last executing test programs: 5m53.116539616s ago: executing program 0 (id=678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x1, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x30}}, 0x4000000) 5m52.328620432s ago: executing program 0 (id=687): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x5}}, {@rq={'rq', 0x3d, 0x9}}]}}) 5m52.02336153s ago: executing program 0 (id=692): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009058202400000000009050302"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m50.265755233s ago: executing program 0 (id=712): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m49.850452418s ago: executing program 0 (id=718): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r0, &(0x7f0000000180)=[{0x0, 0x2}, {&(0x7f0000000700)="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"}], 0x1) 5m49.060142094s ago: executing program 0 (id=729): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x0) 5m48.423163131s ago: executing program 32 (id=729): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, 0x0, 0x0) 1m52.444578677s ago: executing program 4 (id=3912): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) 1m52.22483237s ago: executing program 4 (id=3915): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000740)={[{@userxattr}, {@metacopy_on}]}) 1m51.933656767s ago: executing program 4 (id=3920): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe0, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 1m51.636284924s ago: executing program 4 (id=3926): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m51.102223605s ago: executing program 4 (id=3934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x19, 0x0, 0x0) 1m50.648373902s ago: executing program 4 (id=3942): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x802) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/251, 0xfb}], 0x1) 1m50.232464386s ago: executing program 33 (id=3942): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x802) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/251, 0xfb}], 0x1) 4.412216442s ago: executing program 3 (id=5326): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x3a}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 4.11300003s ago: executing program 3 (id=5333): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) 3.842246376s ago: executing program 3 (id=5336): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x35, 0xfa, 0x2d, 0x40, 0x85a, 0x8, 0x7f81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3a, 0x0, 0x2, 0x6e, 0xc3, 0x14, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf8, 0x8, 0x22}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x2, 0x4, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.613066849s ago: executing program 5 (id=5341): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000003a00)={'dummy0\x00', {0x2, 0x4e23, @multicast2}}) 3.415330571s ago: executing program 5 (id=5343): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) 2.039439801s ago: executing program 3 (id=5361): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 1.89307074s ago: executing program 1 (id=5364): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=':c::/', 0x0) 1.814786204s ago: executing program 3 (id=5365): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000024c0)={0x814, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x804, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @nested={0x7e4, 0x1e, 0x0, 0x1, [@nested={0x591, 0x60, 0x0, 0x1, [@generic="6bc4c174d64011cd6b50ff3c1347a8ca709ab141cb14b9697d227d89a60799bc232e8b3af8b542d494764b328b79396f5331", @nested={0x4a1, 0xd5, 0x0, 0x1, [@nested={0x2c, 0x139, 0x0, 0x1, [@typed={0x5, 0x3, 0x0, 0x0, @binary='6'}, @typed={0x14, 0x112, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0xb8, 0x0, 0x0, @fd}, @nested={0x315, 0x21, 0x0, 0x1, [@generic="0bbc1709e740c97cfa7f34eeb3b2a660cb55ded69100834ce9f0d2e693dd02797dd6e9178d186cc467c6a9d9b309fc7ad884fd30287a9a54095e61acdfe85aad20a775b0920ee333de5605c0bf711ada5739deae1ac6d9e76ad97d4f00114234b8a4b5", @nested={0x4, 0x29}, @generic="64d5541770251a0741b9d3f0e7816ea76c8385fd34bab8353e7eb2a7103085d314d01a1519f0524ddb028cbe01bc13183486998f4d94891d10fe8489fc8b2e", @generic="c55e3e347d4e865d63c24f1a10c00ba98d6edd42b4c7c8c9200f8d097107fc17efc607e5521e9f97c8e68e340f0134629eb85c6caa10", @typed={0x19, 0xa9, 0x0, 0x0, @str='\\.{^x)^({,@]:\xfb}-i.)-\x00'}, @typed={0x71, 0xd5, 0x0, 0x0, @binary="b6a45de63544645e0c9caacb0d1541e954b2fe9a4824b0f39ffa9fe28d7ec51a5c934c9b0fa6138d76e855b8df3ac1857c650c3712b2c7cd0461ab63c1e0fcc8b3bf6e65d9a1337304f0a34a9bb3214a190effffff7f00000000b7053f2eb4be3910d1de93d0faf6e3bbbfd42f"}, @generic="ab3f1360d3b9f8f56f26e77a228d134ba6142c864cd0cad0cfb355c0b5812a5b33261a32ddedc3a99705bb25501b44c147140821f8bbaf909f41d45910df3af4498a00facc321add820328e42a6cf02a10283741637e6e692eb4a39fe4617f75bd67f70bf739d7d551f65684dc2a5f10672221513127593349fcd3014575f1ccb5805f4d1166e914170f710cb6c9c82355d0b8dad29588c699230aac6231aeacacdb1c1916a860792d5e05e895a279ca45e2f61b0b2ea45bc5fa75b8b276e5830a0d2aefc593e042399ed34c50f12c083ef9ef1b7d", @typed={0x8, 0x128, 0x0, 0x0, @pid}, @generic="9fed3dabf3c944a219d7920d950bd11790225f608f8cc5b8ad587ae2fe830acddcc7a1946075ff8271309a0934964782aea71d16ed1970cbc52214dca53dde33b186aedbb2faacc5ac0b78c5d189385ad54852e962a7ac1a758aa2aa9d94bc7bd45eee7e3c0222f0884486ed824dfe28585d2740745bf84b19090a9b0b41b4c936812f8d25ec907f46a7d83c37d7998d62f1d087a106e456d09686b7de8f3cc6fdde0d06f758843d99f71ef61e7c7c47c89cff29f71ba266613541773a6e2e31c65fcfff071a90b7"]}, @generic="d424b7875bb14d2955305c4a5fdff6de600a4af2c1b8e49dedb61b5977c960a46da7c9fa7406da4cac756b83ab1dfe034f55c6afd7ecb49d685b0be886559b8de5e4d4832066cdece4ec2791080a0e23f08fe6f000d67ef09e3099c5013af4fedc13546a67642a182e7edf56760efdc808061790a7db09", @generic="05122cf414f2617e8fa3475a3a9c3cf0c62154d9f40b0f06145cb2bd1ba0a1899b721dcc2ba70722e98a75cb0dcdf2bf3b9a46a204785a5b7e775a1d611ea2e21ec52fec268675104a895186e19c201f877b314c17118ed6edf2cb54d421c2d8d3bf6be14a8066d726154f6976c7ed6b4e9bbddb80fbf2042f930a2031f378b7588bc55364ce3e98e98120302e74c3009ebaf60a6ce0438aa417d46c17363e6d40ce5615a8bf01b5db03", @nested={0x1d, 0x79, 0x0, 0x1, [@generic="82e5138aae3ac5dad4716b40bf77ce9537bdcbe31a59f92d56"]}, @typed={0x8, 0x18, 0x0, 0x0, @fd}, @typed={0x8, 0x56, 0x0, 0x0, @uid}]}, @generic="2e5989b82a57050f649fabf954f96c70cbe0a8925b21922406b1be8ad2c4e18c97b1ccffb8525b485536290ec11562748f26d9e9ecbcbef3566a3844800a2c7faa640f69fd66270ededc403a1ef5918bc3df05a96ebd0a50549d503c78c3bd269d6d08b29e133cbd1caa1ff318d8ca9370416d1ee3783c75125e1fa85559b7bf813703b6305d1d18422ef490e4ac0d8cfd9ece54b80c4b316561fd95780995964ab7e44af71016c7a0eeb087284d51", @typed={0x8, 0xb2, 0x0, 0x0, @uid}]}, @nested={0x1c, 0xd1, 0x0, 0x1, [@typed={0xc, 0xb0, 0x0, 0x0, @u64=0x87cd}, @nested={0x4, 0x15}, @typed={0x8, 0x113, 0x0, 0x0, @fd}]}, @nested={0xc1, 0x1d, 0x0, 0x1, [@nested={0x4, 0xec}, @generic="e132267ad6d61c5951830e095658b9d7d9930ffe442164d77a06993dd67539f2b50aacd9e7dac3d6aec7d516cc77dffd9119f3effae7dd8f34ed6252407aa386cd9c3fb1d7e328a38839e9a0543c7242c47ac50751516e2d49a8890a7145516ba1e2e5caed15ad134971c7a524230634871428d5a5e1dbc4dc266aa28760f5cb72b3c4e197c88e7ace47bc3a483dcb36276e82de87507765e4e358cdfca433a0268eebe16b1cd356166bc23105e1d285ad33816488", @nested={0x4, 0x5b}]}, @nested={0x15d, 0x10f, 0x0, 0x1, [@nested={0x4, 0xd}, @typed={0x69, 0x34, 0x0, 0x0, @binary="fc97868e88733d7f7dc175138fba0350155c900480e948fb786b4616b37a295195462d7b43a7515b630e1b3ac1785c7c7c0eb0f609ef71a0cb52b9ee15262c4467cbad008a85a53822528faac877c04a2befec02f2db3097710e0af8e861844682ed547137"}, @generic="05ae26ca5095b47b49c7c510afeb5b2f82e69ca0d5498c4c043d769a41869df532705830b8dec8dc211d9b038f2552ae31a4bf5774574c1587cb39597a1863b89731f9a8f6cb0a105d997a687ba37c416c4d33c8037073a885c3876cac6687e9a73e97588eb71432465460cad07b65a03119dbdfc5f0600a911ba67582ff6da412f37c892e40f0b786a3731a114dae5ba74d06b8a95dd44993f49970c3f5d977d8d58dc814165bafbf0047d37bf3ba0657412bcfc2df8bb155bf56fbf6bd1f95e6f376260accbfa68996003a5a3597bce5d336c7f708c9b147cfd1d8936d162c8d858970fb15be0cb1"]}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x10}]}]}]}, 0x814}], 0x1}, 0x0) 1.690530541s ago: executing program 6 (id=5367): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) 1.631482425s ago: executing program 1 (id=5369): syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000040)='./file2\x00', 0x204000, &(0x7f0000000100)=ANY=[], 0x3, 0x1f5, &(0x7f0000000580)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x81c04) 1.54780714s ago: executing program 3 (id=5370): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000100202010200f0000000000000020000061800028014000180080001000a01"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef"], 0x0) 1.511854062s ago: executing program 6 (id=5371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a00000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007440000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000018000380"], 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 1.476287614s ago: executing program 2 (id=5372): r0 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0xc0104307, 0x0) 1.323436723s ago: executing program 6 (id=5373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xec, 0x19, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xec}}, 0x844) 1.304291534s ago: executing program 2 (id=5374): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x3a, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.164433922s ago: executing program 2 (id=5375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x2c, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.092961196s ago: executing program 6 (id=5376): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_clone(0x40000, 0x0, 0xfffffe66, 0x0, 0x0, 0x0) 1.067517138s ago: executing program 1 (id=5377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 974.623043ms ago: executing program 2 (id=5378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000001100)={0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff}) 741.239667ms ago: executing program 5 (id=5379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0bd547ed383dbc89b6f5bec0000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 690.42338ms ago: executing program 1 (id=5380): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/79) 681.59832ms ago: executing program 2 (id=5381): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 560.045897ms ago: executing program 6 (id=5382): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_FSSETXATTR(r0, 0x8902, &(0x7f0000000040)={0xe71, 0xe, 0x232, 0x40, 0x8}) 469.295913ms ago: executing program 5 (id=5383): unshare(0x2a060400) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) 283.895154ms ago: executing program 1 (id=5384): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x1, '&'}, 0xa, 0x1) 189.570329ms ago: executing program 5 (id=5385): r0 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000200)={0x0, 0x0, 0x100, 0x0, {0x2, 0xcd, 0x6, 0x800}}) 89.996365ms ago: executing program 2 (id=5386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 89.352025ms ago: executing program 1 (id=5387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c3b, 0x51a25}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xfec0ffffffffffff, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40044) 64.367596ms ago: executing program 6 (id=5388): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r0, 0x5, 0x0, &(0x7f0000000140)) 0s ago: executing program 5 (id=5389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x0) kernel console output (not intermixed with test programs): [ 348.658832][T12499] tmpfs: Bad value for 'mpol' [ 348.679649][ T27] audit: type=1326 audit(1770767830.964:2019): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=12494 comm="syz.3.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 348.882540][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 349.049465][T12510] autofs4:pid:12510:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 349.115624][T12510] autofs4:pid:12510:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 350.017935][ T4344] usb 5-1: USB disconnect, device number 22 [ 350.762042][ T27] audit: type=1400 audit(1770767833.244:2020): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12564 comm="syz.3.3656" [ 351.008875][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3661'. [ 351.070221][T12581] netlink: 'syz.2.3662': attribute type 10 has an invalid length. [ 351.152811][T12581] team0: Port device wlan1 added [ 351.519211][T12593] netlink: 'syz.3.3668': attribute type 1 has an invalid length. [ 351.528690][ T27] audit: type=1326 audit(1770767834.004:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.5.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 351.528868][T12593] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3668'. [ 351.599770][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3668'. [ 351.609727][ T27] audit: type=1326 audit(1770767834.004:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.5.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 351.689013][ T27] audit: type=1326 audit(1770767834.044:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.5.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 351.782334][T12602] ksmbd: Unknown IPC event: 4, ignore. [ 351.813990][ T27] audit: type=1326 audit(1770767834.044:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.5.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 351.879315][T12607] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3674'. [ 351.924927][ T27] audit: type=1326 audit(1770767834.044:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.5.