last executing test programs: 1m55.55053115s ago: executing program 1 (id=5077): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x1f, 0xfe, 0x0}) 1m55.347946563s ago: executing program 1 (id=5080): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1m55.20668486s ago: executing program 1 (id=5082): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 1m55.116450446s ago: executing program 1 (id=5084): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xfffffff7, 0x9}) 1m54.945277596s ago: executing program 1 (id=5086): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$eJzskr9OAkEQxr+9O/5oFDWxooGC+KdQjkONnZbY29lI4ETiocKRKITijDEUFsbSJ+A1THwBLYwPQE1BrM2ZvZ3bLL6C+yvu2/l2ZnZ2c+d+208B+JkOajhEhIkMPhiDBSDHhDcxhD6TfpI+CcE75R2Rf0+a9Xv9JAC+nceKMC6qnud28gC+I09a/sGdgUnU6ms6qPHFKYAwDEPu1QGejgUlxwTQVnKyFrAaXSKUORYNsA6g2G1dF/1ef6vZqjbchnvpmOU9e8e2d53iWdNzbfFlyhF0FXDdBJBKQ8L3EwAeKJ7HLEwZjfbZHE5kbTJ+www9IExZayi1sTK8yrlSSsUx1sDHugmWFLcQdbEQXakCBpOCkqXMJ85KRxvbtSuvPgQDi8tGsGSP0hgJGThqUN4PsChaDallgbRCOiIdk+b+/DJWwL+PFG0EQBK31W63U+KPJFYsXjnSc5YD9cH4qS/G7OXeDGg0Go1Go9FoNBrNf+c3AAD//8PfdhM=") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1m54.02280352s ago: executing program 1 (id=5098): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x3}, 0x12) 1m39.963358735s ago: executing program 32 (id=5098): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x3}, 0x12) 3.170947974s ago: executing program 2 (id=6692): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) 3.07600433s ago: executing program 0 (id=6693): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.539046231s ago: executing program 0 (id=6704): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="f303e42912de99b7ea1135f2f9d5b1a74117c5c998fb6fd985561a5cd1ce", @ANYRES64], 0x1, 0x617a, &(0x7f0000000580)="$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") link(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.579706898s ago: executing program 0 (id=6702): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xc, 0x1c1002) pread64(r0, 0x0, 0x0, 0x10000003) 1.53211407s ago: executing program 2 (id=6703): ioperm(0x0, 0x9, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 1.450121385s ago: executing program 2 (id=6706): r0 = semget(0x1, 0x2, 0x302) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000840)=""/254) 1.310748263s ago: executing program 2 (id=6708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) 1.214373099s ago: executing program 4 (id=6709): r0 = syz_open_dev$vim2m(&(0x7f0000000480), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x4, 0x54485746, 0x1, @discrete={0xb, 0x20}}) 1.157532782s ago: executing program 2 (id=6710): syz_mount_image$jfs(&(0x7f0000000340), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x624b, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) 1.144749853s ago: executing program 4 (id=6711): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000140)=ANY=[], 0xfb, 0x6af, &(0x7f0000000d00)="$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") link(&(0x7f0000000200)='./file1\x00', 0x0) 849.55925ms ago: executing program 3 (id=6712): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, 0x0, 0x10, 0x20008044, 0x0, 0x0) 848.59337ms ago: executing program 4 (id=6713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20001}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}, @FRA_DST={0x14, 0x7, @loopback}]}, 0x38}}, 0x0) 689.07968ms ago: executing program 3 (id=6714): r0 = socket(0x15, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x3ff}, 0x1c) 580.251766ms ago: executing program 4 (id=6715): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0, 0x810}, {&(0x7f0000000240)="a61d", 0x2}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) 534.224179ms ago: executing program 3 (id=6716): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e24, @empty}}) 460.366233ms ago: executing program 0 (id=6717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3b07e42ab8b0d1b7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 406.699176ms ago: executing program 3 (id=6718): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x0, 0x4}, {0xb, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xc, 0x1, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x7, 0x2, 0x4, 0xa}}, {0x4}}]}]}, 0x68}}, 0x0) 393.236327ms ago: executing program 4 (id=6719): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x45, &(0x7f0000000140)={0x0, 0x0}, 0x10) 238.397096ms ago: executing program 0 (id=6720): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/user\x00') setns(r0, 0x10000000) 205.927088ms ago: executing program 3 (id=6721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010004b0400030000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677265001c00028006000e0001000000060003008000000008000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 149.748691ms ago: executing program 4 (id=6722): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) 122.870903ms ago: executing program 2 (id=6723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 96.829445ms ago: executing program 0 (id=6724): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:.:\x00', 0x0) 0s ago: executing program 3 (id=6725): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200040000003, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000500)=@userptr={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "7c2eaabb"}, 0x0, 0x2, {0x0}}) kernel console output (not intermixed with test programs): .560942][T17752] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 737.569710][T17752] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 737.586119][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 