last executing test programs: 22m42.687839275s ago: executing program 3 (id=2531): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x2}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x2b}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 22m42.379420474s ago: executing program 3 (id=2535): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071103100000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0xfffa}, 0x4e) 22m42.093640013s ago: executing program 3 (id=2541): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) 22m41.839565741s ago: executing program 3 (id=2546): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000005c0)={[{@utf8}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@gid}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 22m41.314290697s ago: executing program 3 (id=2554): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2240) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)={0x101, 0x80, 0x1, 0x3, 0x3, 0x7}) 22m40.552831631s ago: executing program 3 (id=2562): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 22m40.090339685s ago: executing program 32 (id=2562): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 22m36.878665335s ago: executing program 4 (id=2613): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000180)="170000000200020000ffbe8c5ee17688a2003c08000000000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0xb8) 22m36.69990166s ago: executing program 4 (id=2615): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [0xfffffffd], [0x0, 0x0, 0xfffffffffffffffd]}) 22m36.435148859s ago: executing program 4 (id=2620): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, 0x0, 0x0) 22m36.193733556s ago: executing program 4 (id=2624): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000005c0)={[{@utf8}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@gid}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 22m35.671660152s ago: executing program 4 (id=2632): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x1, 0x0, 0x14, 0x4}) 22m33.253280017s ago: executing program 4 (id=2650): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x2d, "67850bcc2cc834888fdd6f081d9fc303c68bf9b033306b55cfcf22c90300000010000000000000000000777f49"}}) 22m32.799666451s ago: executing program 33 (id=2650): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x2d, "67850bcc2cc834888fdd6f081d9fc303c68bf9b033306b55cfcf22c90300000010000000000000000000777f49"}}) 2.570930771s ago: executing program 2 (id=25886): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) 2.036914667s ago: executing program 5 (id=25892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x40010002, 0x0, 0x0) 1.96403871s ago: executing program 6 (id=25894): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r0, 0x89f1, 0x0) 1.717374807s ago: executing program 5 (id=25896): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000400)) 1.64443686s ago: executing program 6 (id=25897): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.61418057s ago: executing program 1 (id=25898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x18, r1, 0x301, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 1.481408024s ago: executing program 5 (id=25899): socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x92, 0x0) 1.389915387s ago: executing program 6 (id=25901): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x100000001, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 1.385756917s ago: executing program 2 (id=25902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x3c, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, {[@md5sig={0x13, 0x12, "0cd80e00"}]}}}}}}}, 0x0) 1.379454097s ago: executing program 1 (id=25903): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000440)=0x17, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1.285389841s ago: executing program 0 (id=25904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0xfffffffffffffffe, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x421, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x40) 1.285235351s ago: executing program 5 (id=25905): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d062d407f2c696f636861727365743d63703836332c636f6465706167653d69736f383835392d332c0057728e7edeea8ce4639d9c42b47d17d3fcd0720a8929166d5bfaae65f664ad57409da31d700c355f59f646ec2c830b3fb51d44dc6f9d032cc06c0101baca689e1b114191b7fd569fb54225bd68fca477c5f9a7e24e8298dd0c91"], 0x5, 0x357, &(0x7f0000000580)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 1.160190884s ago: executing program 6 (id=25906): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.158939044s ago: executing program 1 (id=25907): syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d6d697865642c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235352c636865636b3d7374726963742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c004c21fbd23364597e61bd9e6c47bce24b3f93d831eaa8688deebdbf10d10f509bad0fabd2253225b10ce42f4dc8b683aaabfe13d3585bcb3b5892369a7a4e03"], 0x65, 0x360, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 985.37661ms ago: executing program 0 (id=25908): r0 = socket$kcm(0xa, 0x3, 0x3a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) 985.29185ms ago: executing program 2 (id=25909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004084}, 0x840) 966.43621ms ago: executing program 5 (id=25910): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$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") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 869.706503ms ago: executing program 2 (id=25911): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000500)="294f28dfe56d2c8ba236", 0xa}], 0x2}, 0x0) 825.338415ms ago: executing program 1 (id=25912): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x6}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 773.444676ms ago: executing program 0 (id=25913): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000000010000000000", 0x58}], 0x1) 744.829367ms ago: executing program 6 (id=25914): r0 = socket(0xa, 0x3, 0xff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0xc6, 0xfffff034}, {0x30, 0x0, 0x2, 0x1}, {0x6, 0x4, 0x0, 0x100000f}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @remote, @local, {[@hopopts={0xff}]}}}}}, 0x0) 637.336591ms ago: executing program 2 (id=25915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="9a6f2e", &(0x7f0000000140), 0x2}, 0x20) 634.280931ms ago: executing program 1 (id=25916): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffc, 0x0, 0x12, 0x17, 0x18, "43443af4ff8c8ad271d16eb2123b3b1bd68150cf090004a3a3026f60c75585bee41b9ac4620700000022c014cc874a103a4a7408000000009dd38cb4a000", "e2e6b11135c1ce3cffcca6b388251926088888aad5f38476d707002e817c1cfcdaf180c177dd28f6fa00006ca0981b01ab00007d0100", "f9285f39feffbcfdb3eaebf6b08cf712fe7f00", [0x200000000000000d, 0x8000000d]}) 534.707784ms ago: executing program 6 (id=25917): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x8000000000000001, 0x5}}, 0x30) 523.112404ms ago: executing program 0 (id=25918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r1, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 389.363488ms ago: executing program 2 (id=25919): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, 0x0, 0x0) 389.241538ms ago: executing program 1 (id=25920): r0 = semget$private(0x0, 0x6, 0x583) semop(r0, &(0x7f0000000900)=[{0x0, 0x8000}, {0x3, 0x2, 0x1800}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xeff7}) 76.379178ms ago: executing program 5 (id=25921): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 75.815008ms ago: executing program 0 (id=25931): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) 0s ago: executing program 0 (id=25922): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 0s ago: executing program 0 (id=25923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) kernel console output (not intermixed with test programs): confined pid=12135 comm="syz.6.24080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1567.920340][ T26] audit: type=1326 audit(1475.373:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.2.24086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1567.984046][ T26] audit: type=1326 audit(1475.373:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.2.24086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1568.058502][ T26] audit: type=1326 audit(1475.373:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.2.24086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1568.160344][ T26] audit: type=1326 audit(1475.373:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.2.24086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1568.261617][ T26] audit: type=1326 audit(1475.373:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.2.24086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1568.328748][T12169] loop6: detected capacity change from 0 to 4096 [ 1568.346738][T12169] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 1571.333326][T12376] dlm: no locking on control device [ 1571.548952][T12394] IPv6: Can't replace route, no match found [ 1571.596057][T12396] netlink: 120 bytes leftover after parsing attributes in process `syz.6.24166'. [ 1572.065747][T12428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1572.966543][T12483] netlink: 12296 bytes leftover after parsing attributes in process `syz.5.24200'. [ 1573.017418][T12483] netlink: 164 bytes leftover after parsing attributes in process `syz.5.24200'. [ 1573.362068][ T4323] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 1573.574056][ T4323] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1573.615160][ T4323] usb 7-1: config 0 has no interface number 0 [ 1573.632190][ T4323] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1573.678457][ T4323] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1573.683791][T12535] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 1573.697148][ T4323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.707367][ T4323] usb 7-1: Product: syz [ 1573.738081][ T4323] usb 7-1: Manufacturer: syz [ 1573.742733][ T4323] usb 7-1: SerialNumber: syz [ 1573.772847][ T4323] usb 7-1: config 0 descriptor?? [ 1573.800925][T12547] x_tables: duplicate entry at hook 1 [ 1573.919777][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1573.919792][ T26] audit: type=1326 audit(1481.063:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.5.24222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046c79ce59 code=0x7ffc0000 [ 1573.954942][ T26] audit: type=1326 audit(1481.091:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.5.24222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f046c79ce59 code=0x7ffc0000 [ 1573.998994][ T4323] CoreChips: probe of 7-1:0.41 failed with error -71 [ 1574.031385][ T4323] usb 7-1: USB disconnect, device number 86 [ 1574.043333][ T26] audit: type=1326 audit(1481.091:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.5.24222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046c79ce59 code=0x7ffc0000 [ 1574.067084][ C0] vkms_vblank_simulate: vblank timer overrun [ 1574.067768][ T4319] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1574.122551][T12568] loop5: detected capacity change from 0 to 2048 [ 1574.132030][ T26] audit: type=1326 audit(1481.091:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.5.24222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046c79ce59 code=0x7ffc0000 [ 1574.155741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1574.193460][T12576] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1574.256466][T10345] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1574.299184][ T4319] usb 1-1: Using ep0 maxpacket: 16 [ 1574.309037][ T4319] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1574.329282][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.356499][ T4319] usb 1-1: Product: syz [ 1574.360708][ T4319] usb 1-1: Manufacturer: syz [ 1574.367590][ T4319] usb 1-1: SerialNumber: syz [ 1574.375432][ T4319] usb 1-1: config 0 descriptor?? [ 1574.385261][ T4319] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1574.461071][T10345] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 1574.474748][T10345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.497518][T10345] usb 3-1: config 0 descriptor?? [ 1574.520908][T10345] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1574.819058][ T4319] gspca_spca508: reg_read err -71 [ 1574.833591][ T4319] gspca_spca508: reg_read err -71 [ 1574.854126][ T4319] gspca_spca508: reg_read err -71 [ 1574.860487][T12610] wg1 speed is unknown, defaulting to 1000 [ 1574.867629][ T4319] gspca_spca508: reg_read err -71 [ 1574.875311][T12610] lo speed is unknown, defaulting to 1000 [ 1574.881933][ T4319] gspca_spca508: reg write: error -71 [ 1574.887978][ T4319] spca508: probe of 1-1:0.0 failed with error -71 [ 1574.926880][ T4319] usb 1-1: USB disconnect, device number 120 [ 1574.953724][T10345] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1574.971190][T10345] pac7311: probe of 3-1:0.0 failed with error -71 [ 1574.997743][T10345] usb 3-1: USB disconnect, device number 14 [ 1575.263140][T12621] loop5: detected capacity change from 0 to 32768 [ 1575.278296][T12621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.24237 (12621) [ 1575.298572][ T9510] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1575.331224][T12621] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1575.348397][T12621] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1575.350129][T12664] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 1575.357468][T12621] BTRFS info (device loop5): using free space tree [ 1575.441422][T12678] loop0: detected capacity change from 0 to 512 [ 1575.451034][T12678] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1575.506815][T12621] BTRFS info (device loop5): enabling ssd optimizations [ 1575.520427][ T9510] usb 2-1: Using ep0 maxpacket: 8 [ 1575.527782][ T9510] usb 2-1: config 6 has an invalid interface number: 64 but max is 0 [ 1575.556578][ T9510] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.581424][ T9510] usb 2-1: config 6 has no interface number 0 [ 1575.587919][ T9510] usb 2-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30 [ 1575.612960][ T9510] usb 2-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1575.626672][ T9510] usb 2-1: config 6 interface 64 has no altsetting 0 [ 1575.634106][T10430] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1575.654246][ T9510] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1575.674969][ T9510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.696071][ T9510] usb 2-1: Product: syz [ 1575.700344][ T9510] usb 2-1: Manufacturer: syz [ 1575.714582][ T9510] usb 2-1: SerialNumber: syz [ 1576.075613][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24246'. [ 1576.075759][ T9516] usb 2-1: USB disconnect, device number 3 [ 1576.400866][T12733] nfs: Deprecated parameter 'nointr' [ 1576.446513][T12736] netlink: 'syz.5.24254': attribute type 2 has an invalid length. [ 1576.477942][T12736] netlink: 'syz.5.24254': attribute type 8 has an invalid length. [ 1576.494813][T12736] netlink: 132 bytes leftover after parsing attributes in process `syz.5.24254'. [ 1576.914700][T12772] xt_connbytes: Forcing CT accounting to be enabled [ 1577.070283][T12779] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744071562330114) [ 1577.134048][T12779] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1577.390222][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1577.396602][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1577.415994][T12803] netlink: 256 bytes leftover after parsing attributes in process `syz.5.24277'. [ 1577.870642][T12837] netlink: 'syz.6.24288': attribute type 2 has an invalid length. [ 1577.905211][T12837] netlink: 504 bytes leftover after parsing attributes in process `syz.6.24288'. [ 1579.075899][ T9516] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1579.138284][T12872] loop0: detected capacity change from 0 to 32768 [ 1579.197354][T12933] netlink: 152 