.216429][ T26] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 667.220252][ T9] usb 7-1: could not get target info (-71) [ 667.251926][ T26] usb 6-1: No valid video chain found. [ 667.254811][ T9] usb 7-1: could not probe fw (-71) [ 667.306948][ T26] usb 6-1: USB disconnect, device number 25 [ 667.370400][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 667.820497][ T8458] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 667.946984][T21923] loop4: detected capacity change from 0 to 32768 [ 667.997561][T21923] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.7490 (21923) [ 668.020302][ T8458] usb 1-1: Using ep0 maxpacket: 32 [ 668.027612][ T8458] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 668.053379][T21931] loop5: detected capacity change from 0 to 1024 [ 668.059992][ T8458] usb 1-1: config 4 has no interface number 0 [ 668.081399][ T8458] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.100446][ T8458] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.119462][T21931] hfsplus: invalid length 32517 has been corrected to 255 [ 668.155326][T21931] hfsplus: invalid length 32517 has been corrected to 255 [ 668.167431][ T8458] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 668.187331][T21931] hfsplus: invalid length 32517 has been corrected to 255 [ 668.198667][ T8458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.224301][T21931] hfsplus: invalid length 32517 has been corrected to 255 [ 668.245085][T21923] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 668.248188][ T8458] hub 1-1:4.128: USB hub found [ 668.280594][T21923] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 668.342957][T21923] BTRFS info (device loop4): turning off barriers [ 668.349526][T21923] BTRFS info (device loop4): enabling all of the rescue options [ 668.388899][T21923] BTRFS info (device loop4): ignoring data csums [ 668.407346][ T9] hfsplus: b-tree write err: -5, ino 4 [ 668.419419][T21923] BTRFS info (device loop4): ignoring bad roots [ 668.447816][T21923] BTRFS info (device loop4): disabling log replay at mount time [ 668.455273][ T8458] hub 1-1:4.128: 2 ports detected [ 668.460909][ T8458] hub 1-1:4.128: Using single TT (err -22) [ 668.492784][T21923] BTRFS info (device loop4): disabling tree log [ 668.499127][T21923] BTRFS info (device loop4): turning on flush-on-commit [ 668.547290][T21923] BTRFS info (device loop4): using free space tree [ 668.680539][ T8458] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 668.687206][ T8458] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 668.761527][ T8458] usb 1-1: USB disconnect, device number 79 [ 668.854402][T21923] BTRFS info (device loop4: state C): enabling ssd optimizations [ 669.096109][T21975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7507'. [ 669.264226][ T4268] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 669.679653][T21993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7516'. [ 669.878002][T21999] netlink: 'syz.0.7518': attribute type 6 has an invalid length. [ 669.912390][T21999] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7518'. [ 670.160376][ T125] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 670.362370][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 670.391411][ T125] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 670.450059][ T125] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 670.480014][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.498300][ T125] usb 3-1: Product: syz [ 670.513988][ T125] usb 3-1: Manufacturer: syz [ 670.518645][ T125] usb 3-1: SerialNumber: syz [ 670.545615][ T125] usb 3-1: config 0 descriptor?? [ 670.832889][T22031] loop4: detected capacity change from 0 to 4096 [ 670.931382][T22039] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 670.940306][T22041] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 670.948426][T22041] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 670.994316][ T8799] usb 3-1: USB disconnect, device number 75 [ 671.074133][T22041] vhci_hcd vhci_hcd.0: Device attached [ 671.131316][T22047] loop6: detected capacity change from 0 to 2048 [ 671.139035][T22044] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 671.145678][T22044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 671.174285][T22047] loop6: p1 < > p3 [ 671.181031][T22047] loop6: p3 size 134217728 extends beyond EOD, truncated [ 671.208346][T22044] vhci_hcd