last executing test programs: 10m52.248606492s ago: executing program 1 (id=12867): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x405, 0x0, 0x0, 0x12, 0x5, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b045512406c5f00000000000000000f000c0000008000", [0x4, 0x5]}}) 10m51.976436664s ago: executing program 1 (id=12870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4367aaf786d498e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 10m51.803942004s ago: executing program 1 (id=12873): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x0, 0x6d, '\x00', "8173828d"}}, 0x0}, 0x0) 10m50.039648305s ago: executing program 1 (id=12891): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004881, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000d80)="$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") readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x20, 0x0) 10m49.707546457s ago: executing program 1 (id=12895): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ") 10m49.120346074s ago: executing program 1 (id=12900): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x4, 0x2) getdents64(r0, 0xffffffffffffffff, 0x43) 10m32.972163134s ago: executing program 32 (id=12900): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x4, 0x2) getdents64(r0, 0xffffffffffffffff, 0x43) 2m9.761417801s ago: executing program 0 (id=19889): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 2m9.634580538s ago: executing program 0 (id=19891): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 2m9.271513415s ago: executing program 0 (id=19901): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) 2m9.13080816s ago: executing program 0 (id=19895): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000004c0)="04", 0x1, 0xd1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x40012123, 0x0, 0xc) 2m8.956687139s ago: executing program 0 (id=19896): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) 2m8.813366524s ago: executing program 0 (id=19900): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r1, r0}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f334579c0077290ad2b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f207", 0x34}) 1m52.706787632s ago: executing program 33 (id=19900): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r1, r0}, &(0x7f0000000540)=""/185, 0xb9, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}, &(0x7f0000000380)="708803449262ddb5bda9215853cffafe0690f4ed536f334579c0077290ad2b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f207", 0x34}) 5.059823255s ago: executing program 3 (id=21212): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) 3.810356982s ago: executing program 5 (id=21216): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x9) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x40, 0x3, &(0x7f0000000140)={0x19, "827c004f5a089918a2c4249a1f40dd4b29906e348ab8bb16c6c4720c53d2f8b445"}}) 3.810214092s ago: executing program 3 (id=21217): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010070000904000000010100000a240104000d02020208240400000000000000010000010200000904010101010200000b240202900b08000236df0905010900040000000725010000000009040200000102000009040201"], 0x0) 2.992595436s ago: executing program 5 (id=21219): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, r1, 0x0) 2.825464456s ago: executing program 5 (id=21220): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.51362438s ago: executing program 5 (id=21224): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0xc, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000540)=""/227, 0xe3}], 0x2, 0xfffbfffe, 0x1fd, 0x0) 2.217094327s ago: executing program 5 (id=21226): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0xbe, 0x22f, &(0x7f00000006c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x90) getdents64(r0, 0x0, 0x0) 2.174535269s ago: executing program 3 (id=21228): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001380)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x21, 0x0, 0x5, 0x0, 0x0, 0x1, 0x67}]}}}}}, 0x0) 1.944049938s ago: executing program 3 (id=21230): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001b80)=""/4110, 0x100e}, {0x0}], 0x2, 0x1, 0xd55) 1.84428986s ago: executing program 5 (id=21231): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000180)=@generic={0x4, 0x2, 0x0, "0200"}) 1.517535871s ago: executing program 2 (id=21234): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) 1.428716305s ago: executing program 2 (id=21236): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback={0xe0}, 0xfffffffc}, 0x1c) 1.298044112s ago: executing program 2 (id=21237): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x12) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) 1.073311622s ago: executing program 4 (id=21239): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) 995.219558ms ago: executing program 2 (id=21240): mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000004c0)='GPL\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41100, 0xe}, 0x94) 863.690594ms ago: executing program 4 (id=21241): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x2, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x1, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 863.431224ms ago: executing program 2 (id=21242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090008000000000000000a100000000000000000000008001e0001"], 0x24}}, 0x0) 729.23606ms ago: executing program 4 (id=21243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 691.234653ms ago: executing program 2 (id=21244): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1000) write$dsp(r0, &(0x7f00000004c0)='\x00', 0xfffffe97) 578.410013ms ago: executing program 4 (id=21245): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) 509.689371ms ago: executing program 4 (id=21246): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x800c08, &(0x7f0000000540)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244"], 0x21, 0x627f, &(0x7f0000001600)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 259.980496ms ago: executing program 3 (id=21247): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x20}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 61.56119ms ago: executing program 3 (id=21248): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x5005}, 0x800) 0s ago: executing program 4 (id=21249): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000000010002", 0x7) kernel console output (not intermixed with test programs): ped block 1819239214 (level 0) [ 1504.862925][T15601] EXT4-fs (loop4): 1 truncate cleaned up [ 1504.871086][T15601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1504.946917][T15601] EXT4-fs: Ignoring removed orlov option [ 1504.952973][T15601] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1504.967659][ T5839] usb 3-1: USB disconnect, device number 122 [ 1504.973892][T15601] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1504.986216][T15601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802e11c, mo2=0003] [ 1505.005455][T15601] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1505.056427][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.090291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.708305][ T27] audit: type=1326 audit(1472.046:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15632 comm="syz.2.19126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1fcb9c799 code=0x0 [ 1506.128945][T15636] loop4: detected capacity change from 0 to 1024 [ 1506.250283][ T1090] hfsplus: b-tree write err: -5, ino 25 [ 1506.256810][ T1090] hfsplus: b-tree write err: -5, ino 4 [ 1506.263186][ T1090] hfsplus: b-tree write err: -5, ino 2 [ 1506.414025][T15641] loop4: detected capacity change from 0 to 1024 [ 1506.422841][T15641] EXT4-fs: Ignoring removed bh option [ 1506.436311][T15641] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1506.465403][T15641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1506.509698][T15641] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.19129: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 1506.537886][T15641] EXT4-fs (loop4): Remounting filesystem read-only [ 1506.574625][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.720085][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19131'. [ 1507.197039][T15668] loop4: detected capacity change from 0 to 128 [ 1507.224913][T15668] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1507.291271][ T1885] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1507.556950][T15677] loop4: detected capacity change from 0 to 128 [ 1508.040358][T15689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19150'. [ 1508.634577][T15705] loop4: detected capacity change from 0 to 1024 [ 1508.646053][T15705] EXT4-fs: Ignoring removed bh option [ 1508.667324][T15705] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1508.727634][T15705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1508.998228][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.046585][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.796897][ T5839] hid-generic 0002:0001:0D97.0037: item fetching failed at offset 0/2 [ 1509.813602][ T5839] hid-generic: probe of 0002:0001:0D97.0037 failed with error -22 [ 1509.850820][ T23] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1510.067618][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.081304][T15739] loop4: detected capacity change from 0 to 64 [ 1510.097379][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.129898][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1510.160571][T15739] minix_free_block (loop4:21): bit already cleared [ 1510.171756][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1510.191761][T15739] Trying to free block not in datazone [ 1510.200692][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.246120][ T23] usb 4-1: config 0 descriptor?? [ 1510.698080][ T23] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1510.709630][ T23] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1510.718408][ T23] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1510.731176][ T23] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1510.742157][ T23] kovaplus 0003:1E7D:2D50.0038: unknown main item tag 0x0 [ 1510.756625][ T23] kovaplus 0003:1E7D:2D50.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 1510.969810][ T23] usb 4-1: USB disconnect, device number 104 [ 1511.075597][T15745] loop4: detected capacity change from 0 to 32768 [ 1511.098683][T15745] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.19174 (15745) [ 1511.132149][T15745] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1511.183650][T15745] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1511.214892][T15745] BTRFS info (device loop4): force zlib compression, level 3 [ 1511.236472][T15745] BTRFS info (device loop4): turning on flush-on-commit [ 1511.258106][T15745] BTRFS info (device loop4): max_inline at 4096 [ 1511.283863][T15745] BTRFS info (device loop4): using free space tree [ 1511.395804][T15745] BTRFS info (device loop4): enabling ssd optimizations [ 1511.417004][T15745] BTRFS info (device loop4): auto enabling async discard [ 1511.626952][ T1885] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1511.813319][ T5849] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop4 scanned by udevd (5849) [ 1513.678197][T15850] ptrace attach of "./syz-executor exec"[5769] was attempted by ""[15850] [ 1513.712609][T15848] loop4: detected capacity change from 0 to 4096 [ 1513.791471][T15854] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1514.207947][T15868] netlink: 100 bytes leftover after parsing attributes in process `syz.2.19215'. [ 1514.481752][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19218'. [ 1514.933717][ T23] kernel write not supported for file /uhid (pid: 23 comm: kworker/1:0) [ 1516.126735][ T27] audit: type=1326 audit(1481.792:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15933 comm="syz.3.19248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f093499c799 code=0x0 [ 1518.253546][ T8] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1518.462060][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1518.483327][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.506417][ T8] usb 3-1: config 0 descriptor?? [ 1518.522532][ T8] cp210x 3-1:0.0: cp210x converter detected [ 1519.188637][ T8] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1519.211699][ T8] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1519.226227][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1519.226832][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1519.261960][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1519.300897][ T8] usb 3-1: USB disconnect, device number 123 [ 1519.320510][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1519.340356][ T8] cp210x 3-1:0.0: device disconnected [ 1520.508948][T16101] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1520.537413][T16101] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1520.843246][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19333'. [ 1520.853767][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19333'. [ 1520.863212][T16119] netlink: 'syz.0.19333': attribute type 13 has an invalid length. [ 1520.871303][T16119] netlink: 'syz.0.19333': attribute type 12 has an invalid length. [ 1521.308618][T16139] vivid-007: disconnect [ 1521.323835][T16139] vivid-007: reconnect [ 1521.429574][T16145] binder: 16144:16145 ioctl c0306201 0 returned -14 [ 1521.845634][ T23] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1522.020888][T16156] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 1522.020888][T16156] program syz.2.19351 not setting count and/or reply_len properly [ 1522.051037][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1522.057846][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1522.068439][ T23] usb 4-1: config 0 has no interface number 0 [ 1522.076286][ T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1522.092632][ T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1522.105233][ T23] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1522.120111][ T23] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1522.137124][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.148369][ T23] usb 4-1: config 0 descriptor?? [ 1522.455335][ T782] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1522.604357][ T23] holtek_mouse 0003:04D9:A072.0039: unknown main item tag 0x2 [ 1522.633037][ T23] holtek_mouse 0003:04D9:A072.0039: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.3-1/input1 [ 