bytes leftover after parsing attributes in process `syz.5.24321'. [ 1579.207757][T12932] SET target dimension over the limit! [ 1579.213367][T12872] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1579.247505][T12938] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 1579.277285][T12872] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2d5/0x1110, inode 0x1803 dinode [ 1579.292337][ T9516] usb 2-1: Using ep0 maxpacket: 8 [ 1579.293998][T12872] XFS (loop0): Unmount and run xfs_repair [ 1579.299706][ T9516] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1579.324816][ T9516] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1579.354655][T12872] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1579.364520][ T9516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.373656][T12872] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 1579.390831][ T9516] usb 2-1: Product: syz [ 1579.392248][T12945] netlink: 'syz.2.24322': attribute type 7 has an invalid length. [ 1579.404309][T12872] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1579.406566][ T9516] usb 2-1: Manufacturer: syz [ 1579.421203][T12945] netlink: 'syz.2.24322': attribute type 8 has an invalid length. [ 1579.428481][ T9516] usb 2-1: SerialNumber: syz [ 1579.446258][T12872] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 1579.478194][T12872] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 1579.514397][T12872] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1579.545943][T12872] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 1579.586257][T12872] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 1579.595755][T12872] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 1579.721412][ T9516] usb 2-1: USB disconnect, device number 4 [ 1579.814862][ T4274] XFS (loop0): Unmounting Filesystem [ 1579.975182][ T6654] udevd[6654]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1580.627291][T13027] loop5: detected capacity change from 0 to 764 [ 1580.693815][T13027] Symlink component flag not implemented [ 1580.699502][T13027] Symlink component flag not implemented [ 1580.745789][ T26] audit: type=1326 audit(1487.454:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.1.24348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1580.760175][T13027] Symlink component flag not implemented (128) [ 1580.796953][T13039] xt_socket: unknown flags 0x4c [ 1580.802084][T13030] loop6: detected capacity change from 0 to 4096 [ 1580.824408][T13027] Symlink component flag not implemented (105) [ 1580.824617][ T26] audit: type=1326 audit(1487.454:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.1.24348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1580.880772][T13030] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1580.932615][T13030] ntfs3: loop6: ntfs_evict_inode r=6 failed, -22. [ 1580.960735][T13030] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1580.976035][ T26] audit: type=1326 audit(1487.482:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.1.24348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1581.050254][T13049] loop0: detected capacity change from 0 to 256 [ 1581.117466][T13049] exfat: Deprecated parameter 'namecase' [ 1581.123242][ T26] audit: type=1326 audit(1487.482:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.1.24348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1581.153086][T13049] exfat: Deprecated parameter 'utf8' [ 1581.158450][T13049] exfat: Deprecated parameter 'namecase' [ 1581.207673][T13049] exfat: Deprecated parameter 'utf8' [ 1581.237134][T13049] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1581.269246][ T26] audit: type=1326 audit(1487.482:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.1.24348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1581.291845][T13049] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1581.394951][T13069] Timeout policy `syz1' can only be used by L3 protocol number 61704 [ 1581.613545][T13082] loop5: detected capacity change from 0 to 64 [ 1582.527298][ T9516] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1582.672133][T13164] loop0: detected capacity change from 0 to 512 [ 1582.696808][T13164] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1582.755168][ T9516] usb 6-1: Using ep0 maxpacket: 16 [ 1582.787101][T13164] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.24387: iget: bad i_size value: 360287970189639680 [ 1582.811781][ T9516] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1582.851052][ T9516] usb 6-1: config 0 has no interface number 0 [ 1582.864659][T13164] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.24387: couldn't read orphan inode 15 (err -117) [ 1582.915155][ T9516] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1582.915691][T13164] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1582.956992][ T9516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.965052][ T9516] usb 6-1: Product: syz [ 1582.985982][ T9516] usb 6-1: Manufacturer: syz [ 1582.990742][ T9516] usb 6-1: SerialNumber: syz [ 1583.006704][T13164] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 13: comm syz.0.24387: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 1583.050393][T13164] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz.0.24387: directory missing '.' [ 1583.053037][ T9516] usb 6-1: config 0 descriptor?? [ 1583.101376][ T9516] hub 6-1:0.132: bad descriptor, ignoring hub [ 1583.117128][ T9516] hub: probe of 6-1:0.132 failed with error -5 [ 1583.120068][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1583.134350][ T9516] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input84 [ 1583.193335][T10345] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1583.348868][T13206] loop0: detected capacity change from 0 to 4096 [ 1583.367634][T13206] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1583.403987][T10345] usb 7-1: Using ep0 maxpacket: 16 [ 1583.419626][T10345] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1583.461623][T10345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.493966][T10345] usb 7-1: Product: syz [ 1583.498177][T10345] usb 7-1: Manufacturer: syz [ 1583.526307][T10345] usb 7-1: SerialNumber: syz [ 1583.547537][T10345] r8152-cfgselector 7-1: config 0 descriptor?? [ 1583.940336][T13232] loop0: detected capacity change from 0 to 512 [ 1583.975927][T13232] FAT-fs (loop0): Unrecognized mount option "shortnutf8=1" or missing value [ 1584.014695][T10345] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1584.028247][T10345] r8152-cfgselector 7-1: USB disconnect, device number 87 [ 1584.103969][T13258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24405'. [ 1584.335355][ T4319] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1584.536302][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 1584.543345][ T4319] usb 1-1: config 0 has an invalid interface number: 88 but max is 3 [ 1584.592338][ T4319] usb 1-1: config 0 has an invalid interface number: 250 but max is 3 [ 1584.622307][ T4319] usb 1-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 1584.645637][ T4319] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 1584.664144][ T4319] usb 1-1: config 0 has no interface number 0 [ 1584.680778][ T4319] usb 1-1: config 0 has no interface number 1 [ 1584.703758][ T4319] usb 1-1: config 0 interface 88 has no altsetting 0 [ 1584.724698][ T4319] usb 1-1: config 0 interface 250 has no altsetting 0 [ 1584.748128][ T4319] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 1584.777362][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.809870][ T4319] usb 1-1: config 0 descriptor?? [ 1585.056793][T13309] netlink: 'syz.2.24422': attribute type 6 has an invalid length. [ 1585.067116][ T4319] usb 1-1: string descriptor 0 read error: -71 [ 1585.107861][ T4319] usb 1-1: USB disconnect, device number 121 [ 1585.313991][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.24426'. [ 1585.352686][T13330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.373336][T13330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.403265][T13330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.423338][T13330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.538387][T13299] loop6: detected capacity change from 0 to 32768 [ 1585.569755][T13299] add_index: next_index = 0. Resetting! [ 1585.597748][T13299] find_entry called with index >= next_index [ 1585.631022][T13299] find_entry called with index >= next_index [ 1585.993586][ T9516] usb 6-1: USB disconnect, device number 93 [ 1586.182113][ T9516] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1586.393286][ T9516] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1586.423016][ T9516] usb 6-1: not running at top speed; connect to a high speed hub [ 1586.461574][ T9516] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.484318][ T9516] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1586.531410][ T9516] usb 6-1: string descriptor 0 read error: -22 [ 1586.545405][ T9516] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1586.562727][ T9516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.856926][ T9516] usb 6-1: USB disconnect, device number 94 [ 1587.113141][T13466] loop6: detected capacity change from 0 to 16 [ 1587.138243][T13466] erofs: (device loop6): mounted with root inode @ nid 36. [ 1587.190684][T13466] syz.6.24460: attempt to access beyond end of device [ 1587.190684][T13466] loop6: rw=524288, sector=1342177272, nr_sectors = 8 limit=16 [ 1587.264627][T13466] syz.6.24460: attempt to access beyond end of device [ 1587.264627][T13466] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1587.315902][ T26] audit: type=1800 audit(1493.603:1074): pid=13466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.24460" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1587.394256][T13425] loop0: detected capacity change from 0 to 32768 [ 1587.463295][T13425] XFS (loop0): Mounting V5 Filesystem [ 1587.566470][T13425] XFS (loop0): Ending clean mount [ 1587.730777][ T4274] XFS (loop0): Unmounting Filesystem [ 1587.833402][T13502] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.24467'. [ 1587.986154][T13512] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 1588.039553][T13512] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1588.100137][T13517] netlink: 'syz.5.24474': attribute type 4 has an invalid length. [ 1588.130079][T13517] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.24474'. [ 1588.168066][T13514] loop6: detected capacity change from 0 to 4096 [ 1588.288918][T13514] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1588.761778][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24484'. [ 1588.824120][T13563] loop0: detected capacity change from 0 to 64 [ 1588.845548][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24488'. [ 1589.965174][T13643] sctp: [Deprecated]: syz.0.24513 (pid 13643) Use of int in maxseg socket option. [ 1589.965174][T13643] Use struct sctp_assoc_value instead [ 1590.000911][T13646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1590.434389][T13671] loop0: detected capacity change from 0 to 16 [ 1590.464716][T13671] erofs: (device loop0): mounted with root inode @ nid 36. [ 1590.497838][T13671] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-95] [ 1590.523458][T13677] overlayfs: conflicting options: nfs_export=on,index=off [ 1590.923584][T13698] ALSA: mixer_oss: invalid OSS volume '' [ 1591.163137][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24541'. [ 1591.341495][T13739] netlink: 'syz.2.24545': attribute type 95 has an invalid length. [ 1591.579956][T13762] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 1591.691880][T13769] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1591.717506][ T4319] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1591.782194][T13774] IPVS: length: 72 != 24 [ 1591.941781][ T4319] usb 7-1: Using ep0 maxpacket: 16 [ 1591.949764][ T4319] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1591.968511][ T4319] usb 7-1: config 0 has no interface number 0 [ 1591.997245][ T4319] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1592.014614][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.023144][ T4319] usb 7-1: Product: syz [ 1592.027594][ T4319] usb 7-1: Manufacturer: syz [ 1592.038026][ T4319] usb 7-1: SerialNumber: syz [ 1592.061923][ T4319] usb 7-1: config 0 descriptor?? [ 1592.076245][ T4319] hub 7-1:0.132: bad descriptor, ignoring hub [ 1592.087462][T13794] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 1592.102472][ T4319] hub: probe of 7-1:0.132 failed with error -5 [ 1592.116168][ T4319] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input85 [ 1592.529721][T13827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24571'. [ 1592.554474][T13827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24571'. [ 1592.824491][T13849] dlm: no locking on control device [ 1593.093471][T13864] netlink: 120 bytes leftover after parsing attributes in process `syz.2.24582'. [ 1593.139897][T13869] IPv6: Can't replace route, no match found [ 1593.684307][T13905] ieee802154 phy0 wpan0: encryption failed: -22 [ 1593.968869][T13926] netlink: 12296 bytes leftover after parsing attributes in process `syz.6.24600'. [ 1594.010413][T13926] netlink: 164 bytes leftover after parsing attributes in process `syz.6.24600'. [ 1594.198355][T13941] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 1594.261294][ T26] audit: type=1326 audit(1500.106:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.2.24610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1594.305641][T13948] x_tables: duplicate entry at hook 1 [ 1594.355878][ T26] audit: type=1326 audit(1500.144:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.2.24610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1594.418607][ T26] audit: type=1326 audit(1500.144:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.2.24610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1594.477580][T13958] nfs: Deprecated parameter 'nointr' [ 1594.485251][ T26] audit: type=1326 audit(1500.144:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.2.24610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1594.508978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.561159][ T26] audit: type=1326 audit(1500.144:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13945 comm="syz.2.24610" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1594.713806][T13974] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 1594.857723][T13979] loop6: detected capacity change from 0 to 512 [ 1594.935257][T13979] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1595.054468][T13998] netlink: 'syz.1.24624': attribute type 2 has an invalid length. [ 1595.065314][T13992] loop5: detected capacity change from 0 to 4096 [ 1595.082309][T13998] netlink: 'syz.1.24624': attribute type 8 has an invalid length. [ 1595.114445][T13998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24624'. [ 1595.128210][T13992] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1595.190598][T12711] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1595.382222][ T26] audit: type=1326 audit(1501.145:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.1.24638" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1595.414972][T12711] usb 3-1: Using ep0 maxpacket: 16 [ 1595.429685][T12711] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1595.442256][ T26] audit: type=1326 audit(1501.145:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.1.24638" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1595.468182][T12711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.476210][T12711] usb 3-1: Product: syz [ 1595.523239][T12711] usb 3-1: Manufacturer: syz [ 1595.549968][T12711] usb 3-1: SerialNumber: syz [ 1595.566693][T12711] r8152-cfgselector 3-1: config 0 descriptor?? [ 1595.566755][ T26] audit: type=1326 audit(1501.145:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.1.24638" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1595.596609][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.693744][ T26] audit: type=1326 audit(1501.145:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.1.24638" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1595.767461][ T26] audit: type=1326 audit(1501.145:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.1.24638" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080c59ce59 code=0x7ffc0000 [ 1595.791203][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.861239][T14039] netlink: 'syz.1.24634': attribute type 21 has an invalid length. [ 1595.906791][T14039] netlink: 128 bytes leftover after parsing attributes in process `syz.1.24634'. [ 1595.916044][T14039] netlink: 3 bytes leftover after parsing attributes in process `syz.1.24634'. [ 1596.038504][T12711] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1596.080368][T12711] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 1596.408527][T10345] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1596.617907][T14063] loop6: detected capacity change from 0 to 32768 [ 1596.649171][T10345] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1596.676313][T14063] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.24640 (14063) [ 1596.681292][T10345] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1596.688902][T14079] xt_CT: No such helper "snmp_trap" [ 1596.729777][T10345] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 1596.749744][T10345] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1596.814263][T10345] usb 1-1: config 129 has no interface number 0 [ 1596.814288][T10345] usb 1-1: config 129 has no interface number 1 [ 1596.814326][T10345] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1596.814355][T10345] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1596.814415][T10345] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1596.814962][T10345] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1596.814986][T10345] usb 1-1: config 129 interface 5 has no altsetting 0 [ 1596.816908][T14063] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1596.816994][T14063] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1596.817048][T14063] BTRFS info (device loop6): using free space tree [ 1596.829435][T10345] usb 1-1: string descriptor 0 read error: -22 [ 1596.829520][T10345] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1596.829544][T10345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.877688][T10345] usb 1-1: MIDIStreaming interface descriptor not found [ 1597.121181][T14063] BTRFS info (device loop6): enabling ssd optimizations [ 1597.172779][ T9516] usb 1-1: USB disconnect, device number 122 [ 1597.183808][ T4319] usb 7-1: USB disconnect, device number 88 [ 1597.270038][T10638] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1598.316353][T14220] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 1598.915703][T14253] netlink: 'syz.5.24678': attribute type 7 has an invalid length. [ 1598.944476][T14253] netlink: 'syz.5.24678': attribute type 8 has an invalid length. [ 1598.992681][T14219] loop2: detected capacity change from 0 to 32768 [ 1599.054789][T14219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.24664 (14219) [ 1599.107115][T14219] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1599.150670][T14219] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1599.198283][T14219] BTRFS info (device loop2): using free space tree [ 1599.318215][T14288] SET target dimension over the limit! [ 1599.362274][T14219] BTRFS info (device loop2): enabling ssd optimizations [ 1599.481586][T14297] loop5: detected capacity change from 0 to 4096 [ 1599.567526][T14297] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1599.617972][ T4283] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1599.630613][T14306] loop0: detected capacity change from 0 to 2048 [ 1599.776159][T14316] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1599.964618][T14322] netlink: 152 bytes leftover after parsing attributes in process `syz.1.24692'. [ 1600.483805][T14350] IPVS: length: 72 != 24 [ 1600.615985][T14358] loop2: detected capacity change from 0 to 764 [ 1600.633332][T14345] loop0: detected capacity change from 0 to 4096 [ 1600.669597][T14345] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1600.683409][T14358] Symlink component flag not implemented [ 1600.696081][T14358] Symlink component flag not implemented [ 1600.714774][T14358] Symlink component flag not implemented (128) [ 1600.743447][T14358] Symlink component flag not implemented (105) [ 1601.381666][T14396] loop0: detected capacity change from 0 to 128 [ 1601.411303][T14396] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1601.468607][T14396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1601.650525][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1601.650539][ T26] audit: type=1326 audit(1507.013:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.6.24718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1601.786759][ T26] audit: type=1326 audit(1507.013:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.6.24718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1601.868515][ T26] audit: type=1326 audit(1507.013:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.6.24718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1601.892307][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.953231][ T26] audit: type=1326 audit(1507.013:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.6.24718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1602.355962][T14446] netlink: 12296 bytes leftover after parsing attributes in process `syz.1.24724'. [ 1602.396800][T14446] netlink: 164 bytes leftover after parsing attributes in process `syz.1.24724'. [ 1602.651171][T14450] loop6: detected capacity change from 0 to 4096 [ 1602.675852][T14450] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1602.802890][T14450] ntfs3: loop6: failed to convert "c46c" to cp437 [ 1602.871821][T14480] team0: Device macvlan0 failed to change mtu [ 1603.103510][ T9506] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1603.333054][ T9506] usb 6-1: Using ep0 maxpacket: 8 [ 1603.345883][ T9506] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1603.381807][ T9506] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1603.407859][ T9506] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.444756][ T9506] usb 6-1: Product: syz [ 1603.454466][ T9506] usb 6-1: Manufacturer: syz [ 1603.470759][ T9506] usb 6-1: SerialNumber: syz [ 1603.743232][ T9506] usb 6-1: USB disconnect, device number 95 [ 1603.775334][T14532] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 1603.821342][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1604.009132][T14545] loop0: detected capacity change from 0 to 4096 [ 1604.045868][T14545] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1604.088159][T14545] ntfs3: loop0: ntfs_evict_inode r=6 failed, -22. [ 1604.096992][T14545] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1604.688050][T14596] loop5: detected capacity change from 0 to 16 [ 1604.715408][T14596] erofs: (device loop5): mounted with root inode @ nid 36. [ 1605.510003][T14640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24777'. [ 1605.565016][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24778'. [ 1605.760516][T14661] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1605.949111][T14676] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.24788'. [ 1606.335945][T14186] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1606.528305][T14186] usb 3-1: Using ep0 maxpacket: 32 [ 1606.536208][T14186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.548505][T14186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.569172][T14186] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1606.589394][T14186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.599410][T14711] misc userio: Invalid payload size [ 1606.610147][T14186] usb 3-1: config 0 descriptor?? [ 1606.646758][T14186] hub 3-1:0.0: USB hub found [ 1606.856788][T14186] hub 3-1:0.0: 5 ports detected [ 1606.868860][T14186] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1607.076715][T14186] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1607.090034][T14186] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1607.117384][T14186] usbhid 3-1:0.0: can't add hid device: -71 [ 1607.152114][T14186] usbhid: probe of 3-1:0.0 failed with error -71 [ 1607.245313][T14186] usb 3-1: USB disconnect, device number 16 [ 1607.245419][T14755] device netdevsim0 entered promiscuous mode [ 1607.269895][T14755] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1607.395578][ T9507] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1607.575577][ T9506] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1607.612872][ T9507] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 1607.638426][ T9507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.678680][ T9507] usb 6-1: config 0 descriptor?? [ 1607.697248][ T9507] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1607.799965][ T9506] usb 2-1: Using ep0 maxpacket: 16 [ 1607.812186][ T9506] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1607.863650][ T9506] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1607.883605][ T9506] usb 2-1: config 1 has no interface number 1 [ 1607.890383][ T9506] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1607.905091][ T9506] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1607.910213][T14797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24819'. [ 1607.926791][ T9506] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1607.945760][ T9506] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1607.966639][ T9506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.990608][ T9506] usb 2-1: Product: syz [ 1607.998895][ T9506] usb 2-1: Manufacturer: syz [ 1608.003807][ T9506] usb 2-1: SerialNumber: syz [ 1608.013093][T14762] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1608.144076][ T9507] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1608.153648][ T9507] pac7311: probe of 6-1:0.0 failed with error -71 [ 1608.176156][ T9507] usb 6-1: USB disconnect, device number 96 [ 1608.270248][ T9506] aqc111: probe of 2-1:1.105 failed with error -22 [ 1608.413330][T14186] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1608.519893][ T9507] usb 2-1: USB disconnect, device number 5 [ 1608.622776][T14186] usb 1-1: Using ep0 maxpacket: 32 [ 1608.633855][T14186] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1608.658240][T14186] usb 1-1: string descriptor 0 read error: -22 [ 1608.684791][T14186] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 1608.706395][T14186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.939334][T14186] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 1609.179446][T14186] usb 1-1: USB disconnect, device number 123 [ 1609.567661][T14911] loop2: detected capacity change from 0 to 512 [ 1609.640334][T14911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1609.695032][T14911] EXT4-fs error (device loop2): ext4_xattr_block_find:1826: inode #15: comm syz.2.24845: corrupted xattr block 33 [ 1609.812644][T14911] EXT4-fs (loop2): Remounting filesystem read-only [ 1609.929299][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 1610.108628][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24853'. [ 1610.495917][T14969] loop6: detected capacity change from 0 to 128 [ 1610.505736][T14970] netlink: 'syz.5.24860': attribute type 1 has an invalid length. [ 1610.536528][T14969] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1610.642350][T14969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1610.977657][T14994] loop2: detected capacity change from 0 to 2048 [ 1611.013231][T14994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1611.390410][ T9507] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1611.535010][T15030] loop2: detected capacity change from 0 to 1024 [ 1611.618798][ T9507] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1611.638219][ T9507] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 1611.653278][T15030] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 1611.677730][T15030] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1611.680865][ T9507] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 1611.722940][T15030] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.24878: Failed to acquire dquot type 0 [ 1611.732212][ T9507] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1611.753629][ T9507] usb 6-1: config 129 has no interface number 0 [ 1611.770795][ T9507] usb 6-1: config 129 has no interface number 1 [ 1611.785827][ T9507] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1611.809020][T15030] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1611.828405][ T9507] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1611.848594][ T9507] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1611.902552][T15030] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #13: comm syz.2.24878: corrupted inode contents [ 1611.905308][ T9507] usb 6-1: config 129 interface 135 has no altsetting 0 [ 1611.936453][T15030] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #13: comm syz.2.24878: mark_inode_dirty error [ 1611.954008][ T9507] usb 6-1: config 129 interface 5 has no altsetting 0 [ 1611.958473][T15030] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #13: comm syz.2.24878: corrupted inode contents [ 1611.980498][T15030] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.24878: mark_inode_dirty error [ 1611.980690][T15056] ip6t_srh: unknown srh match flags 5294 [ 1612.000349][ T9507] usb 6-1: string descriptor 0 read error: -22 [ 1612.003394][T15030] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #13: comm syz.2.24878: corrupted inode contents [ 1612.006908][ T9507] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1612.037818][T15030] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1612.071196][ T9507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.079715][T15030] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #13: comm syz.2.24878: corrupted inode contents [ 1612.099309][T15030] EXT4-fs error (device loop2): ext4_truncate:4325: inode #13: comm syz.2.24878: mark_inode_dirty error [ 1612.112494][T15030] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1612.128773][ T9507] usb 6-1: MIDIStreaming interface descriptor not found [ 1612.177057][T15030] EXT4-fs (loop2): 1 truncate cleaned up [ 1612.192517][T15030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1612.313037][T15030] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 1612.334939][T15030] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1612.365342][T15030] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.24878: Failed to acquire dquot type 0 [ 1612.470431][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 1612.499010][ T9506] usb 6-1: USB disconnect, device number 97 [ 1612.758763][T15124] loop0: detected capacity change from 0 to 128 [ 1613.044040][T15145] loop0: detected capacity change from 0 to 256 [ 1613.440816][T15175] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1613.556864][T15182] netlink: 124 bytes leftover after parsing attributes in process `syz.0.24913'. [ 1613.601448][T15182] netlink: 'syz.0.24913': attribute type 3 has an invalid length. [ 1613.624574][T15187] netlink: 184 bytes leftover after parsing attributes in process `syz.1.24915'. [ 1613.912342][T14186] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1613.926018][ T7125] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1614.149592][ T7125] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1614.158512][T14186] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1614.171109][ T7125] usb 3-1: config 0 has no interface number 0 [ 1614.201500][T14186] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 1614.216973][ T7125] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1614.236910][T14186] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 1614.258654][ T7125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.267984][T14186] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1614.287849][ T7125] usb 3-1: config 0 descriptor?? [ 1614.293906][T14186] usb 7-1: config 129 has no interface number 0 [ 1614.305387][ T7125] ums-realtek 3-1:0.3: USB Mass Storage device detected [ 1614.312485][T14186] usb 7-1: config 129 has no interface number 1 [ 1614.325919][T14186] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1614.370411][T14186] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1614.403921][T14186] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1614.420000][T14186] usb 7-1: config 129 interface 135 has no altsetting 0 [ 1614.440997][T14186] usb 7-1: config 129 interface 5 has no altsetting 0 [ 1614.458207][T15247] netlink: 72 bytes leftover after parsing attributes in process `syz.5.24931'. [ 1614.492193][T14186] usb 7-1: string descriptor 0 read error: -22 [ 1614.495346][T15247] netlink: 72 bytes leftover after parsing attributes in process `syz.5.24931'. [ 1614.498452][T14186] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1614.557965][T14186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.589693][ T7125] usb 3-1: USB disconnect, device number 17 [ 1614.611472][T14186] usb 7-1: MIDIStreaming interface descriptor not found [ 1614.865767][T15281] delete_channel: no stack [ 1614.938184][T14186] usb 7-1: USB disconnect, device number 89 [ 1615.183549][T15314] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1615.229492][T15317] loop0: detected capacity change from 0 to 2048 [ 1615.273469][T15317] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1615.730524][T15349] netlink: 1033 bytes leftover after parsing attributes in process `syz.1.24951'. [ 1615.839220][T15355] ieee802154 phy0 wpan0: encryption failed: -22 [ 1615.934931][ T26] audit: type=1326 audit(1520.385:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15361 comm="syz.6.24955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1616.070799][ T26] audit: type=1326 audit(1520.413:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15361 comm="syz.6.24955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1616.094547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.186039][ T26] audit: type=1326 audit(1520.413:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15361 comm="syz.6.24955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1616.213912][T15385] autofs4:pid:15385:autofs_fill_super: called with bogus options [ 1616.263282][ T26] audit: type=1326 audit(1520.413:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15361 comm="syz.6.24955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1616.330855][ T26] audit: type=1326 audit(1520.413:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15361 comm="syz.6.24955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf59ce59 code=0x7ffc0000 [ 1616.402157][T14186] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1616.429317][ T26] audit: type=1326 audit(1520.441:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15366 comm="syz.5.24956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046c79ce59 code=0x7ffc0000 [ 1616.453060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.594485][T14186] usb 1-1: Using ep0 maxpacket: 32 [ 1616.611662][T14186] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 1616.637481][T14186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.679892][T14186] usb 1-1: config 0 has no interface number 0 [ 1616.686117][T14186] usb 1-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1616.723982][T14186] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1616.746330][T14186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.754375][T14186] usb 1-1: Product: syz [ 1616.776031][T14186] usb 1-1: Manufacturer: syz [ 1616.800270][T14186] usb 1-1: SerialNumber: syz [ 1616.828969][T14186] usb 1-1: config 0 descriptor?? [ 1616.859840][T14186] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input86 [ 1617.071863][ T9506] usb 1-1: USB disconnect, device number 124 [ 1617.788423][T15491] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1617.868028][T15496] loop5: detected capacity change from 0 to 8 [ 1617.910013][T15496] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1618.232703][T15521] netlink: 72 bytes leftover after parsing attributes in process `syz.2.24997'. [ 1619.051304][T15531] loop5: detected capacity change from 0 to 32768 [ 1619.125482][T15531] ERROR: (device loop5): dbAllocAG: unable to allocate blocks [ 1619.125482][T15531] [ 1619.169222][T15531] ERROR: (device loop5): remounting filesystem as read-only [ 1619.817602][T15627] loop5: detected capacity change from 0 to 256 [ 1620.291910][T15657] netlink: 2072 bytes leftover after parsing attributes in process `syz.2.25042'. [ 1620.306578][T15654] [U]  [ 1620.315641][T15657] netlink: 108 bytes leftover after parsing attributes in process `syz.2.25042'. [ 1620.328081][T15657] netlink: 108 bytes leftover after parsing attributes in process `syz.2.25042'. [ 1620.339767][T15657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25042'. [ 1620.526745][T15670] loop2: detected capacity change from 0 to 512 [ 1620.581241][T15670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1620.639021][T15677] Timeout policy `syz1' can only be used by L3 protocol number 246 [ 1620.686471][T15670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1620.769620][T15687] loop0: detected capacity change from 0 to 256 [ 1620.842700][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 1621.183961][T15709] Mount JFS Failure: -22 [ 1621.188296][T15709] jfs_mount failed w/return code = -22 [ 1621.955858][T15761] loop0: detected capacity change from 0 to 1024 [ 1621.958586][T15762] netlink: 'syz.1.25073': attribute type 32 has an invalid length. [ 1621.991245][T15762] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1622.150149][T10996] hfsplus: b-tree write err: -5, ino 25 [ 1622.156364][T10996] hfsplus: b-tree write err: -5, ino 4 [ 1622.180659][T10996] hfsplus: b-tree write err: -5, ino 2 [ 1622.880916][T15831] loop0: detected capacity change from 0 to 1024 [ 1622.911136][ T9516] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1622.948977][T15831] hfsplus: invalid catalog entry type in lookup [ 1622.995435][ T9506] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1623.112905][ T9516] usb 2-1: Using ep0 maxpacket: 8 [ 1623.122928][ T9516] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1623.144246][ T9516] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.182950][ T9516] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1623.192092][ T9506] usb 7-1: Using ep0 maxpacket: 16 [ 1623.199343][ T9506] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 1623.230998][ T9506] usb 7-1: config 1 has no interface number 0 [ 1623.241511][ T9516] usb 2-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 1623.255304][ T9506] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1623.271210][ T9516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.285283][ T9506] usb 7-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1623.298884][ T9516] usb 2-1: Product: syz [ 1623.307700][ T9516] usb 2-1: Manufacturer: syz [ 1623.315929][ T9506] usb 7-1: config 1 interface 105 has no altsetting 0 [ 1623.323977][ T9516] usb 2-1: SerialNumber: syz [ 1623.343086][ T9506] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1623.373801][ T9506] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1623.382261][ T9506] usb 7-1: Product: syz [ 1623.397311][ T9506] usb 7-1: Manufacturer: syz [ 1623.402005][ T9506] usb 7-1: SerialNumber: syz [ 1623.420167][T15818] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1623.501265][T15837] loop5: detected capacity change from 0 to 32768 [ 1623.501826][ T7125] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1623.579626][ T9516] usb 2-1: unit 5 not found! [ 1623.628990][ T9516] usb 2-1: USB disconnect, device number 6 [ 1623.651506][ T9506] aqc111: probe of 7-1:1.105 failed with error -22 [ 1623.738305][ T7125] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1623.758615][ T7125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.789416][ T7125] usb 1-1: config 0 descriptor?? [ 1623.868119][ T9507] usb 7-1: USB disconnect, device number 90 [ 1624.124434][T15905] xt_NFQUEUE: number of total queues is 0 [ 1624.219533][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25108'. [ 1624.281319][ T7125] ath6kl: Failed to submit usb control message: -71 [ 1624.288187][ T7125] ath6kl: unable to send the bmi data to the device: -71 [ 1624.297906][ T7125] ath6kl: Unable to send get target info: -71 [ 1624.305269][ T7125] ath6kl: Failed to init ath6kl core: -71 [ 1624.343148][ T7125] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1624.354306][ T7125] usb 1-1: USB disconnect, device number 125 [ 1624.500810][T15960] loop2: detected capacity change from 0 to 4096 [ 1624.516746][T15960] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1624.618987][T15960] ntfs3: loop2: failed to convert "c46c" to cp857 [ 1624.692523][T15970] netlink: 148 bytes leftover after parsing attributes in process `syz.5.25099'. [ 1624.771993][T15975] openvswitch: netlink: Key type 316 is out of range max 32 [ 1625.179359][T16004] loop2: detected capacity change from 0 to 64 [ 1625.223394][T16004] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1625.252516][T16011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25125'. [ 1625.351635][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25125'. [ 1625.366101][T16018] fuse: blksize only supported for fuseblk [ 1625.373426][T16011] netlink: 5 bytes leftover after parsing attributes in process `syz.0.25125'. [ 1625.530667][T16029] loop5: detected capacity change from 0 to 512 [ 1625.586238][T16029] EXT4-fs: Ignoring removed orlov option [ 1625.711123][T16029] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1625.784367][T16029] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:337: inode #15: comm syz.5.25130: verity file corrupted; can't find descriptor [ 1625.901989][T16029] EXT4-fs (loop5): Remounting filesystem read-only [ 1625.912833][T16029] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 1626.066330][T10430] EXT4-fs (loop5): unmounting filesystem. [ 1626.551018][T16108] netlink: zone id is out of range [ 1626.724875][ T9516] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 1626.750066][ T7125] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1626.934295][ T9516] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1626.952784][ T9516] usb 6-1: not running at top speed; connect to a high speed hub [ 1626.976709][ T9516] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.977047][ T7125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1627.012218][ T9516] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1627.021951][ T7125] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1627.040242][ T9516] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1627.067238][ T9516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.070035][ T7125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.086103][ T9516] usb 6-1: Product: syz [ 1627.098275][T16135] xt_cluster: node mask cannot exceed total number of nodes [ 1627.102262][ T7125] usb 3-1: Product: syz [ 1627.106497][ T9516] usb 6-1: Manufacturer: syz [ 1627.120458][ T9516] usb 6-1: SerialNumber: syz [ 1627.154293][ T7125] usb 3-1: Manufacturer: syz [ 1627.158938][ T7125] usb 3-1: SerialNumber: syz [ 1627.183204][ T7125] usb 3-1: config 0 descriptor?? [ 1627.200991][ T7125] powermate: probe of 3-1:0.0 failed with error -5 [ 1627.367031][ T9516] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 1627.397479][ T9516] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1627.418785][ T9516] usb 6-1: 3:0: cannot get min/max values for control 4 (id 3) [ 1627.433437][ T7125] usb 3-1: USB disconnect, device number 18 [ 1627.441627][ T9516] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 1627.475899][ T9516] usb 6-1: 3:0: cannot get min/max values for control 8 (id 3) [ 1627.512541][ T9516] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 1627.534471][ T9516] usb 6-1: 3:0: cannot get min/max values for control 11 (id 3) [ 1627.555328][ T9516] usb 6-1: 3:0: cannot get min/max values for control 12 (id 3) [ 1627.604430][ T9516] usb 6-1: USB disconnect, device number 98 [ 1627.658445][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1628.144102][T16218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25179'. [ 1628.210136][ T9516] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1628.413430][ T9516] usb 7-1: Using ep0 maxpacket: 32 [ 1628.421223][ T9516] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1628.462350][ T9516] usb 7-1: config 0 has no interface number 0 [ 1628.477272][ T9516] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 39163, setting to 1024 [ 1628.509402][ T9516] usb 7-1: config 0 interface 89 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1628.544438][ T9516] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1628.565583][ T9516] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1628.597466][ T9516] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.643020][ T9516] usb 7-1: Product: syz [ 1628.647248][ T9516] usb 7-1: Manufacturer: syz [ 1628.691376][ T9516] usb 7-1: SerialNumber: syz [ 1628.713591][ T9516] usb 7-1: config 0 descriptor?? [ 1628.719225][T16197] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1628.736449][ T9516] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1628.777104][ T9516] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1629.022674][ T9516] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1629.049224][T16278] loop2: detected capacity change from 0 to 128 [ 1629.096927][T16278] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1629.134807][T16278] hpfs: filesystem error: improperly stopped [ 1629.149339][ T9516] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1629.174970][T16278] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1629.193449][ T9516] em28xx 7-1:0.89: board has no eeprom [ 1629.207180][T16278] hpfs: You really don't want any checks? You are crazy... [ 1629.225787][T16278] hpfs: hpfs_map_sector(): read error [ 1629.231239][T16278] hpfs: code page support is disabled [ 1629.241758][T16278] hpfs: hpfs_map_4sectors(): unaligned read [ 1629.261211][T16278] hpfs: hpfs_map_4sectors(): unaligned read [ 1629.273016][T16278] hpfs: filesystem error: unable to find root dir [ 1629.289743][ T9516] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1629.297673][ T9516] em28xx 7-1:0.89: analog set to bulk mode. [ 1629.326586][ T9507] em28xx 7-1:0.89: Registering V4L2 extension [ 1629.344756][ T9516] usb 7-1: USB disconnect, device number 91 [ 1629.370196][ T9516] em28xx 7-1:0.89: Disconnecting em28xx [ 1629.562783][ T9507] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1629.599352][ T9507] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1629.606808][ T9507] em28xx 7-1:0.89: No AC97 audio processor [ 1629.670877][ T9507] usb 7-1: Decoder not found [ 1629.716882][ T9507] em28xx 7-1:0.89: failed to create media graph [ 1629.723268][ T9507] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1629.777280][ T9507] em28xx 7-1:0.89: Registering snapshot button... [ 1629.855965][ T9507] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input87 [ 1629.943907][ T9507] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1629.984617][ T9516] em28xx 7-1:0.89: Closing input extension [ 1629.993998][ T9516] em28xx 7-1:0.89: Deregistering snapshot button [ 1630.037317][T16297] loop0: detected capacity change from 0 to 32768 [ 1630.148650][T16297] JBD2: Ignoring recovery information on journal [ 1630.252446][ T9516] em28xx 7-1:0.89: Freeing device [ 1630.311034][T16297] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1630.379880][T16297] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 1630.380206][T16297] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1630.448175][T16306] loop5: detected capacity change from 0 to 32768 [ 1630.473172][T16297] OCFS2: Returning error to the calling process. [ 1630.499833][T16301] loop2: detected capacity change from 0 to 32768 [ 1630.518574][T16297] (syz.0.25202,16297,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 1630.551756][T16309] loop6: detected capacity change from 0 to 32768 [ 1630.556255][T16297] (syz.0.25202,16297,1):ocfs2_mknod:334 ERROR: status = -117 [ 1630.619389][T16297] (syz.0.25202,16297,1):ocfs2_mknod:502 ERROR: status = -117 [ 1630.620154][T16306] XFS (loop5): Mounting V5 Filesystem [ 1630.628114][T16297] (syz.0.25202,16297,1):ocfs2_create:676 ERROR: status = -117 [ 1630.636704][T16301] XFS (loop2): Mounting V5 Filesystem [ 1630.676681][T16309] XFS (loop6): Mounting V5 Filesystem [ 1630.739978][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 1630.747288][T16301] XFS (loop2): Ending clean mount [ 1630.759801][T16301] XFS (loop2): Quotacheck needed: Please wait. [ 1630.806550][T16301] XFS (loop2): Quotacheck: Done. [ 1630.820524][T16306] XFS (loop5): Ending clean mount [ 1630.938955][T16309] XFS (loop6): Ending clean mount [ 1631.002314][ T4283] XFS (loop2): Unmounting Filesystem [ 1631.122046][ T9516] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 1631.249221][T10638] XFS (loop6): Unmounting Filesystem [ 1631.437557][T10430] XFS (loop5): Unmounting Filesystem [ 1632.384773][T16414] loop6: detected capacity change from 0 to 1024 [ 1632.520407][T23625] hfsplus: b-tree write err: -5, ino 25 [ 1632.528801][T23625] hfsplus: b-tree write err: -5, ino 4 [ 1632.534374][T23625] hfsplus: b-tree write err: -5, ino 2 [ 1632.712096][T16430] netlink: 'syz.1.25223': attribute type 12 has an invalid length. [ 1632.741219][T16430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25223'. [ 1632.984678][T16406] loop5: detected capacity change from 0 to 32768 [ 1633.128205][ T7588] read_mapping_page failed! [ 1633.136485][ T7588] ERROR: (device loop5): txCommit: [ 1633.136485][ T7588] [ 1633.202365][ T7588] jfs_write_inode: jfs_commit_inode failed! [ 1633.615082][T16484] sp0: Synchronizing with TNC [ 1634.395185][T16542] loop5: detected capacity change from 0 to 4096 [ 1634.406964][T16547] loop6: detected capacity change from 0 to 64 [ 1634.470720][T16551] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1634.528808][ T9521] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1634.750263][ T9521] usb 2-1: Using ep0 maxpacket: 16 [ 1634.760307][ T9521] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1634.797495][ T9521] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1634.828180][ T9521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.854054][ T9521] usb 2-1: Product: syz [ 1634.869921][ T9521] usb 2-1: Manufacturer: syz [ 1634.874564][ T9521] usb 2-1: SerialNumber: syz [ 1634.900590][ T9521] r8152-cfgselector 2-1: config 0 descriptor?? [ 1634.924471][T16572] loop2: detected capacity change from 0 to 4096 [ 1634.971367][T16572] NILFS (loop2): mounting unchecked fs [ 1634.979108][T16572] NILFS (loop2): recovery required for readonly filesystem [ 1634.990349][T16572] NILFS (loop2): write access will be enabled during recovery [ 1635.019683][T16572] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1635.030277][T16578] loop5: detected capacity change from 0 to 1024 [ 1635.042343][T16572] NILFS (loop2): trying rollback from an earlier position [ 1635.057354][T16578] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1635.077608][T16572] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 1635.137296][ T9521] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1635.155595][T16578] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1635.292137][T10430] EXT4-fs (loop5): unmounting filesystem. [ 1635.363522][ T9521] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1635.383906][ T9521] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 1635.440594][T16600] loop2: detected capacity change from 0 to 1024 [ 1635.551012][T16610] comedi comedi0: bad chanlist[0]=0x00000009 chan=9 range length=0 [ 1636.224849][ T7125] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1636.432710][ T7125] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1636.441322][ T7125] usb 1-1: not running at top speed; connect to a high speed hub [ 1636.454783][ T7125] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.465714][ T7125] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1636.477242][ T7125] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1636.492086][ T7125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.500184][ T7125] usb 1-1: Product: syz [ 1636.505501][ T7125] usb 1-1: Manufacturer: syz [ 1636.510200][ T7125] usb 1-1: SerialNumber: syz [ 1636.684312][ T9521] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1636.744277][ T7125] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 1636.765635][ T7125] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1636.778559][ T7125] usb 1-1: 3:0: cannot get min/max values for control 4 (id 3) [ 1636.787219][T16686] loop2: detected capacity change from 0 to 512 [ 1636.790300][ T7125] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 1636.807965][T16686] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1636.817983][T16686] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1636.826032][ T7125] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 1636.831452][T16686] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1636.848859][ T7125] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 1636.856973][T16686] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1636.860054][ T7125] usb 1-1: 3:0: cannot get min/max values for control 11 (id 3) [ 1636.864876][T16686] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 1636.873602][ T7125] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 1636.885058][T16686] EXT4-fs (loop2): failed to initialize system zone (-117) [ 1636.895847][T16686] EXT4-fs (loop2): mount failed [ 1636.922336][ T9507] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 1636.931689][ T9521] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1636.941493][ T7125] usb 1-1: USB disconnect, device number 126 [ 1636.952147][ T9521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.000164][ T9521] usb 2-1: config 0 descriptor?? [ 1637.008017][ T9521] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1637.145523][ T9507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1637.161833][ T9507] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1637.173674][ T9507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.182193][ T9507] usb 6-1: Product: syz [ 1637.186804][ T9507] usb 6-1: Manufacturer: syz [ 1637.191774][ T9507] usb 6-1: SerialNumber: syz [ 1637.199487][ T9507] usb 6-1: config 0 descriptor?? [ 1637.211549][ T9507] powermate: probe of 6-1:0.0 failed with error -5 [ 1637.244991][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1637.440942][ T9521] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1637.457983][ T9521] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1637.478706][ T9521] usb 6-1: USB disconnect, device number 99 [ 1637.570115][T16739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25293'. [ 1637.675422][ T9507] usb 2-1: USB disconnect, device number 8 [ 1637.693229][T16745] Bluetooth: MGMT ver 1.22 [ 1638.362079][ T9507] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1638.590923][ T9507] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1638.608863][ T9507] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.628702][ T9507] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.664950][ T9507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1638.673462][ T9507] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.693860][ T9507] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.721739][ T9507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1638.744101][ T9507] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.761856][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25310'. [ 1638.767697][ T9507] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.803290][ T9507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1638.822549][ T9507] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.839380][ T9507] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.872334][ T9507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1638.895422][ T9507] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.919011][ T9507] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.940018][ T9507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1638.959816][ T9507] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.979171][ T9507] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1639.016998][ T9507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1639.040556][ T9507] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1639.071514][ T9507] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1639.109874][ T9507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1639.121868][ T9507] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1639.125938][T16820] loop0: detected capacity change from 0 to 8192 [ 1639.147824][ T9507] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1639.183318][T16820] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1639.191811][ T9507] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1639.217060][ T9507] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1639.220388][T16825] netlink: 5 bytes leftover after parsing attributes in process `syz.2.25316'. [ 1639.237007][ T9507] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1639.258598][ T9507] usb 6-1: Product: syz [ 1639.263137][ T9507] usb 6-1: Manufacturer: syz [ 1639.267770][ T9507] usb 6-1: SerialNumber: syz [ 1639.303063][ T9507] usb 6-1: config 0 descriptor?? [ 1639.344120][ T9507] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1639.574277][ T9507] usb 6-1: USB disconnect, device number 100 [ 1639.599242][ T9507] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1639.879549][ T4284] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1640.072288][T16893] loop2: detected capacity change from 0 to 1024 [ 1640.108618][T16897] sctp: [Deprecated]: syz.0.25331 (pid 16897) Use of int in max_burst socket option. [ 1640.108618][T16897] Use struct sctp_assoc_value instead [ 1640.199966][ T9507] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1640.403360][ T9507] usb 2-1: Using ep0 maxpacket: 32 [ 1640.411039][ T9507] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1640.435202][ T9507] usb 2-1: config 0 has no interface number 0 [ 1640.448461][ T9507] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1640.475134][ T9507] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1640.498249][T16917] loop5: detected capacity change from 0 to 256 [ 1640.509822][ T9507] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1640.536490][ T9507] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1640.562183][T16917] FAT-fs (loop5): Directory bread(block 64) failed [ 1640.580412][T16917] FAT-fs (loop5): Directory bread(block 65) failed [ 1640.591793][ T9507] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1640.599223][T16922] loop2: detected capacity change from 0 to 256 [ 1640.601368][T16917] FAT-fs (loop5): Directory bread(block 66) failed [ 1640.617156][ T9507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.625185][ T9507] usb 2-1: Product: syz [ 1640.631956][T16917] FAT-fs (loop5): Directory bread(block 67) failed [ 1640.640959][ T9507] usb 2-1: Manufacturer: syz [ 1640.645636][ T9507] usb 2-1: SerialNumber: syz [ 1640.652933][T16917] FAT-fs (loop5): Directory bread(block 68) failed [ 1640.669180][T16917] FAT-fs (loop5): Directory bread(block 69) failed [ 1640.679418][ T9507] usb 2-1: config 0 descriptor?? [ 1640.686070][T16878] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1640.691251][T16922] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1640.697726][T16917] FAT-fs (loop5): Directory bread(block 70) failed [ 1640.715525][T16917] FAT-fs (loop5): Directory bread(block 71) failed [ 1640.722191][T16917] FAT-fs (loop5): Directory bread(block 72) failed [ 1640.730886][T16917] FAT-fs (loop5): Directory bread(block 73) failed [ 1640.863819][T16901] loop0: detected capacity change from 0 to 32768 [ 1640.952151][T16901] XFS (loop0): Mounting V5 Filesystem [ 1641.062296][T16901] XFS (loop0): Ending clean mount [ 1641.153296][ T9507] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1641.191349][ T9507] ipheth: probe of 2-1:0.196 failed with error -22 [ 1641.238841][ T9507] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 1641.299553][ T4274] XFS (loop0): Unmounting Filesystem [ 1641.394743][ T9507] usb 2-1: USB disconnect, device number 9 [ 1641.838650][T16986] loop0: detected capacity change from 0 to 256 [ 1641.870985][T16986] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 1641.883982][T16986] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1642.022477][T16993] loop0: detected capacity change from 0 to 1024 [ 1642.044431][T16993] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1642.121642][T16993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1642.321011][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1643.005988][T17015] loop2: detected capacity change from 0 to 32768 [ 1643.044398][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1643.050772][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1643.092745][T17015] XFS (loop2): Mounting V5 Filesystem [ 1643.205706][T17015] XFS (loop2): Ending clean mount [ 1643.292232][T14186] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 1643.297305][T17025] loop0: detected capacity change from 0 to 32768 [ 1643.387456][ T4283] XFS (loop2): Unmounting Filesystem [ 1643.428084][T17025] XFS (loop0): Mounting V5 Filesystem [ 1643.485937][T17025] XFS (loop0): Ending clean mount [ 1643.542774][T17025] XFS (loop0): Quotacheck needed: Please wait. [ 1643.602549][T17079] loop6: detected capacity change from 0 to 1024 [ 1643.675218][T17025] XFS (loop0): Quotacheck: Done. [ 1643.675619][T17079] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1643.738203][T17089] netlink: 616 bytes leftover after parsing attributes in process `syz.5.25372'. [ 1643.836284][T17079] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1643.894324][ T4274] XFS (loop0): Unmounting Filesystem [ 1644.037068][T10638] EXT4-fs (loop6): unmounting filesystem. [ 1644.227518][T17121] loop5: detected capacity change from 0 to 1764 [ 1644.270108][T17121] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1644.470639][T17134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25385'. [ 1645.193730][T17161] netlink: 128 bytes leftover after parsing attributes in process `syz.5.25391'. [ 1645.524873][T17175] loop5: detected capacity change from 0 to 1024 [ 1646.372394][T17235] loop5: detected capacity change from 0 to 8192 [ 1646.401736][T17235] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1646.429928][T14186] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1646.451425][T14185] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1646.632979][T14186] usb 1-1: Using ep0 maxpacket: 8 [ 1646.634609][T14186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.634639][T14186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.634661][T14186] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1646.634698][T14186] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1646.634720][T14186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.636419][T14186] usb 1-1: config 0 descriptor?? [ 1646.654295][T14185] usb 3-1: Using ep0 maxpacket: 32 [ 1646.655928][T14185] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.655959][T14185] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.657542][T14185] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1646.657568][T14185] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1646.657617][T14185] usb 3-1: Product: syz [ 1646.657632][T14185] usb 3-1: Manufacturer: syz [ 1646.663387][T14185] hub 3-1:4.0: USB hub found [ 