737.807035][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 737.823714][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.833513][ T9] usb 4-1: Product: syz [ 737.838267][ T9] usb 4-1: Manufacturer: syz [ 737.842905][ T9] usb 4-1: SerialNumber: syz [ 737.878378][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 737.901546][ T788] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 738.038361][T17766] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 738.328148][ T28] audit: type=1326 audit(531007.010:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 738.351487][ T28] audit: type=1326 audit(531007.042:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 738.383831][ T28] audit: type=1326 audit(531007.042:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 738.428599][ T5838] usb 4-1: USB disconnect, device number 42 [ 738.471677][ T28] audit: type=1326 audit(531007.042:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.0.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 738.528997][ T28] audit: type=1326 audit(531007.236:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 738.569101][ T28] audit: type=1326 audit(531007.236:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 738.623506][ T28] audit: type=1326 audit(531007.257:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 738.670150][ T28] audit: type=1326 audit(531007.257:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 738.712371][ T28] audit: type=1326 audit(531007.257:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 738.872816][ T788] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 738.886302][ T788] ath9k_htc: Failed to initialize the device [ 738.893212][ T5838] usb 4-1: ath9k_htc: USB layer deinitialized [ 738.984569][T17793] xt_bpf: check failed: parse error [ 739.389866][T17791] loop2: detected capacity change from 0 to 32768 [ 740.529651][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5188'. [ 740.576224][T17839] loop3: detected capacity change from 0 to 2048 [ 740.614119][T17839] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 740.656973][T17839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.659154][T17841] loop2: detected capacity change from 0 to 256 [ 741.125712][T17857] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 741.142346][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.189160][ T968] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 741.381587][ T968] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 741.396409][ T968] usb 3-1: config 0 has no interface number 0 [ 741.408312][ T968] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 741.421972][ T968] usb 3-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 741.441805][ T968] usb 3-1: config 0 interface 216 has no altsetting 0 [ 741.454456][ T968] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 741.463564][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.494067][ T968] usb 3-1: config 0 descriptor?? [ 741.501107][T17849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 741.530464][ T968] usb 3-1: NFC: intf ffff888025e65000 id ffffffff8da44140 [ 741.583734][ C1] sd 0:0:1:0: [sda] tag#2387 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 741.594264][ C1] sd 0:0:1:0: [sda] tag#2387 CDB: Read(6) 08 00 9f d1 fe de [ 741.766411][ T5894] usb 3-1: USB disconnect, device number 60 [ 742.242468][T17895] program syz.0.5217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 742.549578][T17908] loop3: detected capacity change from 0 to 512 [ 742.596601][T17908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.712907][T17908] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.5223: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 742.763141][T17908] EXT4-fs error (device loop3) in ext4_free_inode:363: Filesystem failed CRC [ 742.881223][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.141670][ T5894] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 743.151349][T17929] loop2: detected capacity change from 0 to 4096 [ 743.230163][T17929] ntfs3: loop2: ino=5, "/" directory corrupted [ 743.242151][T17929] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 743.335405][ T5894] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 743.344705][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.373671][ T5894] usb 1-1: config 0 descriptor?? [ 743.397740][ T5894] cp210x 1-1:0.0: cp210x converter detected [ 743.622611][T17941] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 743.642865][T17941] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 743.765317][ T788] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 743.801629][ T5894] usb 1-1: cp210x converter now attached to ttyUSB0 [ 743.825367][ T5894] usb 1-1: USB disconnect, device number 54 [ 743.841394][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 743.860632][ T5894] cp210x 1-1:0.0: device disconnected [ 743.970383][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 743.979069][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 743.988400][ T788] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 743.999335][ T788] usb 3-1: config 12 interface 0 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 744.014320][ T788] usb 3-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.033032][ T788] usb 3-1: config 12 interface 0 has no altsetting 0 [ 744.042439][ T788] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 744.052195][ T788] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 744.060686][ T788] usb 3-1: Product: syz [ 744.065258][ T788] usb 3-1: SerialNumber: syz [ 744.336230][ T788] usb 3-1: USB disconnect, device number 61 [ 744.349442][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 744.349457][ T28] audit: type=1326 audit(531013.469:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17952 comm="syz.0.