last executing test programs: 3.699089547s ago: executing program 3 (id=11333): syz_mount_image$xfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x884, &(0x7f0000000000)={[{@logbsize={'logbsize', 0x3d, [0x33, 0x34, 0x4b]}}, {@quota}, {@allocsize={'allocsize', 0x3d, [0x39, 0x34, 0x31]}}, {@pquota}, {@logbufs}, {@noikeep}, {@nouuid}, {@grpquota}]}, 0x1, 0x98d1, &(0x7f0000000a00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) 2.445485606s ago: executing program 3 (id=11357): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000300)="30800211b7e07bf87905bcc27aeca725335c6076a8", 0x15, r0) 2.110818552s ago: executing program 3 (id=11362): r0 = add_key(&(0x7f0000001bc0)='big_key\x00', &(0x7f0000001c00)={'syz', 0x0}, &(0x7f0000001c40)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 1.947890076s ago: executing program 3 (id=11366): r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000001840)={0xfffffffc, 0x8, 0x5}) 1.724882213s ago: executing program 3 (id=11371): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) 1.270165139s ago: executing program 4 (id=11380): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x7, 0x3001}) 1.081163434s ago: executing program 0 (id=11383): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="06000a"], 0x20}}, 0x0) 1.063095586s ago: executing program 1 (id=11384): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000040)=[@dontfrag={{0x14, 0x29, 0x3e, 0x752}}], 0x18}}], 0x1, 0x800) 1.028927608s ago: executing program 4 (id=11385): syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYBLOB="88e2e648f70ad5763a343daf39cab3defb775f0676e8010000000000000015dc40799b832d5db4fea2b9894d580000000012e959ef6d35f305144c1452069473802c4df7db59920ba4dd1e8c77bf67c36b2e4e5eee8dc00f81923ca96c9f6d3abda7166fbcead960aee4f4a132d01f373ebd52d7e5610ff6e55180d1dd609fabc9a27c57623b2c11427b1c9e5845b18375004721e60307c9", @ANYRES8=0x0, @ANYBLOB="46403d5b0cd8d68d426a04b4787195ff7424a82544a22122bc0b10c80fba4c6d01267249f7c3a8ab208fa40142d5c00129ab0566d8b7a6e002744040a9323940df302191d4504c3caa6c07685f08ddb695d817be317e3fd0452ce21ae9730000000000", @ANYBLOB="cd099bf46634ae0ef20ed2ba2228c7861d77eb8e89debf07a0ac26cdadf7a684dc0ee6f5048a6a3e2e299d207a30c3fe1e73696eaac25bca2d9a44025207a0e36ed20b09f1d1d8752bbb15faa46ca426761546b6172b48665c3907", @ANYRESHEX, @ANYBLOB="565ce6f5189acfa3316f89263710cde4cf935dd8aefd7044f7dcd5a74eea89"], 0x6, 0x18f, &(0x7f0000000840)="$eJzsVb1OKkEU/mYZdrk3t6CmveTCLZTdRYlvIJWVDyCBFYmLPyyJQkhcKx6FxKew8B0sTGywoNACSxMzZn5YZmsSgma+BL7vnDk/c6Y4exJdRg6Az/moiTwECP7giRBQACUifQeO5Hdbck3ZMyrZU/47xS+Ko8HwtBGGQU8IeyHCFQRTrRPPyhU3X7CbtTftbcrsRvwcwRjFGpsuzf1bC29ilz3OR00ujgAwxhj3teSP6DEZAA9aTIECBeRIBiyJoWJbAiUAlX73ohINhludbqMdtIMz36/W3B3X3fUrx50wcOU/0VpYcpGB838AfLH90s6zAJ7Vgv2NNIh2NXVO9Fy+f2exDCj/TedaWq5eQ9a9T2qoRQv+FIf4hxyAq5ho3qKoRiFGq4MgowyPaveUPXPiYLt5HrbGICCLtAloUsObIpsYvm5U9+LFFceKi4rriieKp4odkv4mUVHhVVnleDm0bQHXjX6/5wG2VD4Pkyof6w/Hu37Y6eGKDgwMDAwMDAwMvgm+AgAA//+a42GE") llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1.028426209s ago: executing program 2 (id=11386): r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 886.66443ms ago: executing program 1 (id=11387): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x1f, 0x0, 0x0) 886.11669ms ago: executing program 0 (id=11388): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x70bd29, 0x40000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}}, 0x0) 846.207883ms ago: executing program 2 (id=11389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x61) 686.854146ms ago: executing program 0 (id=11390): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000580)={0x2, 0x1, [0x6, 0x99, 0xb, 0x9, 0x8, 0x6, 0x9, 0x90]}) 686.706445ms ago: executing program 1 (id=11391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7b}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x98}}, 0x0) 683.876565ms ago: executing program 4 (id=11392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="06ff03076844babeb89e14f00806", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 666.045237ms ago: executing program 2 (id=11393): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000001480)) 542.812577ms ago: executing program 0 (id=11394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x6, 0x4, 0x480, 0x3, 0x20010}) 452.014724ms ago: executing program 1 (id=11395): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) 451.585584ms ago: executing program 2 (id=11396): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 390.917119ms ago: executing program 4 (id=11397): r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xe25, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0505510, 0x0) 376.91517ms ago: executing program 0 (id=11398): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x480, 0x0, 0x0) 325.182124ms ago: executing program 1 (id=11399): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 278.797988ms ago: executing program 2 (id=11400): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x5, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}]}, 0x20}, 0x1, 0x7}, 0x4) 229.829512ms ago: executing program 4 (id=11401): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) 204.880183ms ago: executing program 0 (id=11402): syz_mount_image$hfs(&(0x7f0000000840), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000180)={[{@codepage={'codepage', 0x3d, 'cp855'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@part={'part', 0x3d, 0xa}}]}, 0x1, 0x2e9, &(0x7f0000000200)="$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") mount$nfs(&(0x7f00000000c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x00\x00\x01\x00\x00\x00\x00\x00h#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4I\xc5\xcb\x15A\xb5\xbbG\x9e\xea\xc4\x03\xf2\xf5\xf4\xa1\x9c\xe0Q<=\xb1\x9b,vjn\x8b[0\xd9\xcb\xf8\x1a\xdf\x9e\x89\x91H\xf4\x11p\xd2\x96\x82\xd9)6\xcdm\x88\x91\x1dv\xff\xb3\xad\x8b\x82\xcdR\x98\x80k1\xce}\x90\xe8e\xdb\xb1HL\x1d%\xc4\x1atCt\xb4\x00\xb29E\x87-\xd1\xcd\xf3w\"\v\xf3`\x06x\xb4TQ\x8dB\a\xe4\xe2\xf8\xd6%C\xf9\xd6~\xf80\xfcE\xa0\x80\x0e\"\xb0\a\x88\xbc\x7fbn\x02\xeb\x9b\x04\x1d\t', &(0x7f0000000000)='./file0\x00', 0x0, 0x123b058, 0x0) 160.780797ms ago: executing program 1 (id=11403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000101010200000000000000000a0000000c001980080001002d0400003c0001802c000180140003002001000000000000000000000000000014000400ff0200000000000000000000000000010c0002"], 0x5c}, 0x1, 0x0, 0x0, 0x2804c015}, 0x24000800) 160.281377ms ago: executing program 2 (id=11404): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r0, 0x891a, 0x0) 3.080079ms ago: executing program 3 (id=11405): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 0s ago: executing program 4 (id=11406): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) kernel console output (not intermixed with test programs): 4374] device veth1_macvtap left promiscuous mode [ 897.530835][ T27] audit: type=1326 audit(30330303.023:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24375 comm="syz.3.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f72b1d8eb69 code=0x7ffc0000 [ 897.578963][ T27] audit: type=1326 audit(30330303.023:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24375 comm="syz.3.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1d8eb69 code=0x7ffc0000 [ 897.673226][ T27] audit: type=1326 audit(30330303.023:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24375 comm="syz.3.9048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1d8eb69 code=0x7ffc0000 [ 898.317469][T19594] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 898.391612][T24408] loop0: detected capacity change from 0 to 8192 [ 898.450914][T24408] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 898.483367][T24423] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.9063'. [ 898.518712][T24408] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 898.528385][T19594] usb 2-1: Using ep0 maxpacket: 32 [ 898.537656][T19594] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 898.553577][T24426] loop4: detected capacity change from 0 to 4096 [ 898.558896][T24423] openvswitch: netlink: Flow actions attr not present in new flow. [ 898.576613][T19594] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 898.579273][T24426] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 898.596035][T24408] REISERFS (device loop0): using ordered data mode [ 898.604661][T24408] reiserfs: using flush barriers [ 898.622165][T19594] usb 2-1: config 0 has no interface number 1 [ 898.623651][T24408] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 898.645443][T24408] REISERFS (device loop0): checking transaction log (loop0) [ 898.672745][T19594] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 898.702237][T19594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.726580][T19594] usb 2-1: Product: syz [ 898.730798][T19594] usb 2-1: Manufacturer: syz [ 898.762202][T24426] ntfs3: loop4: failed to convert "c46c" to koi8-r [ 898.780872][T19594] usb 2-1: SerialNumber: syz [ 898.796946][T19594] usb 2-1: config 0 descriptor?? [ 898.807545][T24408] REISERFS (device loop0): Using tea hash to sort names [ 898.818283][T19594] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 898.838219][T24408] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 898.882407][T19594] vmk80xx 2-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 899.079464][T19594] usb 2-1: USB disconnect, device number 4 [ 899.485663][T24452] __vm_enough_memory: pid: 24452, comm: syz.4.9078, no enough memory for the allocation [ 899.814666][T24467] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 899.846200][T24467] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 899.868708][T24467] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 899.910381][T24467] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 899.959903][T24471] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9087'. [ 900.144724][T24477] netlink: 'syz.1.9090': attribute type 12 has an invalid length. [ 900.175103][T24479] netlink: 'syz.0.9091': attribute type 10 has an invalid length. [ 900.203852][T24479] device netdevsim0 entered promiscuous mode [ 900.231017][T19519] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 900.292989][T24460] loop4: detected capacity change from 0 to 32768 [ 900.400387][T24460] XFS (loop4): Mounting V5 Filesystem [ 900.468215][T19519] usb 4-1: unable to get BOS descriptor or descriptor too short [ 900.488774][T19519] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 900.509019][T19519] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 900.540988][T19519] usb 4-1: config 1 interface 0 has no altsetting 1 [ 900.553531][T19519] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 900.581320][T24460] XFS (loop4): Ending clean mount [ 900.586553][T19519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.605206][T19519] usb 4-1: Product: syz [ 900.610746][T24460] XFS (loop4): Quotacheck needed: Please wait. [ 900.620312][T19519] usb 4-1: Manufacturer: syz [ 900.625503][T19519] usb 4-1: SerialNumber: syz [ 900.636521][T19519] smsusb:smsusb_probe: board id=8, interface number 0 [ 900.706544][T24460] XFS (loop4): Quotacheck: Done. [ 900.852965][T19519] smsusb:smsusb_probe: Device initialized with return code -19 [ 900.876317][T24507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 900.885882][T24509] netlink: 'syz.1.9101': attribute type 8 has an invalid length. [ 900.902339][ T4568] XFS (loop4): Unmounting Filesystem [ 901.063352][T24514] loop2: detected capacity change from 0 to 256 [ 901.073691][ T4530] usb 4-1: USB disconnect, device number 109 [ 901.129014][T24516] loop0: detected capacity change from 0 to 16 [ 901.148655][T24516] erofs: (device loop0): mounted with root inode @ nid 36. [ 901.234336][T24514] FAT-fs (loop2): Directory bread(block 64) failed [ 901.261346][T24514] FAT-fs (loop2): Directory bread(block 65) failed [ 901.332108][T24514] FAT-fs (loop2): Directory bread(block 66) failed [ 901.338681][T24514] FAT-fs (loop2): Directory bread(block 67) failed [ 901.382260][T24514] FAT-fs (loop2): Directory bread(block 68) failed [ 901.394922][T24514] FAT-fs (loop2): Directory bread(block 69) failed [ 901.418000][T24514] FAT-fs (loop2): Directory bread(block 70) failed [ 901.434067][T24514] FAT-fs (loop2): Directory bread(block 71) failed [ 901.449827][T24514] FAT-fs (loop2): Directory bread(block 72) failed [ 901.460562][T24514] FAT-fs (loop2): Directory bread(block 73) failed [ 901.508321][T24524] overlayfs: missing 'lowerdir' [ 902.083591][T24546] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.9119'. [ 902.118587][T24546] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 902.125628][ T27] audit: type=1326 audit(30330307.410:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.2.9122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 902.176494][ T27] audit: type=1326 audit(30330307.410:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.2.9122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 902.270779][ T27] audit: type=1326 audit(30330307.438:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.2.9122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 902.390698][ T27] audit: type=1326 audit(30330307.438:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.2.9122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 902.510832][ T27] audit: type=1326 audit(30330307.438:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.2.9122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 902.590326][T24572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9133'. [ 902.605926][T24572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9133'. [ 902.727325][T24579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9137'. [ 902.828839][ T4530] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 902.883737][ T27] audit: type=1326 audit(30330308.121:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24585 comm="syz.3.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1d8eb69 code=0x7ffc0000 [ 902.947956][ T27] audit: type=1326 audit(30330308.149:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24585 comm="syz.3.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f72b1d8eb69 code=0x7ffc0000 [ 902.958558][T24589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9141'. [ 902.976047][ T27] audit: type=1326 audit(30330308.149:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24585 comm="syz.3.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1d8eb69 code=0x7ffc0000 [ 903.027562][ T4530] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 903.053336][ T4530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.096915][ T4530] usb 2-1: config 0 descriptor?? [ 903.115861][ T4530] cp210x 2-1:0.0: cp210x converter detected [ 903.120424][T24592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9143'. [ 903.132909][ T27] audit: type=1326 audit(30330308.149:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24585 comm="syz.3.