1646.881807][T14185] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 1647.120918][T14186] dragonrise 0003:0079:0006.0003: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 1647.163411][T14186] dragonrise 0003:0079:0006.0003: no inputs found [ 1647.173301][T14186] dragonrise 0003:0079:0006.0003: force feedback init failed [ 1647.304584][T14186] usb 1-1: USB disconnect, device number 127 [ 1647.326586][T14185] usb 3-1: USB disconnect, device number 19 [ 1647.486428][T17276] fido_id[17276]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1647.774224][T17320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1648.019983][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25432'. [ 1648.039458][T17341] loop6: detected capacity change from 0 to 164 [ 1648.125609][T17341] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1648.833870][T17392] netlink: 6 bytes leftover after parsing attributes in process `syz.1.25449'. [ 1649.003345][T17408] loop2: detected capacity change from 0 to 64 [ 1649.103371][T17404] loop6: detected capacity change from 0 to 8192 [ 1649.108649][T17414] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1649.155686][T17414] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1649.156960][T14186] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1649.162714][T17414] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1649.392055][T14186] usb 1-1: Using ep0 maxpacket: 8 [ 1649.398914][T14186] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1649.449103][T14186] usb 1-1: config 2 has no interface number 0 [ 1649.470630][T14186] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1649.521897][T14186] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1649.542816][T14186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.566308][T14186] usb 1-1: Product: syz [ 1649.570530][T14186] usb 1-1: Manufacturer: syz [ 1649.585963][T14186] usb 1-1: SerialNumber: syz [ 1649.957371][T17462] device vlan0 entered promiscuous mode [ 1649.964126][T17463] netlink: 104 bytes leftover after parsing attributes in process `syz.1.25467'. [ 1650.286389][T14186] ch9200: probe of 1-1:2.31 failed with error -22 [ 1650.304436][T14186] usb 1-1: USB disconnect, device number 2 [ 1650.375000][T17495] loop2: detected capacity change from 0 to 128 [ 1650.444942][T17495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1650.534374][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 1650.595097][T17515] loop2: detected capacity change from 0 to 256 [ 1650.725717][ T9507] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1650.915999][T17540] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1650.915999][T17540] The task syz.5.25483 (17540) triggered the difference, watch for misbehavior. [ 1650.950256][ T9507] usb 2-1: Using ep0 maxpacket: 32 [ 1650.957317][ T9507] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1650.971934][ T9507] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.983070][ T9507] usb 2-1: config 0 has no interface number 0 [ 1650.989284][ T9507] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1651.028783][ T9507] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1651.038390][ T9507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.050044][ T9507] usb 2-1: Product: syz [ 1651.054297][ T9507] usb 2-1: Manufacturer: syz [ 1651.064956][ T9507] usb 2-1: SerialNumber: syz [ 1651.074265][ T9507] usb 2-1: config 0 descriptor?? [ 1651.087822][ T9507] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1651.101431][ T9507] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 1651.106473][T17545] loop0: detected capacity change from 0 to 4096 [ 1651.200199][T17545] ntfs3: loop0: failed to convert "0000" to iso8859-1 [ 1651.215816][T17545] ntfs3: loop0: failed to convert name for inode 1e. [ 1651.296814][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1651.296827][ T26] audit: type=1326 audit(1553.475:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17555 comm="syz.2.25489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1651.331265][ T9507] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1651.405888][ T26] audit: type=1326 audit(1553.512:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17555 comm="syz.2.25489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1651.448024][ T26] audit: type=1326 audit(1553.512:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17555 comm="syz.2.25489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1651.475781][T17565] netlink: 'syz.0.25492': attribute type 15 has an invalid length. [ 1651.483869][T17565] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.25492'. [ 1651.493647][ T26] audit: type=1326 audit(1553.512:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17555 comm="syz.2.25489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1651.537891][ T26] audit: type=1326 audit(1553.512:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17555 comm="syz.2.25489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1651.555018][ T9507] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 1651.615876][ T26] audit: type=1326 audit(1553.512:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17555 comm="syz.2.25489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1651.644318][ T26] audit: type=1326 audit(1553.512:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17555 comm="syz.2.25489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1651.676140][T17578] loop2: detected capacity change from 0 to 16 [ 1651.702727][T17578] erofs: (device loop2): mounted with root inode @ nid 36. [ 1651.711943][ T26] audit: type=1326 audit(1553.512:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17555 comm="syz.2.25489" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4379ce59 code=0x7ffc0000 [ 1651.730158][T17578] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1651.797337][T17578] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1651.799321][ T9507] usb 2-1: USB disconnect, device number 10 [ 1651.840003][ T9507] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 1651.985354][T17600] loop0: detected capacity change from 0 to 128 [ 1652.047732][T17603] loop5: detected capacity change from 0 to 2048 [ 1652.133447][T17603] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1652.216050][T10430] EXT4-fs (loop5): unmounting filesystem. [ 1652.305610][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25505'. [ 1652.751224][T17651] netlink: 'syz.0.25513': attribute type 29 has an invalid length. [ 1652.787515][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25513'. [ 1652.809637][T17651] netlink: 'syz.0.25513': attribute type 29 has an invalid length. [ 1652.817590][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25513'. [ 1652.833128][T17651] netlink: 'syz.0.25513': attribute type 29 has an invalid length. [ 1652.853885][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25513'. [ 1653.419234][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25529'. [ 1653.430335][T17711] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1653.749080][T17731] sp0: Synchronizing with TNC [ 1653.785527][T17738] sp0: Found TNC [ 1654.016039][T17757] netlink: 156 bytes leftover after parsing attributes in process `syz.0.25542'. [ 1654.085694][T17747] loop5: detected capacity change from 0 to 8192 [ 1654.133067][T17747] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1654.170371][T17747] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1654.212699][T17747] FAT-fs (loop5): Filesystem has been set read-only [ 1654.223193][T17768] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1654.229356][T17747] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1654.250202][T17768] [U] J"—E:ÀÆ" [ 1654.265239][T17747] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1654.281882][T17763] loop0: detected capacity change from 0 to 4096 [ 1654.321271][T17763] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1654.419610][T17763] ntfs3: loop0: ino=1c, "file0" attr_set_size [ 1654.454814][T17763] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1654.582361][T17784] loop5: detected capacity change from 0 to 4096 [ 1654.606845][ T4274] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 1654.650079][T17784] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1654.662140][T17793] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1654.663639][ T4274] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 1654.705512][T17784] NILFS (loop5): mounting fs with errors [ 1655.156030][T17815] loop5: detected capacity change from 0 to 2048 [ 1655.185813][T17815] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1655.366203][ T4379] udevd[4379]: incorrect nilfs2 checksum on /dev/loop5 [ 1655.415257][T17815] NILFS (loop5): mounting unchecked fs [ 1655.445243][T17815] NILFS (loop5): recovery complete [ 1655.459653][T14185] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1655.478169][T17827] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1655.555149][T17807] loop2: detected capacity change from 0 to 32768 [ 1655.652978][T17807] XFS (loop2): Mounting V5 Filesystem [ 1655.665406][T14185] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1655.675596][T14185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.687751][T14185] usb 1-1: config 0 descriptor?? [ 1655.699657][T14185] cp210x 1-1:0.0: cp210x converter detected [ 1655.732076][T17807] XFS (loop2): Ending clean mount [ 1655.952328][ T4283] XFS (loop2): Unmounting Filesystem [ 1656.012958][T17862] loop5: detected capacity change from 0 to 1024 [ 1656.355598][T14185] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1656.375903][T14185] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1656.386455][T14185] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1656.429082][T14185] usb 1-1: USB disconnect, device number 3 [ 1656.482947][T14185] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1656.504061][T14185] cp210x 1-1:0.0: device disconnected [ 1657.044095][ T9521] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 1657.090621][T17911] loop2: detected capacity change from 0 to 32768 [ 1657.168193][T17911] XFS (loop2): Mounting V5 Filesystem [ 1657.233023][T17911] XFS (loop2): Ending clean mount [ 1657.259589][T17911] XFS (loop2): syz.2.25574 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 1657.277830][ T9521] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1657.297500][ T9521] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x78, skipping [ 1657.318928][ T9521] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1657.364388][ T9521] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1657.383526][ T9521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.398295][ T4283] XFS (loop2): Unmounting Filesystem [ 1657.402461][ T9521] usb 6-1: Product: syz [ 1657.407902][ T9521] usb 6-1: Manufacturer: syz [ 1657.424037][ T9521] usb 6-1: SerialNumber: syz [ 1657.436590][ T9521] usb 6-1: config 0 descriptor?? [ 1657.599671][T17951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25581'. [ 1657.662998][ T9507] usb 6-1: USB disconnect, device number 101 [ 1657.885371][ T9521] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1658.013248][T17974] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 1658.127834][ T9521] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.146949][ T9521] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1658.157813][T17981] devtmpfs: Too few inodes for current use [ 1658.173215][ T9521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.191563][ T9521] usb 1-1: Product: syz [ 1658.198899][ T9521] usb 1-1: Manufacturer: syz [ 1658.203528][ T9521] usb 1-1: SerialNumber: syz [ 1658.212214][ T9521] usb 1-1: config 0 descriptor?? [ 1658.249107][ T9521] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1658.299497][T17963] loop6: detected capacity change from 0 to 32768 [ 1658.332330][T17963] XFS (loop6): Mounting V5 Filesystem [ 1658.514645][T18010] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1658.605999][T17963] XFS (loop6): Ending clean mount [ 1658.619861][T18013] loop5: detected capacity change from 0 to 256 [ 1658.641232][T17963] XFS (loop6): Quotacheck needed: Please wait. [ 1658.663649][T18013] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1658.750179][T17963] XFS (loop6): Quotacheck: Done. [ 1658.772577][T18013] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1658.891069][ T9521] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1658.898064][ T9521] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 1658.941800][ T9521] usb 1-1: USB disconnect, device number 4 [ 1658.993655][T10638] XFS (loop6): Unmounting Filesystem [ 1659.496719][T18064] device vlan2 entered promiscuous mode [ 1659.513577][T18064] device wlan0 entered promiscuous mode [ 1659.667717][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25606'. [ 1659.712836][T18080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25606'. [ 1659.901729][T18099] loop5: detected capacity change from 0 to 1024 [ 1659.923798][T18102] CUSE: zero length info key specified [ 1660.036282][ T9521] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1660.123138][T18114] loop0: detected capacity change from 0 to 512 [ 1660.198308][T18122] netlink: 24 bytes leftover after parsing attributes in process `syz.6.25619'. [ 1660.220485][T18114] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 1660.227803][T18126] device vlan0 entered promiscuous mode [ 1660.251435][T18114] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1660.268475][ T9521] usb 2-1: Using ep0 maxpacket: 16 [ 1660.275439][ T9521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.294581][T18114] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1660.311052][ T9521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.331868][ T9521] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1660.350059][ T9521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.370820][ T9521] usb 2-1: config 0 descriptor?? [ 1660.403070][T18114] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1660.463958][T18114] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.25617: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1660.517454][T18114] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.25617: couldn't read orphan inode 13 (err -117) [ 1660.541663][T18143] loop2: detected capacity change from 0 to 2048 [ 1660.550481][T18114] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1660.627401][T18143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1660.660000][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1660.722562][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 1660.831974][ T9521] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 1660.861972][ T9521] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 1660.894344][ T9521] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 1660.900304][T18171] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.25629'. [ 1660.910711][ T9521] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 1660.910737][ T9521] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 1660.918583][ T9521] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 1661.055909][ T9521] corsair 0003:1B1C:1B02.0004: Failed to get K90 initial state (error -71). [ 1661.125719][ T9521] usb 2-1: USB disconnect, device number 11 [ 1661.298528][T18209] device vlan1 entered promiscuous mode [ 1661.346446][T18194] fido_id[18194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1661.852881][T18235] loop0: detected capacity change from 0 to 1024 [ 1661.868434][T18235] EXT4-fs: Ignoring removed orlov option [ 1661.931116][T18235] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1662.038106][T18235] EXT4-fs error (device loop0): __ext4_new_inode:1291: comm syz.0.25640: failed to insert inode 15: doubly allocated? [ 1662.124443][T18235] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 1662.212440][T18226] loop6: detected capacity change from 0 to 32768 [ 1662.274401][T18226] XFS (loop6): Mounting V5 Filesystem [ 