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 351.928814][T12607] unsupported nlmsg_type 40 [ 353.320347][T12655] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 353.359535][T12655] netdevsim netdevsim1: Falling back to sysfs fallback for: þ [ 354.349817][ T4344] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 354.397972][T12696] xt_TCPMSS: Only works on TCP SYN packets [ 354.539606][ T4344] usb 3-1: Using ep0 maxpacket: 8 [ 354.560186][ T4344] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 354.579465][ T4344] usb 3-1: config 0 has no interface number 0 [ 354.585721][ T4344] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 354.646622][ T4344] usb 3-1: config 0 interface 96 has no altsetting 0 [ 354.696304][ T4344] usb 3-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 354.719637][ T4344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.742264][T12700] loop3: detected capacity change from 0 to 2048 [ 354.758234][ T4344] usb 3-1: Product: syz [ 354.768364][ T4344] usb 3-1: Manufacturer: syz [ 354.788382][ T4344] usb 3-1: SerialNumber: syz [ 354.803747][T12706] loop1: detected capacity change from 0 to 256 [ 354.814464][ T4344] usb 3-1: config 0 descriptor?? [ 354.825570][T12700] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 354.888858][T12706] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 354.907174][T12700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.350791][T12716] x_tables: duplicate underflow at hook 1 [ 355.433431][ T4344] usb 3-1: USB disconnect, device number 19 [ 356.023123][T12736] xt_ecn: cannot match TCP bits for non-tcp packets [ 356.580658][T12758] netlink: 3648 bytes leftover after parsing attributes in process `syz.5.3748'. [ 356.621165][T12758] netlink: 3648 bytes leftover after parsing attributes in process `syz.5.3748'. [ 357.183648][T12777] loop3: detected capacity change from 0 to 1024 [ 357.306675][T12777] hfsplus: xattr searching failed [ 357.659069][T12791] loop3: detected capacity change from 0 to 2048 [ 357.751699][T12791] loop3: p1 < > p4 < > [ 358.056295][T12805] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 358.526027][T12821] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.813732][T12833] netlink: 'syz.3.3784': attribute type 7 has an invalid length. [ 358.986709][T12841] loop5: detected capacity change from 0 to 16 [ 359.040829][T12841] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 359.479644][ T6451] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 359.669419][ T6451] usb 2-1: Using ep0 maxpacket: 8 [ 359.676666][ T6451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 359.707192][ T6451] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 359.741092][ T6451] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 359.760052][ T6451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.768295][ T6451] usb 2-1: Product: syz [ 359.772999][ T6451] usb 2-1: Manufacturer: syz [ 359.778462][ T6451] usb 2-1: SerialNumber: syz [ 359.829692][ T6451] usb 2-1: config 0 descriptor?? [ 360.271799][ T4271] usb 2-1: USB disconnect, device number 9 [ 360.344903][T12881] netlink: 'syz.4.3809': attribute type 2 has an invalid length. [ 360.353966][T12883] xt_socket: unknown flags 0x4c [ 360.399713][T12881] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3809'. [ 360.841042][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3815'. [ 361.099707][T12870] loop3: detected capacity change from 0 to 40427 [ 361.120877][T12870] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x3ffff [ 361.151086][T12870] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 361.219953][T12870] F2FS-fs (loop3): invalid crc value [ 361.237705][T12870] F2FS-fs (loop3): Found nat_bits in checkpoint [ 361.278229][T12907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3820'. [ 361.349680][T12910] xt_hashlimit: max too large, truncated to 1048576 [ 361.413337][T12870] F2FS-fs (loop3): Start checkpoint disabled! [ 361.464909][T12870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 361.953527][ T11] kworker/u4:1: attempt to access beyond end of device [ 361.953527][ T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 361.979475][ T6432] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 362.169663][ T6432] usb 6-1: Using ep0 maxpacket: 8 [ 362.176954][ T6432] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 362.200241][ T6432] usb 6-1: config 0 has no interface number 0 [ 362.235401][ T6432] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 362.254951][ T6432] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.283696][ T6432] usb 6-1: Product: syz [ 362.314844][ T6432] usb 6-1: Manufacturer: syz [ 362.325994][ T6432] usb 6-1: SerialNumber: syz [ 362.351052][ T6432] usb 6-1: config 0 descriptor?? [ 362.564962][ T6432] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 362.579486][ T6432] usb 6-1: Failed to initialize entity for entity 6 [ 362.587686][ T6432] usb 6-1: Failed to register entities (-22). [ 362.775785][ T6492] usb 6-1: USB disconnect, device number 12 [ 363.129699][ T6432] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 363.319617][ T6432] usb 5-1: Using ep0 maxpacket: 8 [ 363.331463][ T6432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 363.383686][ T6432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.413801][ T6432] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.463374][ T6432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 363.495324][ T6432] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 363.508641][ T6432] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 363.558808][ T6432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.585767][T12952] loop1: detected capacity change from 0 to 32768 [ 363.590472][ T6432] usb 5-1: config 0 descriptor?? [ 363.598248][T12955] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.798569][T12952] UFO tlock:0xffffc900028da120 [ 363.908295][ C0] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 364.155318][ T4282] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 364.166449][ T6432] usb 5-1: USB disconnect, device number 23 [ 364.736928][T13006] overlayfs: empty lowerdir [ 365.291578][T12989] loop3: detected capacity change from 0 to 32768 [ 365.353359][T12989] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.3862 (12989) [ 365.396025][T12989] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 365.425870][T12989] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 365.455837][T12989] BTRFS info (device loop3): force zlib compression, level 3 [ 365.474366][T13027] loop2: detected capacity change from 0 to 1024 [ 365.488220][T12989] BTRFS info (device loop3): force clearing of disk cache [ 365.507164][T12989] BTRFS info (device loop3): disabling tree log [ 365.522846][T13027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.553734][T12989] BTRFS info (device loop3): enabling disk space caching [ 365.617751][T12989] BTRFS info (device loop3): disk space caching is enabled [ 365.852330][T13041] loop5: detected capacity change from 0 to 4096 [ 365.905409][T13052] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.959494][T12989] BTRFS info (device loop3): enabling ssd optimizations [ 365.976467][T13041] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 366.089761][T13041] Remounting filesystem read-only [ 366.234383][ T4278] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 366.256082][T13063] loop1: detected capacity change from 0 to 64 [ 366.382340][T13063] Trying to free block not in datazone [ 366.399991][T13063] Trying to free block not in datazone [ 366.485377][T13063] Trying to free block not in datazone [ 367.219481][ T6429] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 367.429741][ T6429] usb 6-1: Using ep0 maxpacket: 8 [ 367.433661][ T6429] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 367.433698][ T6429] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.433721][ T6429] usb 6-1: config 0 interface 0 has no altsetting 0 [ 367.435947][ T6429] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 367.435977][ T6429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.435999][ T6429] usb 6-1: Product: syz [ 367.436015][ T6429] usb 6-1: Manufacturer: syz [ 367.436031][ T6429] usb 6-1: SerialNumber: syz [ 367.439827][ T6429] usb 6-1: config 0 descriptor?? [ 367.443786][ T6429] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 367.703816][ T6429] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 367.742403][ T6429] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 367.755096][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3910'. [ 367.780749][ T6429] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 367.922181][ T4271] usb 6-1: USB disconnect, device number 13 [ 367.930235][T13113] openvswitch: netlink: EtherType 0 is less than min 600 [ 368.074000][T13119] overlayfs: conflicting options: userxattr,metacopy=on [ 368.610979][T13142] loop4: detected capacity change from 0 to 128 [ 368.645683][T13142] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 368.690750][T13142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.794354][T13142] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 368.844924][T13149] loop3: detected capacity change from 0 to 128 [ 368.879034][T13142] UDF-fs: error (device loop4): udf_count_free_bitmap: udf_count_free failed [ 369.097686][ T4267] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh [ 369.111233][ T4267] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh [ 369.653419][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.811438][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.909576][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.062239][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.296965][T13189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.559462][T13075] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 370.761464][T13075] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.802962][T13075] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.889108][T13075] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 370.925100][T13075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.945966][T13075] usb 3-1: config 0 descriptor?? [ 371.062562][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.064566][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3960'. [ 371.082351][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.095086][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.105357][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.113281][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 371.121874][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.199740][T13075] usb 3-1: USB disconnect, device number 20 [ 371.239436][ T14] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 371.364331][T13206] lo speed is unknown, defaulting to 1000 [ 371.436894][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.443089][ T14] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 371.520207][ T14] usb 6-1: config 0 has no interface number 0 [ 371.547501][ T14] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 371.578602][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.621664][ T14] usb 6-1: config 0 descriptor?? [ 371.799502][ T93] block nbd0: Attempted send on invalid socket [ 371.805786][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 371.835623][ T4282] Bluetooth: hci1: Malformed LE Event: 0x0d [ 371.850187][ T14] usb 6-1: string descriptor 0 read error: -71 [ 371.862170][ T14] usb-storage 6-1:0.168: USB Mass Storage device detected [ 371.872118][ T14] usb-storage 6-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 371.951422][ T14] usb 6-1: USB disconnect, device number 14 [ 372.215225][T13235] netlink: 'syz.3.3967': attribute type 21 has an invalid length. [ 372.240508][T13235] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3967'. [ 372.283239][T13235] netlink: 'syz.3.3967': attribute type 5 has an invalid length. [ 372.378727][T13235] netlink: 'syz.3.3967': attribute type 6 has an invalid length. [ 372.409576][T13235] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3967'. [ 372.714385][T13249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3973'. [ 372.750671][T13249] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3973'. [ 372.941716][ T37] bond0: (slave wlan1): Releasing backup interface [ 372.955381][T13260] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 373.099751][ T4271] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 373.149666][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 373.159790][T13075] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 373.299485][ T4271] usb 6-1: Using ep0 maxpacket: 16 [ 373.311461][ T4271] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 373.340668][ T4271] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 373.347978][ T4271] usb 6-1: config 0 has no interface number 0 [ 373.369509][T13075] usb 2-1: Using ep0 maxpacket: 16 [ 373.378300][ T4271] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 373.380891][T13075] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 373.397869][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.419578][ T4271] usb 6-1: Product: syz [ 373.423810][ T4271] usb 6-1: Manufacturer: syz [ 373.428438][ T4271] usb 6-1: SerialNumber: syz [ 373.455244][T13075] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 373.462038][ T4271] usb 6-1: config 0 descriptor?? [ 373.479494][T13075] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 373.516626][T13075] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 373.527826][T13279] loop3: detected capacity change from 0 to 8 [ 373.534074][T13075] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 373.554334][T13279] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 373.563868][T13075] usb 2-1: config 0 has no interface number 0 [ 373.581536][ T4384] udevd[4384]: incorrect cramfs checksum on /dev/loop3 [ 373.588726][T13075] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 373.609867][T13279] cramfs: Error -3 while decompressing! [ 373.613602][T13075] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 373.625934][T13075] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 373.633212][T13279] cramfs: ffffffff96d8c1e8(26)->ffff888072ad8000(4096) [ 373.636541][T13075] usb 2-1: config 0 interface 125 has no altsetting 1 [ 373.661711][T13075] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 373.678814][T13075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.697189][ T4271] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 373.707514][T13075] usb 2-1: Product: syz [ 373.709391][ T4271] usb 6-1: No valid video chain found. [ 373.712194][T13279] cramfs: Error 2 while decompressing! [ 373.729712][T13075] usb 2-1: Manufacturer: syz [ 373.734579][T13279] cramfs: ffffffff96d8c202(26)->ffff8880b4c77000(4096) [ 373.749870][T13075] usb 2-1: SerialNumber: syz [ 373.754845][T13279] cramfs: Error -3 while decompressing! [ 373.779481][T13075] usb 2-1: config 0 descriptor?? [ 373.795455][T13279] cramfs: ffffffff96d8c21c(16)->ffff88804d5a4000(4096) [ 373.848143][ T4271] usb 6-1: USB disconnect, device number 15 [ 373.869775][T13279] cramfs: Error -3 while decompressing! [ 373.890369][T13279] cramfs: ffffffff96d8c1e8(26)->ffff888072ad8000(4096) [ 373.934404][T13206] chnl_net:caif_netlink_parms(): no params data found [ 374.289465][ T37] device hsr_slave_0 left promiscuous mode [ 374.332582][ T37] device hsr_slave_1 left promiscuous mode [ 374.349296][ T4271] usb 2-1: USB disconnect, device number 10 [ 374.386720][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.406483][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.428535][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.470620][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.487174][ T37] device bridge_slave_1 left promiscuous mode [ 374.534482][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.568387][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.711449][T13311] xt_hashlimit: max too large, truncated to 1048576 [ 374.718637][ T37] device veth1_macvtap left promiscuous mode [ 374.739745][ T37] device veth0_macvtap left promiscuous mode [ 374.759315][ T37] device veth1_vlan left promiscuous mode [ 374.778898][ T37] device veth0_vlan left promiscuous mode [ 375.231700][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 375.451732][T13318] loop2: detected capacity change from 0 to 32768 [ 375.528177][T13318] JBD2: Ignoring recovery information on journal [ 375.717050][T13318] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 375.891939][ T4268] ocfs2: Unmounting device (7,2) on (node local) [ 376.634467][ T37] team0 (unregistering): Port device team_slave_1 removed [ 376.712939][ T37] team0 (unregistering): Port device team_slave_0 removed [ 376.780815][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.848191][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.857938][ T6429] infiniband syz1: ib_query_port failed (-19) [ 376.983354][T13344] loop2: detected capacity change from 0 to 32768 [ 377.031352][T13344] XFS (loop2): Mounting V5 Filesystem [ 377.056787][T13344] XFS (loop2): Ending clean mount [ 377.071574][T13344] XFS (loop2): Quotacheck needed: Please wait. [ 377.148914][T13344] XFS (loop2): Quotacheck: Done. [ 377.319598][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 377.320349][ T4268] XFS (loop2): Unmounting Filesystem [ 377.770794][ T37] bond0 (unregistering): Released all slaves [ 377.921925][ T4344] bond0 speed is unknown, defaulting to 1000 [ 377.992639][T13206] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.047439][T13206] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.113152][T13206] device bridge_slave_0 entered promiscuous mode [ 378.161128][T13206] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.198084][T13206] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.270615][T13206] device bridge_slave_1 entered promiscuous mode [ 378.335289][T13206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.382859][T13206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.536007][T13206] team0: Port device team_slave_0 added [ 378.577394][T13380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4018'. [ 378.600485][T13380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4018'. [ 378.617348][T13380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4018'. [ 378.672823][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.673524][T13206] team0: Port device team_slave_1 added [ 378.679218][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.830613][T13206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.898107][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.943870][T13389] xt_hashlimit: size too large, truncated to 1048576 [ 378.952371][T13387] loop5: detected capacity change from 0 to 512 [ 378.969605][T13389] xt_hashlimit: max too large, truncated to 1048576 [ 378.977221][T13206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.131237][T13206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.138330][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.170938][T13387] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 379.215194][T13387] ext4 filesystem being mounted at /653/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.302873][T13387] EXT4-fs error (device loop5): ext4_xattr_block_list:713: inode #12: comm syz.5.4023: corrupted xattr block 6 [ 379.337902][T13206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.390658][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 379.537687][T13206] device hsr_slave_0 entered promiscuous mode [ 379.548793][ T5964] EXT4-fs (loop5): unmounting filesystem. [ 379.578819][T13206] device hsr_slave_1 entered promiscuous mode [ 379.657380][T13206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.689422][T13206] Cannot create hsr debugfs directory [ 380.286513][T13206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 380.352383][T13206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.401129][T13206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.429923][T13206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.748426][T13451] loop3: detected capacity change from 0 to 256 [ 380.804476][T13206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.879296][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.904745][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.952966][T13206] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.993241][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 381.012328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.067935][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.075153][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.183313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.221157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 381.261260][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.276933][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.284181][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.335451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 381.416461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 381.438977][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 381.483612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.513949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.540628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.598929][T13206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.639399][T13206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.673334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.684045][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.701087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.750317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.780070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.833559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 382.027259][ T27] audit: type=1326 audit(1770767864.504:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f39bf79 code=0x7ffc0000 [ 382.136093][ T27] audit: type=1326 audit(1770767864.554:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fde6f39bf79 code=0x7ffc0000 [ 382.286604][ T27] audit: type=1326 audit(1770767864.554:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f39bf79 code=0x7ffc0000 [ 382.336151][T13495] No such timeout policy "syz0" [ 382.356279][ T27] audit: type=1326 audit(1770767864.554:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f39bf79 code=0x7ffc0000 [ 382.935840][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.979729][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.009164][T13206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.526603][T13536] loop5: detected capacity change from 0 to 1024 [ 383.584834][T13536] hfsplus: Filesystem is marked locked, mounting read-only. [ 383.835612][T13544] tmpfs: Bad value for 'mpol' [ 384.758191][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.807707][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.877918][T13577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4093'. [ 384.912905][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.939660][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4095'. [ 384.959091][T13581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4095'. [ 384.960332][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.981401][T13581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4095'. [ 385.032155][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.066992][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.131296][T13206] device veth0_vlan entered promiscuous mode [ 385.182904][T13206] device veth1_vlan entered promiscuous mode [ 385.342584][T13206] device veth0_macvtap entered promiscuous mode [ 385.388153][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.408654][T13594] qrtr: Invalid version 0 [ 385.417775][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 385.459225][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 385.508609][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.560361][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 385.571372][T13206] device veth1_macvtap entered promiscuous mode [ 385.662136][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.713349][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.746524][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.777550][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.786451][T13570] loop5: detected capacity change from 0 to 32768 [ 385.797533][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.856786][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.894588][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.917602][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.940950][T13206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.967416][T13602] infiniband syz0: set active [ 385.993992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.029289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.038670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.081977][ T6430] lo speed is unknown, defaulting to 1000 [ 386.083194][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.149388][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.189476][ T4271] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 386.217003][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.248073][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.290515][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.337110][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.369530][T13206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.393152][T13618] loop5: detected capacity change from 0 to 2048 [ 386.402007][T13206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.412510][ T4271] usb 3-1: Using ep0 maxpacket: 32 [ 386.420136][ T4271] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 386.436499][ T4271] usb 3-1: config 0 has no interface number 0 [ 386.464348][T13206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.483091][T13621] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.489436][ T4271] usb 3-1: config 0 interface 6 has no altsetting 0 [ 386.525819][T13206] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.549916][ T4271] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=ab.5a [ 386.555050][T13619] loop3: detected capacity change from 0 to 4096 [ 386.567053][T13206] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.580856][T13618] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 386.598380][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.617116][T13206] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.633258][ T4271] usb 3-1: Product: syz [ 386.637489][ T4271] usb 3-1: Manufacturer: syz [ 386.645203][T13619] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 386.649410][T13206] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.673639][ T4271] usb 3-1: SerialNumber: syz [ 386.691417][ T4271] usb 3-1: config 0 descriptor?? [ 386.702998][T13618] Remounting filesystem read-only [ 386.713239][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.740869][T13624] loop1: detected capacity change from 0 to 512 [ 386.770487][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.849487][T13624] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.4110: inode has both inline data and extents flags [ 386.917656][ T4271] cdc_subset: probe of 3-1:0.6 failed with error -22 [ 386.974450][T13619] ntfs3: loop3: failed to convert "c46c" to cp1251 [ 386.991510][T13624] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4110: couldn't read orphan inode 15 (err -117) [ 387.016783][T13624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 387.155550][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.182666][ T26] usb 3-1: USB disconnect, device number 21 [ 387.189182][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.257079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 387.279873][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 387.297928][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.357937][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.388629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.429483][T13633] xt_TCPMSS: Only works on TCP SYN packets [ 387.763113][T13644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 387.958359][ T27] audit: type=1326 audit(1770767870.434:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.5.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 388.068625][ T27] audit: type=1326 audit(1770767870.444:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.5.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 388.199640][ T27] audit: type=1326 audit(1770767870.444:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.5.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 388.256947][T13660] netlink: 'syz.6.4124': attribute type 10 has an invalid length. [ 388.305201][ T27] audit: type=1326 audit(1770767870.444:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.5.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 388.451868][ T27] audit: type=1326 audit(1770767870.444:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.5.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 388.599487][ T27] audit: type=1326 audit(1770767870.444:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.5.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 388.719485][ T27] audit: type=1326 audit(1770767870.444:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.5.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 388.828941][ T27] audit: type=1326 audit(1770767870.444:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13649 comm="syz.5.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 389.191433][T13691] loop2: detected capacity change from 0 to 1024 [ 389.326894][T13691] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 389.338553][T13691] hfsplus: xattr searching failed [ 389.379836][T13691] syz.2.4137: attempt to access beyond end of device [ 389.379836][T13691] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 389.464250][T13691] Buffer I/O error on dev loop2, logical block 458752, async page read [ 389.504435][T13691] hfsplus: unable to mark blocks free: error -5 [ 389.557168][T13691] hfsplus: can't free extent [ 389.982198][T13714] loop2: detected capacity change from 0 to 8 [ 390.104133][T13714] SQUASHFS error: zlib decompression failed, data probably corrupt [ 390.150099][T13714] SQUASHFS error: Failed to read block 0x13e: -5 [ 390.173664][T13719] loop6: detected capacity change from 0 to 164 [ 390.180058][T13714] SQUASHFS error: Unable to read metadata cache entry [13c] [ 390.249437][T13714] SQUASHFS error: Unable to read directory block [13c:26] [ 390.457264][T13724] loop1: detected capacity change from 0 to 64 [ 390.899669][T13075] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 391.120365][T13075] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 391.146558][T13075] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.189452][T13075] usb 7-1: Product: syz [ 391.209605][T13075] usb 7-1: Manufacturer: syz [ 391.214273][T13075] usb 7-1: SerialNumber: syz [ 391.266046][T13075] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 391.327218][T13749] netlink: 'syz.3.4160': attribute type 12 has an invalid length. [ 391.376183][T13075] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 391.637297][ C0] usb 7-1: ath9k_htc: invalid pkt_len (fd10) [ 391.852042][ T22] usb 7-1: USB disconnect, device number 2 [ 391.880930][T13766] netlink: 'syz.5.4167': attribute type 10 has an invalid length. [ 391.903803][T13766] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4167'. [ 392.422479][T13780] loop5: detected capacity change from 0 to 2048 [ 392.431169][T13075] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 392.438238][T13075] ath9k_htc: Failed to initialize the device [ 392.465738][T13780] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=27485, location=27485 [ 392.479810][ T22] usb 7-1: ath9k_htc: USB layer deinitialized [ 392.540987][T13780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.557723][T13785] loop6: detected capacity change from 0 to 256 [ 392.636311][T13785] exfat: Deprecated parameter 'utf8' [ 392.665933][T13785] exfat: Deprecated parameter 'namecase' [ 392.720820][T13785] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 392.783857][T13754] loop2: detected capacity change from 0 to 40427 [ 392.848612][T13754] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 392.871831][T13754] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 392.918989][T13754] F2FS-fs (loop2): invalid crc value [ 393.052190][T13754] F2FS-fs (loop2): Found nat_bits in checkpoint [ 393.346631][T13754] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 393.364223][T13754] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 393.535612][T13775] loop1: detected capacity change from 0 to 32768 [ 393.635879][ T27] audit: type=1326 audit(1770767876.114:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13807 comm="syz.3.