vhci_hcd.0: Device attached [ 671.252574][T22048] vhci_hcd: connection closed [ 671.254414][T22042] vhci_hcd: connection closed [ 671.259240][ T4358] vhci_hcd: stop threads [ 671.273707][ T4358] vhci_hcd: release socket [ 671.294976][ T4358] vhci_hcd: disconnect device [ 671.350295][ T8458] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 671.360728][T22043] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 671.366833][ T4358] vhci_hcd: stop threads [ 671.371218][ T4358] vhci_hcd: release socket [ 671.390499][ T4358] vhci_hcd: disconnect device [ 671.508848][ T4813] udevd[4813]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 671.542399][ T4487] udevd[4487]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 671.649289][T22066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7548'. [ 672.270302][ T8450] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 672.470382][ T8450] usb 5-1: Using ep0 maxpacket: 8 [ 672.479292][ T8450] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 672.506063][ T8450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.544956][ T8450] usb 5-1: Product: syz [ 672.549174][ T8450] usb 5-1: Manufacturer: syz [ 672.575384][ T8450] usb 5-1: SerialNumber: syz [ 672.597007][ T8450] usb 5-1: config 0 descriptor?? [ 672.613167][ T8450] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 672.641920][T22108] binfmt_misc: register: failed to install interpreter file ./file0 [ 672.669329][T22110] xt_bpf: check failed: parse error [ 672.833389][T22094] loop6: detected capacity change from 0 to 32768 [ 672.878702][T22094] (syz.6.7562,22094,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 672.914738][T22094] (syz.6.7562,22094,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 672.949147][T22118] loop0: detected capacity change from 0 to 256 [ 672.983044][T22094] JBD2: Ignoring recovery information on journal [ 673.050592][ T8454] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 673.065781][ T8450] radio-usb-si4713: probe of 5-1:0.0 failed with error -71 [ 673.073415][ T8450] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 673.086376][ T8450] usb 5-1: USB disconnect, device number 72 [ 673.123392][T22094] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 673.148385][ T11] ocfs2: Finishing quota recovery on device (7,6) for slot 0 [ 673.240309][ T8454] usb 6-1: Using ep0 maxpacket: 32 [ 673.247325][ T8454] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 673.284127][ T8454] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.310674][ T8454] usb 6-1: config 0 has no interface number 0 [ 673.315558][T22128] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 673.325674][ T8454] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 673.378325][T17169] ocfs2: Unmounting device (7,6) on (node local) [ 673.386683][ T8454] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 673.436965][ T8454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.472806][ T8454] usb 6-1: Product: syz [ 673.483943][ T8454] usb 6-1: Manufacturer: syz [ 673.497433][ T8454] usb 6-1: SerialNumber: syz [ 673.521067][ T8454] usb 6-1: config 0 descriptor?? [ 673.539304][ T8454] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 673.553315][ T8454] radio-si470x: probe of 6-1:0.35 failed with error -5 [ 673.742621][ T8454] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 673.943580][T22146] netlink: 'syz.6.7587': attribute type 8 has an invalid length. [ 673.952126][ T8454] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 673.971778][ T8454] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 674.001943][ T8454] usb 6-1: USB disconnect, device number 26 [ 674.015046][T22149] netlink: 'syz.4.7588': attribute type 3 has an invalid length. [ 674.045477][ T8454] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 674.160447][ T125] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 674.249898][T22156] netlink: 'syz.4.7592': attribute type 4 has an invalid length. [ 674.360271][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 674.367414][ T125] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 674.430262][ T125] usb 3-1: config 254 has no interface number 0 [ 674.436584][ T125] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 674.475763][ T125] usb 3-1: config 254 interface 235 has no altsetting 0 [ 674.496488][ T125] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 