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 744.434169][ T28] audit: type=1326 audit(531013.501:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17952 comm="syz.0.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 744.455129][T17955] loop0: detected capacity change from 0 to 8 [ 744.456099][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.510026][T17955] SQUASHFS error: Failed to read block 0x285: -5 [ 744.526613][T17955] SQUASHFS error: Unable to read metadata cache entry [283] [ 744.539085][T17955] SQUASHFS error: Unable to read symlink [8f:60] [ 744.540873][ T28] audit: type=1326 audit(531013.501:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17952 comm="syz.0.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 744.599084][ T28] audit: type=1326 audit(531013.501:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17952 comm="syz.0.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 744.621190][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.643164][ T28] audit: type=1326 audit(531013.512:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17952 comm="syz.0.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 744.725653][ T28] audit: type=1326 audit(531013.512:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17952 comm="syz.0.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 744.747716][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.757575][ T28] audit: type=1326 audit(531013.512:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17952 comm="syz.0.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 744.779524][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.810758][ T28] audit: type=1326 audit(531013.512:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17952 comm="syz.0.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 744.839465][ T28] audit: type=1326 audit(531013.512:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17952 comm="syz.0.5244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 745.032792][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5249'. [ 745.175998][T17972] usb usb8: usbfs: process 17972 (syz.3.5251) did not claim interface 0 before use [ 745.220213][T17973] loop2: detected capacity change from 0 to 512 [ 745.322784][T17973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.429080][T17977] loop3: detected capacity change from 0 to 4096 [ 745.486431][T17977] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 745.509089][T17973] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 745.670486][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.154034][T17990] ALSA: mixer_oss: invalid OSS volume 'u' [ 746.277508][T17995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5262'. [ 746.307059][T17995] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5262'. [ 746.321274][T17995] netlink: 'syz.2.5262': attribute type 6 has an invalid length. [ 746.335700][T17995] netlink: 'syz.2.5262': attribute type 5 has an invalid length. [ 746.344932][T17995] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5262'. [ 746.455160][T18000] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5265'. [ 746.470619][T18000] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5265'. [ 746.773221][T18010] usb usb9: usbfs: process 18010 (syz.0.5269) did not claim interface 0 before use [ 746.859795][T18013] SET target dimension over the limit! [ 746.950680][T18015] bridge_slave_0: left allmulticast mode [ 746.974252][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.046840][T18015] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 747.077919][T18020] netlink: 'syz.2.5274': attribute type 8 has an invalid length. [ 747.090749][T18020] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5274'. [ 747.620880][T18041] netlink: zone id is out of range [ 747.629052][T18041] netlink: zone id is out of range [ 747.644033][T18041] netlink: zone id is out of range [ 747.652539][T18041] netlink: zone id is out of range [ 747.657720][T18041] netlink: zone id is out of range [ 747.667880][T18041] netlink: get zone limit has 4 unknown bytes [ 747.939919][T18051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 747.964494][T18055] netlink: 205500 bytes leftover after parsing attributes in process `syz.3.5292'. [ 747.974400][T18054] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5291'. [ 747.983795][T18055] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 747.997794][T18054] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5291'. [ 748.301959][T18066] loop3: detected capacity change from 0 to 128 [ 748.335798][T18066] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 748.390412][T18069] loop0: detected capacity change from 0 to 256 [ 748.395108][T18066] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.5298: No space for directory leaf checksum. Please run e2fsck -D. [ 748.395207][T18066] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.5298: checksumming directory block 0 [ 748.568269][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 749.040230][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.055020][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.063918][T18088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5306'. [ 749.074699][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.081871][T18087] loop3: detected capacity change from 0 to 128 [ 749.101392][T18087] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 749.113087][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.122523][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 