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1d8eb69 code=0x7ffc0000 [ 903.167168][T24592] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9143'. [ 903.329148][ T4530] usb 2-1: cp210x converter now attached to ttyUSB0 [ 903.498264][T24602] loop2: detected capacity change from 0 to 4096 [ 903.562360][T19594] usb 2-1: USB disconnect, device number 5 [ 903.574093][T19594] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 903.605620][T19594] cp210x 2-1:0.0: device disconnected [ 904.683047][T24658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9175'. [ 904.826505][ T27] audit: type=1400 audit(30330309.927:2578): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=24662 comm="syz.2.9179" [ 904.916096][T24670] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 905.201825][ T4528] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 905.372961][T24690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9192'. [ 905.415576][ T4528] usb 1-1: Using ep0 maxpacket: 32 [ 905.422300][ T4528] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 905.461395][ T4528] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 905.490363][ T4528] usb 1-1: config 0 has no interface number 1 [ 905.504349][ T4528] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 905.548816][T24696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9195'. [ 905.560989][T24694] loop4: detected capacity change from 0 to 256 [ 905.567399][ T4528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.575711][ T4528] usb 1-1: Product: syz [ 905.605696][ T4528] usb 1-1: Manufacturer: syz [ 905.615613][T24700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9197'. [ 905.619644][ T4528] usb 1-1: SerialNumber: syz [ 905.648692][ T4528] usb 1-1: config 0 descriptor?? [ 905.667053][ T4528] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 905.686727][ T4528] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 905.919965][ T93] block nbd2: Attempted send on invalid socket [ 905.925890][ T4528] usb 1-1: USB disconnect, device number 116 [ 905.926227][ T93] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 905.941467][ T14] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 905.952376][T24708] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 906.151523][T24718] IPv6: sit1: Disabled Multicast RS [ 906.189365][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 906.197580][ T14] usb 5-1: config 4 has an invalid interface number: 228 but max is 0 [ 906.228768][ T14] usb 5-1: config 4 has no interface number 0 [ 906.235192][ T14] usb 5-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11 [ 906.250499][ T14] usb 5-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024 [ 906.264255][T24722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9206'. [ 906.282514][ T14] usb 5-1: config 4 interface 228 has no altsetting 0 [ 906.295786][ T14] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 906.324826][ T14] usb 5-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 906.353206][ T14] usb 5-1: Product: syz [ 906.363453][T24724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9208'. [ 906.365173][ T14] usb 5-1: Manufacturer: syz [ 906.384629][ T14] usb 5-1: SerialNumber: syz [ 906.629312][T24732] overlayfs: unrecognized mount option "\" or missing value [ 906.643221][ T14] usb 5-1: invalid MIDI in EP 0 [ 906.701614][ T14] snd-usb-audio: probe of 5-1:4.228 failed with error -22 [ 906.737521][ T14] usb 5-1: USB disconnect, device number 113 [ 906.966768][ T4532] udevd[4532]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.292608][T24763] netlink: 'syz.1.9228': attribute type 2 has an invalid length. [ 907.570165][T24774] netlink: 'syz.1.9232': attribute type 30 has an invalid length. [ 907.584997][T24774] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 907.751701][T24775] loop0: detected capacity change from 0 to 4096 [ 907.863774][ T4528] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 907.953508][ T27] audit: type=1326 audit(30330312.864:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.1.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 908.030801][ T27] audit: type=1326 audit(30330312.864:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.1.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 908.085051][ T4528] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 908.119700][ T4528] usb 3-1: config 0 has no interface number 0 [ 908.133889][ T4528] usb 3-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 908.152238][ T27] audit: type=1326 audit(30330312.883:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.1.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 908.176196][ T4528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.203916][ T4528] usb 3-1: Product: syz [ 908.216097][ T4528] usb 3-1: Manufacturer: syz [ 908.223015][ T27] audit: type=1326 audit(30330312.883:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.1.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 908.262395][ T4528] usb 3-1: SerialNumber: syz [ 908.281181][ T4528] usb 3-1: config 0 descriptor?? [ 908.297906][ T4528] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 908.323563][ T4528] dvb-usb: bulk message failed: -22 (4/0) [ 908.331672][ T27] audit: type=1326 audit(30330312.883:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24787 comm="syz.1.9241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 908.382420][T24793] loop3: detected capacity change from 0 to 4096 [ 908.384023][ T4528] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 908.409172][ T4528] dvb-usb: bulk message failed: -22 (5/0) [ 908.420324][ T4528] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 908.453971][ T4528] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 908.498753][ T4528] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 908.529887][ T4528] usb 3-1: USB disconnect, device number 102 [ 908.650188][T24807] loop4: detected capacity change from 0 to 256 [ 908.658795][T24793] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 908.694067][T24793] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 908.767319][T24807] FAT-fs (loop4): Directory bread(block 64) failed [ 908.804285][T24807] FAT-fs (loop4): Directory bread(block 65) failed [ 908.832635][T24807] FAT-fs (loop4): Directory bread(block 66) failed [ 908.832671][T24807] FAT-fs (loop4): Directory bread(block 67) failed [ 908.832744][T24807] FAT-fs (loop4): Directory bread(block 68) failed [ 908.832772][T24807] FAT-fs (loop4): Directory bread(block 69) failed [ 908.832835][T24807] FAT-fs (loop4): Directory bread(block 70) failed [ 908.832858][T24807] FAT-fs (loop4): Directory bread(block 71) failed [ 908.832925][T24807] FAT-fs (loop4): Directory bread(block 72) failed [ 908.832951][T24807] FAT-fs (loop4): Directory bread(block 73) failed [ 908.888991][T24807] syz.4.9250: attempt to access beyond end of device [ 908.888991][T24807] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 908.889468][T24807] syz.4.9250: attempt to access beyond end of device [ 908.889468][T24807] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 908.914413][ T27] audit: type=1800 audit(30330313.762:2584): pid=24807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9250" name="file0" dev="loop4" ino=1048656 res=0 errno=0 [ 909.270636][T24818] __nla_validate_parse: 1 callbacks suppressed [ 909.270652][T24818] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9254'. [ 909.833217][T24836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9264'. [ 909.876097][T24836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9264'. [ 910.052352][T24816] loop4: detected capacity change from 0 to 32768 [ 910.378653][T24827] loop0: detected capacity change from 0 to 32768 [ 910.434997][T24827] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.9259 (24827) [ 910.519397][T24827] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 910.560789][T24827] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 910.610581][T24827] BTRFS info (device loop0): metadata ratio 1025 [ 910.643198][T24827] BTRFS info (device loop0): enabling ssd optimizations [ 910.675190][T24827] BTRFS info (device loop0): force clearing of disk cache [ 910.720392][T24827] BTRFS info (device loop0): turning off barriers [ 910.759255][T24827] BTRFS info (device loop0): setting nodatacow, compression disabled [ 910.803923][T24827] BTRFS info (device loop0): using spread ssd allocation scheme [ 910.811965][T24827] BTRFS info (device loop0): using free space tree [ 910.820065][T24864] netlink: 'syz.4.9277': attribute type 2 has an invalid length. [ 911.223843][T24827] BTRFS info (device loop0): rebuilding free space tree [ 911.376631][T24900] ieee802154 phy0 wpan0: encryption failed: -22 [ 911.433496][ T4557] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 911.543007][ T4524] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (4524) [ 911.781711][T24912] loop4: detected capacity change from 0 to 1024 [ 912.140103][T24923] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 912.149295][T24923] overlayfs: missing 'lowerdir' [ 912.798631][T24944] netlink: 'syz.4.9308': attribute type 4 has an invalid length. [ 912.812015][T24944] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9308'. [ 913.302386][T24959] loop0: detected capacity change from 0 to 1764 [ 913.483960][T24967] loop4: detected capacity change from 0 to 1024 [ 913.654966][T22951] hfsplus: b-tree write err: -5, ino 4 [ 913.664465][T24972] netlink: 'syz.1.9323': attribute type 1 has an invalid length. [ 914.018249][T24985] tc_dump_action: action bad kind [ 914.193231][T24991] loop3: detected capacity change from 0 to 256 [ 914.571482][T25008] netlink: 'syz.2.9340': attribute type 10 has an invalid length. [ 914.661505][T25008] team0: Port device syz_tun added [ 915.266654][T25041] program syz.4.9357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.568095][T25054] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9363'. [ 915.614260][T25050] loop0: detected capacity change from 0 to 4096 [ 915.696692][T25050] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 915.762348][T25061] sock: sock_timestamping_bind_phc: sock not bind to device [ 915.887044][T25050] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 915.930699][T25050] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update [ 916.073579][T25070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9371'. [ 916.106416][T22944] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 916.713557][T25094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9383'. [ 916.749069][T25062] loop4: detected capacity change from 0 to 32768 [ 916.796811][T25062] ERROR: (device loop4): dtSearch: stack overrun! [ 916.796811][T25062] [ 916.832259][T25062] ERROR: (device loop4): remounting filesystem as read-only [ 916.881305][T25062] btstack dump: [ 916.884892][T25062] bn = 0, index = 4 [ 916.899209][T25062] bn = 0, index = 4 [ 916.903145][T25062] bn = 0, index = 4 [ 916.925643][T25062] bn = 0, index = 4 [ 916.948256][T25062] bn = 0, index = 4 [ 916.989883][T25062] bn = 0, index = 4 [ 916.999632][T25062] bn = 0, index = 4 [ 917.014184][T25062] bn = 0, index = 0 [ 917.018058][T25062] jfs_lookup: dtSearch returned -5 [ 917.237967][T25109] loop2: detected capacity change from 0 to 2048 [ 917.279476][T25112] loop3: detected capacity change from 0 to 2048 [ 917.302675][T25109] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 917.362088][T25109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 917.374320][T25112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 917.537724][T25116] loop4: detected capacity change from 0 to 256 [ 917.918707][T25127] loop0: detected capacity change from 0 to 1764 [ 917.965954][T25127] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 918.306194][T25143] Process accounting paused [ 918.451936][T25152] netlink: 'syz.4.9410': attribute type 1 has an invalid length. [ 918.473592][T25155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9412'. [ 918.483729][T25152] netlink: 'syz.4.9410': attribute type 2 has an invalid length. [ 918.502288][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9410'. [ 918.701278][T25163] netlink: 'syz.1.9414': attribute type 2 has an invalid length. [ 918.803529][T25167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9419'. [ 918.835973][T25167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9419'. [ 918.846818][T25160] loop3: detected capacity change from 0 to 4096 [ 918.897045][T25160] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 918.956670][T25160] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 919.034800][T25160] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 919.080483][T25160] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 919.125568][T25160] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 919.178063][T25160] ntfs: volume version 3.1. [ 919.186391][T25173] loop4: detected capacity change from 0 to 4096 [ 919.200305][T25160] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 919.254832][T25181] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 919.273504][T25160] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 919.327168][T25160] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 919.391768][T25160] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 919.450268][T25160] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 920.348229][T25224] netlink: 'syz.2.9447': attribute type 1 has an invalid length. [ 920.371023][ T4493] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 920.565399][ T4493] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 920.595331][ T4493] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 920.623639][ T4493] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 920.633629][T25237] netlink: 'syz.4.9454': attribute type 21 has an invalid length. [ 920.654955][T25237] IPv6: NLM_F_CREATE should be specified when creating new route [ 920.665702][ T4493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.697731][T25211] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 920.939806][ T4528] usb 2-1: USB disconnect, device number 6 [ 921.755066][ T4493] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 921.920619][T25293] block device autoloading is deprecated and will be removed. [ 921.951053][T25297] netlink: 276 bytes leftover after parsing attributes in process `syz.4.9483'. [ 921.971442][ T4493] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 921.986710][ T4493] usb 1-1: config 5 has no interface number 0 [ 922.002938][ T4493] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 65535, setting to 64 [ 922.011956][T25297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9483'. [ 922.020788][ T4493] usb 1-1: config 5 interface 123 has no altsetting 0 [ 922.068830][ T4493] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 922.121489][ T4493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.144360][ T4493] usb 1-1: Product: syz [ 922.156002][ T4493] usb 1-1: Manufacturer: syz [ 922.160624][ T4493] usb 1-1: SerialNumber: syz [ 922.221597][T25275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 922.262537][T25309] device team_slave_0 left promiscuous mode [ 922.406467][T25309] team0: Port device team_slave_0 removed [ 922.430785][T25315] loop2: detected capacity change from 0 to 256 [ 922.436902][T25309] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 922.470350][ T4493] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 922.502399][ T4493] usb 1-1: USB disconnect, device number 117 [ 922.534510][T25315] FAT-fs (loop2): Directory bread(block 64) failed [ 922.554493][T25315] FAT-fs (loop2): Directory bread(block 65) failed [ 922.561133][T25315] FAT-fs (loop2): Directory bread(block 66) failed [ 922.605281][T25315] FAT-fs (loop2): Directory bread(block 67) failed [ 922.622747][T25315] FAT-fs (loop2): Directory bread(block 68) failed [ 922.693547][T25315] FAT-fs (loop2): Directory bread(block 69) failed [ 922.724745][T25315] FAT-fs (loop2): Directory bread(block 70) failed [ 922.754889][T25323] loop3: detected capacity change from 0 to 256 [ 922.766027][T25323] exfat: Deprecated parameter 'utf8' [ 922.771437][T25315] FAT-fs (loop2): Directory bread(block 71) failed [ 922.783235][T25323] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 922.814631][T25315] FAT-fs (loop2): Directory bread(block 72) failed [ 922.848201][T25315] FAT-fs (loop2): Directory bread(block 73) failed [ 923.692138][T25356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9515'. [ 923.935666][ T4528] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 924.135285][ T4528] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 924.155595][ T4528] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 924.200103][ T4528] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 924.231142][ T4528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.250177][ T4528] usb 3-1: Product: syz [ 924.260977][ T4528] usb 3-1: Manufacturer: syz [ 924.288583][ T4528] usb 3-1: SerialNumber: syz [ 924.336257][T25384] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 924.516440][ T4528] usb 3-1: USB disconnect, device number 103 [ 924.612763][T25388] loop4: detected capacity change from 0 to 4096 [ 924.631286][T25388] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 924.739538][T25388] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 924.771098][T25388] ntfs3: loop4: ino=1b, "file0" attr_set_size [ 924.866741][ T4568] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 924.889803][ T4568] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 925.194779][T25408] loop0: detected capacity change from 0 to 4096 [ 925.223860][T25408] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 925.308132][T25408] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 925.530293][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9546'. [ 925.808194][T25436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9552'. [ 926.047176][ T4493] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 926.133535][ T4528] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 926.268112][ T4493] usb 3-1: Using ep0 maxpacket: 32 [ 926.288726][ T4493] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.312858][ T4493] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 926.349020][ T4493] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.357907][ T4528] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.367868][ T4493] usb 3-1: Product: syz [ 926.372937][ T4493] usb 3-1: Manufacturer: syz [ 926.377541][ T4493] usb 3-1: SerialNumber: syz [ 926.378643][ T4528] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.423368][ T4493] usb 3-1: config 0 descriptor?? [ 926.435048][ T4528] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 926.470015][ T4528] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 926.499888][ T4528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.525323][ T4528] usb 1-1: config 0 descriptor?? [ 926.552010][ T4528] hub 1-1:0.0: USB hub found [ 926.674735][T25450] loop4: detected capacity change from 0 to 32768 [ 926.696552][ T4493] usb 3-1: USB disconnect, device number 104 [ 926.735913][T25450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9557 (25450) [ 926.757874][ T4528] hub 1-1:0.0: 14 ports detected [ 926.797029][ T4528] hub 1-1:0.0: insufficient power available to use all downstream ports [ 926.860860][T25450] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 926.877231][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 926.877245][ T27] audit: type=1326 audit(30330330.563:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25465 comm="syz.1.9566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 926.879568][ T27] audit: type=1326 audit(30330330.563:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25465 comm="syz.1.9566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 926.922148][T25450] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 926.937055][T25467] loop3: detected capacity change from 0 to 256 [ 926.981575][T25450] BTRFS info (device loop4): using free space tree [ 926.983636][ T4528] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 926.999655][ T4528] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 927.078336][ T4528] usb 1-1: USB disconnect, device number 118 [ 927.160314][ T27] audit: type=1326 audit(30330330.638:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25465 comm="syz.1.9566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 927.248332][T25450] BTRFS info (device loop4): enabling ssd optimizations [ 927.275894][ T27] audit: type=1326 audit(30330330.638:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25465 comm="syz.1.9566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 927.533786][ T4568] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 927.642293][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9573'. [ 927.674665][T25499] loop2: detected capacity change from 0 to 1024 [ 927.711330][T25499] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 927.746986][ T4524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4524) [ 927.766404][T25499] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 927.791734][T25499] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.9574: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 927.880413][T25499] EXT4-fs (loop2): no journal found [ 927.898431][T25499] EXT4-fs (loop2): can't get journal size [ 927.928043][T25499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 928.100988][ T4562] EXT4-fs (loop2): unmounting filesystem. [ 928.185188][ T4531] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 928.389335][ T4531] usb 2-1: not running at top speed; connect to a high speed hub [ 928.401419][ T4531] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 928.439875][ T4531] usb 2-1: config 95 has no interface number 0 [ 928.465655][ T4531] usb 2-1: config 95 interface 1 has no altsetting 0 [ 928.492295][ T4531] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 928.508272][T25525] loop2: detected capacity change from 0 to 64 [ 928.515647][ T4531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.559451][ T4531] usb 2-1: Product: syz [ 928.563671][ T4531] usb 2-1: Manufacturer: syz [ 928.600743][ T4531] usb 2-1: SerialNumber: syz [ 928.608685][T25529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 928.910333][T25539] loop4: detected capacity change from 0 to 2048 [ 928.940735][ T27] audit: type=1326 audit(30330332.490:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25542 comm="syz.0.9595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70e38eb69 code=0x7ffc0000 [ 928.979298][ T4531] usb 2-1: USB disconnect, device number 7 [ 928.980406][T25539] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 929.045593][ T27] audit: type=1326 audit(30330332.490:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25542 comm="syz.0.9595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fb70e38eb69 code=0x7ffc0000 [ 929.084469][T25539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 929.094893][T19719] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 929.140309][ T27] audit: type=1326 audit(30330332.490:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25542 comm="syz.0.9595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70e38eb69 code=0x7ffc0000 [ 929.311283][T19719] usb 3-1: Using ep0 maxpacket: 32 [ 929.335068][T19719] usb 3-1: config 0 has an invalid interface number: 114 but max is 0 [ 929.361095][T19719] usb 3-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 929.363135][ T4524] udevd[4524]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.393026][T19719] usb 3-1: config 0 has no interface number 0 [ 929.414779][T19719] usb 3-1: config 0 interface 114 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 929.455188][T25557] loop0: detected capacity change from 0 to 256 [ 929.473340][T19719] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff03, bcdDevice=43.ff [ 929.502959][T19719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.537169][T19719] usb 3-1: Product: syz [ 929.541575][T19719] usb 3-1: Manufacturer: syz [ 929.549979][T25557] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 929.558337][T19719] usb 3-1: SerialNumber: syz [ 929.586814][T19719] usb 3-1: config 0 descriptor?? [ 929.637143][T19719] cdc_ether 3-1:0.114: invalid descriptor buffer length [ 929.649674][T19719] usb 3-1: bad CDC descriptors [ 929.775355][T25569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9608'. [ 929.785762][T25569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9608'. [ 929.877997][T19719] usb 3-1: USB disconnect, device number 105 [ 930.261950][T25589] netlink: 'syz.0.9618': attribute type 21 has an invalid length. [ 930.587705][T25593] loop3: detected capacity change from 0 to 4096 [ 930.945523][T25609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.174915][T25625] netlink: 'syz.4.9634': attribute type 10 has an invalid length. [ 931.244463][T25625] device syz_tun entered promiscuous mode [ 931.263090][T25625] team0: Port device syz_tun added [ 931.284224][T22944] bridge0: port 1(team0) entered blocking state [ 931.290634][T22944] bridge0: port 1(team0) entered forwarding state [ 931.292224][T25631] loop0: detected capacity change from 0 to 128 [ 931.310361][T25628] loop3: detected capacity change from 0 to 1024 [ 931.344237][T25628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 931.405358][T25628] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 931.434641][T25628] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 931.439811][T25630] loop2: detected capacity change from 0 to 4096 [ 931.479841][T25630] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 931.495963][T25628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 931.642906][T25630] ntfs3: loop2: failed to convert "c46c" to maciceland [ 931.760739][ T4563] EXT4-fs (loop3): unmounting filesystem. [ 931.895279][T25645] dlm: no locking on control device [ 931.954553][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9645'. [ 932.410498][T25668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9655'. [ 932.873397][T25687] netlink: 'syz.4.9663': attribute type 27 has an invalid length. [ 933.273042][T25706] loop4: detected capacity change from 0 to 512 [ 933.314816][T25706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 933.412013][T25706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 933.525212][T25706] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 933.611277][T25706] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 933.647835][T25706] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.9674: Failed to acquire dquot type 0 [ 933.864628][T25729] loop2: detected capacity change from 0 to 256 [ 933.872796][ T4568] EXT4-fs (loop4): unmounting filesystem. [ 933.933307][T25732] loop3: detected capacity change from 0 to 256 [ 933.953372][T25729] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 933.977791][T25732] exfat: Deprecated parameter 'utf8' [ 934.004347][T25732] exfat: Deprecated parameter 'utf8' [ 934.046197][T25726] loop0: detected capacity change from 0 to 8192 [ 934.070901][T25726] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 934.097336][T25732] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 934.215319][T25726] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 934.224669][T25726] REISERFS (device loop0): using ordered data mode [ 934.265656][T25726] reiserfs: using flush barriers [ 934.289255][T25726] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 934.332925][T25732] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 934.417771][T25726] REISERFS (device loop0): checking transaction log (loop0) [ 934.477002][T25746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9691'. [ 934.509046][T25746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9691'. [ 934.536791][T25748] netlink: 'syz.4.9692': attribute type 8 has an invalid length. [ 934.628250][T25726] REISERFS (device loop0): Using tea hash to sort names [ 934.653655][T25726] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 935.667158][T25792] netlink: 'syz.4.9715': attribute type 12 has an invalid length. [ 935.708567][T25792] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 935.800547][T25800] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 936.031858][ T14] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 936.046064][T25807] loop4: detected capacity change from 0 to 4096 [ 936.072663][T25807] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 936.158435][T25807] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 936.234748][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 936.243920][ T14] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 936.298885][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.307021][ T14] usb 1-1: Product: syz [ 936.329884][ T14] usb 1-1: Manufacturer: syz [ 936.336138][ T14] usb 1-1: SerialNumber: syz [ 936.337790][T25821] netlink: 'syz.3.9729': attribute type 21 has an invalid length. [ 936.349583][ T14] usb 1-1: config 0 descriptor?? [ 936.367401][ T4568] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 936.568168][T25823] loop4: detected capacity change from 0 to 2048 [ 936.584864][ T14] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 936.599553][ T14] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 936.631759][T25830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9733'. [ 936.697163][T25831] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 936.732616][T25823] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 936.808850][ T14] usb 1-1: USB disconnect, device number 119 [ 936.830197][T25823] Remounting filesystem read-only [ 937.044664][T25847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9741'. [ 937.074711][T25846] loop2: detected capacity change from 0 to 1024 [ 937.243583][T22948] hfsplus: b-tree write err: -5, ino 4 [ 937.330712][T25855] loop4: detected capacity change from 0 to 256 [ 937.397857][T25855] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 937.684299][ T14] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 937.687184][T25866] netlink: 766 bytes leftover after parsing attributes in process `syz.4.9750'. [ 937.894457][ T14] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 937.913144][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.923265][ T14] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 937.985276][ T14] usb 3-1: config 1 has no interface number 1 [ 938.024279][ T14] usb 3-1: string descriptor 0 read error: -22 [ 938.052195][ T14] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 938.061718][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.110166][ T14] usb 3-1: MIDIStreaming interface descriptor not found [ 938.146229][ T14] snd-usb-audio: probe of 3-1:1.2 failed with error -16 [ 938.161193][T25883] netlink: 'syz.0.9757': attribute type 1 has an invalid length. [ 938.230170][T25886] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 938.345145][ T4621] usb 3-1: USB disconnect, device number 106 [ 938.668053][T25903] netlink: 'syz.3.9768': attribute type 21 has an invalid length. [ 938.683073][T25903] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9768'. [ 938.922671][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.933191][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.503390][T25935] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9782'. [ 939.709928][T25908] loop0: detected capacity change from 0 to 32768 [ 