1522.647930][ T782] usb 3-1: Using ep0 maxpacket: 32 [ 1522.668169][ T782] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1522.686853][ T782] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1522.699676][ T782] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1522.714829][ T782] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1522.728834][ T782] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1522.739623][ T782] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1522.751591][ T782] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1522.768548][ T782] usb 3-1: Product: syz [ 1522.772801][ T782] usb 3-1: Manufacturer: syz [ 1522.789847][ T782] usb 3-1: SerialNumber: syz [ 1522.797931][ T782] usb 3-1: config 0 descriptor?? [ 1522.819382][ T782] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1522.867752][ T782] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1522.876791][ T23] usb 4-1: USB disconnect, device number 105 [ 1523.094557][ T782] usb 3-1: USB disconnect, device number 124 [ 1523.104996][ T782] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1523.164861][T16173] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19359'. [ 1523.966485][T16206] loop4: detected capacity change from 0 to 512 [ 1523.980234][T16206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1524.000793][T16206] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.19374: bg 0: block 507: padding at end of block bitmap is not set [ 1524.028280][T16206] EXT4-fs (loop4): Remounting filesystem read-only [ 1524.035582][T16206] EXT4-fs (loop4): 1 truncate cleaned up [ 1524.043231][T16206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1524.111037][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.321463][T16213] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.19377'. [ 1524.342212][T16213] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1524.656859][T16229] xt_socket: unknown flags 0xe4 [ 1525.202444][ T782] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1525.406683][ T782] usb 4-1: Using ep0 maxpacket: 32 [ 1525.425086][ T782] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1525.446944][ T782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.467102][T16256] tipc: Enabling of bearer rejected, failed to enable media [ 1525.478753][ T782] usb 4-1: Product: syz [ 1525.487160][ T782] usb 4-1: Manufacturer: syz [ 1525.500985][ T782] usb 4-1: SerialNumber: syz [ 1525.515418][ T782] usb 4-1: config 0 descriptor?? [ 1525.550004][ T782] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1525.568732][ T782] dvb-usb: bulk message failed: -22 (2/0) [ 1525.597725][ T782] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1525.621069][ T782] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1525.629699][ T782] usb 4-1: media controller created [ 1525.663836][ T782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1525.686865][ T782] usb 4-1: selecting invalid altsetting 7 [ 1525.693401][ T782] cxusb: set interface failed [ 1525.699464][ T782] dvb-usb: bulk message failed: -22 (1/0) [ 1525.815101][ T782] DVB: Unable to find symbol lgdt330x_attach() [ 1525.835843][ T782] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1526.015293][ T782] rc_core: IR keymap rc-dvico-portable not found [ 1526.032574][ T782] Registered IR keymap rc-empty [ 1526.045540][ T782] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1526.077611][ T782] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input92 [ 1526.102255][ T782] dvb-usb: schedule remote query interval to 100 msecs. [ 1526.120168][ T782] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1526.144323][ T782] usb 4-1: USB disconnect, device number 106 [ 1526.282536][ T27] audit: type=1326 audit(1491.277:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d9c799 code=0x7ffc0000 [ 1526.329838][ T782] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1526.339880][ T27] audit: type=1326 audit(1491.277:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d9c799 code=0x7ffc0000 [ 1526.372390][T16274] loop4: detected capacity change from 0 to 1024 [ 1526.410445][ T27] audit: type=1326 audit(1491.324:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d9c799 code=0x7ffc0000 [ 1526.473325][ T27] audit: type=1326 audit(1491.324:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d9c799 code=0x7ffc0000 [ 1526.526718][ T27] audit: type=1326 audit(1491.324:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f22e6d9c799 code=0x7ffc0000 [ 1526.607722][ T27] audit: type=1326 audit(1491.324:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22e6d9c502 code=0x7ffc0000 [ 1526.647174][ T27] audit: type=1326 audit(1491.324:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f22e6d5cfce code=0x7ffc0000 [ 1526.710494][ T11] hfsplus: b-tree write err: -5, ino 25 [ 1526.716432][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1526.732587][ T11] hfsplus: b-tree write err: -5, ino 2 [ 1526.738508][ T27] audit: type=1326 audit(1491.380:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f22e6d9c5c7 code=0x7ffc0000 [ 1526.829700][ T27] audit: type=1326 audit(1491.380:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22e6d5cfce code=0x7ffc0000 [ 1526.887941][ T27] audit: type=1326 audit(1491.380:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16273 comm="syz.4.19406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22e6d9c42b code=0x7ffc0000 [ 1527.973995][T16330] netlink: 52 bytes leftover after parsing attributes in process `syz.3.19434'. [ 1528.349687][T16343] loop4: detected capacity change from 0 to 256 [ 1528.371236][T16346] netlink: 'syz.0.19441': attribute type 1 has an invalid length. [ 1528.880888][T16358] ubi: mtd0 is already attached to ubi31 [ 1529.176111][T16366] program syz.2.19451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1529.725836][T16386] loop4: detected capacity change from 0 to 256 [ 1529.774874][T16386] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1529.794748][T16386] FAT-fs (loop4): Filesystem has been set read-only [ 1530.736876][T16416] loop4: detected capacity change from 0 to 64 [ 1530.755213][T16416] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1531.142689][T16422] loop4: detected capacity change from 0 to 8192 [ 1531.173877][T16422] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1531.247498][T16422] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1531.282804][T16422] REISERFS (device loop4): using ordered data mode [ 1531.321463][T16422] reiserfs: using flush barriers [ 1531.351987][T16422] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1531.446895][T16422] REISERFS (device loop4): checking transaction log (loop4) [ 1531.482889][T16422] REISERFS (device loop4): Using r5 hash to sort names [ 1531.499735][T16422] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1531.576636][T16422] REISERFS warning (device loop4): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=129, len=7 - odd [ 1531.609046][T16442] tipc: Enabling of bearer rejected, failed to enable media [ 1531.787378][T16446] tipc: Enabled bearer , priority 15 [ 1532.225839][T16466] tipc: Enabling of bearer rejected, failed to enable media [ 1532.662070][T16486] loop4: detected capacity change from 0 to 512 [ 1532.671732][T16486] EXT4-fs: Ignoring removed nobh option [ 1532.681563][T16486] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1532.697669][T16486] EXT4-fs error (device loop4): __ext4_iget:5071: inode #11: block 1: comm syz.4.19517: invalid block [ 1532.719854][T16486] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.19517: couldn't read orphan inode 11 (err -117) [ 1532.740920][T16486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1532.802337][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.832196][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19510'. [ 1532.865790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1535.176124][T16538] loop4: detected capacity change from 0 to 40427 [ 1535.218996][T16538] F2FS-fs (loop4): invalid crc value [ 1535.465135][T16538] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1535.534065][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 1535.534082][ T27] audit: type=1800 audit(1499.939:4126): pid=16538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19535" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 1535.635521][T16538] syz.4.19535: attempt to access beyond end of device [ 1535.635521][T16538] loop4: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 1535.841754][ T1885] syz-executor: attempt to access beyond end of device [ 1535.841754][ T1885] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1535.887346][ T1885] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1536.565436][T16578] loop4: detected capacity change from 0 to 512 [ 1536.601412][T16578] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1536.654722][T16578] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1536.687582][T16578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1536.897775][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.653635][T16602] loop4: detected capacity change from 0 to 1024 [ 1537.765927][T16602] hfsplus: bad catalog entry type [ 1537.848428][ T11] hfsplus: b-tree write err: -5, ino 25 [ 1537.857174][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1537.871295][ T11] hfsplus: b-tree write err: -5, ino 2 [ 1538.338672][T16625] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1538.441733][T16624] loop4: detected capacity change from 0 to 4096 [ 1538.456589][T16624] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1538.528647][T16624] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1539.192974][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.496703][T16669] vlan4: entered promiscuous mode [ 1540.440905][T16708] loop4: detected capacity change from 0 to 512 [ 1540.541099][T16708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1540.677945][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.328641][T16748] netlink: 84 bytes leftover after parsing attributes in process `syz.2.19632'. [ 1541.339544][T16748] netlink: 84 bytes leftover after parsing attributes in process `syz.2.19632'. [ 1541.624332][T16756] netlink: 288 bytes leftover after parsing attributes in process `syz.2.19637'. [ 1541.817306][T16762] rdma_op ffff888079c1b9f0 conn xmit_rdma 0000000000000000 [ 1542.983349][T16782] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19647'. [ 1543.376503][ T5839] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1543.579667][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 1543.600710][ T5839] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1543.622632][ T5839] usb 3-1: config 0 has no interface number 0 [ 1543.632858][ T5839] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1543.652462][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.670341][ T5839] usb 3-1: Product: syz [ 1543.674585][ T5839] usb 3-1: Manufacturer: syz [ 1543.693629][ T5839] usb 3-1: SerialNumber: syz [ 1543.710833][ T5839] usb 3-1: config 0 descriptor?? [ 1543.723406][ T5839] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1543.749485][ T5839] usb 3-1: selecting invalid altsetting 1 [ 1543.762007][ T5839] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1543.785911][ T5839] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1543.815159][ T5839] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1543.823680][ T5839] usb 3-1: media controller created [ 1543.867276][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1543.964824][ T5839] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1543.984005][ T5839] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1544.002509][ T5839] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1544.114446][ T5839] usb 3-1: USB disconnect, device number 125 [ 1545.659323][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19674'. [ 1545.897982][T16864] loop4: detected capacity change from 0 to 2048 [ 1545.954001][T16864] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1545.995281][T16864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1546.537763][T16890] loop4: detected capacity change from 0 to 1024 [ 1546.684149][ T27] audit: type=1800 audit(1510.378:4127): pid=16890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19687" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1546.889080][T14110] hfsplus: b-tree write err: -5, ino 25 [ 1546.908372][T14110] hfsplus: b-tree write err: -5, ino 4 [ 1546.914021][T14110] hfsplus: b-tree write err: -5, ino 2 [ 1546.936265][T14110] hfsplus: b-tree write err: -5, ino 20 [ 1547.291758][T16911] ipvlan2: entered promiscuous mode [ 1547.930893][ T5839] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1548.126381][ T5839] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1548.142751][ T5839] usb 3-1: config 0 has no interface number 0 [ 1548.149812][ T5839] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1548.167286][ T5839] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1548.186029][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1548.201599][ T5839] usb 3-1: Manufacturer: syz [ 1548.208333][ T5839] usb 3-1: SerialNumber: syz [ 1548.225114][ T5839] usb 3-1: config 0 descriptor?? [ 1548.266561][T16935] loop4: detected capacity change from 0 to 4096 [ 1548.303061][T16938] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1548.350766][T16935] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1548.383470][T16935] Remounting filesystem read-only [ 1548.429809][ T1885] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1548.437616][ T1885] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 1548.445886][ T1885] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1548.461449][ T1885] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 1548.471818][ T1885] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 1548.479321][ T1885] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 1548.561490][ T782] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1548.716289][T16944] loop4: detected capacity change from 0 to 512 [ 1548.748256][T16944] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1548.757289][T16944] System zones: 0-2, 18-18, 34-35 [ 1548.758510][ T782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1548.777612][ T782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.783175][T16944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.788339][ T782] usb 4-1: New USB device found, idVendor=056a, idProduct=233b, bcdDevice= 0.00 [ 1548.815328][ T782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.833732][ T782] usb 