749.130293][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 749.140787][T18087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 749.181632][ T968] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 749.412604][ T968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.451625][ T968] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 749.471053][ T968] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.490548][ T968] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 749.504133][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.512335][ T968] usb 3-1: Product: syz [ 749.517337][ T968] usb 3-1: Manufacturer: syz [ 749.521993][ T968] usb 3-1: SerialNumber: syz [ 749.536947][ T968] usb 3-1: config 0 descriptor?? [ 749.584194][T18083] chnl_net:caif_netlink_parms(): no params data found [ 749.659877][T18100] loop0: detected capacity change from 0 to 2048 [ 749.728795][T18100] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 749.767023][ T968] usb 3-1: USB disconnect, device number 62 [ 749.789505][T18083] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.806027][T14627] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 749.826712][T18083] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.841431][T18083] bridge_slave_0: entered allmulticast mode [ 749.858466][T18083] bridge_slave_0: entered promiscuous mode [ 749.869789][T18083] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.877549][T18083] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.885258][T18083] bridge_slave_1: entered allmulticast mode [ 749.893051][T18083] bridge_slave_1: entered promiscuous mode [ 749.979171][T18083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.004060][T18083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.015148][T14627] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 750.032676][T14627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 750.049567][T14627] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 750.089585][T14627] usb 4-1: language id specifier not provided by device, defaulting to English [ 750.108114][T18083] team0: Port device team_slave_0 added [ 750.125461][T18083] team0: Port device team_slave_1 added [ 750.137080][T14627] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 750.157045][T14627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.187685][T14627] usb 4-1: Manufacturer: ‰ [ 750.192286][T14627] usb 4-1: SerialNumber: syz [ 750.198103][T18083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.205077][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.233275][T18083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.248019][T18083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.256090][T14627] usb 4-1: config 0 descriptor?? [ 750.265465][T14627] em28xx 4-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 750.275300][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.301436][T14627] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 750.309207][T18083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.439992][T18083] hsr_slave_0: entered promiscuous mode [ 750.456784][T18083] hsr_slave_1: entered promiscuous mode [ 750.483841][T18083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.493073][T18083] Cannot create hsr debugfs directory [ 750.541800][T14627] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 750.548268][T14627] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 750.569335][T14627] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 750.576339][T14627] em28xx 4-1:0.0: No AC97 audio processor [ 750.596011][T18111] loop2: detected capacity change from 0 to 4096 [ 750.623134][T14627] usb 4-1: USB disconnect, device number 43 [ 750.663728][T14627] em28xx 4-1:0.0: Disconnecting em28xx [ 750.672136][T18111] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 750.699632][T14627] em28xx 4-1:0.0: Freeing device [ 750.724411][T18111] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 750.779640][T18111] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 750.821822][T18111] ntfs: volume version 3.1. [ 751.026113][ T5778] Bluetooth: hci4: command tx timeout [ 751.094454][T18083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 751.125981][T18119] loop0: detected capacity change from 0 to 2048 [ 751.139706][T18083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 751.153480][T18119] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 751.184986][T18119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.192675][T18083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 751.272253][T18083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 751.607231][T18083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.654214][T18083] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.674337][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.681522][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.731806][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.739088][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.781159][ T788] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 751.857464][T18146] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 751.968161][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 752.004007][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.028987][ T788] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 752.063101][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.081845][ T788] usb 4-1: config 0 descriptor?? [ 752.101416][ T788] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 752.236991][T18155] loop2: detected capacity change from 0 to 2048 [ 752.283040][T18155] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 