939.749675][T25908] (syz.0.9769,25908,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 939.809538][T25908] (syz.0.9769,25908,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 939.898600][T25908] JBD2: Ignoring recovery information on journal [ 939.991454][T25908] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 940.040371][ T4621] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 940.163349][T25961] loop4: detected capacity change from 0 to 512 [ 940.226751][ T4557] ocfs2: Unmounting device (7,0) on (node local) [ 940.256029][ T4621] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 940.278401][T25961] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 940.307371][ T4621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.407419][T25961] EXT4-fs error (device loop4): ext4_get_first_dir_block:3583: inode #12: comm syz.4.9796: Attempting to read directory block (0) that is past i_size (3) [ 940.425947][ T4621] usb 3-1: config 0 descriptor?? [ 940.441657][ T4621] cp210x 3-1:0.0: cp210x converter detected [ 940.486477][T25961] EXT4-fs (loop4): Remounting filesystem read-only [ 940.652304][ T4621] usb 3-1: cp210x converter now attached to ttyUSB0 [ 940.695510][ T4568] EXT4-fs (loop4): unmounting filesystem. [ 940.888133][ T4627] usb 3-1: USB disconnect, device number 107 [ 940.917647][ T4627] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 940.925807][ T4627] cp210x 3-1:0.0: device disconnected [ 941.155215][T25995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9811'. [ 941.159694][T25996] loop3: detected capacity change from 0 to 1024 [ 941.862981][T26018] loop0: detected capacity change from 0 to 4096 [ 941.870844][T26026] loop2: detected capacity change from 0 to 4096 [ 941.879925][T26018] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 941.915033][T26026] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 941.967764][T26026] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 941.985627][T26026] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 942.055541][T26026] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 942.255851][T26026] ntfs: volume version 3.1. [ 943.207898][T26078] loop2: detected capacity change from 0 to 256 [ 943.271866][T26078] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 943.326312][T26078] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 943.382775][T26078] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 943.400140][T26084] netlink: 'syz.1.9849': attribute type 10 has an invalid length. [ 943.467875][T26084] team0: Port device syz_tun added [ 943.845175][T26066] loop0: detected capacity change from 0 to 32768 [ 943.999351][T26100] loop2: detected capacity change from 0 to 1764 [ 944.431269][T26112] loop0: detected capacity change from 0 to 4096 [ 944.504677][T26112] ntfs: volume version 3.1. [ 944.807951][T26130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9871'. [ 944.897127][T26134] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 944.983383][ T51] block nbd3: Attempted send on invalid socket [ 944.989693][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 945.534027][T26146] loop3: detected capacity change from 0 to 4096 [ 945.635841][T26158] netlink: 'syz.0.9884': attribute type 10 has an invalid length. [ 945.723252][T26160] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 945.781824][T26158] team0: Port device syz_tun added [ 945.810973][T26146] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 945.878973][T26146] Remounting filesystem read-only [ 946.180916][T26173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9894'. [ 946.236147][T26173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9894'. [ 946.272975][T26173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9894'. [ 946.784514][T26198] loop4: detected capacity change from 0 to 1024 [ 947.655939][T26234] netlink: 'syz.3.9921': attribute type 10 has an invalid length. [ 947.769241][ T4621] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 947.808000][T26234] device syz_tun entered promiscuous mode [ 947.844695][T26234] team0: Port device syz_tun added [ 947.850283][T26238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9923'. [ 947.973412][ T4621] usb 5-1: Using ep0 maxpacket: 16 [ 947.982226][ T4621] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 948.008213][ T4621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.031364][ T4621] usb 5-1: Product: syz [ 948.035569][ T4621] usb 5-1: Manufacturer: syz [ 948.048573][ T4621] usb 5-1: SerialNumber: syz [ 948.071879][ T4621] usb 5-1: config 0 descriptor?? [ 948.078843][ T4621] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 948.296176][ T4621] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 948.314451][ T4621] visor: probe of 5-1:0.0 failed with error -5 [ 948.526093][ T4621] usb 5-1: USB disconnect, device number 114 [ 948.559941][T26262] loop2: detected capacity change from 0 to 512 [ 948.624858][T26262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 948.666312][T26262] EXT4-fs (loop2): Test dummy encryption mode enabled [ 948.733437][T26262] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.9937: invalid indirect mapped block 4294967295 (level 1) [ 948.762592][T26270] loop3: detected capacity change from 0 to 256 [ 948.888457][T26256] loop0: detected capacity change from 0 to 32768 [ 948.921341][T26262] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.9937: invalid indirect mapped block 4294967295 (level 1) [ 948.975358][T26256] ea_get: invalid extended attribute [ 948.987170][T26270] FAT-fs (loop3): Directory bread(block 64) failed [ 949.034670][T26270] FAT-fs (loop3): Directory bread(block 65) failed [ 949.095094][T26262] EXT4-fs (loop2): 2 truncates cleaned up [ 949.100908][T26262] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 949.159142][T26270] FAT-fs (loop3): Directory bread(block 66) failed [ 949.165718][T26270] FAT-fs (loop3): Directory bread(block 67) failed [ 949.201823][T26270] FAT-fs (loop3): Directory bread(block 68) failed [ 949.277152][T26270] FAT-fs (loop3): Directory bread(block 69) failed [ 949.283816][T26270] FAT-fs (loop3): Directory bread(block 70) failed [ 949.323138][ T4562] EXT4-fs (loop2): unmounting filesystem. [ 949.329030][T26270] FAT-fs (loop3): Directory bread(block 71) failed [ 949.428556][ T4566] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 949.451811][T26270] FAT-fs (loop3): Directory bread(block 72) failed [ 949.544866][T26270] FAT-fs (loop3): Directory bread(block 73) failed [ 950.383773][T26303] loop4: detected capacity change from 0 to 4096 [ 950.423543][T26303] ntfs: volume version 3.1. [ 950.432132][T26313] ip6t_srh: unknown srh match flags 4000 [ 950.616810][T26304] Process accounting resumed [ 951.526482][T26353] loop4: detected capacity change from 0 to 512 [ 951.622699][T26353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 951.647653][T26353] EXT4-fs (loop4): unmounting filesystem. [ 952.090161][T26372] loop3: detected capacity change from 0 to 64 [ 952.190542][T26374] loop0: detected capacity change from 0 to 8 [ 952.267537][T26374] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 952.298210][ T4980] udevd[4980]: incorrect cramfs checksum on /dev/loop0 [ 952.359035][T26374] cramfs: Error -3 while decompressing! [ 952.384868][T26372] Trying to free block not in datazone [ 952.399775][T26374] cramfs: ffffffff96d711a8(26)->ffff88804357c000(4096) [ 952.449914][ T4980] udevd[4980]: incorrect cramfs checksum on /dev/loop0 [ 952.459738][T26372] Trying to free block not in datazone [ 952.469975][T26374] cramfs: Error -3 while decompressing! [ 952.479562][T26374] cramfs: ffffffff96d711c2(26)->ffff8880425b2000(4096) [ 952.493915][T26372] Trying to free block not in datazone [ 952.502780][T26374] cramfs: Error -3 while decompressing! [ 952.521354][T26372] Trying to free block not in datazone [ 952.529373][T26374] cramfs: ffffffff96d711dc(16)->ffff8880425b3000(4096) [ 952.536301][T26374] cramfs: Error -3 while decompressing! [ 952.568450][T26374] cramfs: ffffffff96d711a8(26)->ffff88804357c000(4096) [ 952.581753][T26372] minix_free_block (loop3:6): bit already cleared [ 952.588940][T26372] Trying to free block not in datazone [ 952.706145][T26372] Trying to free block not in datazone [ 952.934649][T26396] netlink: 'syz.4.10000': attribute type 3 has an invalid length. [ 953.189670][T26406] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10006'. [ 953.404834][T26416] ALSA: mixer_oss: invalid OSS volume '' [ 954.477673][T26458] loop3: detected capacity change from 0 to 256 [ 954.573166][T26458] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 954.590420][T26468] binder: 26467:26468 ioctl 400c620e 0 returned -14 [ 954.691035][T26471] xt_nfacct: accounting object `syz1' does not exists [ 954.837190][T26472] loop2: detected capacity change from 0 to 4096 [ 954.952582][T26481] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 955.161167][T26485] loop0: detected capacity change from 0 to 2048 [ 955.274621][T26492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 955.311142][T26485] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 955.408879][T26498] loop4: detected capacity change from 0 to 256 [ 955.426718][T26485] Remounting filesystem read-only [ 955.455163][T26491] loop2: detected capacity change from 0 to 4096 [ 955.466608][T26498] exfat: Deprecated parameter 'namecase' [ 955.490329][T26491] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 955.514017][T26498] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 955.911790][T26510] loop3: detected capacity change from 0 to 512 [ 956.034107][T26510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 956.087997][T26510] EXT4-fs (loop3): unmounting filesystem. [ 956.353895][T26529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10064'. [ 956.429161][T26531] xt_l2tp: v2 tid > 0xffff: 134217728 [ 956.705865][T26541] loop4: detected capacity change from 0 to 1024 [ 956.762563][T26541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 956.837009][T26541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 956.873469][T26544] loop0: detected capacity change from 0 to 4096 [ 956.884234][T26544] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 957.004357][T26544] ntfs3: loop0: failed to convert "c46c" to macgreek [ 957.212102][ T4568] EXT4-fs (loop4): unmounting filesystem. [ 957.353427][T26563] device bridge2 entered promiscuous mode [ 957.588116][T26573] loop2: detected capacity change from 0 to 512 [ 957.669501][T26573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 957.813485][T26573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 957.868314][T26573] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 957.892324][T26579] loop4: detected capacity change from 0 to 4096 [ 957.968489][T26573] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 957.989119][T26579] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 958.004751][T26573] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.10084: Failed to acquire dquot type 0 [ 958.173519][T26579] ntfs3: loop4: no free space to extend mft [ 958.194533][ T4562] EXT4-fs (loop2): unmounting filesystem. [ 958.253939][T26602] xt_nfacct: accounting object `syz1' does not exists [ 958.260936][T26601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10097'. [ 958.321079][T26601] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10097'. [ 958.755784][T26620] loop0: detected capacity change from 0 to 64 [ 958.852500][T26624] binder: binder_mmap: 26623 200000000000-200000b36000 bad vm_flags failed -1 [ 958.872268][T26620] hfs: keylen 94 too large [ 958.911490][T26620] hfs: request for non-existent node 1818584064 in B*Tree [ 958.955128][T26620] hfs: request for non-existent node 1818584064 in B*Tree [ 959.203836][T26634] sp0: Synchronizing with TNC [ 959.314032][T26633] [U] è [ 959.770733][T26661] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 960.185140][T26680] loop4: detected capacity change from 0 to 1024 [ 960.261001][T26680] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 960.296958][T26680] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #11: comm syz.4.10136: directory missing '..' [ 960.391214][T26690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10142'. [ 960.401147][T26690] unsupported nlmsg_type 40 [ 960.454270][T26693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10143'. [ 960.535191][ T4568] EXT4-fs (loop4): unmounting filesystem. [ 960.987494][T26715] loop2: detected capacity change from 0 to 512 [ 961.053732][T26715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 961.162836][T26715] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.10152: Attempting to read directory block (0) that is past i_size (3) [ 961.191077][T26715] EXT4-fs (loop2): Remounting filesystem read-only [ 961.247877][T26727] sp0: Synchronizing with TNC [ 961.262604][T26726] [U] è [ 961.375118][T26730] loop0: detected capacity change from 0 to 1024 [ 961.385541][ T4562] EXT4-fs (loop2): unmounting filesystem. [ 961.484199][T26733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10160'. [ 961.543317][T26733] netlink: 212 bytes leftover after parsing attributes in process `syz.4.10160'. [ 962.029080][T26755] loop4: detected capacity change from 0 to 1024 [ 962.389688][T26765] loop0: detected capacity change from 0 to 4096 [ 962.462336][T26765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 962.489386][ T4627] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 962.508059][T26765] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 962.531085][T26765] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 962.578527][T26765] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.10178: Failed to acquire dquot type 0 [ 962.606267][T26749] loop3: detected capacity change from 0 to 32768 [ 962.646511][T26749] (syz.3.10169,26749,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 962.703130][ T4627] usb 3-1: Using ep0 maxpacket: 32 [ 962.721674][ T4627] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 962.723840][T26749] (syz.3.10169,26749,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 962.772195][ T4627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.814943][ T4627] usb 3-1: config 0 has no interface number 0 [ 962.838828][ T4557] EXT4-fs (loop0): unmounting filesystem. [ 962.842324][ T4627] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 962.848466][T26749] JBD2: Ignoring recovery information on journal [ 962.881560][ T4627] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 962.901524][ T4627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.909643][ T4627] usb 3-1: Product: syz [ 962.914150][ T4627] usb 3-1: Manufacturer: syz [ 962.919345][ T4627] usb 3-1: SerialNumber: syz [ 962.932469][ T4627] usb 3-1: config 0 descriptor?? [ 962.951479][ T4627] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 962.981077][ T4627] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 963.009578][T26749] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 963.080486][T26782] loop4: detected capacity change from 0 to 1764 [ 963.174819][ T4627] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 963.182200][ T4627] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 963.278877][ T4563] ocfs2: Unmounting device (7,3) on (node local) [ 963.334132][T26786] loop0: detected capacity change from 0 to 4096 [ 963.365916][T26786] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 963.426085][ T4528] usb 3-1: USB disconnect, device number 108 [ 963.843784][T26804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10193'. [ 