4-1: config 0 descriptor?? [ 1548.895177][ T5839] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 1548.921922][ T5839] usb 3-1: USB disconnect, device number 126 [ 1549.293845][ T782] wacom 0003:056A:233B.003A: Unknown device_type for 'HID 056a:233b'. Ignoring. [ 1549.321276][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.478205][T16952] loop4: detected capacity change from 0 to 256 [ 1549.519608][ T5813] usb 4-1: USB disconnect, device number 107 [ 1549.572310][T16952] FAT-fs (loop4): Directory bread(block 64) failed [ 1549.587983][T16952] FAT-fs (loop4): Directory bread(block 65) failed [ 1549.605849][T16952] FAT-fs (loop4): Directory bread(block 66) failed [ 1549.613015][T16952] FAT-fs (loop4): Directory bread(block 67) failed [ 1549.619866][T16952] FAT-fs (loop4): Directory bread(block 68) failed [ 1549.626628][T16952] FAT-fs (loop4): Directory bread(block 69) failed [ 1549.633628][T16952] FAT-fs (loop4): Directory bread(block 70) failed [ 1549.640376][T16952] FAT-fs (loop4): Directory bread(block 71) failed [ 1549.647608][T16952] FAT-fs (loop4): Directory bread(block 72) failed [ 1549.654801][T16952] FAT-fs (loop4): Directory bread(block 73) failed [ 1550.322167][T16969] macsec1: entered promiscuous mode [ 1550.328597][T16969] bridge0: entered promiscuous mode [ 1551.227163][T16988] netlink: 'syz.0.19732': attribute type 8 has an invalid length. [ 1552.564815][T17012] loop4: detected capacity change from 0 to 32768 [ 1552.614436][T17012] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1552.637247][T17012] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1552.692507][T17012] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1552.899994][T17012] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1553.624031][T17058] hpfs: Bad magic ... probably not HPFS [ 1553.646075][T17058] hpfs: Bad magic ... probably not HPFS [ 1554.332968][T17083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19779'. [ 1554.353384][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19779'. [ 1554.398094][T17061] loop4: detected capacity change from 0 to 32768 [ 1554.437375][T17061] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1554.536121][T17061] XFS (loop4): Ending clean mount [ 1554.737652][ T1885] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1555.730626][T17127] delete_channel: no stack [ 1556.238914][T17121] loop4: detected capacity change from 0 to 40427 [ 1556.279698][T17121] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1556.301409][T17121] F2FS-fs (loop4): Image doesn't support compression [ 1556.312881][T17121] F2FS-fs (loop4): Image doesn't support compression [ 1556.328108][T17121] F2FS-fs (loop4): invalid crc value [ 1556.348651][T17121] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1556.471642][T17121] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1556.605650][T17121] syz.4.19793: attempt to access beyond end of device [ 1556.605650][T17121] loop4: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 1556.670066][T17121] syz.4.19793: attempt to access beyond end of device [ 1556.670066][T17121] loop4: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 1556.740300][ T27] audit: type=1800 audit(1519.788:4128): pid=17121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19793" name="/" dev="loop4" ino=8 res=0 errno=0 [ 1556.813449][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19807'. [ 1557.085460][ T1885] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 1557.113711][ T1885] F2FS-fs (loop4): invalid blkaddr: 513, type: 10, run fsck to fix. [ 1557.198443][T17163] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1557.211907][T17163] @0: renamed from bond_slave_1 [ 1557.925276][T17174] loop4: detected capacity change from 0 to 64 [ 1558.227257][T17185] netlink: 100 bytes leftover after parsing attributes in process `syz.4.19823'. [ 1558.508934][T17194] loop4: detected capacity change from 0 to 4096 [ 1558.560238][T17198] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1558.568505][ T5839] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1558.593299][T17194] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1558.608433][T17194] Remounting filesystem read-only [ 1558.651250][ T1885] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1558.676079][ T1885] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 1558.697670][ T1885] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1558.715557][ T1885] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 1558.715596][ T1885] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 1558.715614][ T1885] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 1558.715896][ T1885] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1558.721515][ T1885] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1558.721544][ T1885] NILFS (loop4): discard dirty block: blocknr=28, size=4096 [ 1558.721589][ T1885] NILFS (loop4): discard dirty page: offset=4096, ino=3 [ 1558.721606][ T1885] NILFS (loop4): discard dirty block: blocknr=29, size=4096 [ 1558.721628][ T1885] NILFS (loop4): discard dirty page: offset=270336, ino=3 [ 1558.721646][ T1885] NILFS (loop4): discard dirty block: blocknr=0, size=4096 [ 1558.805232][ T5839] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1558.902516][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.916866][ T5839] usb 3-1: Product: syz [ 1558.925292][ T5839] usb 3-1: Manufacturer: syz [ 1558.940825][ T5839] usb 3-1: SerialNumber: syz [ 1558.956915][ T5839] usb 3-1: config 0 descriptor?? [ 1558.966099][ T5839] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1558.976236][T17205] netlink: 'syz.4.19832': attribute type 2 has an invalid length. [ 1558.988901][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1559.001456][ T5839] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1559.011043][ T5839] usb 3-1: media controller created [ 1559.040311][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1559.095902][T17208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19833'. [ 1559.171047][ T5839] DVB: Unable to find symbol mt352_attach() [ 1559.281978][ T5839] DVB: Unable to find symbol nxt6000_attach() [ 1559.314440][ T5839] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1559.339154][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input98 [ 1559.359810][ T5839] dvb-usb: schedule remote query interval to 1000 msecs. [ 1559.367322][ T5839] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1559.385295][ T5839] dvb-usb: bulk message failed: -22 (7/0) [ 1559.394098][ T5839] dvb-usb: bulk message failed: -22 (7/0) [ 1559.437249][ T5839] usb 3-1: USB disconnect, device number 127 [ 1559.544174][ T5839] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1559.674848][T17217] pim6reg: entered allmulticast mode [ 1559.700257][T17217] pim6reg: left allmulticast mode [ 1559.988643][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19840'. [ 1560.345421][T17243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19849'. [ 1561.703832][T17291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19871'. [ 1562.395328][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1562.552172][T17310] loop4: detected capacity change from 0 to 32768 [ 1562.597151][T17310] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1562.612215][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.632100][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1562.650174][ T5813] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 1562.666057][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.691930][ T5813] usb 3-1: config 0 descriptor?? [ 1562.813589][T17310] XFS (loop4): Ending clean mount [ 1563.102341][ T1885] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1563.182338][ T5813] hid (null): report_id 0 is invalid [ 1563.219971][ T5813] stadia 0003:18D1:9400.003B: report_id 0 is invalid [ 1563.226785][ T5813] stadia 0003:18D1:9400.003B: item 0 0 1 8 parsing failed [ 1563.285075][ T5813] stadia 0003:18D1:9400.003B: parse failed [ 1563.304918][ T5813] stadia: probe of 0003:18D1:9400.003B failed with error -22 [ 1563.347688][T17337] netlink: 436 bytes leftover after parsing attributes in process `syz.3.19890'. [ 1563.409491][ T5839] usb 3-1: USB disconnect, device number 2 [ 1563.778354][T17349] loop4: detected capacity change from 0 to 2048 [ 1563.828052][T17350] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1563.859445][T17349] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 1563.909361][T17349] Remounting filesystem read-only [ 1563.920119][T17349] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 1564.645481][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19910'. [ 1564.656990][T17379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19910'. [ 1564.914556][T17385] pim6reg: entered allmulticast mode [ 1564.929897][T17385] pim6reg: left allmulticast mode [ 1565.161398][ T27] audit: type=1326 audit(1527.655:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17386 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1565.188467][ T27] audit: type=1326 audit(1527.683:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17386 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1565.215141][ T27] audit: type=1326 audit(1527.702:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17386 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1565.261757][ T27] audit: type=1326 audit(1527.702:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17386 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1565.324853][ T27] audit: type=1326 audit(1527.702:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17386 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1565.402172][ T27] audit: type=1326 audit(1527.702:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17386 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1565.485324][ T27] audit: type=1326 audit(1527.702:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17386 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1565.515901][ T27] audit: type=1326 audit(1527.711:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17386 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1565.612911][ T27] audit: type=1326 audit(1527.711:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17386 comm="syz.2.19914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1566.456682][T17428] pimreg3: entered allmulticast mode [ 1567.299022][T17455] [U] [ 1567.345787][T17458] netlink: 'syz.4.19946': attribute type 5 has an invalid length. [ 1567.436844][T17461] vlan2: entered promiscuous mode [ 1567.446944][T17461] bridge0: entered promiscuous mode [ 1568.015932][T17479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19957'. [ 1568.796185][T17499] loop4: detected capacity change from 0 to 4096 [ 1568.845475][ T5849] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1569.449414][ T27] audit: type=1326 audit(1531.668:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17513 comm="syz.2.19974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1569.854380][ T5813] kernel write not supported for file /media2 (pid: 5813 comm: kworker/1:3) [ 1572.155949][ T5813] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1572.359261][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 1572.375998][ T5813] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1572.396707][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.415995][ T5813] usb 4-1: Product: syz [ 1572.426772][ T5813] usb 4-1: Manufacturer: syz [ 1572.437557][ T5813] usb 4-1: SerialNumber: syz [ 1572.462002][ T5813] usb 4-1: config 0 descriptor?? [ 1572.492046][T17570] loop4: detected capacity change from 0 to 40427 [ 1572.517370][T17570] F2FS-fs (loop4): invalid crc value [ 1572.536096][T17570] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1572.582080][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20009'. [ 1572.669113][T17570] F2FS-fs (loop4): Start checkpoint disabled! [ 1572.689665][T17570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1572.729079][ T5813] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1572.750503][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1572.750519][ T27] audit: type=1800 audit(1534.755:4148): pid=17570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20000" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1573.004455][ T79] kworker/u4:5: attempt to access beyond end of device [ 1573.004455][ T79] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1573.018935][ T79] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1573.033242][ T79] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1573.152857][ T5813] usb write operation failed. (-71) [ 1573.173514][ T5813] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1573.204779][ T5813] dvbdev: DVB: registering new adapter (Terratec H7) [ 1573.221658][ T5813] usb 4-1: media controller created [ 1573.232022][ T5813] usb read operation failed. (-71) [ 1573.243497][ T5813] usb write operation failed. (-71) [ 1573.278533][ T5813] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1573.310876][ T5813] usb 4-1: USB disconnect, device number 108 [ 1573.847523][T17607] netlink: 96 bytes leftover after parsing attributes in process `syz.4.20018'. [ 1573.860126][T17608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20019'. [ 1574.214159][T17614] loop4: detected capacity change from 0 to 4096 [ 1574.300063][T17614] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1574.329805][T17614] ntfs3: loop4: Failed to load $Extend (-22). [ 1574.338820][T17614] ntfs3: loop4: Failed to initialize $Extend. [ 1574.591370][T17628] bridge0: port 3(syz_tun) entered blocking state [ 1574.604022][T17628] bridge0: port 3(syz_tun) entered disabled state [ 1574.610778][T17628] syz_tun: entered allmulticast mode [ 1574.638379][T17628] bridge0: port 3(syz_tun) entered blocking state [ 1574.645008][T17628] bridge0: port 3(syz_tun) entered forwarding state [ 1575.603959][T17658] netlink: 'syz.2.20041': attribute type 29 has an invalid length. [ 1576.176814][T17672] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1577.895182][T17711] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20067'. [ 1577.908261][T17711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20067'. [ 1577.921731][T17711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20067'. [ 1578.441929][ T5813] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1578.650301][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.674708][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.695804][ T5813] usb 4-1: New USB device