1662.329085][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1662.400096][T18251] loop5: detected capacity change from 0 to 128 [ 1662.400988][T18226] XFS (loop6): Ending clean mount [ 1662.465759][T18251] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1662.546602][T18251] hpfs: filesystem error: improperly stopped [ 1662.561510][T18259] loop0: detected capacity change from 0 to 512 [ 1662.564108][T18251] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1662.586994][T18251] hpfs: You really don't want any checks? You are crazy... [ 1662.605838][T18251] hpfs: hpfs_map_sector(): read error [ 1662.640423][T18259] EXT4-fs (loop0): 1 truncate cleaned up [ 1662.651376][T18251] hpfs: code page support is disabled [ 1662.661998][T18259] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1662.662343][T18251] hpfs: hpfs_map_4sectors(): unaligned read [ 1662.692533][T18251] hpfs: hpfs_map_4sectors(): unaligned read [ 1662.716314][T18251] hpfs: filesystem error: unable to find root dir [ 1662.784246][T10638] XFS (loop6): Unmounting Filesystem [ 1662.815831][T18267] sp0: Synchronizing with TNC [ 1662.906707][T18275] sp0: Found TNC [ 1662.976390][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1663.218022][T18293] device vlan2 entered promiscuous mode [ 1663.384864][T18310] loop2: detected capacity change from 0 to 512 [ 1663.426172][T18310] EXT4-fs (loop2): 1 truncate cleaned up [ 1663.450252][T18310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1663.693618][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 1663.708712][T18332] netlink: 'syz.5.25663': attribute type 10 has an invalid length. [ 1663.785450][T18340] netlink: 'syz.5.25663': attribute type 10 has an invalid length. [ 1663.807086][T18340] netlink: 40 bytes leftover after parsing attributes in process `syz.5.25663'. [ 1663.845352][T18339] sp0: Synchronizing with TNC [ 1663.870231][T18348] sp0: Found TNC [ 1663.907274][T18353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25667'. [ 1664.029024][T18362] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1664.048294][T18362] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1664.059503][T18362] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1664.286402][ T9521] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1664.477935][T18369] loop0: detected capacity change from 0 to 40427 [ 1664.497822][ T9521] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1664.508902][T18369] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1664.515539][ T9521] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1664.545049][ T9521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.547066][T18369] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1664.569814][ T9521] usb 6-1: config 0 descriptor?? [ 1664.611266][T18369] F2FS-fs (loop0): invalid crc value [ 1664.669260][T18369] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1664.783972][T18369] F2FS-fs (loop0): recover fsync data on readonly fs [ 1664.814227][T18369] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 1664.832247][T18369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1664.958809][T18369] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 1664.991675][T14186] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1665.155750][T18421] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1665.196235][T14186] usb 3-1: Using ep0 maxpacket: 16 [ 1665.204989][T14186] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1665.228101][T18421] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1665.234789][ T9521] video4linux radio48: keene_cmd_set failed (-71) [ 1665.234927][ T9521] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 1665.240826][ T9521] usb 6-1: USB disconnect, device number 102 [ 1665.253177][T14186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1665.271220][T18421] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1665.277899][T14186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1665.301249][T14186] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1665.318885][T18426] loop0: detected capacity change from 0 to 2048 [ 1665.348022][T14186] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1665.377437][T14186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.405809][T18426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1665.432495][T14186] usb 3-1: config 0 descriptor?? [ 1665.441524][T18400] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1665.488633][T18426] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.25682: bg 0: block 345: padding at end of block bitmap is not set [ 1665.535242][T18426] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1665.723169][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 1665.884549][T14186] microsoft 0003:045E:00F9.0005: unknown main item tag 0x0 [ 1665.898407][T14186] microsoft 0003:045E:00F9.0005: item 0 4 0 8 parsing failed [ 1665.912454][T14186] microsoft 0003:045E:00F9.0005: parse failed [ 1665.918583][T14186] microsoft: probe of 0003:045E:00F9.0005 failed with error -22 [ 1666.033320][T18472] loop5: detected capacity change from 0 to 4096 [ 1666.100902][T14186] usb 3-1: USB disconnect, device number 20 [ 1666.112867][T18472] ntfs3: loop5: failed to convert "0000" to iso8859-1 [ 1666.131945][T18472] ntfs3: loop5: failed to convert name for inode 1e. [ 1666.252646][ T9521] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1666.268786][T18455] loop6: detected capacity change from 0 to 32768 [ 1666.466336][ T9521] usb 1-1: Using ep0 maxpacket: 8 [ 1666.479569][ T9521] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1666.504869][ T9521] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 0 [ 1666.535937][ T9521] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 967 [ 1666.559957][ T9521] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1666.580051][ T9521] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1666.597710][ T9521] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1666.616250][ T9521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.644417][ T9521] usb 1-1: Product: syz [ 1666.658363][ T9521] usb 1-1: Manufacturer: syz [ 1666.674123][ T9521] usb 1-1: SerialNumber: syz [ 1666.700827][T18462] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1666.834888][T18519] netlink: 'syz.5.25696': attribute type 33 has an invalid length. [ 1666.843275][T18519] netlink: 51 bytes leftover after parsing attributes in process `syz.5.25696'. [ 1666.944977][ T9521] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1666.973694][ T9521] usb 1-1: USB disconnect, device number 5 [ 1667.253333][T18551] netlink: 876 bytes leftover after parsing attributes in process `syz.1.25714'. [ 1667.285898][T18556] loop5: detected capacity change from 0 to 256 [ 1667.296600][T18551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25714'. [ 1667.336364][T18556] FAT-fs (loop5): Directory bread(block 64) failed [ 1667.353263][T18556] FAT-fs (loop5): Directory bread(block 65) failed [ 1667.360034][T18556] FAT-fs (loop5): Directory bread(block 66) failed [ 1667.382198][T18556] FAT-fs (loop5): Directory bread(block 67) failed [ 1667.396175][T18556] FAT-fs (loop5): Directory bread(block 68) failed [ 1667.416626][T18556] FAT-fs (loop5): Directory bread(block 69) failed [ 1667.419671][T18554] loop6: detected capacity change from 0 to 4096 [ 1667.427980][T18556] FAT-fs (loop5): Directory bread(block 70) failed [ 1667.459144][T18556] FAT-fs (loop5): Directory bread(block 71) failed [ 1667.481884][T18556] FAT-fs (loop5): Directory bread(block 72) failed [ 1667.493820][T18554] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1667.500718][T18556] FAT-fs (loop5): Directory bread(block 73) failed [ 1667.503914][T18565] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1667.526703][T18554] NILFS (loop6): mounting fs with errors [ 1667.919563][ T9507] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1668.133373][ T9507] usb 2-1: Using ep0 maxpacket: 16 [ 1668.141502][ T9507] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1668.148056][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25717'. [ 1668.161767][ T9507] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1668.197815][ T9507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.222921][T18568] loop2: detected capacity change from 0 to 32768 [ 1668.231782][ T9507] usb 2-1: config 0 descriptor?? [ 1668.488140][T18609] loop0: detected capacity change from 0 to 4096 [ 1668.523811][T18614] loop6: detected capacity change from 0 to 4096 [ 1668.614230][T18618] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1668.674471][ T9507] uclogic 0003:2179:0053.0006: interface is invalid, ignoring [ 1668.691115][T18587] loop5: detected capacity change from 0 to 40427 [ 1668.827918][T18587] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1668.833794][T18626] can0: slcan on ptm0. [ 1668.887646][ T9507] usb 2-1: USB disconnect, device number 12 [ 1669.000086][T18625] can0 (unregistered): slcan off ptm0. [ 1669.015863][T18587] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1669.088995][ T26] audit: type=1800 audit(1570.123:1107): pid=18587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.25711" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 1669.174892][T18649] loop0: detected capacity change from 0 to 4096 [ 1669.214341][T10430] syz-executor: attempt to access beyond end of device [ 1669.214341][T10430] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1669.283887][T18649] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1669.284301][T18649] NILFS (loop0): mounting fs with errors [ 1669.286385][T18664] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1669.683709][T18700] program syz.1.25729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1670.197479][T18735] loop2: detected capacity change from 0 to 512 [ 1670.277163][T18737] IPVS: Unknown mcast interface: veth0_vlan [ 1670.335435][T18746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25739'. [ 1670.360180][T18735] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.25737: corrupted inode contents [ 1670.382916][T18746] smc: net device nr0 applied user defined pnetid SY [ 1670.406504][T18735] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #16: comm syz.2.25737: mark_inode_dirty error [ 1670.458233][T18735] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.25737: corrupted inode contents [ 1670.519601][T18735] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.25737: mark_inode_dirty error [ 1670.575465][T18735] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.25737: corrupted inode contents [ 1670.626161][T18735] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1670.666126][T18735] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.25737: corrupted inode contents [ 1670.712427][T18735] EXT4-fs error (device loop2): ext4_truncate:4325: inode #16: comm syz.2.25737: mark_inode_dirty error [ 1670.787086][T18735] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1670.803877][T18771] loop0: detected capacity change from 0 to 64 [ 1670.824668][T18735] EXT4-fs (loop2): 1 truncate cleaned up [ 1670.848270][T10996] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1670.860458][T18735] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1670.878748][T18771] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1670.890688][T10996] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 1 [ 1670.905366][T18777] program syz.1.25748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1671.025163][T18771] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 1671.115782][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 1671.613713][T18822] loop5: detected capacity change from 0 to 2048 [ 1671.719651][T18822] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1671.778736][T18834] loop6: detected capacity change from 0 to 512 [ 1671.919577][T18834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 1671.956512][T18834] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1671.968327][T10430] EXT4-fs (loop5): unmounting filesystem. [ 1671.978272][T18834] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1672.108605][T18834] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1672.141024][T18834] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.25761: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1672.199889][T18834] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.25761: couldn't read orphan inode 13 (err -117) [ 1672.267852][T18834] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1672.433916][T18870] loop0: detected capacity change from 0 to 256 [ 1672.491208][T18869] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1672.491335][T18869] hpfs: filesystem error: improperly stopped [ 1672.491353][T18869] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1672.491369][T18869] hpfs: You really don't want any checks? You are crazy... [ 1672.491652][T18869] hpfs: hpfs_map_sector(): read error [ 1672.491663][T18869] hpfs: code page support is disabled [ 1672.505336][T18869] hpfs: hpfs_map_4sectors(): unaligned read [ 1672.506387][T18869] hpfs: hpfs_map_4sectors(): unaligned read [ 1672.506401][T18869] hpfs: filesystem error: unable to find root dir [ 1672.513184][T10638] EXT4-fs (loop6): unmounting filesystem. [ 1672.553599][T18870] FAT-fs (loop0): Directory bread(block 64) failed [ 1672.553637][T18870] FAT-fs (loop0): Directory bread(block 65) failed [ 1672.553708][T18870] FAT-fs (loop0): Directory bread(block 66) failed [ 1672.553735][T18870] FAT-fs (loop0): Directory bread(block 67) failed [ 1672.553807][T18870] FAT-fs (loop0): Directory bread(block 68) failed [ 1672.553833][T18870] FAT-fs (loop0): Directory bread(block 69) failed [ 1672.553900][T18870] FAT-fs (loop0): Directory bread(block 70) failed [ 1672.553926][T18870] FAT-fs (loop0): Directory bread(block 71) failed [ 1672.553997][T18870] FAT-fs (loop0): Directory bread(block 72) failed [ 1672.554023][T18870] FAT-fs (loop0): Directory bread(block 73) failed [ 1672.851231][T18902] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25775'. [ 1673.579376][T18893] set_capacity_and_notify: 1 callbacks suppressed [ 1673.579394][T18893] loop6: detected capacity change from 0 to 40427 [ 1673.619159][T18893] F2FS-fs (loop6): invalid crc value [ 1673.677051][T18893] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1673.789830][T18893] F2FS-fs (loop6): Start checkpoint disabled! [ 1673.822112][T18893] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1674.175237][T10996] kworker/u4:0: attempt to access beyond end of device [ 1674.175237][T10996] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1674.415745][T18959] loop0: detected capacity change from 0 to 256 [ 1674.507656][T18959] FAT-fs (loop0): Directory bread(block 64) failed [ 1674.568512][T18959] FAT-fs (loop0): Directory bread(block 65) failed [ 1674.575165][T18959] FAT-fs (loop0): Directory bread(block 66) failed [ 1674.609198][T18959] FAT-fs (loop0): Directory bread(block 67) failed [ 1674.615854][T18959] FAT-fs (loop0): Directory bread(block 68) failed [ 1674.662426][T18959] FAT-fs (loop0): Directory bread(block 69) failed [ 1674.673749][T18959] FAT-fs (loop0): Directory bread(block 70) failed [ 1674.680308][T18959] FAT-fs (loop0): Directory bread(block 71) failed [ 1674.747983][T18959] FAT-fs (loop0): Directory bread(block 72) failed [ 1674.754568][T18959] FAT-fs (loop0): Directory bread(block 73) failed [ 1674.939819][T18944] loop5: detected capacity change from 0 to 32768 [ 1675.041780][T18952] loop2: detected capacity change from 0 to 32768 [ 1675.088274][T18944] XFS (loop5): Mounting V5 Filesystem [ 1675.095893][T18952] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.25789 (18952) [ 1675.181855][T18952] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1675.210032][T18944] XFS (loop5): Ending clean mount [ 1675.325076][T18952] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1675.345500][T18952] BTRFS info (device loop2): enabling auto defrag [ 1675.392833][T18952] BTRFS info (device loop2): force clearing of disk cache [ 