963.859479][T26800] comedi: No check for data length of config insn id 70541 is implemented [ 963.881137][T26800] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 963.921891][T26800] comedi: Assuming n=15 is correct [ 964.055571][ T27] audit: type=1326 audit(30330365.343:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26807 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a338eb69 code=0x7ffc0000 [ 964.162982][ T27] audit: type=1326 audit(30330365.371:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26807 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f05a338eb69 code=0x7ffc0000 [ 964.248518][ T27] audit: type=1326 audit(30330365.371:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26807 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a338eb69 code=0x7ffc0000 [ 964.355439][ T27] audit: type=1326 audit(30330365.371:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26807 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a338eb69 code=0x7ffc0000 [ 964.390023][T26822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10202'. [ 964.922207][T26839] loop4: detected capacity change from 0 to 4096 [ 965.030912][T26849] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 965.069502][T26839] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 965.092306][T26839] Remounting filesystem read-only [ 965.107725][T26853] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10217'. [ 965.868124][T26883] loop3: detected capacity change from 0 to 512 [ 965.905592][T26883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 965.944940][T26883] EXT4-fs: Ignoring removed bh option [ 966.018120][T26883] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 966.127404][T26883] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.10234: corrupted inode contents [ 966.130747][T26858] loop2: detected capacity change from 0 to 32768 [ 966.169378][T26858] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 966.185942][T26883] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #11: comm syz.3.10234: mark_inode_dirty error [ 966.230043][T26883] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10234: invalid indirect mapped block 1 (level 1) [ 966.299554][T26883] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.10234: corrupted inode contents [ 966.353780][T26883] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 966.370791][T26883] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.10234: corrupted inode contents [ 966.424342][T26883] EXT4-fs error (device loop3): ext4_truncate:4312: inode #11: comm syz.3.10234: mark_inode_dirty error [ 966.462717][ T4524] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 966.489872][T26883] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 966.526169][T26883] EXT4-fs (loop3): 1 truncate cleaned up [ 966.540979][T26883] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 966.611320][T26883] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.10234: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 966.817100][ T4563] EXT4-fs (loop3): unmounting filesystem. [ 967.445816][T26901] loop2: detected capacity change from 0 to 32768 [ 967.480560][T26901] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.10242 (26901) [ 967.499691][T26935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10257'. [ 967.546708][T26901] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 967.574666][T26901] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 967.605890][T26901] BTRFS info (device loop2): using free space tree [ 967.918442][T26969] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.10267'. [ 967.979565][T26973] netlink: 'syz.4.10268': attribute type 2 has an invalid length. [ 968.003676][T26901] BTRFS info (device loop2): enabling ssd optimizations [ 968.112690][ T4562] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 968.746204][T26999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10271'. [ 969.665376][T27040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10299'. [ 969.779673][T27047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10301'. [ 970.072493][T27060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10309'. [ 970.148586][T27062] netlink: 'syz.3.10310': attribute type 1 has an invalid length. [ 970.367303][T27075] kAFS: unable to lookup cell ' [ 970.367303][T27075] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 970.367303][T27075] ' [ 970.993949][T27102] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10330'. [ 971.112373][T27104] loop3: detected capacity change from 0 to 512 [ 971.191118][T27104] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 971.213494][T27104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 971.284854][T27104] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.10331: corrupted in-inode xattr [ 971.304163][T27104] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.10331: couldn't read orphan inode 15 (err -117) [ 971.374006][T27104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 971.389306][T27114] loop4: detected capacity change from 0 to 8 [ 971.418701][T27114] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 971.496405][T16682] udevd[16682]: incorrect cramfs checksum on /dev/loop4 [ 971.496591][T27114] cramfs: Error -3 while decompressing! [ 971.523297][ T4563] EXT4-fs (loop3): unmounting filesystem. [ 971.553696][ T4980] udevd[4980]: incorrect cramfs checksum on /dev/loop4 [ 971.565418][T27114] cramfs: ffffffff96d751a8(1306)->ffff88804fc68000(4096) [ 971.572803][T27114] cramfs: bad data blocksize 3221485966 [ 971.633133][T27114] cramfs: Error -3 while decompressing! [ 971.647721][T27114] cramfs: ffffffff96d751a8(1306)->ffff88804fc68000(4096) [ 971.931996][T27136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10345'. [ 971.978059][T27136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10345'. [ 972.043218][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10349'. [ 972.078732][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10349'. [ 972.115667][T27140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10349'. [ 972.281436][ T4528] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 972.297320][T27150] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 972.490797][ T4528] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 972.497951][T27154] loop2: detected capacity change from 0 to 4096 [ 972.518083][ T4528] usb 1-1: config 0 has no interface number 0 [ 972.522081][T27154] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 972.539363][ T4528] usb 1-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 972.599448][ T4528] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 972.607214][T27154] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 972.649845][ T4528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.686730][ T4528] usb 1-1: Product: syz [ 972.696284][T27154] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 972.708697][ T4528] usb 1-1: Manufacturer: syz [ 972.729088][ T4528] usb 1-1: SerialNumber: syz [ 972.747556][T27154] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 972.768770][ T4528] usb 1-1: config 0 descriptor?? [ 972.783996][T27154] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 972.828956][T27168] loop4: detected capacity change from 0 to 512 [ 972.839358][T27154] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 972.882131][T27168] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 972.907780][T27154] ntfs: (device loop2): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 972.919087][T27168] EXT4-fs (loop4): orphan cleanup on readonly fs [ 972.925577][T27154] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 972.933683][T27168] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.10362: Block bitmap for bg 0 marked uninitialized [ 972.934057][T27154] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 972.960677][T27154] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 972.973688][T27154] ntfs: volume version 3.1. [ 973.017335][ T4528] usb 1-1: USB disconnect, device number 120 [ 973.044214][T27173] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 973.106150][T27168] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 973.117404][T27168] EXT4-fs (loop4): 1 orphan inode deleted [ 973.147294][T27168] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 973.273356][ T4568] EXT4-fs (loop4): unmounting filesystem. [ 973.394612][ T4531] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 973.473718][T27185] device netdevsim0 entered promiscuous mode [ 973.487192][T27185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 973.511381][T27187] netlink: 'syz.4.10371': attribute type 1 has an invalid length. [ 973.532255][T27187] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10371'. [ 973.617116][ T4531] usb 2-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 973.637206][ T4531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.659620][ T4531] usb 2-1: config 0 descriptor?? [ 973.674149][ T4531] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 973.680718][T27193] loop3: detected capacity change from 0 to 1024 [ 973.769409][T27193] hfsplus: bad catalog entry type [ 973.883468][T22954] hfsplus: b-tree write err: -5, ino 4 [ 974.041448][T27207] loop0: detected capacity change from 0 to 512 [ 974.084770][T27207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 974.104627][ T4531] gspca_sn9c20x: Write register 1001 failed -71 [ 974.112584][ T4531] gspca_sn9c20x: Device initialization failed [ 974.119358][ T4531] gspca_sn9c20x: probe of 2-1:0.0 failed with error -71 [ 974.142167][T27207] EXT4-fs: Ignoring removed bh option [ 974.161314][ T4531] usb 2-1: USB disconnect, device number 8 [ 974.253146][T27207] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 974.376637][T27207] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #11: comm syz.0.10379: corrupted inode contents [ 974.398730][T27207] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #11: comm syz.0.10379: mark_inode_dirty error [ 974.440770][T27207] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.10379: invalid indirect mapped block 1 (level 1) [ 974.481942][T27207] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #11: comm syz.0.10379: corrupted inode contents [ 974.503092][T27207] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 974.512842][T27207] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #11: comm syz.0.10379: corrupted inode contents [ 974.533195][T27207] EXT4-fs error (device loop0): ext4_truncate:4312: inode #11: comm syz.0.10379: mark_inode_dirty error [ 974.545917][T27207] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 974.577492][T27207] EXT4-fs (loop0): 1 truncate cleaned up [ 974.583865][T27207] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 974.637001][T27207] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.10379: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 974.803377][ T4557] EXT4-fs (loop0): unmounting filesystem. [ 974.918305][T27238] loop2: detected capacity change from 0 to 8 [ 974.967270][T27238] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 974.983660][ T4259] udevd[4259]: incorrect cramfs checksum on /dev/loop2 [ 975.000108][T27238] cramfs: Error -3 while decompressing! [ 975.011192][T27238] cramfs: ffffffff96d751a8(1306)->ffff88804dfb6000(4096) [ 975.019649][T27238] cramfs: bad data blocksize 3221485966 [ 975.032457][T27238] cramfs: Error -3 while decompressing! [ 975.038070][T27238] cramfs: ffffffff96d751a8(1306)->ffff88804dfb6000(4096) [ 975.365662][T27261] loop4: detected capacity change from 0 to 512 [ 975.408814][T27261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 975.456285][T27261] EXT4-fs: Ignoring removed bh option [ 975.503968][T27261] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 975.602777][T27261] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #11: comm syz.4.10406: corrupted inode contents [ 975.695981][T27272] sctp: [Deprecated]: syz.0.10411 (pid 27272) Use of int in max_burst socket option. [ 975.695981][T27272] Use struct sctp_assoc_value instead [ 975.729234][T27261] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #11: comm syz.4.10406: mark_inode_dirty error [ 975.754943][T27261] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.10406: invalid indirect mapped block 1 (level 1) [ 975.786511][T27261] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #11: comm syz.4.10406: corrupted inode contents [ 975.818712][T27261] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 975.848616][T27261] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #11: comm syz.4.10406: corrupted inode contents [ 975.886489][T27261] EXT4-fs error (device loop4): ext4_truncate:4312: inode #11: comm syz.4.10406: mark_inode_dirty error [ 975.898224][T27281] __nla_validate_parse: 3 callbacks suppressed [ 975.898237][T27281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10415'. [ 975.951844][T27281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10415'. [ 975.961169][T27261] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 976.011984][T27261] EXT4-fs (loop4): 1 truncate cleaned up [ 976.026888][T27261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 976.136006][T27261] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.10406: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 976.286067][T27296] netlink: 'syz.0.10422': attribute type 1 has an invalid length. [ 976.381044][ T4568] EXT4-fs (loop4): unmounting filesystem. [ 976.626317][T27307] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 976.707116][T27312] comedi comedi3: comedi_config --init_data is deprecated [ 976.918030][T27325] rtc_cmos 00:00: Alarms can be up to one day in the future [ 977.077708][T27332] netlink: 'syz.3.10439': attribute type 11 has an invalid length. [ 977.128853][T27332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10439'. [ 977.531615][T27350] IPv6: addrconf: prefix option has invalid lifetime [ 977.544898][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 977.553484][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 977.560980][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 977.626326][T27350] IPv6: addrconf: prefix option has invalid lifetime [ 977.635995][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 977.645062][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 977.652305][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 978.172932][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 978.172947][ T27] audit: type=1326 audit(30330378.553:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.1.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 978.275052][T27380] loop0: detected capacity change from 0 to 4096 [ 978.292531][ T27] audit: type=1326 audit(30330378.590:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.1.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 978.327080][ T27] audit: type=1326 audit(30330378.590:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.1.