found, idVendor=5e0a, idProduct=a055, bcdDevice= 0.00 [ 1578.716343][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.738767][ T5813] usb 4-1: config 0 descriptor?? [ 1579.235558][ T5813] hid-generic 0003:5E0A:A055.003C: unbalanced collection at end of report description [ 1579.248645][ T5813] hid-generic: probe of 0003:5E0A:A055.003C failed with error -22 [ 1579.496089][ T5813] usb 4-1: USB disconnect, device number 109 [ 1579.505670][T17733] loop4: detected capacity change from 0 to 128 [ 1579.620906][T17733] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 1579.642571][T17733] FAT-fs (loop4): Filesystem has been set read-only [ 1579.677343][T17733] FAT-fs (loop4): error, clusters badly computed (3 != 1) [ 1579.699754][T17733] FAT-fs (loop4): error, clusters badly computed (4 != 2) [ 1580.336092][T17744] loop4: detected capacity change from 0 to 8 [ 1581.333747][T15959] syz_tun (unregistering): left allmulticast mode [ 1581.380551][T15959] team0: Port device syz_tun removed [ 1581.438839][T17772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1581.462215][T17772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1581.472195][T17772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1581.482689][T17772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1581.495570][T17772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1581.503201][T17772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1581.565770][ T892] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1581.609279][ T892] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1581.617165][ T892] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1581.638988][ T892] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1581.675624][ T892] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1581.685276][ T892] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1581.830206][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.933861][T17776] loop4: detected capacity change from 0 to 4096 [ 1582.099691][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.173547][T17769] lo speed is unknown, defaulting to 1000 [ 1582.310443][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.480881][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.248501][ T12] ~: left promiscuous mode [ 1583.540829][T17822] netlink: 'syz.3.20111': attribute type 2 has an invalid length. [ 1583.587135][T17821] loop4: detected capacity change from 0 to 2048 [ 1583.629151][ T12] tipc: Left network mode [ 1583.636499][T17821] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1583.685933][T17821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1583.786710][T17769] chnl_net:caif_netlink_parms(): no params data found [ 1583.872911][ T892] Bluetooth: hci3: command tx timeout [ 1584.562770][T17841] tipc: Enabled bearer , priority 10 [ 1584.905463][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1584.912377][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1584.951100][T17769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.964945][T17769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.972400][T17769] bridge_slave_0: entered allmulticast mode [ 1584.988411][T17769] bridge_slave_0: entered promiscuous mode [ 1585.000387][T17769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.011392][T17769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.021639][T17769] bridge_slave_1: entered allmulticast mode [ 1585.032066][T17769] bridge_slave_1: entered promiscuous mode [ 1585.103939][T17856] loop4: detected capacity change from 0 to 512 [ 1585.149000][T17856] EXT4-fs: Ignoring removed nobh option [ 1585.194160][T17856] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1585.206622][T17859] Bluetooth: MGMT ver 1.22 [ 1585.257616][T17856] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.20125: iget: bad i_size value: 38620345925642 [ 1585.274794][T17856] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.20125: couldn't read orphan inode 15 (err -117) [ 1585.325172][T17856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.338504][T17769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1585.539280][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.677457][T17875] netlink: 'syz.2.20130': attribute type 3 has an invalid length. [ 1585.750685][T17769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.096541][ T892] Bluetooth: hci3: command tx timeout [ 1586.123244][T17891] loop4: detected capacity change from 0 to 1024 [ 1586.141848][T17769] team0: Port device team_slave_0 added [ 1586.308284][T17769] team0: Port device team_slave_1 added [ 1586.369402][ T1005] hfsplus: b-tree write err: -5, ino 8 [ 1586.585616][T17769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.620709][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.668274][T17769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.749459][T17911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20144'. [ 1586.759842][T17769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.777804][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.790466][ T12] IPVS: stopping master sync thread 3984 ... [ 1586.838038][T17769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.862710][ T12] IPVS: stopping backup sync thread 17781 ... [ 1587.043439][T17769] hsr_slave_0: entered promiscuous mode [ 1587.052026][T17769] hsr_slave_1: entered promiscuous mode [ 1587.059664][T17769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1587.067451][T17769] Cannot create hsr debugfs directory [ 1588.155977][ T12] hsr_slave_0: left promiscuous mode [ 1588.211369][ T12] hsr_slave_1: left promiscuous mode [ 1588.235951][ T12] veth0_to_bridge: left allmulticast mode [ 1588.255969][ T12] veth0_to_bridge: left promiscuous mode [ 1588.271529][ T12] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1588.320292][ T892] Bluetooth: hci3: command tx timeout [ 1588.466415][ T12] veth0_macvtap: left promiscuous mode [ 1588.491944][ T12] veth1_vlan: left promiscuous mode [ 1588.497666][ T12] : left promiscuous mode [ 1589.879390][T17959] loop4: detected capacity change from 0 to 8192 [ 1589.898611][T17959] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1590.010395][T17959] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1590.056428][ T12] bond4 (unregistering): Released all slaves [ 1590.567997][ T892] Bluetooth: hci3: command tx timeout [ 1590.622864][ C0] vkms_vblank_simulate: vblank timer overrun [ 1590.890434][ C0] vkms_vblank_simulate: vblank timer overrun [ 1590.940554][T17994] loop4: detected capacity change from 0 to 512 [ 1590.984487][T17994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 1590.993265][T17994] System zones: 1-12 [ 1591.011147][T17994] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.20176: missing EA_INODE flag [ 1591.045607][T17994] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.20176: error while reading EA inode 12 err=-117 [ 1591.066700][T17994] EXT4-fs (loop4): 1 orphan inode deleted [ 1591.075226][T17994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1591.102695][ C0] vkms_vblank_simulate: vblank timer overrun [ 1591.173172][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.372173][ T12] bond3 (unregistering): Released all slaves [ 1591.425080][ T12] bond2 (unregistering): Released all slaves [ 1591.544701][ T12] bond1 (unregistering): Released all slaves [ 1593.449227][T18024] loop4: detected capacity change from 0 to 2048 [ 1593.521067][T18024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1593.548053][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.621217][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.336964][ T12] bond0 (unregistering): Released all slaves [ 1594.458105][ T1005] smc: removing ib device syz0 [ 1594.476848][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20174'. [ 1594.507448][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20174'. [ 1594.550433][T17985] netlink: 'syz.3.20174': attribute type 13 has an invalid length. [ 1595.114055][T17769] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1595.178721][T17769] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1595.231484][T17769] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1595.291675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.334050][T17769] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1595.831587][T17769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1595.910415][T17769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.949085][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.956348][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1596.012608][T13980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.020119][T13980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1596.487621][ T5839] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1596.690958][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 1596.712752][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.743496][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.769731][ T5839] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1596.784387][T17769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.793940][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.811716][ T5839] usb 3-1: config 0 descriptor?? [ 1597.059090][ T12] IPVS: stop unused estimator thread 0... [ 1597.334680][ T5839] corsair 0003:1B1C:1B02.003D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1597.446619][T18097] loop4: detected capacity change from 0 to 1764 [ 1597.523003][ T5839] corsair 0003:1B1C:1B02.003D: Failed to get K90 initial state (error -71). [ 1597.590449][ T5839] usb 3-1: USB disconnect, device number 3 [ 1597.626266][T18098] fido_id[18098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1597.909698][T17769] veth0_vlan: entered promiscuous mode [ 1597.967304][T17769] veth1_vlan: entered promiscuous mode [ 1598.097633][T17769] veth0_macvtap: entered promiscuous mode [ 1598.109791][T17769] veth1_macvtap: entered promiscuous mode [ 1598.141820][T17769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1598.170211][T17769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.184258][T17769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1598.223739][T17769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.265516][T17769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.309924][T17769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1598.356492][T17769] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.379373][T17769] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.405271][T17769] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.429995][T17769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.768159][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.788215][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.902770][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.932039][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.551329][T18155] loop5: detected capacity change from 0 to 128 [ 1599.578637][T18155] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 1599.740073][T17769] sysv_free_block: flc_count > flc_size [ 1599.758929][T17769] sysv_free_block: flc_count > flc_size [ 1599.793724][T17769] sysv_free_block: flc_count > flc_size [ 1599.816655][T17769] sysv_free_block: flc_count > flc_size [ 1599.828493][T17769] sysv_free_block: flc_count > flc_size [ 1599.840433][T17769] sysv_free_block: flc_count > flc_size [ 1599.846989][T17769] sysv_free_block: flc_count > flc_size [ 1599.857487][T17769] sysv_free_block: flc_count > flc_size [ 1599.868630][T17769] sysv_free_block: flc_count > flc_size [ 1599.887347][T17769] sysv_free_block: flc_count > flc_size [ 1599.915289][T17769] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1600.419857][T18184] loop5: detected capacity change from 0 to 16 [ 1600.455870][T18184] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1600.614803][T18091] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1600.823759][T18091] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1600.837611][T18091] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1600.856939][T18091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.105874][T18091] usb 3-1: string descriptor 0 read error: -71 [ 1601.192037][T18091] usb 3-1: USB disconnect, device number 4 [ 1601.318086][T18205] loop5: detected capacity change from 0 to 256 [ 1601.353119][T18205] exfat: Deprecated parameter 'utf8' [ 1601.358672][T18205] exfat: Deprecated parameter 'namecase' [ 1601.449475][T18205] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 1601.834707][T18218] veth1_macvtap: left promiscuous mode [ 1601.850470][T18218] macsec0: entered promiscuous mode [ 1601.884058][T18219] veth1_macvtap: entered promiscuous mode [ 1601.906705][T18219] macsec0: left promiscuous mode [ 1602.616132][T18234] loop4: detected capacity change from 0 to 128 [ 1604.166663][T18281] netlink: 'syz.3.20268': attribute type 6 has an invalid length. [ 1604.258947][T18279] loop5: detected capacity change from 0 to 1024 [ 1604.329565][T18279] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1604.364853][T18279] EXT4-fs (loop5): blocks per group (131072) and clusters per group (8192) inconsistent [ 1604.432410][T18279] ptrace attach of ""[18283] was attempted by "./syz-executor exec"[18279] [ 1604.539281][T18292] loop4: detected capacity change from 0 to 128 [ 1604.855941][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20274'. [ 1604.872798][T18302] loop5: detected capacity change from 0 to 1024 [ 1604.886744][T18302] EXT4-fs: Ignoring removed mblk_io_submit option [ 1604.937439][T18302] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1605.014809][T18302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1605.309778][T17769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.694819][T18331] loop5: detected capacity change from 0 to 2048 [ 1605.713864][T18091] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1605.735147][T18331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1605.791311][T17769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.920957][T18091] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.932437][T18091] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1605.942065][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1605.969593][T18091] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1605.980865][T18091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.989199][T18091] usb 4-1: Product: syz [ 1606.008651][T18091] usb 4-1: Manufacturer: syz [ 1606.023814][T18091] usb 4-1: SerialNumber: syz [ 1606.040626][T18091] usb 4-1: config 0 descriptor?? [ 1606.163437][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1606.171230][ T23] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1606.180336][ T23] usb 3-1: config 0 has no interface number 0 [ 1606.190959][ T23] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1606.221180][ T23] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1606.248065][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.281142][ T23] usb 3-1: Product: syz [ 1606.302400][ T23] usb 3-1: Manufacturer: syz [ 1606.321084][ T23] usb 3-1: SerialNumber: syz [ 1606.337106][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.351516][ T23] usb 3-1: config 0 descriptor?? [ 1606.373988][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.389614][ T5813] usb 4-1: USB disconnect, device number 110 [ 1606.409399][T18346] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 1606.594816][T18353] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1607.086338][ T23] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1607.111390][ T23] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1607.132973][ T23] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1607.157102][ T23] f81534: probe of 3-1:0.12 failed with error -71 [ 1607.185696][ T23] usb 3-1: USB disconnect, device number 5 [ 1607.406595][T18376] netlink: 'syz.5.20304': attribute type 8 has an invalid length. [ 1607.507873][ T27] audit: type=1326 audit(1567.269:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.4.20307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d9c799 code=0x0 [ 1607.785437][ T27] audit: type=1326 audit(1567.531:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.2.20311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1607.810476][ T27] audit: type=1326 audit(1567.531:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.2.20311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1607.861103][ T27] audit: type=1326 audit(1567.559:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.2.20311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1607.905641][ T27] audit: type=1326 audit(1567.559:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.2.20311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1607.931689][ T27] audit: type=1326 audit(1567.559:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.2.20311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1607.985952][ T27] audit: type=1326 audit(1567.578:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.2.20311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1608.014442][ T27] audit: type=1326 audit(1567.578:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.2.20311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1608.038358][ T27] audit: type=1326 audit(1567.578:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18388 comm="syz.2.20311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1fcb9c799 code=0x7ffc0000 [ 1608.653519][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1608.753542][T18413] loop4: detected capacity change from 0 to 1024 [ 1608.800338][T18413] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1608.856903][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1608.874065][ T23] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1608.885391][T18413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1608.909297][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1608.929403][ T23] usb 3-1: Product: syz [ 1608.940241][ T23] usb 3-1: Manufacturer: syz [ 1608.945324][ T23] usb 3-1: SerialNumber: syz [ 1608.961979][ T23] usb 3-1: config 0 descriptor?? [ 1608.976952][ T23] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1609.093272][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1609.356183][T18422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20325'. [ 1609.638043][ T23] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1609.651130][ T23] sq905: probe of 3-1:0.0 failed with error -71 [ 1609.674203][ T23] usb 3-1: USB disconnect, device number 6 [ 1610.054060][T18434] loop5: detected capacity change from 0 to 4096 [ 1610.146401][T18440] loop4: detected capacity change from 0 to 2048 [ 1610.223833][T18444] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1610.342634][T18434] ntfs3: loop5: MFT: r=20, expect seq=0 instead of 1! [ 1610.374686][T18434] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1610.794797][ T27] audit: type=1326 audit(1570.347:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.3.20342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f093499c799 code=0x0 [ 1610.919316][T18468] team_slave_0: entered promiscuous mode [ 1610.926260][T18468] team_slave_1: entered promiscuous mode [ 1610.955205][T18468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1611.390384][T18486] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1612.102254][T18517] dummy0: entered promiscuous mode [ 1612.123375][T18517] dummy0: left promiscuous mode [ 1612.604001][T18499] loop5: detected capacity change from 0 to 40427 [ 1612.643787][T18499] F2FS-fs (loop5): invalid crc value [ 1612.660123][T18499] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1612.828486][T18499] F2FS-fs (loop5): Start checkpoint disabled! [ 1612.854049][T18499] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1613.223217][ T12] kworker/u4:1: attempt to access beyond end of device [ 1613.223217][ T12] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1613.259982][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1613.278489][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1614.661602][T18091] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1614.852381][T18558] loop5: detected capacity change from 0 to 32768 [ 1614.873484][T18581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20381'. [ 1614.887725][T18558] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.20374 (18558) [ 1614.901309][T18091] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1614.919110][T18091] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1614.945956][T18091] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1614.972133][T18558] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1614.994598][T18091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.006240][T18091] usb 4-1: Product: syz [ 1615.014055][T18558] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1615.024395][T18091] usb 4-1: Manufacturer: syz [ 1615.047976][T18091] usb 4-1: SerialNumber: syz [ 1615.055490][T18558] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1615.075883][T18091] usb 4-1: config 0 descriptor?? [ 1615.089571][T18558] BTRFS info (device loop5): setting datasum, datacow enabled [ 1615.105466][T18091] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1615.123040][T18558] BTRFS info (device loop5): force clearing of disk cache [ 1615.146201][T18558] BTRFS info (device loop5): enabling ssd optimizations [ 1615.175713][T18558] BTRFS info (device loop5): using spread ssd allocation scheme [ 1615.206346][T18558] BTRFS info (device loop5): turning on sync discard [ 1615.226952][T18558] BTRFS info (device loop5): turning off barriers [ 1615.243075][T18558] BTRFS info (device loop5): enabling auto defrag [ 1615.260471][T18558] BTRFS info (device loop5): not using ssd optimizations [ 1615.278458][T18558] BTRFS info (device loop5): not using spread ssd allocation scheme [ 1615.308431][T18558] BTRFS info (device loop5): using free space tree [ 1615.490757][T18558] BTRFS info (device loop5): rebuilding free space tree [ 1615.726381][T17769] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1615.754026][T18091] gspca_sunplus: reg_r err -71 [ 1615.759032][T18091] sunplus: probe of 4-1:0.0 failed with error -71 [ 1615.771799][T18091] usb 4-1: USB disconnect, device number 111 [ 1615.796467][T18606] loop4: detected capacity change from 0 to 512 [ 1615.899716][T18606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1616.495037][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.732684][T18625] loop5: detected capacity change from 0 to 64 [ 1616.902596][T18629] EXT4-fs: Conflicting test_dummy_encryption options [ 1617.772669][ T5813] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1617.832219][T18658] IPVS: Scheduler module ip_vs_sip not found [ 1617.970443][T18663] loop5: detected capacity change from 0 to 2048 [ 1617.996311][ T5813] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 1618.018756][ T5813] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 1618.028065][T18664] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1618.039927][ T5813] usb 4-1: config 0 has no interface number 0 [ 1618.051992][ T5813] usb 4-1: config 0 has no interface number 1 [ 1618.070546][ T5813] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1618.113746][ T5813] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1618.165921][ T5813] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1618.181248][T18663] NILFS (loop5): error -2 truncating bmap (ino=16) [ 1618.192734][ T5813] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1618.205905][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.225516][ T5813] usb 4-1: Product: syz [ 1618.229765][ T5813] usb 4-1: Manufacturer: syz [ 1618.240890][ T5813] usb 4-1: SerialNumber: syz [ 1618.254635][ T5813] usb 4-1: config 0 descriptor?? [ 1618.297758][T18664] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 1618.320356][T18664] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16) [ 1618.358442][T18664] Remounting filesystem read-only [ 1618.366443][T14110] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 1618.389253][T14110] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 1618.408272][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.436725][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.445771][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.461145][T14110] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 1618.478521][T14110] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 1618.485893][T14110] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 1618.511954][T14110] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 1618.522413][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.542945][ T5813] usb 4-1: USB disconnect, device number 112 [ 1618.551357][T14110] NILFS (loop5): discard dirty page: offset=65536, ino=3 [ 1618.576536][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.610401][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.620910][T14110] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 1618.638628][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.657109][T14110] NILFS (loop5): discard dirty page: offset=0, ino=18 [ 1618.676517][T14110] NILFS (loop5): discard dirty block: blocknr=0, size=1024 [ 1618.713240][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.722174][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.745436][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.754664][T14110] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 1618.780179][T14110] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 1618.787662][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.800597][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.811015][T14110] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.822551][T17769] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1618.842909][T17769] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 1618.860743][T17769] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 1618.879369][T17769] NILFS (loop5): discard dirty block: blocknr=36, size=1024 [ 1618.894266][T17769] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 1618.919194][T17769] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 1618.931181][T17769] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 1618.939193][T17769] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 1618.946663][T17769] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.960647][T17769] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1618.976128][T17769] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1619.863825][T18715] sp0: Synchronizing with TNC [ 1620.242454][T18725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20422'. [ 1620.461756][T18730] program syz.4.20423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1620.882511][T18739] loop4: detected capacity change from 0 to 512 [ 1620.916985][T18739] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1620.960516][T18739] EXT4-fs (loop4): 1 truncate cleaned up [ 1620.981768][T18739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1621.260522][T18717] loop5: detected capacity change from 0 to 40427 [ 1621.304516][T18717] F2FS-fs (loop5): invalid crc value [ 1621.335203][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.352996][T18717] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1621.633235][T18717] F2FS-fs (loop5): Start checkpoint disabled! [ 1621.713853][T18717] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1622.239434][T13980] kworker/u4:3: attempt to access beyond end of device [ 1622.239434][T13980] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1622.269993][T13980] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1622.316205][T13980] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1622.722653][ T8] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1622.952331][ T8] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1622.978072][ T8] usb 3-1: config 0 has no interface number 0 [ 1623.002994][ T8] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1623.028572][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.053729][ T8] usb 3-1: Product: syz [ 1623.057972][ T8] usb 3-1: Manufacturer: syz [ 1623.084389][ T8] usb 3-1: SerialNumber: syz [ 1623.106762][ T8] usb 3-1: config 0 descriptor?? [ 1623.566913][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20444'. [ 1623.694387][T18820] loop5: detected capacity change from 0 to 2048 [ 1623.754278][T18820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1623.836695][ T8] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1623.873759][ T8] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1623.924932][ T8] asix: probe of 3-1:0.251 failed with error -71 [ 1623.985291][ T8] usb 3-1: USB disconnect, device number 7 [ 1624.985471][T18866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.008930][T18866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.040402][T18866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.078316][T18866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.108552][T18866] batadv_slave_1: entered promiscuous mode [ 1625.315760][T18880] netlink: 128 bytes leftover after parsing attributes in process `syz.2.20468'. [ 1625.345727][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20468'. [ 1625.466890][T18886] loop5: detected capacity change from 0 to 256 [ 1625.485674][T18886] exfat: Deprecated parameter 'namecase' [ 1625.506872][T18886] exfat: Deprecated parameter 'namecase' [ 1625.547051][T18886] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 1625.915675][T18902] loop5: detected capacity change from 0 to 512 [ 1625.979630][T18902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.506173][T17769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.540468][ C1] vkms_vblank_simulate: vblank timer overrun [ 1626.566285][T18919] loop4: detected capacity change from 0 to 2048 [ 1626.587756][T18919] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1626.587803][T18919] NILFS (loop4): mounting unchecked fs [ 1626.637222][T18919] NILFS (loop4): recovery complete [ 1626.638464][T18923] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1627.582207][T18947] vlan5: entered promiscuous mode [ 1628.076255][T18959] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20505'. [ 1628.099583][T18959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20505'. [ 1628.395243][T18957] loop5: detected capacity change from 0 to 32768 [ 1628.415793][T18957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.20504 (18957) [ 1628.490975][T18957] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1628.505622][T18957] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1628.515494][T18957] BTRFS info (device loop5): using free space tree [ 1628.620159][T18957] BTRFS info (device loop5): enabling ssd optimizations [ 1628.634532][T18957] BTRFS info (device loop5): auto enabling async discard [ 1628.712070][T18957] BTRFS info (device loop5): device stats zeroed by syz.5.20504 (18957) [ 1628.824818][T17769] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1629.000070][ T5849] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop5 scanned by udevd (5849) [ 1629.033996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.127054][ T5813] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1629.380222][ T5813] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1629.407675][ T5813] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1629.430652][ T5813] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1629.460997][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.514544][ T5813] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1629.544951][ T5813] usb 4-1: invalid MIDI out EP 0 [ 1629.782679][ T5813] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1629.835518][ T5813] usb 4-1: USB disconnect, device number 113 [ 1630.045094][T19017] loop5: detected capacity change from 0 to 64 [ 1630.700766][T19031] loop5: detected capacity change from 0 to 1024 [ 1630.860158][T13980] hfsplus: b-tree write err: -5, ino 25 [ 1630.879518][T13980] hfsplus: b-tree write err: -5, ino 4 [ 1630.906916][T13980] hfsplus: b-tree write err: -5, ino 2 [ 1630.935332][T13980] hfsplus: b-tree write err: -5, ino 17 [ 1631.075702][T19021] loop4: detected capacity change from 0 to 32768 [ 1631.128366][ T27] audit: type=1800 audit(1589.354:4159): pid=19021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20525" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1631.487648][T19045] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20539'. [ 1631.587085][ T1005] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1631.620565][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1631.635373][ T1005] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1631.788497][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1632.154780][T19053] loop4: detected capacity change from 0 to 8192 [ 1632.217069][T19053] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1632.256731][T19053] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1632.269571][T19053] REISERFS (device loop4): using ordered data mode [ 1632.284041][T19053] reiserfs: using flush barriers [ 1632.301646][T19053] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1632.319218][T19053] REISERFS (device loop4): checking transaction log (loop4) [ 1632.333564][T19053] REISERFS (device loop4): Using r5 hash to sort names [ 1632.340932][T19053] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1632.450982][T18124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1632.665848][T18126] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1632.880380][T18126] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1632.912690][T18126] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1632.939896][T18126] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.983708][T18126] usb 6-1: config 220 has no interface number 2 [ 1632.996108][T18126] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1633.038695][T18126] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1633.067244][T18126] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1633.081708][T18126] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1633.135216][T18126] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1633.155272][T18126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.174842][T18126] usb 6-1: Product: syz [ 1633.187038][T18126] usb 6-1: Manufacturer: syz [ 1633.199029][T18126] usb 6-1: SerialNumber: syz [ 1633.478251][T18126] usb 6-1: selecting invalid altsetting 0 [ 1633.484801][T18126] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1633.530358][T18126] usb 6-1: No valid video chain found. [ 1633.567746][T19086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20553'. [ 1633.571772][T18126] usb 6-1: selecting invalid altsetting 0 [ 1633.605483][T18126] usbtest: probe of 6-1:220.1 failed with error -22 [ 1633.638108][T18126] usb 6-1: USB disconnect, device number 2 [ 1633.873487][T19093] loop4: detected capacity change from 0 to 512 [ 1633.973719][T19093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1634.082501][T19093] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.20557: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 1634.163166][T19093] EXT4-fs (loop4): Remounting filesystem read-only [ 1634.867387][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.952616][T18126] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1635.166431][T18126] usb 4-1: Using ep0 maxpacket: 16 [ 1635.178883][T18126] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1635.210663][T18126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.218832][T18126] usb 4-1: Product: syz [ 1635.249952][T18126] usb 4-1: Manufacturer: syz [ 1635.255092][T18126] usb 4-1: SerialNumber: syz [ 1635.272191][T18126] usb 4-1: config 0 descriptor?? [ 1635.288064][T18126] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1635.948506][T18126] ssu100: probe of 4-1:0.0 failed with error -71 [ 1635.967358][T18126] usb 4-1: USB disconnect, device number 114 [ 1636.260765][T19168] devtmpfs: Bad value for 'size' [ 1636.384865][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1636.641655][T18126] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1636.797893][T19176] loop4: detected capacity change from 0 to 32768 [ 1636.810697][T19176] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.20586 (19176) [ 1636.849824][T19176] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1636.861938][T19176] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1636.872257][T19176] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1636.884818][T19176] BTRFS info (device loop4): setting datasum, datacow enabled [ 1636.894167][T19176] BTRFS info (device loop4): force clearing of disk cache [ 1636.902463][T18126] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1636.924574][T18126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.931264][T19176] BTRFS info (device loop4): enabling ssd optimizations [ 1636.939691][T19176] BTRFS info (device loop4): using spread ssd allocation scheme [ 1636.954260][T18126] usb 6-1: Product: syz [ 1636.962600][T19176] BTRFS info (device loop4): turning on sync discard [ 1636.967429][T18126] usb 6-1: Manufacturer: syz [ 1636.969332][T19176] BTRFS info (device loop4): turning off barriers [ 1636.969364][T19176] BTRFS info (device loop4): enabling auto defrag [ 1636.990903][T18126] usb 6-1: SerialNumber: syz [ 1637.005989][T19176] BTRFS info (device loop4): not using ssd optimizations [ 1637.016293][T19176] BTRFS info (device loop4): not using spread ssd allocation scheme [ 1637.024385][T19176] BTRFS info (device loop4): using free space tree [ 1637.044365][T18126] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1637.078045][ T23] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1637.106197][ T27] audit: type=1326 audit(1594.957:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.3.20590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093499c799 code=0x7ffc0000 [ 1637.213547][ T27] audit: type=1326 audit(1594.957:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.3.20590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093499c799 code=0x7ffc0000 [ 1637.319142][ T27] audit: type=1326 audit(1594.957:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.3.20590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f093499c799 code=0x7ffc0000 [ 1637.355407][T19176] BTRFS info (device loop4): rebuilding free space tree [ 1637.390181][ T27] audit: type=1326 audit(1594.957:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.3.20590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093499c799 code=0x7ffc0000 [ 1637.645817][ T1885] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1637.805582][T19215] xt_HMARK: proto mask must be zero with L3 mode [ 1638.014898][ T5849] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (5849) [ 1638.063349][T19219] netlink: 'syz.3.20600': attribute type 8 has an invalid length. [ 1638.474239][ T23] usb 6-1: Service connection timeout for: 256 [ 1638.502335][ T23] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1638.595016][ T23] ath9k_htc: Failed to initialize the device [ 1638.606099][ T23] usb 6-1: ath9k_htc: USB layer deinitialized [ 1638.873450][ T23] usb 6-1: USB disconnect, device number 3 [ 1639.158995][T19251] loop4: detected capacity change from 0 to 256 [ 1639.257869][T19251] FAT-fs (loop4): Directory bread(block 64) failed [ 1639.277138][T19251] FAT-fs (loop4): Directory bread(block 65) failed [ 1639.297501][T19251] FAT-fs (loop4): Directory bread(block 66) failed [ 1639.317432][T19251] FAT-fs (loop4): Directory bread(block 67) failed [ 1639.333456][T19251] FAT-fs (loop4): Directory bread(block 68) failed [ 1639.354774][T19251] FAT-fs (loop4): Directory bread(block 69) failed [ 1639.362987][T19251] FAT-fs (loop4): Directory bread(block 70) failed [ 1639.374355][T19251] FAT-fs (loop4): Directory bread(block 71) failed [ 1639.383487][T19251] FAT-fs (loop4): Directory bread(block 72) failed [ 1639.395160][T19251] FAT-fs (loop4): Directory bread(block 73) failed [ 1639.486463][T19259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20618'. [ 1640.682102][T19271] loop4: detected capacity change from 0 to 32768 [ 1640.754072][T19271] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1640.856064][T19271] XFS (loop4): Ending clean mount [ 1640.890708][T19271] XFS (loop4): Quotacheck needed: Please wait. [ 1641.064006][T19271] XFS (loop4): Quotacheck: Done. [ 1641.290238][T19308] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1641.315315][ T1885] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1643.513220][T19354] loop4: detected capacity change from 0 to 2048 [ 1643.585048][T19354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1643.717749][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20663'. [ 1643.924044][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.617993][T19374] loop5: detected capacity change from 0 to 32768 [ 1644.710350][ T27] audit: type=1800 audit(1602.066:4164): pid=19374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.20669" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 1645.110523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1645.501214][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20692'. [ 1645.610823][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1645.788632][ T27] audit: type=1326 audit(1603.076:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.2.20696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1fcb9c799 code=0x0 [ 1645.810171][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.810570][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1645.867441][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1645.874633][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.888185][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.907278][ T8] usb 6-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 1645.929001][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.953766][ T8] usb 6-1: config 0 descriptor?? [ 1646.401557][ T8] wacom 0003:056A:0059.003E: unknown main item tag 0x0 [ 1646.410471][ T8] wacom 0003:056A:0059.003E: unknown main item tag 0x0 [ 1646.417716][ T8] wacom 0003:056A:0059.003E: unknown main item tag 0x0 [ 1646.430854][ T8] wacom 0003:056A:0059.003E: unknown main item tag 0x0 [ 1646.438747][ T8] wacom 0003:056A:0059.003E: unknown main item tag 0x0 [ 1646.446312][ T8] wacom 0003:056A:0059.003E: unknown main item tag 0x0 [ 1646.476274][ T8] wacom 0003:056A:0059.003E: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.5-1/input0 [ 1646.637855][ T8] usb 6-1: USB disconnect, device number 4 [ 1647.579889][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20707'. [ 1647.628961][T19489] loop5: detected capacity change from 0 to 64 [ 1648.561727][T18084] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1648.775612][T18084] usb 3-1: Using ep0 maxpacket: 16 [ 1648.798469][T18084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.839930][T18084] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.869789][T18084] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1648.890031][T18084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.906127][T18084] usb 3-1: config 0 descriptor?? [ 1649.018983][T19517] loop5: detected capacity change from 0 to 32768 [ 1649.379160][T18084] hid (null): bogus close delimiter [ 1649.423407][T18084] wacom 0003:056A:0084.003F: bogus close delimiter [ 1649.438278][T18084] wacom 0003:056A:0084.003F: item 0 4 2 10 parsing failed [ 1649.462608][T18084] wacom 0003:056A:0084.003F: parse failed [ 1649.484897][T18084] wacom: probe of 0003:056A:0084.003F failed with error -22 [ 1649.529664][T19539] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1649.609765][ T8] usb 3-1: USB disconnect, device number 8 [ 1650.586737][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1650.593566][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1650.932229][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20746'. [ 1650.955477][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20746'. [ 1650.965105][T19567] netlink: 'syz.4.20746': attribute type 11 has an invalid length. [ 1651.223567][T19581] overlay: Unknown parameter '\yzkaller' [ 1651.521226][T19590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20756'. [ 1651.555392][T19588] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20756'. [ 1652.164550][T18126] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1652.390419][T18126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.413657][T18126] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1652.434687][T18126] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1652.454998][T18126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.472331][T19621] loop4: detected capacity change from 0 to 164 [ 1652.491754][T18126] usb 6-1: config 0 descriptor?? [ 1652.507671][T18126] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1652.525487][T18126] dvb-usb: bulk message failed: -22 (3/0) [ 1652.548495][T18126] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1652.585553][T18126] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1652.609637][T18126] usb 6-1: media controller created [ 1652.634933][T18126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1652.700051][T18126] dvb-usb: bulk message failed: -22 (6/0) [ 1652.744138][T18126] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1652.794036][T18126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input103 [ 1652.854205][T18126] dvb-usb: schedule remote query interval to 150 msecs. [ 1652.878246][T18126] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1652.913007][T18126] usb 6-1: USB disconnect, device number 5 [ 1653.010724][T18126] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1653.590600][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20788'. [ 1653.709486][T19658] loop5: detected capacity change from 0 to 512 [ 1653.778743][T19658] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.20790: Directory hole found for htree index block 0 [ 1653.844982][T19658] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1653.888134][T19658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.100095][T17769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.337245][T19674] tipc: Enabling of bearer rejected, failed to enable media [ 1655.360241][T19718] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 1655.379761][T19718] CUSE: unknown device info "3ܟ,̘" [ 1655.386283][T19718] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 1655.386283][T19718] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 1655.416753][T19718] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 1655.432146][T19718] CUSE: DEVNAME unspecified [ 1655.928653][T19738] sctp: [Deprecated]: syz.5.20828 (pid 19738) Use of int in max_burst socket option. [ 1655.928653][T19738] Use struct sctp_assoc_value instead [ 1656.647559][T19758] loop5: detected capacity change from 0 to 8192 [ 1656.685720][T19758] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1656.702996][T19758] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1656.712971][T19758] REISERFS (device loop5): using ordered data mode [ 1656.720432][T19758] reiserfs: using flush barriers [ 1656.742049][T19758] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1656.759381][T19758] REISERFS (device loop5): checking transaction log (loop5) [ 1656.787723][T19758] REISERFS (device loop5): Using r5 hash to sort names [ 1656.804817][T19758] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1658.062417][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20859'. [ 1658.617080][T19785] loop5: detected capacity change from 0 to 65536 [ 1658.665566][T19785] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1658.758871][T19785] XFS (loop5): Ending clean mount [ 1658.895433][T19836] ALSA: mixer_oss: invalid OSS volume '' [ 1659.002329][T17769] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1661.352660][T19890] loop4: detected capacity change from 0 to 4096 [ 1661.361160][T19890] EXT4-fs: Ignoring removed mblk_io_submit option [ 1661.369616][T19890] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1661.405033][T19890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.617480][T19890] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1661.776689][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.121920][ T8] kernel write not supported for file /input/mice (pid: 8 comm: kworker/0:0) [ 1662.661021][T19929] loop5: detected capacity change from 0 to 32768 [ 1662.989703][T19951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20924'. [ 1663.004043][T19949] loop5: detected capacity change from 0 to 1024 [ 1663.067780][T19949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1663.192838][T19949] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1663.265472][T17769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.507578][T18124] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1663.582032][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1663.725808][T18124] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1663.740345][T18124] usb 3-1: config 0 has no interface number 0 [ 1663.748780][T18124] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1663.778934][T18124] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1663.809795][T18124] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1663.827608][T18124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1663.847884][T18124] usb 3-1: Product: syz [ 1663.852832][T18124] usb 3-1: SerialNumber: syz [ 1663.871887][T18124] usb 3-1: config 0 descriptor?? [ 1663.906007][T18124] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input104 [ 1663.915544][T19976] program syz.3.20934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1664.001101][T19980] program syz.3.20934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1664.023155][T19980] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1664.180334][T18124] usb 3-1: USB disconnect, device number 9 [ 1664.447921][ T27] audit: type=1326 audit(1620.531:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19995 comm="syz.3.20939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f093499c799 code=0x0 [ 1665.249526][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1665.453850][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1665.478578][ T23] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1665.487042][ T23] usb 3-1: config 0 has no interface number 0 [ 1665.493219][ T23] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1665.523786][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1665.538167][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.546338][ T23] usb 3-1: Product: syz [ 1665.571357][ T23] usb 3-1: Manufacturer: syz [ 1665.576085][ T23] usb 3-1: SerialNumber: syz [ 1665.621057][ T23] usb 3-1: config 0 descriptor?? [ 1665.648890][ T23] smsc75xx v1.0.0 [ 1665.991531][T20045] loop4: detected capacity change from 0 to 512 [ 1666.013402][T20045] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1666.143394][T20045] EXT4-fs (loop4): 1 truncate cleaned up [ 1666.173105][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20955'. [ 1666.185164][T20045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1666.202319][T20049] tc_dump_action: action bad kind [ 1666.308346][ T23] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1666.333521][ T23] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1666.343509][ T23] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1666.359054][ T23] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 1666.373085][ T23] usb 3-1: USB disconnect, device number 10 [ 1666.406921][T20045] EXT4-fs warning (device loop4): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 1666.530977][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.652336][T20053] loop5: detected capacity change from 0 to 4096 [ 1666.830672][T20053] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1666.851720][T20053] ntfs3: loop5: Failed to load $Extend (-22). [ 1666.869112][T20053] ntfs3: loop5: Failed to initialize $Extend. [ 1667.031766][T20053] ntfs3: loop5: ino=9, ntfs_sync_fs failed, -22. [ 1667.240532][T17769] ntfs3: loop5: ino=9, ntfs_sync_fs failed, -22. [ 1667.837605][T20077] loop4: detected capacity change from 0 to 4096 [ 1667.859690][T20077] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1667.991135][T20077] ntfs3: loop4: failed to convert "076c" to cp932 [ 1668.855260][T20111] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1669.292929][T20133] netlink: 'syz.3.20995': attribute type 1 has an invalid length. [ 1670.106346][T20153] loop5: detected capacity change from 0 to 4096 [ 1670.168774][T20154] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1670.284783][T20153] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '.' [ 1670.338474][T20153] Remounting filesystem read-only [ 1671.183172][ T8] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1671.399466][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1671.416098][ T8] usb 6-1: not running at top speed; connect to a high speed hub [ 1671.430747][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.446690][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1671.469606][ T8] usb 6-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 1671.479418][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.498474][ T8] usb 6-1: Product: syz [ 1671.509596][ T8] usb 6-1: Manufacturer: syz [ 1671.514857][ T8] usb 6-1: SerialNumber: syz [ 1671.759334][ T8] usb 6-1: Unsupported UAC3 BADD profile [ 1671.803547][ T8] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1671.827335][ T8] usb 6-1: USB disconnect, device number 6 [ 1671.868128][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1673.278415][T18124] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 1673.400658][T20223] loop4: detected capacity change from 0 to 32768 [ 1673.474122][T18124] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1673.489404][T18124] usb 6-1: config 0 has no interface number 0 [ 1673.503691][T18124] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1673.539552][T18124] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1673.566517][T18124] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1673.594969][T18124] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.615525][T18124] usb 6-1: config 0 descriptor?? [ 1673.628540][T20221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1673.648489][T18124] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1673.693821][T20238] 9p: Unknown Cache mode or invalid value m [ 1673.819450][T20240] loop4: detected capacity change from 0 to 512 [ 1673.833737][T20240] EXT4-fs: Ignoring removed orlov option [ 1673.848410][T20240] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1673.905542][T20240] EXT4-fs (loop4): 1 orphan inode deleted [ 1673.916033][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1673.920392][T20240] EXT4-fs (loop4): 1 truncate cleaned up [ 1673.935224][T18124] usb 6-1: USB disconnect, device number 7 [ 1673.960984][T20240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1674.172932][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.615725][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21053'. [ 1674.644111][T20255] netlink: 'syz.2.21053': attribute type 2 has an invalid length. [ 1674.867500][T20264] netlink: 'syz.2.21055': attribute type 22 has an invalid length. [ 1674.893934][T20264] netlink: 'syz.2.21055': attribute type 22 has an invalid length. [ 1674.902131][T20264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21055'. [ 1674.918294][T20266] netlink: 80 bytes leftover after parsing attributes in process `syz.5.21056'. [ 1675.226349][T20278] loop4: detected capacity change from 0 to 512 [ 1675.272662][T20278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1675.518428][ T1885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.431914][T18124] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1676.645574][T18124] usb 6-1: Using ep0 maxpacket: 8 [ 1676.662677][T18124] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1676.680074][T18124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.700903][T18124] usb 6-1: Product: syz [ 1676.707641][T18124] usb 6-1: Manufacturer: syz [ 1676.716138][T18124] usb 6-1: SerialNumber: syz [ 1676.726048][T18124] usb 6-1: config 0 descriptor?? [ 1676.740927][T18124] gspca_main: se401-2.14.0 probing 047d:5003 [ 1677.156783][T20328] loop4: detected capacity change from 0 to 2048 [ 1677.182384][T18124] gspca_se401: Wrong descriptor type [ 1677.237614][T20328] loop4: p2 < > p4 [ 1677.243405][T20328] loop4: p4 size 262144 extends beyond EOD, truncated [ 1677.375352][T20330] tipc: Enabled bearer , priority 10 [ 1677.407164][T18124] usb 6-1: USB disconnect, device number 8 [ 1677.487108][ T6316] udevd[6316]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1677.498993][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1677.962821][T20332] loop4: detected capacity change from 0 to 32768 [ 1678.634036][T20357] loop5: detected capacity change from 0 to 32768 [ 1678.682153][T20357] jfs_mkdir: dtInsert returned -EIO [ 1678.703081][T20357] ERROR: (device loop5): jfs_mkdir: [ 1678.703081][T20357] [ 1678.728437][T20357] ERROR: (device loop5): remounting filesystem as read-only [ 1678.770150][T20357] jfs_lookup: iget failed on inum 4 [ 1678.786720][T20357] jfs_lookup: iget failed on inum 4 [ 1678.792349][T20357] jfs_lookup: iget failed on inum 4 [ 1678.807790][T20365] loop4: detected capacity change from 0 to 256 [ 1678.830247][T20357] jfs_lookup: iget failed on inum 4 [ 1678.833387][T20365] exfat: Deprecated parameter 'utf8' [ 1678.891664][T20365] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 1680.889344][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21130'. [ 1680.927488][T20413] loop5: detected capacity change from 0 to 32768 [ 1681.120827][T20432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21132'. [ 1681.306699][T18126] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1681.512322][T18126] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1681.521891][T18126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.532411][T18126] usb 