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 393.644627][T13775] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 393.644627][T13775] [ 393.744111][ T27] audit: type=1326 audit(1770767876.154:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13807 comm="syz.3.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 393.809549][T13775] xtLookup: xtSearch returned -5 [ 393.859526][T13775] free_index: error reading directory table [ 393.869675][ T27] audit: type=1326 audit(1770767876.154:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13807 comm="syz.3.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 393.908420][T13775] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 393.908420][T13775] [ 393.985599][ T27] audit: type=1326 audit(1770767876.154:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13807 comm="syz.3.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 394.000431][T13775] xtLookup: xtSearch returned -5 [ 394.130799][T13775] free_index: error reading directory table [ 394.136770][T13775] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 394.136770][T13775] [ 394.243411][T13825] x_tables: duplicate underflow at hook 4 [ 394.272149][T13775] xtLookup: xtSearch returned -5 [ 394.277179][T13775] free_index: error reading directory table [ 394.885101][ T27] audit: type=1326 audit(1770767877.364:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 395.050075][ T27] audit: type=1326 audit(1770767877.364:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 395.179655][ T27] audit: type=1326 audit(1770767877.484:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 395.286682][ T27] audit: type=1326 audit(1770767877.484:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 395.427006][ T27] audit: type=1326 audit(1770767877.484:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13847 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 395.770025][T13876] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4210'. [ 396.556072][T13900] tmpfs: Bad value for 'size' [ 396.616935][T13858] loop3: detected capacity change from 0 to 32768 [ 396.676824][T13858] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 396.676824][T13858] [ 396.725044][T13858] xtLookup: xtSearch returned -5 [ 396.748701][T13858] free_index: error reading directory table [ 396.780134][T13858] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 396.780134][T13858] [ 396.827696][T13858] xtLookup: xtSearch returned -5 [ 396.853222][T13858] free_index: error reading directory table [ 396.906507][T13858] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 396.906507][T13858] [ 396.964519][T13858] xtLookup: xtSearch returned -5 [ 396.991407][T13858] free_index: error reading directory table [ 397.472038][ T4282] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 397.481265][ T4282] Bluetooth: hci2: Injecting HCI hardware error event [ 397.490655][ T4279] Bluetooth: hci2: hardware error 0x00 [ 397.808182][T13946] 9pnet_fd: Insufficient options for proto=fd [ 398.333296][T13954] loop1: detected capacity change from 0 to 4096 [ 398.479624][T13966] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.480107][T13954] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 398.599900][T13954] NILFS (loop1): mounting fs with errors [ 398.756625][T13954] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 399.419611][ T22] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 399.439594][ T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 399.549691][ T4279] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 399.619605][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 399.627124][ T22] usb 3-1: config 0 has no interfaces? [ 399.629513][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 399.652739][ T14] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 399.657262][ T22] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 399.678006][ T14] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 399.700612][T14012] netlink: 'syz.6.4266': attribute type 21 has an invalid length. [ 399.708956][ T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 399.718194][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.724991][T14012] netlink: 'syz.6.4266': attribute type 6 has an invalid length. [ 399.734554][ T14] usb 2-1: config 0 has no interface number 0 [ 399.740101][ T22] usb 3-1: Product: syz [ 399.746728][ T14] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 48, changing to 9 [ 399.748324][ T22] usb 3-1: Manufacturer: syz [ 399.778696][ T14] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 8240, setting to 1024 [ 399.779146][ T22] usb 3-1: SerialNumber: syz [ 399.808756][ T14] usb 2-1: config 0 interface 104 has no altsetting 1 [ 399.835195][ T22] r8152-cfgselector 3-1: config 0 descriptor?? [ 399.840742][ T14] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 399.881517][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.895684][ T14] usb 2-1: Product: syz [ 399.900212][ T14] usb 2-1: Manufacturer: syz [ 399.911074][ T14] usb 2-1: SerialNumber: syz [ 399.916266][T14016] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4268'. [ 399.927628][ T14] usb 2-1: config 0 descriptor?? [ 399.941575][ T14] asix: probe of 2-1:0.104 failed with error -22 [ 400.071770][ T22] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 400.091577][ T53] usb 3-1: config 0 descriptor?? [ 400.192587][ T22] usb 2-1: USB disconnect, device number 11 [ 400.405312][ T53] usb 3-1: can't set config #0, error -71 [ 400.405595][ T14] usb 3-1: USB disconnect, device number 22 [ 400.674486][T14036] loop6: detected capacity change from 0 to 256 [ 400.758439][T14040] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.4280'. [ 400.976447][ T22] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 401.137453][T14050] xt_hashlimit: max too large, truncated to 1048576 [ 401.179404][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 401.186566][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.227785][ T22] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 401.277982][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.296166][ T22] usb 6-1: config 0 descriptor?? [ 401.320179][ T22] usb 6-1: bad CDC descriptors [ 401.565494][ T22] usb 6-1: USB disconnect, device number 16 [ 401.694259][T14070] x_tables: duplicate entry at hook 3 [ 401.708440][T14072] loop6: detected capacity change from 0 to 764 [ 402.215937][T14082] loop3: detected capacity change from 0 to 4096 [ 402.276549][T14090] loop5: detected capacity change from 0 to 256 [ 402.288463][T14082] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 402.339717][T14090] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 402.469489][ T14] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 402.661418][ T14] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 402.680193][ T14] usb 7-1: config 8 has no interface number 0 [ 402.719911][ T14] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 402.752390][ T14] usb 7-1: config 8 interface 177 has no altsetting 0 [ 402.752435][ T14] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 402.752462][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.758663][T14088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 402.967840][ T14] usb 7-1: string descriptor 0 read error: -71 [ 402.988301][ C0] ir_toy 7-1:8.177: out urb status: -71 [ 403.389609][ T6430] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 403.499433][ T14] ir_toy 7-1:8.177: could not write reset command: -110 [ 403.506605][ T14] ir_toy: probe of 7-1:8.177 failed with error -110 [ 403.536284][ T14] usb 7-1: USB disconnect, device number 3 [ 403.581344][ T6430] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 403.604071][ T6430] usb 3-1: config 0 has no interface number 0 [ 403.619672][ T6430] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.665527][ T6430] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 403.721016][ T6430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.729189][ T6430] usb 3-1: Product: syz [ 403.770496][ T6430] usb 3-1: Manufacturer: syz [ 403.775171][ T6430] usb 3-1: SerialNumber: syz [ 403.802800][ T6430] usb 3-1: config 0 descriptor?? [ 403.845547][ T6430] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 404.060664][ C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 404.272755][ T6429] usb 3-1: USB disconnect, device number 23 [ 404.298402][ T6429] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 404.621574][T14167] overlayfs: failed to resolve './file0': -2 [ 404.813654][T14172] loop1: detected capacity change from 0 to 1024 [ 404.853359][T14172] EXT4-fs: Ignoring removed oldalloc option [ 404.879580][T14172] EXT4-fs: Ignoring removed orlov option [ 404.914067][T14172] EXT4-fs: Ignoring removed oldalloc option [ 404.969149][T14172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.054995][T14172] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 405.122807][T14172] EXT4-fs error (device loop1): ext4_xattr_set_entry:1617: inode #13: comm syz.1.4338: corrupted xattr entries [ 405.253353][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.291035][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.291333][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 405.334806][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.524935][T14201] netlink: 'syz.2.4349': attribute type 6 has an invalid length. [ 405.568220][T14201] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4349'. [ 406.161977][T14222] usb usb8: usbfs: process 14222 (syz.2.4360) did not claim interface 8 before use [ 407.046258][T14244] openvswitch: netlink: Key type 29 is not supported [ 407.090610][T14227] loop3: detected capacity change from 0 to 32768 [ 407.119517][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 407.193527][T14227] XFS (loop3): Mounting V5 Filesystem [ 407.299432][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 407.307109][ T22] usb 7-1: unable to get BOS descriptor or descriptor too short [ 407.328476][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 407.329152][T14227] XFS (loop3): Ending clean mount [ 407.349460][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 407.359660][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 407.372577][ T22] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 407.389438][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 407.399204][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 407.423233][ T22] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 407.448601][T14257] device vlan0 entered promiscuous mode [ 407.456861][ T22] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 407.489390][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.529556][ T22] usb 7-1: Product: syz [ 407.533797][ T22] usb 7-1: Manufacturer: syz [ 407.538524][ T22] usb 7-1: SerialNumber: syz [ 407.581977][ T22] usb 7-1: config 0 descriptor?? [ 407.589971][T14242] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 407.671938][ T4278] XFS (loop3): Unmounting Filesystem [ 407.788473][ T8584] udevd[8584]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.941397][ T22] usb 7-1: USB disconnect, device number 4 [ 408.694536][T14285] loop1: detected capacity change from 0 to 4096 [ 408.747149][T14289] loop6: detected capacity change from 0 to 2048 [ 408.758646][T14285] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 408.801640][T14285] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 408.813542][T14289] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 408.876014][T14265] loop2: detected capacity change from 0 to 32768 [ 408.891834][T14289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.930526][T14295] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 408.978630][T14265] (syz.2.4375,14265,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 409.087744][T14265] (syz.2.4375,14265,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 409.099849][T14297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4387'. [ 409.268807][T14265] JBD2: Ignoring recovery information on journal [ 409.460103][T14265] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 409.810450][T14315] loop5: detected capacity change from 0 to 128 [ 409.878680][ T4268] ocfs2: Unmounting device (7,2) on (node local) [ 410.180474][T14326] loop1: detected capacity change from 0 to 512 [ 410.278820][T14326] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 410.319678][T14326] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 410.367636][T14326] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 410.409088][T14326] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 410.450240][T14326] System zones: 0-2, 18-18, 34-35 [ 410.490570][T14326] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 410.605314][T14345] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4404'. [ 410.678083][T14347] netlink: 'syz.6.4405': attribute type 10 has an invalid length. [ 410.852248][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 410.977292][T14354] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 411.217560][T14364] loop1: detected capacity change from 0 to 128 [ 411.874402][T14387] 9p: Unknown access argument z: -22 [ 411.924676][T14386] device sit0 entered promiscuous mode [ 411.978435][T14386] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4422'. [ 412.550687][T14410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4430'. [ 412.609598][T14413] loop6: detected capacity change from 0 to 8 [ 412.704478][T14373] loop3: detected capacity change from 0 to 32768 [ 412.754669][T14413] SQUASHFS error: Unable to read directory block [1d0:0] [ 412.847344][T14419] netlink: 'syz.5.4435': attribute type 10 has an invalid length. [ 413.645490][T14442] loop1: detected capacity change from 0 to 4096 [ 413.694088][T14446] misc userio: No port type given on /dev/userio [ 413.779767][T14451] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.872962][T14442] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 413.980495][T14442] Remounting filesystem read-only [ 414.129863][T14457] loop6: detected capacity change from 0 to 1024 [ 414.219111][T14457] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 414.412107][T13206] EXT4-fs (loop6): unmounting filesystem. [ 414.926681][T14486] loop2: detected capacity change from 0 to 256 [ 415.442767][T14502] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.907753][T14471] loop6: detected capacity change from 0 to 32768 [ 416.053046][T14471] XFS (loop6): Mounting V5 Filesystem [ 416.270705][T14471] XFS (loop6): Ending clean mount [ 416.347980][T14539] netlink: 'syz.5.4480': attribute type 13 has an invalid length. [ 416.432877][T14539] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4480'. [ 416.480515][T14539] syz_tun: refused to change device tx_queue_len [ 416.505691][T14539] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 416.575068][T13206] XFS (loop6): Unmounting Filesystem [ 416.968696][T14557] netlink: 'syz.3.4489': attribute type 1 has an invalid length. [ 417.024565][T14557] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4489'. [ 417.109431][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 417.284902][ T26] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 417.316566][ T14] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 417.356516][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.393665][ T14] usb 2-1: config 0 descriptor?? [ 417.482462][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 417.508088][ T26] usb 6-1: not running at top speed; connect to a high speed hub [ 417.540751][ T26] usb 6-1: config 12 has an invalid interface number: 