1675.413333][T18952] BTRFS info (device loop2): ignoring data csums [ 1675.419740][T18952] BTRFS info (device loop2): turning on async discard [ 1675.463920][T18952] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1675.472061][T18952] BTRFS info (device loop2): turning off async discard [ 1675.528327][T18952] BTRFS info (device loop2): disabling free space tree [ 1675.571330][T10430] XFS (loop5): Unmounting Filesystem [ 1675.923726][ T4283] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1676.711929][T19070] loop6: detected capacity change from 0 to 1024 [ 1677.401779][T19112] loop6: detected capacity change from 0 to 4096 [ 1677.490758][T19112] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1677.502179][T19120] loop2: detected capacity change from 0 to 8192 [ 1677.525245][T19112] ntfs3: loop6: failed to convert "0080" to maccenteuro [ 1677.562903][T19120] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1677.572477][T19112] ntfs3: loop6: failed to convert name for inode 1e. [ 1677.590491][T19120] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1677.611805][ T9516] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1677.628943][T19120] REISERFS (device loop2): using ordered data mode [ 1677.720645][T19120] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1677.784154][T19120] REISERFS (device loop2): checking transaction log (loop2) [ 1677.813842][T19120] REISERFS (device loop2): Using r5 hash to sort names [ 1677.825532][ T9516] usb 6-1: Using ep0 maxpacket: 8 [ 1677.832908][ T9516] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1677.846682][T19120] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1677.867227][ T9516] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1677.892893][ T9516] usb 6-1: string descriptor 0 read error: -22 [ 1677.939419][T19120] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1677.944820][ T9516] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1678.011841][ T9516] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1678.043916][ T9516] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1678.083417][ T9516] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1678.103575][ T9516] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1678.121681][ T9516] usb 6-1: media controller created [ 1678.153236][ T9516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1678.262203][ T9516] usb 6-1: DVB: registering adapter 2 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1678.285020][ T9516] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1678.485917][T19113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1678.517146][T19113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.539187][ T9516] DVB: Unable to find symbol qt1010_attach() [ 1678.540100][T19183] loop2: detected capacity change from 0 to 16 [ 1678.571361][T19183] erofs: (device loop2): mounted with root inode @ nid 36. [ 1678.593478][T19183] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1678.631663][T19183] syz.2.25832: attempt to access beyond end of device [ 1678.631663][T19183] loop2: rw=0, sector=296, nr_sectors = 8 limit=16 [ 1678.656933][T19178] loop6: detected capacity change from 0 to 4096 [ 1678.663853][T19183] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1678.678446][T19183] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1678.693351][ T9516] usb 6-1: USB disconnect, device number 103 [ 1678.862181][ T9507] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1679.075953][ T9507] usb 1-1: Using ep0 maxpacket: 32 [ 1679.088636][ T9507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.113650][ T9507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.134917][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25845'. [ 1679.148884][ T9507] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1679.169222][ T9507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.193097][ T9507] usb 1-1: config 0 descriptor?? [ 1679.250357][ T9507] hub 1-1:0.0: USB hub found [ 1679.458520][ T9507] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 1679.680966][ T9507] usbhid 1-1:0.0: can't add hid device: -71 [ 1679.693959][T19248] syz.5.25852 (19248): drop_caches: 2 [ 1679.699593][ T9507] usbhid: probe of 1-1:0.0 failed with error -71 [ 1679.749514][ T9507] usb 1-1: USB disconnect, device number 6 [ 1680.097256][T19273] tipc: Enabling of bearer rejected, failed to enable media [ 1681.186819][T19282] loop2: detected capacity change from 0 to 40427 [ 1681.279191][T19344] loop5: detected capacity change from 0 to 128 [ 1681.289509][T19282] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1681.311497][T19344] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1681.485995][T10430] EXT4-fs (loop5): unmounting filesystem. [ 1681.493890][T19282] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1681.667283][T19369] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1681.783125][ T4283] syz-executor: attempt to access beyond end of device [ 1681.783125][ T4283] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1681.867218][T19366] loop0: detected capacity change from 0 to 8192 [ 1681.879905][T19379] sch_tbf: burst 4 is lower than device wg0 mtu (1420) ! [ 1681.921646][T19366] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1681.992674][T19366] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1682.002422][T19366] REISERFS (device loop0): using ordered data mode [ 1682.009394][T19366] reiserfs: using flush barriers [ 1682.016177][T19366] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1682.033153][T19366] REISERFS (device loop0): checking transaction log (loop0) [ 1682.192125][T19389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25900'. [ 1682.341169][T19366] REISERFS (device loop0): Using tea hash to sort names [ 1682.367412][T19366] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1683.129651][T19450] loop5: detected capacity change from 0 to 64 [ 1684.172803][T19472] loop5: detected capacity change from 0 to 32768 [ 1684.272377][ T9507] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1684.443465][T19527] [ 1684.445846][T19527] ====================================================== [ 1684.452870][T19527] WARNING: possible circular locking dependency detected [ 1684.459909][T19527] syzkaller #0 Not tainted [ 1684.464329][T19527] ------------------------------------------------------ [ 1684.471350][T19527] syz.0.25923/19527 is trying to acquire lock: [ 1684.477510][T19527] ffffffff97024038 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 1684.487565][T19527] [ 1684.487565][T19527] but task is already holding lock: [ 1684.494932][T19527] ffff88802f8c02b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1684.505232][T19527] [ 1684.505232][T19527] which lock already depends on the new lock. [ 1684.505232][T19527] [ 1684.515644][T19527] [ 1684.515644][T19527] the existing dependency chain (in reverse order) is: [ 1684.524688][T19527] [ 1684.524688][T19527] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1684.532964][T19527] __mutex_lock+0x12d/0xaf0 [ 1684.538019][T19527] nf_tables_dumpreset_obj+0x6e/0x90 [ 1684.543848][T19527] netlink_dump+0x6a3/0xd00 [ 1684.548893][T19527] __netlink_dump_start+0x537/0x6f0 [ 1684.554633][T19527] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1684.560802][T19527] nf_tables_getobj_reset+0x1cb/0x610 [ 1684.566682][T19527] nfnetlink_rcv_msg+0x8a0/0x12b0 [ 1684.572211][T19527] netlink_rcv_skb+0x1fb/0x450 [ 1684.577482][T19527] nfnetlink_rcv+0x2b0/0x2480 [ 1684.582665][T19527] netlink_unicast+0x74d/0x8d0 [ 1684.587944][T19527] netlink_sendmsg+0x8ad/0xbd0 [ 1684.593227][T19527] ____sys_sendmsg+0x5be/0x970 [ 1684.598501][T19527] ___sys_sendmsg+0x2a2/0x360 [ 1684.603687][T19527] __se_sys_sendmsg+0x1bb/0x2a0 [ 1684.609047][T19527] do_syscall_64+0x4c/0xa0 [ 1684.613974][T19527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.620378][T19527] [ 1684.620378][T19527] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1684.628617][T19527] __mutex_lock+0x12d/0xaf0 [ 1684.633641][T19527] __netlink_dump_start+0x11f/0x6f0 [ 1684.639358][T19527] ip_set_dump+0x152/0x1e0 [ 1684.644374][T19527] nfnetlink_rcv_msg+0xbec/0x12b0 [ 1684.649911][T19527] netlink_rcv_skb+0x1fb/0x450 [ 1684.655198][T19527] nfnetlink_rcv+0x2b0/0x2480 [ 1684.660386][T19527] netlink_unicast+0x74d/0x8d0 [ 1684.665659][T19527] netlink_sendmsg+0x8ad/0xbd0 [ 1684.670932][T19527] ____sys_sendmsg+0x5be/0x970 [ 1684.676224][T19527] ___sys_sendmsg+0x2a2/0x360 [ 1684.681411][T19527] __se_sys_sendmsg+0x1bb/0x2a0 [ 1684.686774][T19527] do_syscall_64+0x4c/0xa0 [ 1684.691700][T19527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.698099][T19527] [ 1684.698099][T19527] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1684.705896][T19527] __lock_acquire+0x2d07/0x7d10 [ 1684.711257][T19527] lock_acquire+0x1bb/0x4a0 [ 1684.716269][T19527] __mutex_lock+0x12d/0xaf0 [ 1684.721280][T19527] ip_set_nfnl_get_byindex+0x63/0x230 [ 1684.727192][T19527] set_match_v1_checkentry+0x6d/0x220 [ 1684.733070][T19527] xt_check_match+0x4e6/0xc50 [ 1684.738338][T19527] __nft_match_init+0x663/0x890 [ 1684.743694][T19527] nf_tables_newrule+0x1731/0x2810 [ 1684.749312][T19527] nfnetlink_rcv+0x1124/0x2480 [ 1684.754592][T19527] netlink_unicast+0x74d/0x8d0 [ 1684.759866][T19527] netlink_sendmsg+0x8ad/0xbd0 [ 1684.765138][T19527] ____sys_sendmsg+0x5be/0x970 [ 1684.770411][T19527] ___sys_sendmsg+0x2a2/0x360 [ 1684.775596][T19527] __se_sys_sendmsg+0x1bb/0x2a0 [ 1684.780952][T19527] do_syscall_64+0x4c/0xa0 [ 1684.785874][T19527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.792277][T19527] [ 1684.792277][T19527] other info that might help us debug this: [ 1684.792277][T19527] [ 1684.802492][T19527] Chain exists of: [ 1684.802492][T19527] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1684.802492][T19527] [ 1684.816909][T19527] Possible unsafe locking scenario: [ 1684.816909][T19527] [ 1684.824340][T19527] CPU0 CPU1 [ 1684.829700][T19527] ---- ---- [ 1684.835059][T19527] lock(&nft_net->commit_mutex); [ 1684.840077][T19527] lock(nlk_cb_mutex-NETFILTER); [ 1684.847634][T19527] lock(&nft_net->commit_mutex); [ 1684.855197][T19527] lock(nfnl_subsys_ipset); [ 1684.859805][T19527] [ 1684.859805][T19527] *** DEADLOCK *** [ 1684.859805][T19527] [ 1684.867952][T19527] 1 lock held by syz.0.25923/19527: [ 1684.873150][T19527] #0: ffff88802f8c02b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1684.883873][T19527] [ 1684.883873][T19527] stack backtrace: [ 1684.889739][T19527] CPU: 0 PID: 19527 Comm: syz.0.25923 Not tainted syzkaller #0 [ 1684.897262][T19527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1684.907310][T19527] Call Trace: [ 1684.910599][T19527] [ 1684.913533][T19527] dump_stack_lvl+0x188/0x24e [ 1684.918217][T19527] ? load_image+0x400/0x400 [ 1684.922740][T19527] ? show_regs_print_info+0x12/0x12 [ 1684.927972][T19527] ? print_circular_bug+0x12b/0x1a0 [ 1684.933196][T19527] check_noncircular+0x296/0x330 [ 1684.938162][T19527] ? add_chain_block+0x940/0x940 [ 1684.943119][T19527] ? lockdep_lock+0xf1/0x1f0 [ 1684.947750][T19527] ? _find_first_zero_bit+0xcf/0x100 [ 1684.953054][T19527] __lock_acquire+0x2d07/0x7d10 [ 1684.957935][T19527] ? mark_lock+0x94/0x320 [ 1684.962288][T19527] ? verify_lock_unused+0x140/0x140 [ 1684.967497][T19527] ? __lock_acquire+0x12f4/0x7d10 [ 1684.972511][T19527] lock_acquire+0x1bb/0x4a0 [ 1684.977013][T19527] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1684.982556][T19527] ? __might_sleep+0xd0/0xd0 [ 1684.987132][T19527] ? read_lock_is_recursive+0x10/0x10 [ 1684.992495][T19527] __mutex_lock+0x12d/0xaf0 [ 1684.996986][T19527] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1685.002522][T19527] ? ip_set_pernet+0x23/0x230 [ 1685.007186][T19527] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1685.012732][T19527] ? mutex_lock_nested+0x10/0x10 [ 1685.017691][T19527] ? __flush_work+0x10d/0xae0 [ 1685.022387][T19527] ? ip_set_pernet+0x23/0x230 [ 1685.027089][T19527] ? ip_set_pernet+0x23/0x230 [ 1685.031789][T19527] ip_set_nfnl_get_byindex+0x63/0x230 [ 1685.037199][T19527] set_match_v1_checkentry+0x6d/0x220 [ 1685.042589][T19527] xt_check_match+0x4e6/0xc50 [ 1685.047287][T19527] ? xt_check_proc_name+0x270/0x270 [ 1685.052502][T19527] ? __stack_depot_save+0x35/0x460 [ 1685.057638][T19527] __nft_match_init+0x663/0x890 [ 1685.062502][T19527] ? ___sys_sendmsg+0x2a2/0x360 [ 1685.067378][T19527] ? nft_match_large_dump+0x40/0x40 [ 1685.072605][T19527] ? __kmem_cache_alloc_node+0x140/0x260 [ 1685.078270][T19527] ? nf_tables_newrule+0x1503/0x2810 [ 1685.083580][T19527] ? rcu_is_watching+0x11/0xa0 [ 1685.088368][T19527] ? nf_tables_newrule+0x1503/0x2810 [ 1685.093676][T19527] ? __kmalloc+0xe1/0x240 [ 1685.098031][T19527] nf_tables_newrule+0x1731/0x2810 [ 1685.103176][T19527] ? nf_tables_delchain+0xf00/0xf00 [ 1685.108391][T19527] ? __lock_acquire+0x7d10/0x7d10 [ 1685.113432][T19527] ? mutex_unlock+0x10/0x10 [ 1685.117966][T19527] ? __nla_parse+0x3c/0x50 [ 1685.122399][T19527] nfnetlink_rcv+0x1124/0x2480 [ 1685.127187][T19527] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1685.132766][T19527] ? netlink_deliver_tap+0x2e/0x1b0 [ 1685.137986][T19527] ? net_generic+0x1e/0x240 [ 1685.142510][T19527] ? netlink_deliver_tap+0x2e/0x1b0 [ 1685.147733][T19527] netlink_unicast+0x74d/0x8d0 [ 1685.152518][T19527] netlink_sendmsg+0x8ad/0xbd0 [ 1685.157306][T19527] ? netlink_getsockopt+0x550/0x550 [ 1685.162529][T19527] ? aa_sock_msg_perm+0x94/0x150 [ 1685.167484][T19527] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1685.172777][T19527] ? security_socket_sendmsg+0x7c/0xa0 [ 1685.178228][T19527] ? netlink_getsockopt+0x550/0x550 [ 1685.183413][T19527] ____sys_sendmsg+0x5be/0x970 [ 1685.188179][T19527] ? __sys_sendmsg_sock+0x30/0x30 [ 1685.193186][T19527] ? __import_iovec+0x315/0x500 [ 1685.198022][T19527] ? import_iovec+0x6f/0xa0 [ 1685.202510][T19527] ___sys_sendmsg+0x2a2/0x360 [ 1685.207174][T19527] ? try_to_wake_up+0x6ae/0x1080 [ 1685.212096][T19527] ? __sys_sendmsg+0x290/0x290 [ 1685.216853][T19527] __se_sys_sendmsg+0x1bb/0x2a0 [ 1685.221691][T19527] ? __x64_sys_sendmsg+0x80/0x80 [ 1685.226620][T19527] ? lockdep_hardirqs_on+0x94/0x140 [ 1685.231804][T19527] do_syscall_64+0x4c/0xa0 [ 1685.236203][T19527] ? clear_bhb_loop+0x60/0xb0 [ 1685.240862][T19527] ? clear_bhb_loop+0x60/0xb0 [ 1685.245522][T19527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1685.251398][T19527] RIP: 0033:0x7fe12999ce59 [ 1685.255794][T19527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.275382][T19527] RSP: 002b:00007fe12a884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1685.283776][T19527] RAX: ffffffffffffffda RBX: 00007fe129c15fa0 RCX: 00007fe12999ce59 [ 1685.291732][T19527] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1685.299683][T19527] RBP: 00007fe129a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1685.307636][T19527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.315591][T19527] R13: 00007fe129c16038 R14: 00007fe129c15fa0 R15: 00007ffebd6881f8 [ 1685.323547][T19527] [ 1685.337971][ T9507] usb 3-1: Using ep0 maxpacket: 32 [ 1685.349631][ T9507] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1685.368504][ T9507] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1685.381143][ T9507] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1685.392485][ T9507] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1685.406966][ T9507] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1685.419122][ T9507] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1685.428938][ T9507] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1685.438459][ T9507] usb 3-1: Product: syz [ 1685.442645][ T9507] usb 3-1: Manufacturer: syz [ 1685.447603][ T9507] usb 3-1: SerialNumber: syz [ 1685.453155][ T9507] usb 3-1: config 0 descriptor?? [ 1685.461039][ T9507] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1685.471725][ T9507] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1685.683408][T14176] usb 3-1: USB disconnect, device number 21 [ 1685.696444][T14176] ldusb 3-1:0.0: LD USB Device #0 now disconnected