4-1: config 0 descriptor?? [ 1681.548644][T18126] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1681.974503][T18126] gspca_cpia1: usb_control_msg 03, error -32 [ 1681.985103][T18126] gspca_cpia1: usb_control_msg 03, error -71 [ 1681.992559][T18126] gspca_cpia1: usb_control_msg 01, error -71 [ 1681.998586][T18126] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1682.009322][T18126] usb 4-1: USB disconnect, device number 115 [ 1682.898113][T20453] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21140'. [ 1682.913660][T20453] netlink: 23 bytes leftover after parsing attributes in process `syz.5.21140'. [ 1683.554952][T20480] loop5: detected capacity change from 0 to 256 [ 1683.613960][T20480] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 1683.740103][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21157'. [ 1683.847331][T20488] loop4: detected capacity change from 0 to 8 [ 1683.900555][T20488] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1683.919005][T20488] SQUASHFS error: Failed to read block 0x91: -5 [ 1683.943998][T20488] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1683.962600][T20490] tipc: Enabling of bearer rejected, media not registered [ 1683.976604][T20488] SQUASHFS error: Unable to read inode 0x11f [ 1684.062523][T20494] loop5: detected capacity change from 0 to 512 [ 1684.108272][T20494] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1684.123342][T20494] EXT4-fs (loop5): 1 truncate cleaned up [ 1684.181917][T20494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1684.335446][T17769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1684.472001][T20506] openvswitch: netlink: Actions may not be safe on all matching packets [ 1684.937644][T20502] loop4: detected capacity change from 0 to 32768 [ 1685.314801][T20525] tipc: Bearer : already 2 bearers with priority 10 [ 1685.344477][T20525] tipc: Bearer : trying with adjusted priority [ 1685.368200][T20525] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1685.715658][T20534] loop5: detected capacity change from 0 to 512 [ 1685.732053][T20534] EXT4-fs: Ignoring removed mblk_io_submit option [ 1685.783020][T20534] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1685.819163][T20534] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.21181: attempt to clear invalid blocks 2 len 1 [ 1685.853198][T20534] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1685.889654][T20534] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.21181: invalid indirect mapped block 1819239214 (level 0) [ 1685.910358][T20534] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.21181: invalid indirect mapped block 1819239214 (level 1) [ 1685.931073][T20534] EXT4-fs (loop5): 1 truncate cleaned up [ 1685.939097][T20534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.023853][T20534] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1686.050527][T20534] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1686.064241][T20534] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1686.125611][T17769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.266671][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21186'. [ 1686.563638][T20560] loop5: detected capacity change from 0 to 512 [ 1686.934338][T20573] loop5: detected capacity change from 0 to 1024 [ 1686.965657][T20573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1687.013944][T20573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1687.103850][T17769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.293693][T18084] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1687.496759][T18084] usb 3-1: Using ep0 maxpacket: 32 [ 1687.520058][T18084] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1687.539042][T18084] usb 3-1: config 0 has no interface number 0 [ 1687.554115][T18084] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1687.568973][T18084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.578395][T20591] loop4: detected capacity change from 0 to 8192 [ 1687.585630][T18084] usb 3-1: Product: syz [ 1687.596321][T18084] usb 3-1: Manufacturer: syz [ 1687.612042][T18084] usb 3-1: SerialNumber: syz [ 1687.621538][T20591] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1687.652609][T18084] usb 3-1: config 0 descriptor?? [ 1687.681822][T20591] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1687.702768][T18084] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1687.737696][T20591] REISERFS (device loop4): using ordered data mode [ 1687.758863][T18084] usb 3-1: selecting invalid altsetting 1 [ 1687.782819][T20591] reiserfs: using flush barriers [ 1687.791899][T18084] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1687.820817][T20591] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1687.864973][T18084] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1687.913740][T18084] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1687.937990][T20591] REISERFS (device loop4): checking transaction log (loop4) [ 1687.951035][T18084] usb 3-1: media controller created [ 1687.978070][T20591] REISERFS (device loop4): Using r5 hash to sort names [ 1688.004277][T20591] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1688.015922][T18084] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1688.641757][T20606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21214'. [ 1688.652175][T20593] loop5: detected capacity change from 0 to 40427 [ 1688.665111][T20593] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 1688.686056][T20593] F2FS-fs (loop5): invalid crc value [ 1688.703243][T20593] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1688.865367][T20593] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1689.052788][T17769] syz-executor: attempt to access beyond end of device [ 1689.052788][T17769] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1689.070219][T17769] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1689.079734][T20579] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1689.122361][T18084] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1689.140301][T18084] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1689.160168][T18084] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1689.265162][T18084] usb 3-1: USB disconnect, device number 11 [ 1689.453408][T18091] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1689.556606][T20611] loop4: detected capacity change from 0 to 32768 [ 1689.580330][T20611] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.21215 (20611) [ 1689.617717][T20611] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1689.645838][T20611] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1689.666475][T20611] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1689.676955][T18091] usb 4-1: Using ep0 maxpacket: 8 [ 1689.698946][T18091] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.729929][T20611] BTRFS info (device loop4): use zstd compression, level 3 [ 1689.737500][T18091] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1689.753726][T20611] BTRFS info (device loop4): using free space tree [ 1689.763151][T18091] usb 4-1: config 1 has no interface number 1 [ 1689.772320][T18091] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1689.794178][T18091] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1689.806796][T18091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.814879][T18091] usb 4-1: Product: syz [ 1689.822136][T18091] usb 4-1: Manufacturer: syz [ 1689.826899][T18091] usb 4-1: SerialNumber: syz [ 1689.869432][T20611] BTRFS info (device loop4): enabling ssd optimizations [ 1689.876982][T20611] BTRFS info (device loop4): auto enabling async discard [ 1690.072627][T18091] usb 4-1: 0:8 : does not exist [ 1690.109404][ T1885] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1690.176422][T18091] usb 4-1: USB disconnect, device number 116 [ 1690.310787][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1690.502873][T20644] loop5: detected capacity change from 0 to 16 [ 1690.549305][T20644] erofs: (device loop5): mounted with root inode @ nid 36. [ 1690.628917][ T27] audit: type=1800 audit(1644.992:4167): pid=20644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.21224" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 1690.872332][T20652] loop5: detected capacity change from 0 to 16 [ 1690.910921][T20652] erofs: (device loop5): mounted with root inode @ nid 36. [ 1690.988778][T20652] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1691.047263][T20655] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1691.294590][T20659] loop4: detected capacity change from 0 to 1024 [ 1691.420234][ T23] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 1691.438288][T20665] smc: net device bond0 applied user defined pnetid SYZ2 [ 1691.527662][T18126] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1691.614609][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1691.649663][ T23] usb 4-1: config 0 has no interface number 0 [ 1691.662926][ T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1691.675041][ T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1691.687586][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1691.696761][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.728445][ T23] usb 4-1: config 0 descriptor?? [ 1691.742038][T18126] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1691.758465][T20657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1691.766721][T18126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.785061][ T23] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1691.797259][T18126] usb 6-1: Product: syz [ 1691.801503][T18126] usb 6-1: Manufacturer: syz [ 1691.808874][T18126] usb 6-1: SerialNumber: syz [ 1691.835640][T18126] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1691.868263][ T23] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1692.033511][T18091] usb 4-1: USB disconnect, device number 117 [ 1692.135156][T20682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1692.142620][T20682] IPv6: NLM_F_CREATE should be set when creating new route [ 1692.150041][T20682] IPv6: NLM_F_CREATE should be set when creating new route [ 1692.337110][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21245'. [ 1692.377807][T18091] usb 6-1: USB disconnect, device number 9 [ 1692.721330][T20690] loop4: detected capacity change from 0 to 32768 [ 1692.759840][T20690] add_index: next_index = 0. Resetting! [ 1692.767106][T20690] find_entry called with index >= next_index [ 1692.773286][T20690] find_entry called with index >= next_index [ 1692.781426][T20690] find_entry called with index >= next_index [ 1692.787673][T20690] find_entry called with index >= next_index [ 1692.811917][T20690] find_entry called with index >= next_index [ 1692.821702][T20690] find_entry called with index >= next_index [ 1692.827864][T20690] find_entry called with index >= next_index [ 1692.839620][T20690] read_mapping_page failed! [ 1692.845806][T20690] ERROR: (device loop4): txCommit: [ 1692.845806][T20690] [ 1692.860995][T20690] ERROR: (device loop4): remounting filesystem as read-only [ 1692.909512][ T113] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 1692.929901][ T113] ------------[ cut here ]------------ [ 1692.935451][ T113] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 1692.963554][ T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1692.969800][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 1692.977045][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1692.987150][ T113] RIP: 0010:txUnlock+0xc87/0xcb0 [ 1692.992152][ T113] Code: 7f 32 72 07 0f 0b e8 58 c2 7f fe 48 c7 c7 80 1e 04 8b 48 c7 c6 79 1a 04 8b ba a4 03 00 00 48 c7 c1 60 2b 04 8b e8 59 32 72 07 <0f> 0b e8 32 c2 7f fe 48 c7 c7 80 1e 04 8b 48 c7 c6 79 1a 04 8b ba [ 1693.011986][ T113] RSP: 0018:ffffc900025b7d08 EFLAGS: 00010246 [ 1693.018109][ T113] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 622a2e81e2760000 [ 1693.026126][ T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1693.034400][ T113] RBP: ffffc9000287a090 R08: ffffc900025b7a07 R09: 1ffff920004b6f40 [ 1693.042438][ T113] R10: dffffc0000000000 R11: fffff520004b6f41 R12: ffff888064d04aa8 [ 1693.050539][ T113] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807db1ca94 [ 1693.058563][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1693.067539][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1693.074172][ T113] CR2: 000000110c3c81a0 CR3: 000000005b87e000 CR4: 00000000003506e0 [ 1693.082195][ T113] Call Trace: [ 1693.085548][ T113] [ 1693.088519][ T113] ? lockdep_hardirqs_on+0x98/0x150 [ 1693.093765][ T113] jfs_lazycommit+0x56e/0xa70 [ 1693.098493][ T113] ? txFreelock+0x5a0/0x5a0 [ 1693.103020][ T113] ? do_task_dead+0xd0/0xd0 [ 1693.107643][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 1693.112705][ T113] kthread+0x2fa/0x390 [ 1693.116809][ T113] ? txFreelock+0x5a0/0x5a0 [ 1693.121344][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1693.125960][ T113] ret_from_fork+0x48/0x80 [ 1693.130401][ T113] ? kthread_blkcg+0xd0/0xd0 [ 1693.135020][ T113] ret_from_fork_asm+0x11/0x20 [ 1693.139828][ T113] [ 1693.142882][ T113] Modules linked in: [ 1693.171653][ T23] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1693.180864][ T23] ath9k_htc: Failed to initialize the device [ 1693.188726][T18091] usb 6-1: ath9k_htc: USB layer deinitialized [ 1693.197867][ T113] ---[ end trace 0000000000000000 ]--- [ 1693.203449][ T113] RIP: 0010:txUnlock+0xc87/0xcb0 [ 1693.209199][ T113] Code: 7f 32 72 07 0f 0b e8 58 c2 7f fe 48 c7 c7 80 1e 04 8b 48 c7 c6 79 1a 04 8b ba a4 03 00 00 48 c7 c1 60 2b 04 8b e8 59 32 72 07 <0f> 0b e8 32 c2 7f fe 48 c7 c7 80 1e 04 8b 48 c7 c6 79 1a 04 8b ba [ 1693.231540][ T113] RSP: 0018:ffffc900025b7d08 EFLAGS: 00010246 [ 1693.268209][ T113] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 622a2e81e2760000 [ 1693.278185][ T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1693.288034][ T113] RBP: ffffc9000287a090 R08: ffffc900025b7a07 R09: 1ffff920004b6f40 [ 1693.297131][ T113] R10: dffffc0000000000 R11: fffff520004b6f41 R12: ffff888064d04aa8 [ 1693.306894][ T113] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807db1ca94 [ 1693.315409][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1693.325700][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1693.332362][ T113] CR2: 00007f20027e82f8 CR3: 000000007ddb6000 CR4: 00000000003506e0 [ 1693.341296][ T113] Kernel panic - not syncing: Fatal exception [ 1693.348025][ T113] Kernel Offset: disabled [ 1693.352364][ T113] Rebooting in 86400 seconds..