184 but max is 0 [ 417.609630][ T26] usb 6-1: config 12 has no interface number 0 [ 417.636427][ T26] usb 6-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 417.705521][T14580] loop3: detected capacity change from 0 to 1024 [ 417.722389][ T26] usb 6-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 417.759436][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.770212][T14580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.777081][T14580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.784881][T14585] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4496'. [ 417.806683][ T26] usb 6-1: Product: syz [ 417.816811][ T26] usb 6-1: Manufacturer: syz [ 417.831962][ T26] usb 6-1: SerialNumber: syz [ 417.838644][T14585] 0ªX¹¦À: renamed from caif0 [ 417.839288][ T14] ath6kl: Failed to submit usb control message: -71 [ 417.858275][T14580] EXT4-fs: Ignoring removed i_version option [ 417.878887][ T14] ath6kl: unable to send the bmi data to the device: -71 [ 417.904381][T14580] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 417.913193][ T14] ath6kl: Unable to send get target info: -71 [ 417.914066][ T14] ath6kl: Failed to init ath6kl core: -71 [ 417.945836][T14585] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 417.990568][T14580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 418.000070][ T14] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 418.028145][ T14] usb 2-1: USB disconnect, device number 12 [ 418.163699][ T26] usb 6-1: USB disconnect, device number 17 [ 418.210483][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 418.440712][T14601] trusted_key: encrypted_key: insufficient parameters specified [ 418.502413][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.657467][ T27] audit: type=1326 audit(1770767901.134:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14605 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 418.760191][ T27] audit: type=1326 audit(1770767901.144:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14605 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 418.889836][ T27] audit: type=1326 audit(1770767901.144:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14605 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 418.999466][ T27] audit: type=1326 audit(1770767901.144:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14605 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 419.154902][ T27] audit: type=1326 audit(1770767901.144:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14605 comm="syz.3.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 419.250223][T14626] netlink: 720 bytes leftover after parsing attributes in process `syz.1.4513'. [ 419.780455][ T27] audit: type=1326 audit(1770767902.264:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 419.889404][ T27] audit: type=1326 audit(1770767902.314:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 419.957719][T14643] loop6: detected capacity change from 0 to 8192 [ 419.987020][ T27] audit: type=1326 audit(1770767902.314:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 420.058993][T14643] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.119394][ T27] audit: type=1326 audit(1770767902.314:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 420.123000][T14643] FAT-fs (loop6): error, clusters badly computed (1 != 0) [ 420.160806][T14662] loop5: detected capacity change from 0 to 128 [ 420.244472][T14662] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 420.318264][T14643] FAT-fs (loop6): Filesystem has been set read-only [ 420.386762][T14643] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 420.459877][T14643] FAT-fs (loop6): error, clusters badly computed (3 != 2) [ 420.467266][T14643] FAT-fs (loop6): error, clusters badly computed (4 != 3) [ 421.031380][T14678] loop2: detected capacity change from 0 to 4096 [ 421.071904][T14678] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 421.179591][ T14] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 421.228109][T14678] ntfs3: loop2: failed to convert "c46c" to euc-jp [ 421.259432][ T6429] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 421.381552][ T14] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 421.399397][ T14] usb 4-1: config 0 has no interface number 0 [ 421.432053][ T14] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 421.453107][ T6429] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 421.472792][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.484095][ T6429] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 421.509444][ T14] usb 4-1: Product: syz [ 421.513688][ T14] usb 4-1: Manufacturer: syz [ 421.534188][T14697] loop1: detected capacity change from 0 to 736 [ 421.539439][ T6429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.548785][ T6429] usb 6-1: Product: syz [ 421.558576][ T14] usb 4-1: SerialNumber: syz [ 421.597176][ T14] usb 4-1: config 0 descriptor?? [ 421.609456][ T6429] usb 6-1: Manufacturer: syz [ 421.614130][ T6429] usb 6-1: SerialNumber: syz [ 421.622610][ T14] hub 4-1:0.132: bad descriptor, ignoring hub [ 421.628846][ T14] hub: probe of 4-1:0.132 failed with error -5 [ 421.657940][ T6429] usb 6-1: config 0 descriptor?? [ 421.678165][ T6429] hub 6-1:0.0: bad descriptor, ignoring hub [ 421.697873][ T14] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input26 [ 421.719394][ T6429] hub: probe of 6-1:0.0 failed with error -5 [ 421.732436][ T6429] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27 [ 421.975289][T14700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.040013][T14700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.133860][T14700] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 422.390661][ T26] usb 6-1: USB disconnect, device number 18 [ 422.742550][T14720] loop6: detected capacity change from 0 to 8192 [ 422.770081][T14720] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 422.846474][T14720] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 422.992752][T14720] REISERFS (device loop6): using ordered data mode [ 423.032495][T14720] reiserfs: using flush barriers [ 423.119429][T13075] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 423.124653][T14720] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 423.289792][T14720] REISERFS (device loop6): checking transaction log (loop6) [ 423.323509][T14744] ubi30: attaching mtd0 [ 423.328273][T14744] ubi30 error: ubi_attach_mtd_dev: bad VID header (10535) or data offsets (10599) [ 423.330805][T13075] usb 2-1: not running at top speed; connect to a high speed hub [ 423.356463][T14720] REISERFS (device loop6): Using r5 hash to sort names [ 423.387412][T13075] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 423.389835][T14720] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 423.415524][T13075] usb 2-1: config 95 has no interface number 0 [ 423.434621][T13075] usb 2-1: config 95 interface 1 has no altsetting 0 [ 423.467897][T13075] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 423.469407][T14720] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 423.529446][T13075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.589589][T13075] usb 2-1: Product: syz [ 423.593920][T13075] usb 2-1: Manufacturer: syz [ 423.598565][T13075] usb 2-1: SerialNumber: syz [ 423.984312][T13075] usb 2-1: USB disconnect, device number 13 [ 424.255984][T14761] loop2: detected capacity change from 0 to 4096 [ 424.319765][T14761] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 424.438372][T14762] loop5: detected capacity change from 0 to 4096 [ 424.519128][T14762] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 424.677372][T14762] ntfs3: loop5: ino=0, attr_set_size [ 425.133509][T14787] devpts: called with bogus options [ 425.499644][T13075] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 425.677141][T14808] netlink: 'syz.5.4582': attribute type 6 has an invalid length. [ 425.689518][T13075] usb 7-1: Using ep0 maxpacket: 32 [ 425.700535][T13075] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 425.756443][T13075] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.799816][T13075] usb 7-1: Product: syz [ 425.804151][T13075] usb 7-1: Manufacturer: syz [ 425.834264][T13075] usb 7-1: SerialNumber: syz [ 425.870261][T13075] usb 7-1: config 0 descriptor?? [ 426.102952][T13075] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device: [ 426.110448][T14823] SET target dimension over the limit! [ 426.134708][T13075] eb aa 3b 80 9b e4 7a f0 [ 426.154980][T13075] snd-usb-6fire: probe of 7-1:0.0 failed with error -5 [ 426.370010][T13075] usb 7-1: USB disconnect, device number 5 [ 426.520149][ T6429] usb 4-1: USB disconnect, device number 23 [ 426.536074][T14836] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 427.029603][ T6429] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 427.123205][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4602'. [ 427.429513][ T6429] usb 4-1: Using ep0 maxpacket: 8 [ 427.440667][ T6429] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 427.458977][ T6429] usb 4-1: config 6 has no interface number 0 [ 427.516243][ T6429] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 427.537086][ T6429] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 427.572351][ T6429] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 427.590935][ T6429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.614602][ T6429] usb 4-1: Product: syz [ 427.618846][ T6429] usb 4-1: Manufacturer: syz [ 427.673859][ T6429] usb 4-1: SerialNumber: syz [ 427.701361][ T6429] hso 4-1:6.2: Failed to find INT IN ep [ 427.962679][T13075] usb 4-1: USB disconnect, device number 24 [ 428.032190][T14882] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4614'. [ 428.593461][T14903] loop2: detected capacity change from 0 to 128 [ 428.752690][T14906] Non-string source [ 429.071172][T14917] Cannot find map_set index 33 as target [ 429.249543][ T6429] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 429.461556][ T6429] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 429.482583][ T6429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.523758][ T6429] usb 3-1: config 0 descriptor?? [ 429.563910][ T6429] cp210x 3-1:0.0: cp210x converter detected [ 429.630845][T14941] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.4642'. [ 429.777786][ T6429] usb 3-1: cp210x converter now attached to ttyUSB0 [ 429.849216][T14948] netlink: 'syz.1.4644': attribute type 27 has an invalid length. [ 429.867925][T14948] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4644'. [ 429.982074][ T6429] usb 3-1: USB disconnect, device number 24 [ 430.022176][ T6429] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 430.055550][ T6429] cp210x 3-1:0.0: device disconnected [ 430.108042][T14956] overlayfs: conflicting options: userxattr,redirect_dir=on [ 430.286751][T14960] xt_cgroup: xt_cgroup: no path or classid specified [ 430.497190][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4655'. [ 430.515666][T14968] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 430.553909][T14968] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 430.609182][T14968] device bridge1 entered promiscuous mode [ 430.850692][T14980] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4661'. [ 431.141109][T14992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4666'. [ 431.419472][ T14] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 431.466847][T15004] netlink: 'syz.3.4673': attribute type 32 has an invalid length. [ 431.611398][ T14] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 431.626270][ T14] usb 7-1: config 0 has no interface number 0 [ 431.640314][ T14] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 431.660104][ T14] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.695645][ T14] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 431.740265][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.769813][ T14] usb 7-1: Product: syz [ 431.774126][ T14] usb 7-1: Manufacturer: syz [ 431.778761][ T14] usb 7-1: SerialNumber: syz [ 431.806175][ T14] usb 7-1: config 0 descriptor?? [ 431.816442][T14990] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 431.845623][ T14] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 431.873971][ T14] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 431.886390][T15014] netlink: 'syz.5.4678': attribute type 2 has an invalid length. [ 431.956518][T15014] device .*! entered promiscuous mode [ 432.022967][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4680'. [ 432.289425][ T14] usb 7-1: USB disconnect, device number 6 [ 432.305834][T14988] loop2: detected capacity change from 0 to 40427 [ 432.326818][ T14] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 432.348684][ T14] cyberjack 7-1:0.69: device disconnected [ 432.363313][T14988] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 432.390022][T14988] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 432.482419][T14988] F2FS-fs (loop2): Found nat_bits in checkpoint [ 432.529837][T15034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.634119][T14988] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 432.657059][T14988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 432.737456][T15039] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4688'. [ 433.045276][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4691'. [ 433.089473][T15044] openvswitch: netlink: Flow key attr not present in new flow. [ 433.342275][T15057] sctp: [Deprecated]: syz.5.4696 (pid 15057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.342275][T15057] Use struct sctp_sack_info instead [ 434.009679][ T4271] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 434.212049][T15089] netlink: 'syz.2.4711': attribute type 5 has an invalid length. [ 434.219409][ T4271] usb 4-1: Using ep0 maxpacket: 32 [ 434.227351][ T4271] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 434.235077][T15089] netlink: 'syz.2.4711': attribute type 11 has an invalid length. [ 434.280325][ T4271] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 434.307401][ T4271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.328016][ T4271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 434.343176][T15094] netlink: 744 bytes leftover after parsing attributes in process `syz.6.4714'. [ 434.370928][ T4271] usb 4-1: config 1 has no interface number 0 [ 434.377194][ T4271] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 434.387818][ T4271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.422920][ T4271] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 434.500409][ T27] audit: type=1326 audit(1770767916.984:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15097 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 434.523200][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.560403][ T27] audit: type=1326 audit(1770767917.014:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15097 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 434.583721][ T4344] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 434.633941][ T4271] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 434.649864][ T4271] snd_usb_pod 4-1:1.1: invalid control EP [ 434.666358][ T4271] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 434.677285][ T27] audit: type=1326 audit(1770767917.014:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15097 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 434.710709][ T4271] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 434.718424][ T4271] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 434.758328][ T27] audit: type=1326 audit(1770767917.014:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15097 comm="syz.5.