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 978.371817][T27380] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 978.397877][T27380] ntfs3: loop0: Failed to load $Extend. [ 978.433452][ T27] audit: type=1326 audit(30330378.590:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27374 comm="syz.1.10460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 978.463293][T27386] ERROR: device name not specified. [ 978.538845][ T4528] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 978.637946][T27390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10467'. [ 978.740957][ T4528] usb 4-1: Using ep0 maxpacket: 32 [ 978.763784][ T4528] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 978.790846][ T4528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.816510][ T4528] usb 4-1: config 0 descriptor?? [ 978.840677][ T4528] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 979.265743][ T4528] gspca_nw80x: reg_r err -71 [ 979.270424][ T4528] nw80x: probe of 4-1:0.0 failed with error -71 [ 979.293161][T27412] loop4: detected capacity change from 0 to 4096 [ 979.306076][ T4528] usb 4-1: USB disconnect, device number 110 [ 979.331843][T27416] tipc: Can't bind to reserved service type 2 [ 979.393897][T27418] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 979.481561][T27421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10482'. [ 979.898417][T27433] loop2: detected capacity change from 0 to 4096 [ 979.947963][T27433] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 980.008312][T27441] xt_hashlimit: overflow, rate too high: 0 [ 980.083554][T27433] ntfs3: loop2: failed to convert "c46c" to cp866 [ 980.708931][T27469] netlink: 'syz.3.10506': attribute type 11 has an invalid length. [ 980.753993][T27469] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10506'. [ 981.231468][T27489] netlink: 'syz.4.10516': attribute type 1 has an invalid length. [ 981.395468][T27495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10519'. [ 981.501016][T27465] loop2: detected capacity change from 0 to 32768 [ 981.592198][T27499] loop3: detected capacity change from 0 to 2048 [ 981.719991][T27499] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 981.747372][T27507] loop4: detected capacity change from 0 to 256 [ 982.082056][T27514] device bond1 entered promiscuous mode [ 982.135862][T27514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 982.727377][T27536] Process accounting paused [ 982.991538][T27544] xt_CT: No such helper "pptp" [ 983.135432][T27522] loop3: detected capacity change from 0 to 32768 [ 983.182332][T27555] loop0: detected capacity change from 0 to 1024 [ 983.230343][T27555] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 983.324295][T27561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10550'. [ 983.334150][T27555] hfsplus: filesystem is marked journaled, leaving read-only. [ 984.046966][T27589] netlink: 'syz.1.10565': attribute type 2 has an invalid length. [ 984.088251][T27589] netlink: 'syz.1.10565': attribute type 1 has an invalid length. [ 984.136584][T19594] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 984.176026][T27595] netlink: 308 bytes leftover after parsing attributes in process `syz.4.10568'. [ 984.334473][T27603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10571'. [ 984.363629][T19594] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 984.379771][T27603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10571'. [ 984.384563][T19594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.428737][T19594] usb 1-1: config 0 descriptor?? [ 984.794258][T27624] loop2: detected capacity change from 0 to 256 [ 984.882981][T19594] ath6kl: Failed to submit usb control message: -71 [ 984.890412][T19594] ath6kl: unable to send the bmi data to the device: -71 [ 984.915909][T19594] ath6kl: Unable to send get target info: -71 [ 984.953599][T19594] ath6kl: Failed to init ath6kl core: -71 [ 985.009590][T19719] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 985.027496][T27630] netlink: 'syz.1.10584': attribute type 1 has an invalid length. [ 985.046825][T19594] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 985.068086][T19594] usb 1-1: USB disconnect, device number 121 [ 985.229235][T19719] usb 4-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 985.263245][T19719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.285253][T19719] usb 4-1: config 0 descriptor?? [ 985.295896][T19719] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 985.642294][T27649] loop4: detected capacity change from 0 to 64 [ 985.741755][T19719] gspca_sn9c20x: Write register 1001 failed -71 [ 985.748105][T19719] gspca_sn9c20x: Device initialization failed [ 985.804763][T19719] gspca_sn9c20x: probe of 4-1:0.0 failed with error -71 [ 985.810327][T27655] netlink: 'syz.0.10597': attribute type 11 has an invalid length. [ 985.835326][T19719] usb 4-1: USB disconnect, device number 111 [ 985.861077][T27655] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10597'. [ 985.917812][T27657] loop4: detected capacity change from 0 to 8 [ 985.946308][T27657] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 985.967096][ T4524] udevd[4524]: incorrect cramfs checksum on /dev/loop4 [ 985.977652][T27657] cramfs: bad data blocksize 4294950552 [ 985.983693][T27657] cramfs: bad data blocksize 4294950552 [ 986.060370][ T4524] udevd[4524]: incorrect cramfs checksum on /dev/loop4 [ 986.070286][ T27] audit: type=1800 audit(30330385.934:2608): pid=27657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10598" name="file2" dev="loop4" ino=16732 res=0 errno=0 [ 986.441450][T27677] loop4: detected capacity change from 0 to 24 [ 986.510618][T27677] romfs: Unknown parameter 'xœìÚ¿JûPð3úûutt [ 986.510618][T27677] T¢ ù¯uÕQÜ|ƒÐæ¦ÁSAÚ'Áá:ø‚Oà#dtÓEЗˆ\›š6•v©Åïgé—œžÞ^n–£ÅQh±D#ÚéÝœ¼®ÅQ¨´œý6³˜KCGD¤ÈfÙ­NSž¿êiFú77ü¨Ú¼6Þ‡ŸÍ-__±€{öÚ' [ 986.575311][ T4524] udevd[4524]: incorrect romfs checksum on /dev/loop4 [ 986.675092][ T4524] udevd[4524]: incorrect romfs checksum on /dev/loop4 [ 986.707240][ T4566] Bluetooth: hci4: unexpected event for opcode 0x203c [ 986.716976][T27685] loop3: detected capacity change from 0 to 1024 [ 986.917594][T22944] hfsplus: b-tree write err: -5, ino 4 [ 987.460577][T27719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10628'. [ 987.810470][T27733] device bridge4 entered promiscuous mode [ 988.112880][T27737] loop4: detected capacity change from 0 to 8192 [ 988.152416][T27737] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 988.205253][T27737] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 988.244055][T27737] FAT-fs (loop4): Filesystem has been set read-only [ 988.797352][T19519] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 989.002214][T19519] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 989.016488][T19519] usb 5-1: config 4 has no interface number 0 [ 989.055735][T19519] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 989.090648][T19519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.113288][T19519] usb 5-1: Product: syz [ 989.128421][T19519] usb 5-1: Manufacturer: syz [ 989.142810][T19519] usb 5-1: SerialNumber: syz [ 989.189688][T19519] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 989.301473][T27791] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 989.350336][T27793] netlink: 'syz.2.10662': attribute type 1 has an invalid length. [ 989.530031][T27775] loop0: detected capacity change from 0 to 32768 [ 989.599026][T27802] netlink: 'syz.1.10664': attribute type 6 has an invalid length. [ 989.614301][T19519] vp7045: USB control message 'in' went wrong. [ 989.634465][T19519] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 989.676921][T19519] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 989.723647][T19519] usb 5-1: USB disconnect, device number 115 [ 990.206729][T27825] netlink: 'syz.1.10673': attribute type 32 has an invalid length. [ 990.968769][T27851] device wlan0 entered promiscuous mode [ 991.080127][T27865] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10703'. [ 991.107527][T27865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 991.455906][T27882] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10700'. [ 991.516564][T27882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10700'. [ 991.579466][T27882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10700'. [ 991.598162][T27882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10700'. [ 991.879511][T27899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 991.927029][T27899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 991.962668][T27899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 992.121743][ T27] audit: type=1400 audit(30330397.590:2609): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=27906 comm="syz.3.10715" [ 992.363625][T27919] loop0: detected capacity change from 0 to 64 [ 992.440549][T27922] device bridge1 entered promiscuous mode [ 992.663313][T27928] loop3: detected capacity change from 0 to 256 [ 992.703322][T27928] exfat: Deprecated parameter 'utf8' [ 992.723292][T27928] exfat: Deprecated parameter 'utf8' [ 992.744361][T27928] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 992.956532][T27941] netlink: 'syz.4.10731': attribute type 19 has an invalid length. [ 992.986228][T27941] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10731'. [ 993.808633][T27974] usb usb9: usbfs: process 27974 (syz.4.10747) did not claim interface 0 before use [ 993.918281][ T4528] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 994.105707][T27958] loop0: detected capacity change from 0 to 32768 [ 994.125468][ T4528] usb 3-1: Using ep0 maxpacket: 8 [ 994.136971][ T4528] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 994.167129][ T4528] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.212739][ T4528] usb 3-1: config 0 has no interface number 0 [ 994.231774][ T4528] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 994.263118][ T4528] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 994.275233][ T4528] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 994.335267][ T4528] usb 3-1: config 0 interface 52 has no altsetting 0 [ 994.352275][T27958] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 994.365207][ T4528] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 994.396719][T27958] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 994.405825][ T4528] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 994.420743][T19719] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 994.425199][T27958] BTRFS info (device loop0): enabling auto defrag [ 994.435847][ T4528] usb 3-1: Product: syz [ 994.440854][ T4528] usb 3-1: SerialNumber: syz [ 994.470580][T27958] BTRFS info (device loop0): doing ref verification [ 994.478312][ T4528] usb 3-1: config 0 descriptor?? [ 994.491041][T27958] BTRFS info (device loop0): use no compression [ 994.507010][T27958] BTRFS info (device loop0): force clearing of disk cache [ 994.525149][T27958] BTRFS info (device loop0): setting nodatacow, compression disabled [ 994.546768][T27958] BTRFS info (device loop0): disabling free space tree [ 994.629794][T19719] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 994.655017][T19719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 994.693976][T19719] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 994.712547][ T4528] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input95 [ 994.714606][T19719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.730494][T19719] usb 4-1: Product: syz [ 994.734930][T19719] usb 4-1: Manufacturer: syz [ 994.739875][T19719] usb 4-1: SerialNumber: syz [ 994.746777][T19719] usb 4-1: config 0 descriptor?? [ 994.753733][T19719] hub 4-1:0.0: bad descriptor, ignoring hub [ 994.759806][T19719] hub: probe of 4-1:0.0 failed with error -5 [ 994.766870][ T3622] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 994.786827][T19719] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input96 [ 994.836109][ T3622] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 994.846396][T19719] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 994.884310][ T3622] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 994.898129][T19719] usbtouchscreen: probe of 4-1:0.0 failed with error -90 [ 994.911717][T28017] loop4: detected capacity change from 0 to 256 [ 994.927345][T27958] BTRFS info (device loop0): enabling ssd optimizations [ 994.947904][ T4528] usb 3-1: USB disconnect, device number 109 [ 994.972461][T16682] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 994.989094][T27958] BTRFS info (device loop0): rebuilding free space tree [ 994.997873][T28017] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 995.028552][ T3622] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 995.114446][T27958] BTRFS info (device loop0): disabling free space tree [ 995.124477][T28017] fuse: Bad value for 'fd' [ 995.132295][T27958] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 995.176956][T27958] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 995.222986][T19594] usb 4-1: USB disconnect, device number 112 [ 995.451775][ T4557] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 995.531671][ T4524] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop0 scanned by udevd (4524) [ 996.106715][T28047] mmap: syz.3.10774 (28047): VmData 37466112 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 996.137658][T28049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 996.180955][T28049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 996.235172][T28049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 996.478068][T28059] loop4: detected capacity change from 0 to 256 [ 996.505381][ T4528] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 996.528763][T28063] loop0: detected capacity change from 0 to 64 [ 996.708618][ T4528] usb 3-1: Using ep0 maxpacket: 16 [ 996.716438][ T4528] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 996.758235][ T4528] usb 3-1: config 0 has no interface number 0 [ 996.791283][ T4528] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 996.819529][ T4528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.849867][ T4528] usb 3-1: Product: syz [ 996.854081][ T4528] usb 3-1: Manufacturer: syz [ 996.869506][ T4528] usb 3-1: SerialNumber: syz [ 996.886814][ T4528] usb 3-1: config 0 descriptor?? [ 997.124728][ T4528] usb 3-1: selecting invalid altsetting 1 [ 997.138148][ T4528] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 997.163608][ T4528] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 997.177409][ T4528] speedtch: probe of 3-1:0.1 failed with error -22 [ 997.214907][ T4528] usb 3-1: USB disconnect, device number 110 [ 997.323420][T28084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 997.327213][T28093] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 997.341869][T28093] overlayfs: missing 'lowerdir' [ 997.828495][T28113] device wlan0 entered promiscuous mode [ 997.852413][ T4528] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 997.932713][T28118] netlink: 'syz.4.10810': attribute type 1 has an invalid length. [ 997.959363][T28118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10810'. [ 998.067940][ T4528] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 998.080864][T28122] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 998.091408][ T4528] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 998.092942][T28123] fuse: Bad value for 'fd' [ 998.117414][T28122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 998.117995][ T4528] usb 1-1: config 220 has no interface number 2 [ 998.128300][T28122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 998.138859][T28122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 998.142078][ T4528] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 998.166066][T28122] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 998.173122][ T4528] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 998.221235][ T4528] usb 1-1: config 220 interface 0 has no altsetting 0 [ 998.242131][ T4528] usb 1-1: config 220 interface 76 has no altsetting 0 [ 998.264779][ T4528] usb 1-1: config 220 interface 1 has no altsetting 0 [ 998.297058][ T4528] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 998.329540][ T4528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.345898][ T4528] usb 1-1: Product: syz [ 998.360181][ T4528] usb 1-1: Manufacturer: syz [ 998.386789][ T4528] usb 1-1: SerialNumber: syz [ 998.652583][ T4528] usb 1-1: selecting invalid altsetting 0 [ 998.686687][ T4528] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 998.693075][ T4528] usb 1-1: No valid video chain found. [ 998.778331][ T4528] usb 1-1: selecting invalid altsetting 0 [ 998.784880][ T4528] usbtest: probe of 1-1:220.1 failed with error -22 [ 998.834160][ T4528] usb 1-1: USB disconnect, device number 122 [ 998.857824][T28148] device wlan0 entered promiscuous mode [ 998.972567][T28155] netlink: zone id is out of range [ 998.979035][T19719] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 998.980512][T28156] loop3: detected capacity change from 0 to 1024 [ 999.003498][T28156] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 999.059950][T28156] hfsplus: filesystem is marked journaled, leaving read-only. [ 999.207037][T19719] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 999.215633][T19719] usb 3-1: config 4 has no interface number 0 [ 999.228794][T19719] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 999.240693][T19719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.254303][T19719] usb 3-1: Product: syz [ 999.258868][T19719] usb 3-1: Manufacturer: syz [ 999.265345][T19719] usb 3-1: SerialNumber: syz [ 999.273441][T19719] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 999.374920][T28166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 999.423989][T28166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 999.464088][T28166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 999.504347][T28170] netlink: 'syz.3.10834': attribute type 8 has an invalid length. [ 999.707037][T19719] vp7045: USB control message 'in' went wrong. [ 999.734024][T19719] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 999.744980][T19719] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 999.766115][T19719] usb 3-1: USB disconnect, device number 111 [ 999.786480][T28178] device wlan0 entered promiscuous mode [ 1000.103013][T28194] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10847'. [ 1000.927783][T28224] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1001.248789][T28232] delete_channel: no stack [ 1001.304751][T28206] loop2: detected capacity change from 0 to 32768 [ 1001.401904][T28206] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1001.495319][ T4562] (syz-executor,4562,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1001.573290][ T4562] ocfs2: Unmounting device (7,2) on (node local) [ 1001.860878][T28263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10879'. [ 1002.511388][T28290] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10892'. [ 1002.581927][T28294] loop0: detected capacity change from 0 to 64 [ 1003.540223][T28332] loop2: detected capacity change from 0 to 4096 [ 1003.719071][T28332] ntfs: (device loop2): parse_options(): NLS character set iso8859 not found. Using previous one default. [ 1003.802502][T28332] ntfs: volume version 3.1. [ 1004.050998][T28351] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1004.101070][T28355] (syz.2.10924,28355,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1004.125982][ T27] audit: type=1326 audit(30330408.824:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28356 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 1004.132692][T28355] (syz.2.10924,28355,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1004.254418][ T27] audit: type=1326 audit(30330408.862:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28356 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 1004.276817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1004.361944][ T27] audit: type=1326 audit(30330408.862:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28356 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 1004.384316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1004.413692][ T27] audit: type=1326 audit(30330408.862:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28356 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9803b8eb69 code=0x7ffc0000 [ 1004.600779][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1004.607163][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.671954][T28342] loop0: detected capacity change from 0 to 32768 [ 1004.731922][T28342] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1004.827723][T19594] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1004.908269][ T952] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1004.917351][ T4557] (syz-executor,4557,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1004.979023][ T4557] ocfs2: Unmounting device (7,0) on (node local) [ 1005.047111][T19594] usb 2-1: Using ep0 maxpacket: 8 [ 1005.056474][T19594] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1005.079141][T19594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.087303][T19594] usb 2-1: Product: syz [ 1005.100936][T19594] usb 2-1: Manufacturer: syz [ 1005.105574][T19594] usb 2-1: SerialNumber: syz [ 1005.111827][ T952] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1005.131023][ T952] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.132798][T19594] usb 2-1: config 0 descriptor?? [ 1005.167202][T19594] gspca_main: se401-2.14.0 probing 047d:5003 [ 1005.168558][ T952] usb 3-1: config 220 has no interface number 2 [ 1005.204201][ T952] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1005.223243][T28380] loop4: detected capacity change from 0 to 32768 [ 1005.240005][ T952] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1005.271591][ T952] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1005.282583][ T952] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1005.289504][ T952] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1005.309157][ T952] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1005.350931][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.372518][ T952] usb 3-1: Product: syz [ 1005.376729][ T952] usb 3-1: Manufacturer: syz [ 1005.393755][ T952] usb 3-1: SerialNumber: syz [ 1005.415945][T28380] XFS (loop4): Mounting V5 Filesystem [ 1005.623163][T19594] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1005.639182][ T952] usb 3-1: selecting invalid altsetting 0 [ 1005.647910][ T952] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1005.654311][ T952] usb 3-1: No valid video chain found. [ 1005.658850][T19594] se401: probe of 2-1:0.0 failed with error -71 [ 1005.693240][T19594] usb 2-1: USB disconnect, device number 9 [ 1005.695029][ T952] usb 3-1: selecting invalid altsetting 0 [ 1005.716010][ T952] usbtest: probe of 3-1:220.1 failed with error -22 [ 1005.720186][T28380] XFS (loop4): Ending clean mount [ 1005.763376][ T952] usb 3-1: USB disconnect, device number 112 [ 1005.854195][ T4568] XFS (loop4): Unmounting Filesystem [ 1006.093428][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10946'. [ 1006.428631][T28429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1007.087882][T28461] netlink: 'syz.2.10963': attribute type 1 has an invalid length. [ 1007.218380][T28467] autofs4:pid:28467:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(31.1), cmd(0xc018937e) [ 1007.284747][T28467] autofs4:pid:28467:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1008.148149][T28500] loop0: detected capacity change from 0 to 4096 [ 1008.225433][T28508] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1008.509415][T28476] loop3: detected capacity change from 0 to 40427 [ 1008.537977][T28476] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1008.581136][T28476] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1008.678051][T28476] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1008.767555][T28526] netlink: 'syz.1.10994': attribute type 10 has an invalid length. [ 1008.775500][T28526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10994'. [ 1008.853163][T28526] device veth0_vlan left promiscuous mode [ 1008.864858][T28526] device veth0_vlan entered promiscuous mode [ 1008.875670][T28476] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1008.879500][ T27] audit: type=1326 audit(30330413.268:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28529 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 1008.882805][T28476] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1008.919962][T28526] bridge0: port 4(veth0_vlan) entered blocking state [ 1008.950400][T28526] bridge0: port 4(veth0_vlan) entered disabled state [ 1008.977004][ T27] audit: type=1326 audit(30330413.314:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28529 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 1008.983249][T28526] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1009.012988][ T27] audit: type=1326 audit(30330413.314:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28529 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 1009.065340][ T27] audit: type=1326 audit(30330413.314:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28529 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 1009.099006][T22944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1009.114965][T22944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1009.168504][T22944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1009.196305][T28535] xfrm0 speed is unknown, defaulting to 1000 [ 1009.238049][T28535] xfrm0 speed is unknown, defaulting to 1000 [ 1009.265878][T28535] xfrm0 speed is unknown, defaulting to 1000 [ 1009.321345][T28535] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1009.383527][T28542] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.11012'. [ 1009.422023][T28535] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1009.535786][T28535] xfrm0 speed is unknown, defaulting to 1000 [ 1009.544290][T28535] xfrm0 speed is unknown, defaulting to 1000 [ 1009.553342][T28535] xfrm0 speed is unknown, defaulting to 1000 [ 1009.571768][T28535] xfrm0 speed is unknown, defaulting to 1000 [ 1009.578924][T28535] xfrm0 speed is unknown, defaulting to 1000 [ 1009.943582][T28556] usb usb8: usbfs: process 28556 (syz.4.11007) did not claim interface 0 before use [ 1010.175776][T28566] netlink: 1392 bytes leftover after parsing attributes in process `syz.1.11011'. [ 1010.856893][T28596] netlink: 'syz.2.11027': attribute type 10 has an invalid length. [ 1010.905543][T28596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11027'. [ 1010.946502][T28596] device veth0_vlan left promiscuous mode [ 1010.970339][T28596] device veth0_vlan entered promiscuous mode [ 1011.032049][T28596] bridge0: port 4(veth0_vlan) entered blocking state [ 1011.051072][T28596] bridge0: port 4(veth0_vlan) entered disabled state [ 1011.075175][T28596] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1011.130273][T22961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1011.180980][T22961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1011.211579][T22961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1011.641526][T28622] netlink: 'syz.4.11043': attribute type 2 has an invalid length. [ 1012.256748][T28649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11056'. [ 1012.479831][T28663] netlink: 592 bytes leftover after parsing attributes in process `syz.1.11062'. [ 1012.880968][T28678] siw: device registration error -23 [ 1013.484640][T28707] loop2: detected capacity change from 0 to 64 [ 1013.602661][T28713] siw: device registration error -23 [ 1014.865272][T28766] Process accounting resumed [ 1015.032303][ T4531] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1015.107676][T28774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11117'. [ 1015.116730][T28774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11117'. [ 1015.235426][ T4531] usb 1-1: Using ep0 maxpacket: 8 [ 1015.248183][ T4531] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1015.281825][ T4531] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1015.299065][ T4531] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1015.309536][ T4531] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1015.326085][ T4531] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.365106][ T4531] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1015.365827][T28758] loop3: detected capacity change from 0 to 32768 [ 1015.380606][ T4531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.438027][T28758] ERROR: (device loop3): diAllocBit: iag inconsistent [ 1015.438027][T28758] [ 1015.484419][T28758] ialloc: diAlloc returned -5! [ 1015.716713][T28788] loop2: detected capacity change from 0 to 256 [ 1015.868161][ T4531] usb 1-1: USB disconnect, device number 123 [ 1016.614500][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11140'. [ 1016.689292][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11140'. [ 1017.286561][T28854] loop3: detected capacity change from 0 to 16 [ 1017.323609][T28854] erofs: (device loop3): mounted with root inode @ nid 36. [ 1018.022677][T28884] loop0: detected capacity change from 0 to 2048 [ 1018.122935][T28884] Alternate GPT is invalid, using primary GPT. [ 1018.129284][T28884] loop0: p2 p3 p7 [ 1018.211175][ T3637] Alternate GPT is invalid, using primary GPT. [ 1018.217525][ T3637] loop0: p2 p3 p7 [ 1018.477732][T28904] loop4: detected capacity change from 0 to 64 [ 1018.599120][T28910] xt_TCPMSS: Only works on TCP SYN packets [ 1018.637962][ T4524] udevd[4524]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1018.654711][T28909] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1018.689377][ T4524] udevd[4524]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1018.797951][T16682] udevd[16682]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1018.837166][ T4980] udevd[4980]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1019.105578][T19594] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1019.260744][T28938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1019.361898][T19594] usb 5-1: Using ep0 maxpacket: 8 [ 1019.368591][T19594] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1019.404564][T19594] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.458234][T19594] usb 5-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 1019.481976][T19594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.505338][T19594] usb 5-1: config 0 descriptor?? [ 1019.532527][T19594] usb 5-1: Found UVC 0.00 device (05a9:2640) [ 1019.553849][T19594] usb 5-1: No valid video chain found. [ 1019.554129][T28950] overlayfs: missing 'lowerdir' [ 1019.593868][T28952] netlink: 'syz.1.11203': attribute type 10 has an invalid length. [ 1019.615760][T28952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11203'. [ 1019.625358][ T4531] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1019.667300][T28952] device virt_wifi0 entered promiscuous mode [ 1019.673612][ T27] audit: type=1326 audit(30330423.361:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28953 comm="syz.2.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 1019.698339][T28952] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1019.721643][ T27] audit: type=1326 audit(30330423.361:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28953 comm="syz.2.