752.341788][T18155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 752.431709][T18083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.496901][ T788] gspca_vc032x: reg_w err -71 [ 752.508286][ T788] vc032x: probe of 4-1:0.0 failed with error -71 [ 752.553165][ T788] usb 4-1: USB disconnect, device number 44 [ 752.832577][T18174] loop0: detected capacity change from 0 to 512 [ 752.850020][T18174] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 752.907962][T18174] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.5338: bg 0: block 104: invalid block bitmap [ 752.922666][ T5838] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 752.954237][T18174] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 752.965541][ T5778] Bluetooth: hci4: command tx timeout [ 752.978038][T18174] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5338: invalid indirect mapped block 1 (level 1) [ 752.992445][T18083] veth0_vlan: entered promiscuous mode [ 753.006537][T18174] EXT4-fs (loop0): 1 truncate cleaned up [ 753.013872][T18083] veth1_vlan: entered promiscuous mode [ 753.021140][T18174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.082043][ T28] audit: type=1800 audit(531022.836:42): pid=18174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5338" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 753.128626][ T5838] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 753.155422][ T5838] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 753.171759][T18083] veth0_macvtap: entered promiscuous mode [ 753.187686][ T5838] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 753.205608][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.225107][T18083] veth1_macvtap: entered promiscuous mode [ 753.243868][ T5838] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.265231][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 753.304531][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.316220][ T5838] usb 3-1: SerialNumber: syz [ 753.327100][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.338014][T18167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 753.346492][ T5838] hub 3-1:1.0: bad descriptor, ignoring hub [ 753.353379][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.367028][ T5838] hub: probe of 3-1:1.0 failed with error -5 [ 753.375837][ T5838] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 753.385043][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.400918][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.423284][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.439748][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.477847][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.516299][T18083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.549291][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.575769][ T5838] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 753.584538][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.616932][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.634737][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.645122][ T5838] usb 3-1: USB disconnect, device number 63 [ 753.692488][ T5762] udevd[5762]: setting owner of /dev/ttyACM0 to uid=0, gid=18 failed: No such file or directory [ 753.704947][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.732562][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.762078][T18083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.785458][T18083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.797299][T18083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.819727][T18083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.839357][T18083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.863228][T18083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.888708][T18083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.108030][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.148994][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.247750][T18196] loop0: detected capacity change from 0 to 2048 [ 754.259252][T18196] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 754.282828][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.314483][T18199] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 754.342560][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.363668][T18201] rtc_cmos 00:00: Alarms can be up to one day in the future [ 754.398904][T18196] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 754.436308][T18196] Remounting filesystem read-only [ 754.671631][T18207] netlink: 'syz.3.5352': attribute type 3 has an invalid length. [ 754.712701][T18210] loop0: detected capacity change from 0 to 8 [ 754.780273][T18210] SQUASHFS error: Unknown inode type 257 in squashfs_iget! [ 754.805924][T18213] loop2: detected capacity change from 0 to 1024 [ 754.814727][T18213] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 754.837335][T18213] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 754.903935][ T5778] Bluetooth: hci4: command tx timeout [ 754.904515][T18213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 755.210932][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.057987][T18252] loop4: detected capacity change from 0 to 8192 [ 756.142095][T18264] loop0: detected capacity change from 0 to 1024 [ 756.233338][T18264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.461698][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.652216][T18276] bond1: entered promiscuous mode [ 756.682231][T18276] bond1: entered allmulticast mode [ 756.721706][T18276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.756937][ T28] audit: type=1326 audit(531026.784:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18287 comm="syz.4.