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 434.811688][ T4344] usb 2-1: unable to get BOS descriptor or descriptor too short [ 434.839858][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.848458][T13075] usb 4-1: USB disconnect, device number 25 [ 434.848915][ T4344] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 434.913886][ T4344] usb 2-1: config 1 interface 0 has no altsetting 1 [ 434.962054][ T4344] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 434.982847][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.034083][ T4344] usb 2-1: Product: syz [ 435.038331][ T4344] usb 2-1: Manufacturer: syz [ 435.066220][ T4344] usb 2-1: SerialNumber: syz [ 435.089827][ T4344] smsusb:smsusb_probe: board id=8, interface number 0 [ 435.118835][T15116] delete_channel: no stack [ 435.297226][ T4344] smsusb:smsusb_probe: Device initialized with return code -19 [ 435.554628][T15129] xt_NFQUEUE: number of total queues is 0 [ 435.595230][T13075] usb 2-1: USB disconnect, device number 14 [ 435.835309][T15138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4734'. [ 435.852483][T15138] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4734'. [ 435.892601][T15138] netlink: 'syz.3.4734': attribute type 3 has an invalid length. [ 435.908002][T15138] netlink: 'syz.3.4734': attribute type 2 has an invalid length. [ 435.926809][T15138] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4734'. [ 436.032054][T15144] loop2: detected capacity change from 0 to 1024 [ 436.367582][T15122] loop6: detected capacity change from 0 to 32768 [ 436.397450][T15154] loop1: detected capacity change from 0 to 512 [ 436.460116][T15122] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 436.540901][T15154] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 436.628367][T15122] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 436.653531][T15154] EXT4-fs (loop1): 1 truncate cleaned up [ 436.687005][T15154] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 436.712283][T15122] (syz.6.4728,15122,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 436.763918][T15154] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.4742: Logical block already allocated [ 436.808977][T15122] (syz.6.4728,15122,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 436.849374][T15122] (syz.6.4728,15122,1):ocfs2_mknod:298 ERROR: status = -2 [ 436.856610][T15122] (syz.6.4728,15122,1):ocfs2_mknod:502 ERROR: status = -2 [ 436.976285][T15122] (syz.6.4728,15122,1):ocfs2_create:676 ERROR: status = -2 [ 437.095282][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 437.168583][T13206] ocfs2: Unmounting device (7,6) on (node local) [ 437.870020][ T4271] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 437.948404][T15207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4766'. [ 438.069468][ T4271] usb 7-1: Using ep0 maxpacket: 16 [ 438.079271][ T4271] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 438.101626][ T4271] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.119415][ T4271] usb 7-1: Product: syz [ 438.139462][ T4271] usb 7-1: Manufacturer: syz [ 438.146222][ T4271] usb 7-1: SerialNumber: syz [ 438.166470][ T4271] usb 7-1: config 0 descriptor?? [ 438.174452][ T4271] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 438.212990][ T4271] usb 7-1: Detected FT232H [ 438.424329][T15223] ipt_CLUSTERIP: Please specify destination IP [ 438.425347][T15222] netlink: 'syz.1.4774': attribute type 46 has an invalid length. [ 438.450859][T15222] netlink: 'syz.1.4774': attribute type 19 has an invalid length. [ 438.459606][ T26] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 438.478844][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4774'. [ 438.580675][ T4271] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 438.590453][ T4271] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 438.624148][ T4271] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 438.649974][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 438.661273][ T26] usb 6-1: config 0 has an invalid interface number: 225 but max is 0 [ 438.679141][ T4271] usb 7-1: USB disconnect, device number 7 [ 438.688409][ T26] usb 6-1: config 0 has no interface number 0 [ 438.711980][ T4271] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 438.723584][ T26] usb 6-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 438.740001][ T4271] ftdi_sio 7-1:0.0: device disconnected [ 438.750958][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.758990][ T26] usb 6-1: Product: syz [ 438.790527][ T26] usb 6-1: Manufacturer: syz [ 438.803646][ T26] usb 6-1: SerialNumber: syz [ 438.820974][ T26] usb 6-1: config 0 descriptor?? [ 438.833495][T15233] infiniband syz0: set down [ 439.043907][ T26] mos7840 6-1:0.225: required endpoints missing [ 439.208636][ T4373] lo speed is unknown, defaulting to 1000 [ 439.240896][ T4373] lo speed is unknown, defaulting to 1000 [ 439.296281][ T4373] usb 6-1: USB disconnect, device number 19 [ 439.826529][T15260] netlink: 'syz.3.4792': attribute type 10 has an invalid length. [ 439.848230][T15262] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4790'. [ 439.870819][T15260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4792'. [ 439.939371][T15260] device dummy0 entered promiscuous mode [ 439.945818][T15260] bridge0: port 3(dummy0) entered blocking state [ 439.982827][T15260] bridge0: port 3(dummy0) entered disabled state [ 440.011512][T15260] bridge0: port 3(dummy0) entered blocking state [ 440.018032][T15260] bridge0: port 3(dummy0) entered listening state [ 440.114021][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.120425][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.990217][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4813'. [ 441.109420][ T4373] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 441.274811][T15309] loop2: detected capacity change from 0 to 4096 [ 441.327684][T15309] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 441.330912][ T4373] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 441.394415][ T4373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.425585][ T4373] usb 7-1: config 0 descriptor?? [ 441.746949][T13075] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 441.846500][T15327] loop3: detected capacity change from 0 to 4096 [ 441.857994][ T4373] ath6kl: Failed to submit usb control message: -71 [ 441.865774][ T4373] ath6kl: unable to send the bmi data to the device: -71 [ 441.881409][ T4373] ath6kl: Unable to send get target info: -71 [ 441.909608][ T4373] ath6kl: Failed to init ath6kl core: -71 [ 441.937893][T15327] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 441.957806][T13075] usb 6-1: string descriptor 0 read error: -22 [ 441.982695][T13075] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 441.998454][T15327] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 442.025964][T13075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.028080][T15327] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 442.080257][ T4373] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 442.096842][T13075] usb 6-1: config 0 descriptor?? [ 442.115653][ T4373] usb 7-1: USB disconnect, device number 8 [ 442.118799][T13075] usbtest 6-1:0.0: FX2 device [ 442.130309][T15327] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 442.135684][T13075] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 442.239228][T15327] ntfs: volume version 3.1. [ 442.276739][T15327] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 442.307666][T15327] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 442.339275][T15327] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 442.409117][T15327] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 442.418164][ T4373] usb 6-1: USB disconnect, device number 20 [ 442.443048][T15327] ntfs: (device loop3): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 443.269631][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 443.310449][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 443.369421][T15373] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 444.189886][T15401] netlink: 'syz.6.4857': attribute type 10 has an invalid length. [ 444.218371][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4857'. [ 444.248984][T15401] device dummy0 entered promiscuous mode [ 444.278285][T15401] bridge0: port 3(dummy0) entered blocking state [ 444.299744][T15401] bridge0: port 3(dummy0) entered disabled state [ 444.328708][T15401] bridge0: port 3(dummy0) entered blocking state [ 444.335346][T15401] bridge0: port 3(dummy0) entered forwarding state [ 444.429594][ T4373] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 444.603092][T15413] loop1: detected capacity change from 0 to 256 [ 444.619500][ T4373] usb 4-1: Using ep0 maxpacket: 16 [ 444.626996][ T4373] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.662552][ T4373] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 444.689780][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.718482][ T4373] usb 4-1: Product: syz [ 444.738741][ T4373] usb 4-1: Manufacturer: syz [ 444.769274][ T4373] usb 4-1: SerialNumber: syz [ 444.790953][ T4373] usb 4-1: config 0 descriptor?? [ 444.821941][ T4373] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 444.849742][ T4373] gspca_stv06xx: st6422 sensor detected [ 444.972071][T15422] netlink: 'syz.5.4869': attribute type 10 has an invalid length. [ 445.187682][T15429] loop1: detected capacity change from 0 to 64 [ 445.321689][ T4373] STV06xx: probe of 4-1:0.0 failed with error -71 [ 445.347672][ T4373] usb 4-1: USB disconnect, device number 26 [ 446.411631][T15469] netlink: 'syz.1.4891': attribute type 10 has an invalid length. [ 446.433347][T15469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4891'. [ 446.476295][T15469] device dummy0 entered promiscuous mode [ 446.487571][T15469] bridge0: port 3(dummy0) entered blocking state [ 446.502318][T15472] binfmt_misc: register: failed to install interpreter file ./file0 [ 446.532588][T15469] bridge0: port 3(dummy0) entered disabled state [ 446.576808][T15469] bridge0: port 3(dummy0) entered blocking state [ 446.585057][T15469] bridge0: port 3(dummy0) entered forwarding state [ 447.049387][T13075] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 447.239392][T13075] usb 4-1: Using ep0 maxpacket: 32 [ 447.248781][T13075] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 447.286318][T13075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.294825][T13075] usb 4-1: Product: syz [ 447.299036][T13075] usb 4-1: Manufacturer: syz [ 447.323808][T13075] usb 4-1: SerialNumber: syz [ 447.336931][T13075] usb 4-1: config 0 descriptor?? [ 447.346363][T13075] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 447.561297][T13075] gspca_ov534_9: reg_w failed -71 [ 448.087407][T13075] gspca_ov534_9: Unknown sensor 0000 [ 448.087477][T13075] ov534_9: probe of 4-1:0.0 failed with error -22 [ 448.137583][T13075] usb 4-1: USB disconnect, device number 27 [ 448.388121][T15537] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4926'. [ 448.395090][T15539] loop6: detected capacity change from 0 to 512 [ 448.524019][T15547] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4930'. [ 448.540507][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4929'. [ 448.558847][T15539] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 448.579022][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4929'. [ 448.639775][T15539] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.819539][ T4344] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 448.866188][T13206] EXT4-fs (loop6): unmounting filesystem. [ 448.878334][T15553] netlink: 'syz.5.4933': attribute type 1 has an invalid length. [ 449.249613][ T4344] usb 3-1: Using ep0 maxpacket: 16 [ 449.268479][ T4344] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 449.300623][ T4344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.329074][ T4344] usb 3-1: Product: syz [ 449.344437][ T4344] usb 3-1: Manufacturer: syz [ 449.354553][ T4344] usb 3-1: SerialNumber: syz [ 449.375962][ T4344] r8152-cfgselector 3-1: config 0 descriptor?? [ 449.491987][T15570] netlink: 'syz.1.4942': attribute type 21 has an invalid length. [ 449.811015][ T4344] r8152-cfgselector 3-1: Unknown version 0x0000 [ 449.827748][ T4344] r8152-cfgselector 3-1: USB disconnect, device number 25 [ 449.869573][ T4373] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 450.079490][ T4373] usb 6-1: Using ep0 maxpacket: 16 [ 450.104235][ T4373] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 450.119429][ T4373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.130159][ T4373] usb 6-1: Product: syz [ 450.151749][ T4373] usb 6-1: Manufacturer: syz [ 450.156422][ T4373] usb 6-1: SerialNumber: syz [ 450.174418][ T4373] r8152-cfgselector 6-1: config 0 descriptor?? [ 450.230263][ T27] audit: type=1326 audit(1770767932.714:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15595 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 450.291984][ T27] audit: type=1326 audit(1770767932.734:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15595 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 450.347487][T15598] loop1: detected capacity change from 0 to 512 [ 450.375076][ T27] audit: type=1326 audit(1770767932.734:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15595 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 450.439422][T15598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 450.448724][T15598] ext4 filesystem being mounted at /1056/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.510986][ T27] audit: type=1326 audit(1770767932.734:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15595 comm="syz.3.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 450.591961][ T4373] r8152-cfgselector 6-1: Unknown version 0x0000 [ 450.598486][ T4373] r8152-cfgselector 6-1: bad CDC descriptors [ 450.664178][ T4373] r8152-cfgselector 6-1: Unknown version 0x0000 [ 450.683629][ T4373] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 450.792944][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 450.973439][T15611] loop6: detected capacity change from 0 to 1024 [ 451.030305][T15611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 451.037380][T15611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 451.064879][T15617] netlink: 'syz.3.4964': attribute type 1 has an invalid length. [ 451.079606][T15611] EXT4-fs: Ignoring removed i_version option [ 451.103188][T15611] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 451.106252][T15617] netlink: 'syz.3.4964': attribute type 12 has an invalid length. [ 451.176284][T15611] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 451.185460][T15617] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4964'. [ 451.389019][T15624] rdma_rxe: rxe creation allowed on top of a real device only [ 451.447282][T13206] EXT4-fs (loop6): unmounting filesystem. [ 451.920864][T15636] loop5: detected capacity change from 0 to 1024 [ 451.956730][T15636] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 452.651806][T15664] loop6: detected capacity change from 0 to 1024 [ 452.732410][T15664] hfsplus: extend alloc file! (8192,512,17039360) [ 452.924763][T15673] xt_hashlimit: max too large, truncated to 1048576 [ 453.485029][T15691] vivid-002: disconnect [ 453.508567][T15687] vivid-002: reconnect [ 453.617448][T15694] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4998'. [ 453.670889][T15658] loop3: detected capacity change from 0 to 32768 [ 453.947935][T15704] loop1: detected capacity change from 0 to 512 [ 454.092422][T15704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 454.149559][T15704] ext4 filesystem being mounted at /1065/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.250470][T15715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.272388][ T27] audit: type=1326 audit(1770767936.754:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.6.