674.547562][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.598714][ T125] usb 3-1: Product: syz [ 674.609587][ T125] usb 3-1: Manufacturer: syz [ 674.640285][ T125] usb 3-1: SerialNumber: syz [ 674.647974][T22143] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 674.878690][T22143] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 674.907868][ T125] usbtest 3-1:254.235: Linux gadget zero [ 674.921210][ T125] usbtest 3-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 675.120502][ T125] usb 3-1: USB disconnect, device number 76 [ 675.303641][T22200] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.042111][T22226] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 676.064308][T22228] loop5: detected capacity change from 0 to 64 [ 676.114215][T22226] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 676.168577][T22228] ------------[ cut here ]------------ [ 676.174443][T22228] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 676.202943][T22228] WARNING: CPU: 1 PID: 22228 at kernel/locking/mutex.c:582 __mutex_lock+0xa32/0xaf0 [ 676.218344][T22228] Modules linked in: [ 676.222444][T22228] CPU: 1 PID: 22228 Comm: syz.5.7625 Not tainted syzkaller #0 [ 676.229922][T22228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.240094][T22228] RIP: 0010:__mutex_lock+0xa32/0xaf0 [ 676.245658][T22228] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d 8f a0 ea 03 00 0f 85 df f6 ff ff 48 c7 c7 a0 fc 8b 8a 48 c7 c6 40 fd 8b 8a e8 4e 8d 18 f7 <0f> 0b e9 c5 f6 ff ff 0f 0b e9 6b f9 ff ff 48 c7 c1 40 a1 bf 96 80 [ 676.265551][T22228] RSP: 0018:ffffc900061df5a0 EFLAGS: 00010246 [ 676.271865][T22228] RAX: 190e2e990b149b00 RBX: ffff8880281e7028 RCX: 0000000000080000 [ 676.279878][T22228] RDX: ffffc9000d1a1000 RSI: 0000000000005067 RDI: 0000000000005068 [ 676.287930][T22228] RBP: ffffc900061df700 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 676.295973][T22228] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: 0000000000000000 [ 676.304028][T22228] R13: dffffc0000000000 R14: ffff8880281e70b8 R15: 0000000000000000 [ 676.312154][T22228] FS: 00007f3822ff26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 676.321148][T22228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.327758][T22228] CR2: 00007ff02a5456b8 CR3: 00000000622ef000 CR4: 00000000003506e0 [ 676.335881][T22228] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 676.343951][T22228] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 676.351982][T22228] Call Trace: [ 676.355289][T22228] [ 676.358234][T22228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 676.364295][T22228] ? reiserfs_write_lock+0x75/0xd0 [ 676.369506][T22228] ? mutex_lock_nested+0x10/0x10 [ 676.374520][T22228] ? d_alloc_parallel+0x33a/0x1530 [ 676.379825][T22228] ? __lock_acquire+0x7d10/0x7d10 [ 676.384928][T22228] reiserfs_write_lock+0x75/0xd0 [ 676.389903][T22228] reiserfs_lookup+0x18a/0x480 [ 676.394734][T22228] ? reiserfs_find_entry+0x18e0/0x18e0 [ 676.400257][T22228] ? __init_waitqueue_head+0xa5/0x150 [ 676.405664][T22228] __lookup_slow+0x29d/0x3f0 [ 676.410320][T22228] ? lookup_one_len+0x2d0/0x2d0 [ 676.415199][T22228] ? try_to_unlazy+0x34c/0x5a0 [ 676.419992][T22228] ? down_read+0x1a8/0x2d0 [ 676.424488][T22228] lookup_slow+0x53/0x70 [ 676.428755][T22228] link_path_walk+0x945/0xe70 [ 676.433507][T22228] ? handle_lookup_down+0x130/0x130 [ 676.438845][T22228] path_lookupat+0x9d/0x440 [ 676.443425][T22228] filename_lookup+0x224/0x560 [ 676.448297][T22228] ? hashlen_string+0x110/0x110 [ 676.453212][T22228] ? strncpy_from_user+0x1e3/0x350 [ 676.458349][T22228] ? getname_flags+0x206/0x500 [ 676.463197][T22228] user_path_at_empty+0x3e/0x60 [ 676.468063][T22228] do_sys_truncate+0xb6/0x1c0 [ 676.472810][T22228] ? lock_chain_count+0x20/0x20 [ 676.477777][T22228] ? break_lease+0xd0/0xd0 [ 676.482261][T22228] ? lockdep_hardirqs_on+0x94/0x140 [ 676.487494][T22228] do_syscall_64+0x4c/0xa0 [ 676.492068][T22228] ? clear_bhb_loop+0x60/0xb0 [ 676.496944][T22228] ? clear_bhb_loop+0x60/0xb0 [ 676.501082][ T8458] vhci_hcd: vhci_device speed not set [ 676.501731][T22228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.513085][T22228] RIP: 0033:0x7f382219acb9 [ 676.517533][T22228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.537384][T22228] RSP: 002b:00007f3822ff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 676.545957][T22228] RAX: ffffffffffffffda RBX: 00007f3822415fa0 RCX: 00007f382219acb9 [ 676.554007][T22228] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000100 [ 676.562034][T22228] RBP: 00007f3822208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 676.570027][T22228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.578098][T22228] R13: 00007f3822416038 R14: 00007f3822415fa0 R15: 00007fffc692f078 [ 676.586166][T22228] [ 676.589197][T22228] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 676.596482][T22228] CPU: 1 PID: 22228 Comm: syz.5.7625 Not tainted syzkaller #0 [ 676.603967][T22228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.614042][T22228] Call Trace: [ 676.617318][T22228] [ 676.620250][T22228] dump_stack_lvl+0x188/0x24e [ 676.625363][T22228] ? memcpy+0x3c/0x60 [ 676.629346][T22228] ? show_regs_print_info+0x12/0x12 [ 676.634645][T22228] ? load_image+0x400/0x400 [ 676.639148][T22228] panic+0x2e5/0x730 [ 676.643049][T22228] ? bpf_jit_dump+0xd0/0xd0 [ 676.647556][T22228] __warn+0x2f8/0x4f0 [ 676.651540][T22228] ? __mutex_lock+0xa32/0xaf0 [ 676.656566][T22228] ? __mutex_lock+0xa32/0xaf0 [ 676.661245][T22228] report_bug+0x2ba/0x4f0 [ 676.665572][T22228] ? __mutex_lock+0xa32/0xaf0 [ 676.670255][T22228] handle_bug+0x3a/0x70 [ 676.674409][T22228] exc_invalid_op+0x16/0x40 [ 676.678911][T22228] asm_exc_invalid_op+0x16/0x20 [ 676.683753][T22228] RIP: 0010:__mutex_lock+0xa32/0xaf0 [ 676.689049][T22228] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d 8f a0 ea 03 00 0f 85 df f6 ff ff 48 c7 c7 a0 fc 8b 8a 48 c7 c6 40 fd 8b 8a e8 4e 8d 18 f7 <0f> 0b e9 c5 f6 ff ff 0f 0b e9 6b f9 ff ff 48 c7 c1 40 a1 bf 96 80 [ 676.709354][T22228] RSP: 0018:ffffc900061df5a0 EFLAGS: 00010246 [ 676.715417][T22228] RAX: 190e2e990b149b00 RBX: ffff8880281e7028 RCX: 0000000000080000 [ 676.723405][T22228] RDX: ffffc9000d1a1000 RSI: 0000000000005067 RDI: 0000000000005068 [ 676.731382][T22228] RBP: ffffc900061df700 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 676.739356][T22228] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: 0000000000000000 [ 676.747327][T22228] R13: dffffc0000000000 R14: ffff8880281e70b8 R15: 0000000000000000 [ 676.755313][T22228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 676.761299][T22228] ? reiserfs_write_lock+0x75/0xd0 [ 676.766408][T22228] ? mutex_lock_nested+0x10/0x10 [ 676.771437][T22228] ? d_alloc_parallel+0x33a/0x1530 [ 676.776553][T22228] ? __lock_acquire+0x7d10/0x7d10 [ 676.781748][T22228] reiserfs_write_lock+0x75/0xd0 [ 676.786689][T22228] reiserfs_lookup+0x18a/0x480 [ 676.791452][T22228] ? reiserfs_find_entry+0x18e0/0x18e0 [ 676.797035][T22228] ? __init_waitqueue_head+0xa5/0x150 [ 676.802408][T22228] __lookup_slow+0x29d/0x3f0 [ 676.807041][T22228] ? lookup_one_len+0x2d0/0x2d0 [ 676.811887][T22228] ? try_to_unlazy+0x34c/0x5a0 [ 676.816785][T22228] ? down_read+0x1a8/0x2d0 [ 676.821303][T22228] lookup_slow+0x53/0x70 [ 676.825545][T22228] link_path_walk+0x945/0xe70 [ 676.830225][T22228] ? handle_lookup_down+0x130/0x130 [ 676.835429][T22228] path_lookupat+0x9d/0x440 [ 676.839925][T22228] filename_lookup+0x224/0x560 [ 676.844685][T22228] ? hashlen_string+0x110/0x110 [ 676.849534][T22228] ? strncpy_from_user+0x1e3/0x350 [ 676.854646][T22228] ? getname_flags+0x206/0x500 [ 676.859412][T22228] user_path_at_empty+0x3e/0x60 [ 676.864263][T22228] do_sys_truncate+0xb6/0x1c0 [ 676.868940][T22228] ? lock_chain_count+0x20/0x20 [ 676.873793][T22228] ? break_lease+0xd0/0xd0 [ 676.878305][T22228] ? lockdep_hardirqs_on+0x94/0x140 [ 676.883504][T22228] do_syscall_64+0x4c/0xa0 [ 676.887914][T22228] ? clear_bhb_loop+0x60/0xb0 [ 676.892590][T22228] ? clear_bhb_loop+0x60/0xb0 [ 676.897271][T22228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.903164][T22228] RIP: 0033:0x7f382219acb9 [ 676.907576][T22228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.927266][T22228] RSP: 002b:00007f3822ff2028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 676.935674][T22228] RAX: ffffffffffffffda RBX: 00007f3822415fa0 RCX: 00007f382219acb9 [ 676.943644][T22228] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000100 [ 676.951610][T22228] RBP: 00007f3822208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 676.959573][T22228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.967624][T22228] R13: 00007f3822416038 R14: 00007f3822415fa0 R15: 00007fffc692f078 [ 676.975683][T22228] [ 676.979186][T22228] Kernel Offset: disabled [ 676.983505][T22228] Rebooting in 86400 seconds..