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 1019.764813][ T952] usb 5-1: USB disconnect, device number 116 [ 1019.775478][ T27] audit: type=1326 audit(30330423.361:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28953 comm="syz.2.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670618eb69 code=0x7ffc0000 [ 1019.864313][ T4531] usb 4-1: Using ep0 maxpacket: 32 [ 1019.879130][ T4531] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.913201][ T4531] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1019.928190][T28962] netlink: 'syz.0.11208': attribute type 16 has an invalid length. [ 1019.943807][ T4531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.958656][T28962] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11208'. [ 1019.975119][ T4531] usb 4-1: Product: syz [ 1019.979306][ T4531] usb 4-1: Manufacturer: syz [ 1019.987708][ T4531] usb 4-1: SerialNumber: syz [ 1019.996645][T28966] xt_hashlimit: max too large, truncated to 1048576 [ 1020.009409][ T4531] usb 4-1: config 0 descriptor?? [ 1020.028844][ T4531] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1020.241822][ T4531] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 1020.257501][ T4531] quatech2: probe of 4-1:0.0 failed with error -8 [ 1020.382368][T28980] netlink: 'syz.2.11217': attribute type 32 has an invalid length. [ 1020.472106][ T4531] usb 4-1: USB disconnect, device number 113 [ 1020.954893][ T952] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1021.132755][T29010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11231'. [ 1021.168787][T29010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11231'. [ 1021.179374][ T952] usb 5-1: Using ep0 maxpacket: 32 [ 1021.186323][ T952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1021.224039][ T952] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1021.254908][ T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.288773][ T952] usb 5-1: Product: syz [ 1021.293352][ T952] usb 5-1: Manufacturer: syz [ 1021.339559][ T952] usb 5-1: SerialNumber: syz [ 1021.355714][ T952] usb 5-1: config 0 descriptor?? [ 1021.361631][T28990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1021.384767][ T952] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input97 [ 1021.614858][T19719] usb 5-1: USB disconnect, device number 117 [ 1021.617142][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1022.068795][T29044] device ip6gre1 entered promiscuous mode [ 1022.495855][T29026] loop3: detected capacity change from 0 to 32768 [ 1022.628791][T29026] XFS (loop3): Mounting V5 Filesystem [ 1022.709848][T29074] trusted_key: encrypted_key: master key parameter '*' is invalid [ 1022.800619][T29026] XFS (loop3): Ending clean mount [ 1022.825934][T29026] XFS (loop3): Quotacheck needed: Please wait. [ 1022.963515][T29026] XFS (loop3): Quotacheck: Done. [ 1022.972561][T29079] CIFS mount error: No usable UNC path provided in device string! [ 1022.972561][T29079] [ 1023.054391][T29079] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1023.068933][ T4563] XFS (loop3): Unmounting Filesystem [ 1023.472050][T29094] program syz.2.11271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1023.859140][T29109] loop2: detected capacity change from 0 to 256 [ 1023.877575][T29107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1024.170073][T29115] usb usb8: usbfs: process 29115 (syz.0.11290) did not claim interface 8 before use [ 1024.356279][T29124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11283'. [ 1024.590511][T29134] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1024.722359][T29141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1025.259903][T29168] netlink: 'syz.4.11306': attribute type 5 has an invalid length. [ 1025.816761][T29190] device ip6gre1 entered promiscuous mode [ 1025.937031][T29187] loop2: detected capacity change from 0 to 4096 [ 1026.032771][T29187] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1026.105123][T29187] EXT4-fs error (device loop2): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.2.11314: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1026.191687][T29187] EXT4-fs (loop2): Remounting filesystem read-only [ 1026.261556][T29187] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #12: comm syz.2.11314: directory missing '..' [ 1026.320288][T29187] EXT4-fs (loop2): Remounting filesystem read-only [ 1026.479921][ T4562] EXT4-fs (loop2): unmounting filesystem. [ 1026.708048][T29219] netlink: 'syz.3.11329': attribute type 11 has an invalid length. [ 1027.935236][T29227] loop3: detected capacity change from 0 to 32768 [ 1027.961162][ T27] audit: type=1326 audit(30330431.096:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.4.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a338eb69 code=0x7ffc0000 [ 1027.981963][T29269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11353'. [ 1028.000693][T29227] XFS: noikeep mount option is deprecated. [ 1028.006675][T29227] XFS (loop3): invalid logbufsize: 34816 [not 16k,32k,64k,128k or 256k] [ 1028.106784][ T27] audit: type=1326 audit(30330431.143:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.4.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f05a338eb69 code=0x7ffc0000 [ 1028.106820][ T27] audit: type=1326 audit(30330431.143:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.4.11352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a338eb69 code=0x7ffc0000 [ 1028.279778][T29279] PKCS8: Unsupported PKCS#8 version [ 1028.283930][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.416035][T29283] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11360'. [ 1028.487511][T29285] netlink: 220 bytes leftover after parsing attributes in process `syz.1.11361'. [ 1028.970316][T29306] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744071562330114) [ 1029.044908][T29306] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1029.045308][T29311] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1029.178626][ T952] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1029.222025][T29317] netlink: 'syz.0.11377': attribute type 6 has an invalid length. [ 1029.379148][ T952] usb 4-1: Using ep0 maxpacket: 16 [ 1029.388781][ T952] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1029.401964][ T952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.419938][ T952] usb 4-1: Product: syz [ 1029.425518][ T952] usb 4-1: Manufacturer: syz [ 1029.430126][ T952] usb 4-1: SerialNumber: syz [ 1029.450643][ T952] r8152-cfgselector 4-1: config 0 descriptor?? [ 1029.560790][T29330] netlink: 'syz.0.11383': attribute type 10 has an invalid length. [ 1029.610417][T29334] loop4: detected capacity change from 0 to 8 [ 1029.717924][T29334] SQUASHFS error: Failed to read block 0x738: -5 [ 1029.753501][T29334] SQUASHFS error: Unable to read metadata cache entry [736] [ 1029.920152][ T952] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1029.941727][ T952] r8152-cfgselector 4-1: USB disconnect, device number 114 [ 1030.476092][T29366] loop0: detected capacity change from 0 to 64 [ 1030.515367][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11403'. [ 1030.534398][T29366] ------------[ cut here ]------------ [ 1030.539895][T29366] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1030.557892][T29366] WARNING: CPU: 0 PID: 29366 at kernel/locking/mutex.c:582 __mutex_lock+0xa24/0xaf0 [ 1030.573473][T29366] Modules linked in: [ 1030.577405][T29366] CPU: 0 PID: 29366 Comm: syz.0.11402 Not tainted 6.1.147-syzkaller #0 [ 1030.585674][T29366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1030.595781][T29366] RIP: 0010:__mutex_lock+0xa24/0xaf0 [ 1030.601108][T29366] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d 6d 5b 00 04 00 0f 85 e0 f6 ff ff 48 c7 c7 e0 ee 8b 8a 48 c7 c6 80 ef 8b 8a e8 0c c4 2d f7 <0f> 0b e9 c6 f6 ff ff 0f 0b e9 6c f9 ff ff 48 c7 c1 20 41 be 96 80 [ 1030.620757][T29366] RSP: 0018:ffffc9000dd9f680 EFLAGS: 00010246 [ 1030.626834][T29366] RAX: 5510b311f6491e00 RBX: ffff888077776028 RCX: 0000000000080000 [ 1030.634854][T29366] RDX: ffffc90010e88000 RSI: 0000000000003d64 RDI: 0000000000003d65 [ 1030.642874][T29366] RBP: ffffc9000dd9f7e0 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 1030.650864][T29366] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: 0000000000000000 [ 1030.658884][T29366] R13: dffffc0000000000 R14: ffff8880777760b8 R15: 0000000000000000 [ 1030.666907][T29366] FS: 00007fb70f2a96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1030.675895][T29366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1030.682492][T29366] CR2: 0000001b3091bff8 CR3: 00000000587ec000 CR4: 00000000003506f0 [ 1030.690537][T29366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1030.698557][T29366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1030.706582][T29366] Call Trace: [ 1030.709870][T29366] [ 1030.712986][T29366] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1030.719031][T29366] ? reiserfs_write_lock+0x75/0xd0 [ 1030.724262][T29366] ? mutex_lock_nested+0x10/0x10 [ 1030.729257][T29366] ? d_alloc_parallel+0x2d4/0x1480 [ 1030.734389][T29366] ? __lock_acquire+0x7c50/0x7c50 [ 1030.739477][T29366] reiserfs_write_lock+0x75/0xd0 [ 1030.744441][T29366] reiserfs_lookup+0x137/0x420 [ 1030.749263][T29366] ? reiserfs_find_entry+0x18e0/0x18e0 [ 1030.754750][T29366] ? __init_waitqueue_head+0xa5/0x150 [ 1030.760177][T29366] __lookup_slow+0x27d/0x3a0 [ 1030.764786][T29366] ? lookup_one_len+0x2c0/0x2c0 [ 1030.769691][T29366] ? try_to_unlazy+0x34c/0x5a0 [ 1030.774467][T29366] ? preempt_count_add+0x8d/0x190 [ 1030.779553][T29366] ? down_read+0x1a8/0x2d0 [ 1030.780781][T29386] loop2: detected capacity change from 0 to 256 [ 1030.783965][T29366] lookup_slow+0x53/0x70 [ 1030.783992][T29366] walk_component+0x2be/0x3f0 [ 1030.784009][T29366] ? path_lookupat+0x15c/0x440 [ 1030.784031][T29366] path_lookupat+0x169/0x440 [ 1030.784053][T29366] filename_lookup+0x1f0/0x500 [ 1030.784075][T29366] ? hashlen_string+0x110/0x110 [ 1030.815869][T29386] FAT-fs (loop2): Directory bread(block 64) failed [ 1030.818166][T29366] ? strncpy_from_user+0x1e3/0x350 [ 1030.818195][T29366] ? getname_flags+0x206/0x500 [ 1030.834618][T29366] user_path_at_empty+0x3e/0x60 [ 1030.839490][T29366] __se_sys_mount+0x297/0x3c0 [ 1030.844211][T29366] ? __x64_sys_mount+0xc0/0xc0 [ 1030.848983][T29366] ? lockdep_hardirqs_on+0x94/0x140 [ 1030.854220][T29366] ? __x64_sys_mount+0x1c/0xc0 [ 1030.858989][T29366] do_syscall_64+0x4c/0xa0 [ 1030.863412][T29366] ? clear_bhb_loop+0x60/0xb0 [ 1030.868133][T29366] ? clear_bhb_loop+0x60/0xb0 [ 1030.872821][T29366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1030.878773][T29366] RIP: 0033:0x7fb70e38eb69 [ 1030.883190][T29366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.902845][T29366] RSP: 002b:00007fb70f2a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1030.911302][T29366] RAX: ffffffffffffffda RBX: 00007fb70e5b5fa0 RCX: 00007fb70e38eb69 [ 1030.913530][T29386] FAT-fs (loop2): Directory bread(block 65) failed [ 1030.919304][T29366] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00002000000000c0 [ 1030.919319][T29366] RBP: 00007fb70e411df1 R08: 0000000000000000 R09: 0000000000000000 [ 1030.919330][T29366] R10: 000000000123b058 R11: 0000000000000246 R12: 0000000000000000 [ 1030.919339][T29366] R13: 0000000000000000 R14: 00007fb70e5b5fa0 R15: 00007ffd1a0eb2a8 [ 1030.919355][T29366] [ 1030.919376][T29366] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1030.919384][T29366] CPU: 0 PID: 29366 Comm: syz.0.11402 Not tainted 6.1.147-syzkaller #0 [ 1030.919400][T29366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1030.919408][T29366] Call Trace: [ 1030.919413][T29366] [ 1030.919419][T29366] dump_stack_lvl+0x168/0x22e [ 1030.919439][T29366] ? memcpy+0x3c/0x60 [ 1030.919460][T29366] ? show_regs_print_info+0x12/0x12 [ 1030.919476][T29366] ? load_image+0x3b0/0x3b0 [ 1030.919499][T29366] panic+0x2c9/0x710 [ 1030.919519][T29366] ? bpf_jit_dump+0xd0/0xd0 [ 1030.919540][T29366] __warn+0x2f8/0x4f0 [ 1030.919557][T29366] ? __mutex_lock+0xa24/0xaf0 [ 1030.919576][T29366] ? __mutex_lock+0xa24/0xaf0 [ 1030.919592][T29366] report_bug+0x2ba/0x4f0 [ 1030.919607][T29366] ? __mutex_lock+0xa24/0xaf0 [ 1030.919625][T29366] handle_bug+0x3a/0x70 [ 1030.919640][T29366] exc_invalid_op+0x16/0x40 [ 1030.919656][T29366] asm_exc_invalid_op+0x16/0x20 [ 1030.919677][T29366] RIP: 0010:__mutex_lock+0xa24/0xaf0 [ 1030.919695][T29366] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d 6d 5b 00 04 00 0f 85 e0 f6 ff ff 48 c7 c7 e0 ee 8b 8a 48 c7 c6 80 ef 8b 8a e8 0c c4 2d f7 <0f> 0b e9 c6 f6 ff ff 0f 0b e9 6c f9 ff ff 48 c7 c1 20 41 be 96 80 [ 1030.919708][T29366] RSP: 0018:ffffc9000dd9f680 EFLAGS: 00010246 [ 1030.919723][T29366] RAX: 5510b311f6491e00 RBX: ffff888077776028 RCX: 0000000000080000 [ 1030.919735][T29366] RDX: ffffc90010e88000 RSI: 0000000000003d64 RDI: 0000000000003d65 [ 1030.919746][T29366] RBP: ffffc9000dd9f7e0 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 1030.919759][T29366] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: 0000000000000000 [ 1030.919770][T29366] R13: dffffc0000000000 R14: ffff8880777760b8 R15: 0000000000000000 [ 1030.919789][T29366] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1030.919810][T29366] ? reiserfs_write_lock+0x75/0xd0 [ 1030.919829][T29366] ? mutex_lock_nested+0x10/0x10 [ 1030.919847][T29366] ? d_alloc_parallel+0x2d4/0x1480 [ 1030.919870][T29366] ? __lock_acquire+0x7c50/0x7c50 [ 1030.919889][T29366] reiserfs_write_lock+0x75/0xd0 [ 1030.919909][T29366] reiserfs_lookup+0x137/0x420 [ 1030.919928][T29366] ? reiserfs_find_entry+0x18e0/0x18e0 [ 1030.919955][T29366] ? __init_waitqueue_head+0xa5/0x150 [ 1030.919976][T29366] __lookup_slow+0x27d/0x3a0 [ 1030.919997][T29366] ? lookup_one_len+0x2c0/0x2c0 [ 1030.920020][T29366] ? try_to_unlazy+0x34c/0x5a0 [ 1030.920036][T29366] ? preempt_count_add+0x8d/0x190 [ 1030.920052][T29366] ? down_read+0x1a8/0x2d0 [ 1030.920069][T29366] lookup_slow+0x53/0x70 [ 1030.920089][T29366] walk_component+0x2be/0x3f0 [ 1030.920105][T29366] ? path_lookupat+0x15c/0x440 [ 1030.920125][T29366] path_lookupat+0x169/0x440 [ 1030.920147][T29366] filename_lookup+0x1f0/0x500 [ 1030.920169][T29366] ? hashlen_string+0x110/0x110 [ 1030.920197][T29366] ? strncpy_from_user+0x1e3/0x350 [ 1030.920218][T29366] ? getname_flags+0x206/0x500 [ 1030.920238][T29366] user_path_at_empty+0x3e/0x60 [ 1030.920267][T29366] __se_sys_mount+0x297/0x3c0 [ 1030.920285][T29366] ? __x64_sys_mount+0xc0/0xc0 [ 1030.920300][T29366] ? lockdep_hardirqs_on+0x94/0x140 [ 1030.920317][T29366] ? __x64_sys_mount+0x1c/0xc0 [ 1030.920333][T29366] do_syscall_64+0x4c/0xa0 [ 1030.920348][T29366] ? clear_bhb_loop+0x60/0xb0 [ 1030.920362][T29366] ? clear_bhb_loop+0x60/0xb0 [ 1030.920378][T29366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1030.920398][T29366] RIP: 0033:0x7fb70e38eb69 [ 1030.920411][T29366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.920424][T29366] RSP: 002b:00007fb70f2a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1030.920441][T29366] RAX: ffffffffffffffda RBX: 00007fb70e5b5fa0 RCX: 00007fb70e38eb69 [ 1030.920452][T29366] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00002000000000c0 [ 1030.920463][T29366] RBP: 00007fb70e411df1 R08: 0000000000000000 R09: 0000000000000000 [ 1030.920473][T29366] R10: 000000000123b058 R11: 0000000000000246 R12: 0000000000000000 [ 1030.920483][T29366] R13: 0000000000000000 R14: 00007fb70e5b5fa0 R15: 00007ffd1a0eb2a8 [ 1030.920498][T29366] [ 1030.926085][T29366] Kernel Offset: disabled [ 1031.356008][T29366] Rebooting in 86400 seconds..