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 454.279473][T15717] syz.6.5007 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 454.299559][ T27] audit: type=1326 audit(1770767936.754:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.6.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 454.429468][ T27] audit: type=1326 audit(1770767936.864:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.6.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 454.467489][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 454.610413][ T27] audit: type=1326 audit(1770767936.864:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.6.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 454.770265][T15731] device veth3 entered promiscuous mode [ 455.194810][T15745] loop5: detected capacity change from 0 to 1024 [ 455.249684][T15747] loop2: detected capacity change from 0 to 1024 [ 455.298558][T15745] hfsplus: invalid length 256 has been corrected to 255 [ 455.330424][T15749] loop3: detected capacity change from 0 to 256 [ 455.367192][T15745] hfsplus: invalid length 256 has been corrected to 255 [ 455.442332][T15749] FAT-fs (loop3): Directory bread(block 64) failed [ 455.470449][T15749] FAT-fs (loop3): Directory bread(block 65) failed [ 455.470858][ C1] bridge0: port 3(dummy0) entered learning state [ 455.519606][T15749] FAT-fs (loop3): Directory bread(block 66) failed [ 455.526293][T15749] FAT-fs (loop3): Directory bread(block 67) failed [ 455.571218][ T9] hfsplus: b-tree write err: -5, ino 4 [ 455.576879][ T9] hfsplus: invalid length 256 has been corrected to 255 [ 455.599795][T15749] FAT-fs (loop3): Directory bread(block 68) failed [ 455.606402][T15749] FAT-fs (loop3): Directory bread(block 69) failed [ 455.655996][T15749] FAT-fs (loop3): Directory bread(block 70) failed [ 455.671440][T15749] FAT-fs (loop3): Directory bread(block 71) failed [ 455.678146][T15749] FAT-fs (loop3): Directory bread(block 72) failed [ 455.766340][T15749] FAT-fs (loop3): Directory bread(block 73) failed [ 456.283502][T15741] loop6: detected capacity change from 0 to 32768 [ 456.394098][T15774] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5036'. [ 457.778470][T15815] loop6: detected capacity change from 0 to 256 [ 457.947049][T15815] FAT-fs (loop6): Directory bread(block 64) failed [ 457.987957][T15815] FAT-fs (loop6): Directory bread(block 65) failed [ 458.028765][T15815] FAT-fs (loop6): Directory bread(block 66) failed [ 458.045635][T15815] FAT-fs (loop6): Directory bread(block 67) failed [ 458.053418][T15815] FAT-fs (loop6): Directory bread(block 68) failed [ 458.060663][T15815] FAT-fs (loop6): Directory bread(block 69) failed [ 458.067426][T15815] FAT-fs (loop6): Directory bread(block 70) failed [ 458.094963][T15815] FAT-fs (loop6): Directory bread(block 71) failed [ 458.117149][T15815] FAT-fs (loop6): Directory bread(block 72) failed [ 458.127196][T15815] FAT-fs (loop6): Directory bread(block 73) failed [ 458.328424][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5062'. [ 458.337824][T15827] netlink: 'syz.3.5061': attribute type 9 has an invalid length. [ 458.614810][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5067'. [ 458.649448][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5067'. [ 458.658379][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5067'. [ 458.685073][T15806] loop1: detected capacity change from 0 to 32768 [ 459.384968][T15860] loop6: detected capacity change from 0 to 256 [ 459.462733][T15860] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 459.567071][T15860] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008) [ 459.620148][T15860] exFAT-fs (loop6): Filesystem has been set read-only [ 459.957459][T15877] ALSA: mixer_oss: invalid OSS volume '' [ 460.537022][T15903] loop1: detected capacity change from 0 to 256 [ 460.566872][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 460.618648][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 460.632693][T15903] FAT-fs (loop1): Directory bread(block 64) failed [ 460.659519][T15903] FAT-fs (loop1): Directory bread(block 65) failed [ 460.689495][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 460.691805][T15903] FAT-fs (loop1): Directory bread(block 66) failed [ 460.736566][T15903] FAT-fs (loop1): Directory bread(block 67) failed [ 460.746121][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 460.762373][T15903] FAT-fs (loop1): Directory bread(block 68) failed [ 460.783743][T15903] FAT-fs (loop1): Directory bread(block 69) failed [ 460.799457][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 460.803993][T15903] FAT-fs (loop1): Directory bread(block 70) failed [ 460.829528][T15903] FAT-fs (loop1): Directory bread(block 71) failed [ 460.850613][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 460.851824][T15903] FAT-fs (loop1): Directory bread(block 72) failed [ 460.890309][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 460.909918][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 460.921348][T15903] FAT-fs (loop1): Directory bread(block 73) failed [ 460.939461][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 461.009478][T15904] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 461.316484][T15920] loop5: detected capacity change from 0 to 4096 [ 461.425196][T15920] ntfs: volume version 3.1. [ 461.569450][ T26] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 461.760839][T15928] lo speed is unknown, defaulting to 1000 [ 461.772960][ T26] usb 7-1: config 2 interface 0 has no altsetting 0 [ 461.791932][ T26] usb 7-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 461.820828][ T26] usb 7-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 461.849424][ T26] usb 7-1: Product: syz [ 461.853655][ T26] usb 7-1: Manufacturer: syz [ 461.858286][ T26] usb 7-1: SerialNumber: syz [ 461.917486][ T26] usb 7-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 461.962804][ T26] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 461.997761][ T26] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 462.019367][ T26] usb 7-1: media controller created [ 462.028588][T15940] loop5: detected capacity change from 0 to 128 [ 462.073138][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.106034][T15940] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 462.156009][ T26] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 462.163923][T15940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.184381][ T26] error writing reg: 0xff, val: 0x00 [ 462.246226][ T26] dvb_usb_mxl111sf: probe of 7-1:2.0 failed with error -22 [ 462.337776][T15944] netlink: 'syz.3.5119': attribute type 2 has an invalid length. [ 462.458224][T15946] loop1: detected capacity change from 0 to 1024 [ 462.490894][ T26] usb 7-1: USB disconnect, device number 9 [ 462.504194][T15946] EXT4-fs: inline encryption not supported [ 462.562336][T15946] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 462.634721][T15946] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 462.720943][T15946] loop1: Can't mount, would change RO state [ 462.892984][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 462.909077][T15957] No such timeout policy "syz1" [ 463.430783][ T4344] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 463.651322][ T4344] usb 4-1: config 1 has an invalid interface number: 253 but max is 1 [ 463.669448][ T4344] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.709668][T15985] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5139'. [ 463.717946][ T4344] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 463.766614][ T4344] usb 4-1: config 1 has no interface number 2 [ 463.807151][ T4344] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.828724][ T4344] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.892028][ T4344] usb 4-1: config 1 interface 1 has no altsetting 0 [ 463.921964][ T4344] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.942589][ T4344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.981793][ T4344] usb 4-1: Product: syz [ 463.986038][ T4344] usb 4-1: Manufacturer: syz [ 464.018832][ T4344] usb 4-1: SerialNumber: syz [ 464.057187][T15998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.064133][ T4344] cdc_ncm 4-1:1.253: CDC Union missing and no IAD found [ 464.079384][ T4344] cdc_ncm 4-1:1.253: bind() failure [ 464.543992][ T26] usb 4-1: USB disconnect, device number 28 [ 465.111959][T16004] loop6: detected capacity change from 0 to 32768 [ 465.176469][T16004] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 465.233829][T16004] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 465.585311][T16045] loop3: detected capacity change from 0 to 128 [ 465.688113][T13206] ocfs2: Unmounting device (7,6) on (node local) [ 466.579397][ T26] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 466.614004][T16081] loop6: detected capacity change from 0 to 64 [ 466.792266][ T26] usb 4-1: config 2 interface 0 has no altsetting 0 [ 466.831401][ T26] usb 4-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 466.844121][ T26] usb 4-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 466.879387][ T26] usb 4-1: Product: syz [ 466.906752][ T26] usb 4-1: Manufacturer: syz [ 466.923679][ T26] usb 4-1: SerialNumber: syz [ 466.965474][ T26] usb 4-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 466.985196][T16089] device batadv0 entered promiscuous mode [ 467.000914][ T26] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 467.019691][T16089] net_ratelimit: 1922 callbacks suppressed [ 467.019712][T16089] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 467.029621][ T26] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 467.052468][ T26] usb 4-1: media controller created [ 467.111391][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.169486][ T26] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 467.190503][ T26] error writing reg: 0xff, val: 0x00 [ 467.225379][ T26] dvb_usb_mxl111sf: probe of 4-1:2.0 failed with error -22 [ 467.379111][T16102] loop2: detected capacity change from 0 to 1764 [ 467.467902][T16102] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 467.541814][ T4344] usb 4-1: USB disconnect, device number 29 [ 467.853523][T16120] IPVS: length: 218 != 24 [ 467.878958][T16123] xt_HMARK: spi-set and port-set can't be combined [ 468.044003][ T27] audit: type=1326 audit(1770767950.524:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16127 comm="syz.5.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 468.151406][ T27] audit: type=1326 audit(1770767950.594:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16127 comm="syz.5.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 468.252452][ T27] audit: type=1326 audit(1770767950.594:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16127 comm="syz.5.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 468.312852][ T27] audit: type=1326 audit(1770767950.594:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16127 comm="syz.5.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79def9bf79 code=0x7ffc0000 [ 468.669412][ T26] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 468.861814][ T26] usb 7-1: unable to get BOS descriptor or descriptor too short [ 468.891237][ T26] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.921522][ T26] usb 7-1: New USB device found, idVendor=04b8, idProduct=ef02, bcdDevice= 0.3f [ 468.927270][T16158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.949709][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.979678][ T26] usb 7-1: Product: syz [ 468.984004][ T26] usb 7-1: Manufacturer: syz [ 469.008168][ T26] usb 7-1: SerialNumber: syz [ 469.260348][ T26] usb 7-1: USB disconnect, device number 10 [ 469.261013][T16171] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5228'. [ 469.289206][T16171] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5228'. [ 469.436175][T16177] netlink: 'syz.1.5231': attribute type 11 has an invalid length. [ 469.444555][ T6429] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 469.568588][T16179] rtc_cmos 00:00: Alarms can be up to one day in the future [ 469.629413][ T6429] usb 3-1: Using ep0 maxpacket: 32 [ 469.636540][ T6429] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.667306][ T6429] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.690775][ T6429] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 469.711906][ T6429] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 469.735056][ T6429] usb 3-1: Product: syz [ 469.739264][ T6429] usb 3-1: Manufacturer: syz [ 469.773345][ T6429] hub 3-1:4.0: USB hub found [ 469.988568][ T6429] hub 3-1:4.0: 2 ports detected [ 470.136762][T16195] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5241'. [ 470.195158][ T6429] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 470.209493][ T6429] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 470.260072][ T6429] usb 3-1: USB disconnect, device number 26 [ 470.362738][T16197] loop3: detected capacity change from 0 to 8192 [ 470.396233][T16197] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.456224][T16197] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 470.477548][T16197] FAT-fs (loop3): Filesystem has been set read-only [ 470.640613][ T4278] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 470.841405][ C1] bridge0: port 3(dummy0) entered forwarding state [ 470.848028][ C1] bridge0: topology change detected, propagating [ 471.008356][ T4279] Bluetooth: hci3: Invalid handle: 0x0f00 > 0x0eff [ 471.304355][T16229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5255'. [ 471.344387][T16229] netlink: 'syz.2.5255': attribute type 1 has an invalid length. [ 471.522640][T16235] loop5: detected capacity change from 0 to 128 [ 471.843466][T16244] netlink: 'syz.1.5262': attribute type 1 has an invalid length. [ 471.868128][T16244] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5262'. [ 471.886168][T16247] netlink: 'syz.2.5264': attribute type 19 has an invalid length. [ 471.950225][T16247] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5264'. [ 472.496240][ T27] audit: type=1326 audit(1770767954.974:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.2.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 472.579409][ T27] audit: type=1326 audit(1770767954.994:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.2.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 472.707968][ T27] audit: type=1326 audit(1770767955.004:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.2.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 472.794900][ T27] audit: type=1326 audit(1770767955.004:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.2.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 473.796465][T16311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5296'. [ 473.801948][ T27] audit: type=1326 audit(1770767956.274:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16312 comm="syz.3.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 473.834127][T16280] loop6: detected capacity change from 0 to 32768 [ 473.858340][T16280] (syz.6.5280,16280,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 473.878506][ T27] audit: type=1326 audit(1770767956.324:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16312 comm="syz.3.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 473.889463][T16311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5296'. [ 473.916083][T16280] (syz.6.5280,16280,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 473.943328][ T27] audit: type=1326 audit(1770767956.324:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16312 comm="syz.3.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 474.015279][T16280] JBD2: Ignoring recovery information on journal [ 474.038493][T16311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5296'. [ 474.088440][ T27] audit: type=1326 audit(1770767956.324:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16312 comm="syz.3.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1adb9bf79 code=0x7ffc0000 [ 474.188810][T16280] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 474.346415][T16323] loop3: detected capacity change from 0 to 512 [ 474.436320][T16323] EXT4-fs (loop3): orphan cleanup on readonly fs [ 474.450565][T13206] ocfs2: Unmounting device (7,6) on (node local) [ 474.500306][T16323] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #15: comm syz.3.5300: corrupted inode contents [ 474.592062][T16323] EXT4-fs (loop3): Remounting filesystem read-only [ 474.608991][T16323] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 474.628370][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5307'. [ 474.638145][T16323] EXT4-fs (loop3): Remounting filesystem read-only [ 474.649457][T16323] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #15: comm syz.3.5300: corrupted inode contents [ 474.707736][T16323] EXT4-fs (loop3): Remounting filesystem read-only [ 474.728045][T16323] EXT4-fs error (device loop3): ext4_evict_inode:327: inode #15: comm syz.3.5300: mark_inode_dirty error [ 474.808494][T16323] EXT4-fs (loop3): Remounting filesystem read-only [ 474.855363][T16323] EXT4-fs (loop3): 1 orphan inode deleted [ 474.879959][T16323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 475.081078][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 475.839181][T16377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5326'. [ 475.872241][T16377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5326'. [ 476.130495][ T27] audit: type=1326 audit(1770767958.614:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16386 comm="syz.2.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 476.216143][ T27] audit: type=1326 audit(1770767958.654:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16386 comm="syz.2.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f9e6e59bf79 code=0x7ffc0000 [ 476.605052][T16404] loop6: detected capacity change from 0 to 22 [ 476.649158][T16404] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 476.657138][T16404] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 476.662100][ T6429] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 476.910558][ T6429] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 476.918812][ T6429] usb 4-1: config 0 has no interface number 0 [ 476.938608][ T6429] usb 4-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 476.965311][ T6429] usb 4-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 476.978015][ T6429] usb 4-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 476.988328][ T6429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.996854][ T6429] usb 4-1: Product: syz [ 477.001460][ T6429] usb 4-1: Manufacturer: syz [ 477.006177][ T6429] usb 4-1: SerialNumber: syz [ 477.030300][ T6429] usb 4-1: config 0 descriptor?? [ 477.036143][T16397] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.055610][T16413] loop6: detected capacity change from 0 to 4096 [ 477.117902][T16413] ntfs: volume version 3.1. [ 477.170954][ T14] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 477.282483][ T6429] kaweth 4-1:0.58: Firmware present in device. [ 477.381649][ T14] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 477.411011][ T14] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 477.439373][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.465941][ T14] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 477.475901][ T6429] kaweth 4-1:0.58: Error reading configuration (-71), no net device created [ 477.503130][ T6429] kaweth: probe of 4-1:0.58 failed with error -5 [ 477.534205][ T6429] usb 4-1: USB disconnect, device number 30 [ 477.729898][T16431] loop2: detected capacity change from 0 to 256 [ 477.762104][T16431] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 477.817034][T16431] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 477.860164][T16431] FAT-fs (loop2): Filesystem has been set read-only [ 477.879739][T16431] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 477.901766][T16431] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 478.496372][T16457] netlink: 'syz.3.5365': attribute type 1 has an invalid length. [ 478.590632][ T14] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 478.673573][T16463] loop1: detected capacity change from 0 to 64 [ 478.792370][ T14] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 478.811573][T16463] Trying to free block not in datazone [ 478.813577][ T14] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 478.817126][T16463] Trying to free block not in datazone [ 478.870862][ T14] usb 6-1: USB disconnect, device number 22 [ 478.889441][T16463] Trying to free block not in datazone [ 478.900917][T16463] Trying to free block not in datazone [ 478.925325][T16463] minix_free_block (loop1:6): bit already cleared [ 478.955771][T16463] Trying to free block not in datazone [ 478.956469][T16473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.967455][T16471] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5373'. [ 478.990230][T16463] Trying to free block not in datazone [ 479.009403][ T4373] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 479.192951][ T27] audit: type=1326 audit(1770767961.674:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 479.227837][ T27] audit: type=1326 audit(1770767961.674:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 479.243676][ T4373] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.280455][ T27] audit: type=1326 audit(1770767961.744:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 479.281761][ T4373] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.323803][ T27] audit: type=1326 audit(1770767961.744:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 479.389888][ T4373] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.418691][ T4373] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 479.438403][ T27] audit: type=1326 audit(1770767961.744:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 479.458187][ T4373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.513158][ T4373] usb 4-1: config 0 descriptor?? [ 479.533056][ T27] audit: type=1326 audit(1770767961.794:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb09db5c84e code=0x7ffc0000 [ 479.566948][T16485] loop1: detected capacity change from 0 to 512 [ 479.609807][ T27] audit: type=1326 audit(1770767961.794:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 479.615565][T16488] loop2: detected capacity change from 0 to 64 [ 479.665258][ T27] audit: type=1326 audit(1770767961.794:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 479.681173][T16488] hfs: unable to locate alternate MDB [ 479.745724][ T27] audit: type=1326 audit(1770767961.864:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 479.787170][T16485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 479.797277][T16488] hfs: continuing without an alternate MDB [ 479.814231][ T27] audit: type=1326 audit(1770767961.864:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16478 comm="syz.6.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb09db9bf79 code=0x7ffc0000 [ 479.890956][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 479.913869][ T14] usb 4-1: USB disconnect, device number 31 [ 480.153010][ T46] hfs: new node 0 already hashed? [ 480.164641][ T46] ------------[ cut here ]------------ [ 480.170269][ T46] WARNING: CPU: 0 PID: 46 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 480.179095][ T46] Modules linked in: [ 480.183138][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 480.190741][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 480.201146][ T46] Workqueue: writeback wb_workfn (flush-7:2) [ 480.207193][ T46] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 480.213117][ T46] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 480.233089][ T46] RSP: 0018:ffffc90000b76e80 EFLAGS: 00010246 [ 480.239196][ T46] RAX: 000000000000001f RBX: ffff88807d9320e0 RCX: 7664229ed6b86300 [ 480.247540][ T46] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 480.255630][ T46] RBP: 0000000000000000 R08: ffffc90000b76b87 R09: 1ffff9200016ed70 [ 480.263688][ T46] R10: dffffc0000000000 R11: fffff5200016ed71 R12: 0000000000000000 [ 480.271792][ T46] R13: ffff88807d932000 R14: ffff888074872b00 R15: dffffc0000000000 [ 480.279897][ T46] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 480.288874][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.295594][ T46] CR2: 0000001b2f917ff8 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 480.303692][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 480.311798][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 480.319868][ T46] Call Trace: [ 480.323187][ T46] [ 480.326159][ T46] hfs_bmap_alloc+0x53d/0x5d0 [ 480.331052][ T46] ? hfs_bmap_reserve+0x420/0x420 [ 480.336143][ T46] hfs_btree_inc_height+0xfd/0xac0 [ 480.341435][ T46] ? hfs_brec_insert+0x6f6/0xbd0 [ 480.346715][ T46] ? hfs_brec_insert+0xbd0/0xbd0 [ 480.351869][ T46] ? do_raw_spin_unlock+0x11d/0x230 [ 480.357384][ T46] hfs_brec_insert+0x744/0xbd0 [ 480.362293][ T46] ? hfs_brec_keylen+0x350/0x350 [ 480.367485][ T46] __hfs_ext_write_extent+0x2a1/0x470 [ 480.373003][ T46] hfs_ext_write_extent+0x17b/0x200 [ 480.378254][ T46] ? verify_lock_unused+0x140/0x140 [ 480.383545][ T46] ? hfs_ext_keycmp+0x310/0x310 [ 480.388452][ T46] ? writeback_sb_inodes+0x46b/0x1850 [ 480.393953][ T46] hfs_write_inode+0xd8/0xa20 [ 480.398689][ T46] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 480.404191][ T46] ? __writeback_single_inode+0x4ae/0x1160 [ 480.410100][ T46] ? __lock_acquire+0x7d10/0x7d10 [ 480.415172][ T46] ? do_raw_spin_lock+0x128/0x2f0 [ 480.420456][ T46] ? __rwlock_init+0x140/0x140 [ 480.425288][ T46] __writeback_single_inode+0x75b/0x1160 [ 480.431207][ T46] writeback_sb_inodes+0xb30/0x1850 [ 480.436487][ T46] ? queue_io+0x5a0/0x5a0 [ 480.441060][ T46] ? rcu_is_watching+0x11/0xa0 [ 480.445988][ T46] wb_writeback+0x482/0xd50 [ 480.450662][ T46] ? percpu_ref_tryget+0x250/0x250 [ 480.455834][ T46] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 480.462056][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 480.467310][ T46] wb_workfn+0x423/0xee0 [ 480.471715][ T46] ? inode_wait_for_writeback+0x220/0x220 [ 480.477542][ T46] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 480.483648][ T46] ? read_lock_is_recursive+0x10/0x10 [ 480.489081][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 480.494402][ T46] ? process_one_work+0x7b0/0x1160 [ 480.499913][ T46] process_one_work+0x8a2/0x1160 [ 480.504907][ T46] ? worker_detach_from_pool+0x240/0x240 [ 480.510683][ T46] ? _raw_spin_lock_irq+0xb7/0xf0 [ 480.515847][ T46] ? _raw_spin_lock_irqsave+0x100/0x100 [ 480.521486][ T46] ? kthread_data+0x4b/0xc0 [ 480.526040][ T46] worker_thread+0xaa2/0x1270 [ 480.530895][ T46] kthread+0x29d/0x330 [ 480.535185][ T46] ? worker_clr_flags+0x1a0/0x1a0 [ 480.540395][ T46] ? kthread_blkcg+0xd0/0xd0 [ 480.545035][ T46] ret_from_fork+0x1f/0x30 [ 480.549975][ T46] [ 480.553118][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 480.560426][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 480.567820][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 480.577970][ T46] Workqueue: writeback wb_workfn (flush-7:2) [ 480.584062][ T46] Call Trace: [ 480.587355][ T46] [ 480.590294][ T46] dump_stack_lvl+0x188/0x24e [ 480.594986][ T46] ? memcpy+0x3c/0x60 [ 480.598983][ T46] ? show_regs_print_info+0x12/0x12 [ 480.604458][ T46] ? load_image+0x400/0x400 [ 480.608980][ T46] panic+0x2e5/0x730 [ 480.612890][ T46] ? bpf_jit_dump+0xd0/0xd0 [ 480.617423][ T46] ? ret_from_fork+0x1f/0x30 [ 480.622043][ T46] __warn+0x2f8/0x4f0 [ 480.626047][ T46] ? hfs_bnode_create+0x37a/0x400 [ 480.631096][ T46] ? hfs_bnode_create+0x37a/0x400 [ 480.636139][ T46] report_bug+0x2ba/0x4f0 [ 480.640481][ T46] ? hfs_bnode_create+0x37a/0x400 [ 480.645519][ T46] handle_bug+0x3a/0x70 [ 480.649687][ T46] exc_invalid_op+0x16/0x40 [ 480.654205][ T46] asm_exc_invalid_op+0x16/0x20 [ 480.659064][ T46] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 480.664735][ T46] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 480.684403][ T46] RSP: 0018:ffffc90000b76e80 EFLAGS: 00010246 [ 480.690486][ T46] RAX: 000000000000001f RBX: ffff88807d9320e0 RCX: 7664229ed6b86300 [ 480.698494][ T46] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 480.706902][ T46] RBP: 0000000000000000 R08: ffffc90000b76b87 R09: 1ffff9200016ed70 [ 480.714879][ T46] R10: dffffc0000000000 R11: fffff5200016ed71 R12: 0000000000000000 [ 480.722855][ T46] R13: ffff88807d932000 R14: ffff888074872b00 R15: dffffc0000000000 [ 480.730852][ T46] hfs_bmap_alloc+0x53d/0x5d0 [ 480.735555][ T46] ? hfs_bmap_reserve+0x420/0x420 [ 480.740621][ T46] hfs_btree_inc_height+0xfd/0xac0 [ 480.745818][ T46] ? hfs_brec_insert+0x6f6/0xbd0 [ 480.750818][ T46] ? hfs_brec_insert+0xbd0/0xbd0 [ 480.755869][ T46] ? do_raw_spin_unlock+0x11d/0x230 [ 480.761262][ T46] hfs_brec_insert+0x744/0xbd0 [ 480.766061][ T46] ? hfs_brec_keylen+0x350/0x350 [ 480.771026][ T46] __hfs_ext_write_extent+0x2a1/0x470 [ 480.776423][ T46] hfs_ext_write_extent+0x17b/0x200 [ 480.781636][ T46] ? verify_lock_unused+0x140/0x140 [ 480.788510][ T46] ? hfs_ext_keycmp+0x310/0x310 [ 480.793413][ T46] ? writeback_sb_inodes+0x46b/0x1850 [ 480.798823][ T46] hfs_write_inode+0xd8/0xa20 [ 480.803529][ T46] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 480.808926][ T46] ? __writeback_single_inode+0x4ae/0x1160 [ 480.814840][ T46] ? __lock_acquire+0x7d10/0x7d10 [ 480.819880][ T46] ? do_raw_spin_lock+0x128/0x2f0 [ 480.824915][ T46] ? __rwlock_init+0x140/0x140 [ 480.829693][ T46] __writeback_single_inode+0x75b/0x1160 [ 480.835383][ T46] writeback_sb_inodes+0xb30/0x1850 [ 480.840704][ T46] ? queue_io+0x5a0/0x5a0 [ 480.845579][ T46] ? rcu_is_watching+0x11/0xa0 [ 480.850365][ T46] wb_writeback+0x482/0xd50 [ 480.854974][ T46] ? percpu_ref_tryget+0x250/0x250 [ 480.860129][ T46] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 480.866129][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 480.871338][ T46] wb_workfn+0x423/0xee0 [ 480.875606][ T46] ? inode_wait_for_writeback+0x220/0x220 [ 480.881353][ T46] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 480.887437][ T46] ? read_lock_is_recursive+0x10/0x10 [ 480.893270][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 480.898476][ T46] ? process_one_work+0x7b0/0x1160 [ 480.903601][ T46] process_one_work+0x8a2/0x1160 [ 480.908653][ T46] ? worker_detach_from_pool+0x240/0x240 [ 480.914558][ T46] ? _raw_spin_lock_irq+0xb7/0xf0 [ 480.919846][ T46] ? _raw_spin_lock_irqsave+0x100/0x100 [ 480.925396][ T46] ? kthread_data+0x4b/0xc0 [ 480.929932][ T46] worker_thread+0xaa2/0x1270 [ 480.934641][ T46] kthread+0x29d/0x330 [ 480.938717][ T46] ? worker_clr_flags+0x1a0/0x1a0 [ 480.943748][ T46] ? kthread_blkcg+0xd0/0xd0 [ 480.948359][ T46] ret_from_fork+0x1f/0x30 [ 480.952804][ T46] [ 480.956420][ T46] Kernel Offset: disabled [ 480.960926][ T46] Rebooting in 86400 seconds..