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 756.829014][ T28] audit: type=1326 audit(531026.816:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18287 comm="syz.4.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 756.851498][ T5778] Bluetooth: hci4: command tx timeout [ 756.864486][ T28] audit: type=1326 audit(531026.827:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18287 comm="syz.4.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 756.888848][ T28] audit: type=1326 audit(531026.827:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18287 comm="syz.4.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 756.912636][ T28] audit: type=1326 audit(531026.827:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18287 comm="syz.4.5389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 757.000390][ T5894] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 757.072110][T18294] loop4: detected capacity change from 0 to 1024 [ 757.138661][T18296] overlayfs: overlapping lowerdir path [ 757.160962][T18294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.198202][ T5894] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 757.210829][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.233324][T18294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 32: comm syz.4.5392: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=695563, rec_len=0, size=1024 fake=1 [ 757.253523][ T788] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 757.280573][T18294] EXT4-fs (loop4): Remounting filesystem read-only [ 757.289639][ T5894] usb 1-1: config 0 has no interface number 0 [ 757.295807][ T5894] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 757.299414][T18294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz.4.5392: directory missing '.' [ 757.319040][ T5894] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 757.338559][ T5894] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.362221][ T5894] usb 1-1: config 0 interface 52 has no altsetting 0 [ 757.383895][ T5894] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 757.393511][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 757.405824][ T5894] usb 1-1: SerialNumber: syz [ 757.413857][ T5894] usb 1-1: config 0 descriptor?? [ 757.440790][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.513276][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 757.522666][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 757.538249][ T788] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 757.552835][ T788] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 757.571519][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.584553][ T788] usb 3-1: Product: syz [ 757.596958][ T788] usb 3-1: Manufacturer: syz [ 757.601730][ T788] usb 3-1: SerialNumber: syz [ 757.630855][ T5894] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 757.656956][ T5894] synaptics_usb: probe of 1-1:0.52 failed with error -5 [ 757.857297][ T788] usb 3-1: Not enough endpoints found in device, aborting! [ 757.883227][ T5894] usb 1-1: USB disconnect, device number 55 [ 758.029454][ T788] usb 3-1: USB disconnect, device number 64 [ 758.319049][T18327] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.337460][T18327] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 758.565392][T18332] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.742524][T18325] loop3: detected capacity change from 0 to 32768 [ 758.768945][T18325] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.5405 (18325) [ 758.801789][T18337] loop0: detected capacity change from 0 to 764 [ 758.820177][T18325] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 758.842587][T18325] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 758.900923][T18325] BTRFS info (device loop3): turning off barriers [ 758.931712][T18325] BTRFS info (device loop3): enabling all of the rescue options [ 758.939416][T18325] BTRFS info (device loop3): ignoring data csums [ 758.984421][T18325] BTRFS info (device loop3): ignoring bad roots [ 759.010649][T18325] BTRFS info (device loop3): disabling log replay at mount time [ 759.021910][T18325] BTRFS info (device loop3): disabling tree log [ 759.047578][T18325] BTRFS info (device loop3): turning on flush-on-commit [ 759.086417][T18325] BTRFS info (device loop3): using free space tree [ 759.144410][T18343] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 759.217701][T18343] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 759.340904][T18325] BTRFS info (device loop3: state C): enabling ssd optimizations [ 759.621289][ T28] audit: type=1326 audit(531029.863:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18371 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 759.736484][ T28] audit: type=1326 audit(531029.863:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18371 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 759.772695][ T28] audit: type=1326 audit(531029.906:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18371 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 759.826147][ T5772] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 759.845929][T18374] loop0: detected capacity change from 0 to 4096 [ 759.862081][ T28] audit: type=1326 audit(531029.906:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18371 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 759.888218][T18374] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 759.926332][ T28] audit: type=1326 audit(531029.906:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18371 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 760.319385][T14627] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 760.478008][ T5778] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 760.530381][T18394] netlink: 'syz.2.5431': attribute type 3 has an invalid length. [ 760.544351][T14627] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 760.560904][T14627] usb 5-1: config 1 has no interface number 0 [ 760.576957][T14627] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 760.602040][T14627] usb 5-1: config 1 interface 105 has no altsetting 0 [ 760.628431][T14627] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 760.663399][T14627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.689895][T14627] usb 5-1: Product: syz [ 760.701167][T14627] usb 5-1: Manufacturer: syz [ 760.715485][T14627] usb 5-1: SerialNumber: syz [ 760.863028][T18402] __nla_validate_parse: 3 callbacks suppressed [ 760.863045][T18402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5435'. [ 760.981988][T14627] aqc111: probe of 5-1:1.105 failed with error -22 [ 761.174127][ T5817] usb 5-1: USB disconnect, device number 2 [ 761.506207][T18429] bridge_slave_0: left allmulticast mode [ 761.522059][T18429] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.553875][T18429] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 761.583414][T18432] loop2: detected capacity change from 0 to 2048 [ 761.690405][T18432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 761.865361][T18440] netlink: 'syz.4.5452': attribute type 1 has an invalid length. [ 762.740301][T18476] vivid-002: ================= START STATUS ================= [ 762.787663][T18476] vivid-002: RDS Tx I/O Mode: Controls [ 762.816225][T18476] vivid-002: RDS Program ID: 32904 [ 762.835241][T18476] vivid-002: RDS Program Type: 3 [ 762.856675][T18476] vivid-002: RDS PS Name: VIVID-TX [ 762.891552][T18476] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 762.908838][T18476] vivid-002: RDS Stereo: true [ 762.929258][T18476] vivid-002: RDS Artificial Head: false [ 762.944365][T18476] vivid-002: RDS Compressed: false [ 762.961976][T18476] vivid-002: RDS Dynamic PTY: false [ 762.984919][T18476] vivid-002: RDS Traffic Announcement: false [ 763.012889][T18476] vivid-002: RDS Traffic Program: true [ 763.041108][T18476] vivid-002: RDS Music: true [ 763.049117][T18476] vivid-002: ================== END STATUS ================== [ 763.267064][T18495] netlink: 'syz.2.5478': attribute type 8 has an invalid length. [ 763.428138][T18501] loop3: detected capacity change from 0 to 256 [ 763.565859][T18504] bridge_slave_0: left allmulticast mode [ 763.571764][T18504] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.658042][T18504] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 764.079271][T18525] netlink: 'syz.4.5492': attribute type 5 has an invalid length. [ 764.094530][T18525] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5492'. [ 764.477745][T18539] loop3: detected capacity change from 0 to 2048 [ 764.551373][T18539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 764.804583][T18554] loop3: detected capacity change from 0 to 256 [ 765.136491][T18550] loop2: detected capacity change from 0 to 32768 [ 765.335828][T18560] loop3: detected capacity change from 0 to 2048 [ 765.362661][T18560] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 766.130996][T18588] loop2: detected capacity change from 0 to 4096 [ 766.237140][ T5817] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 766.433393][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 766.455939][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.491410][ T5817] usb 4-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40 [ 766.508258][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.530951][T18600] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 766.536101][ T5817] usb 4-1: Product: syz [ 766.542794][ T5817] usb 4-1: Manufacturer: syz [ 766.564585][T18600] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 766.573264][ T5817] usb 4-1: SerialNumber: syz [ 766.609150][ T5817] usb 4-1: config 0 descriptor?? [ 766.632601][ T5817] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 766.824498][T18610] syz.4.5534 (18610): /proc/18609/oom_adj is deprecated, please use /proc/18609/oom_score_adj instead. [ 767.051307][ T5817] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 767.051382][ T5817] pac7311: probe of 4-1:0.0 failed with error -71 [ 767.064608][ T5817] usb 4-1: USB disconnect, device number 45 [ 767.290421][T18622] bridge_slave_0: left allmulticast mode [ 767.297869][T18622] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.310570][T18622] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 767.431613][T18627] netlink: 'syz.2.5542': attribute type 9 has an invalid length. [ 767.826239][T18644] netlink: 'syz.4.5551': attribute type 1 has an invalid length. [ 767.834345][T18644] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5551'. [ 768.366518][T18652] loop4: detected capacity change from 0 to 8192 [ 768.385214][T18638] loop3: detected capacity change from 0 to 32768 [ 768.409489][T18652] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 768.494407][T18652] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 768.558732][T18657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5557'. [ 768.568919][T18652] REISERFS (device loop4): using ordered data mode [ 768.575474][T18652] reiserfs: using flush barriers [ 768.614625][T18652] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 768.659032][T18652] REISERFS (device loop4): checking transaction log (loop4) [ 768.731555][T18652] REISERFS (device loop4): Using r5 hash to sort names [ 769.022333][T18666] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5561'. [ 769.247019][T18674] loop2: detected capacity change from 0 to 64 [ 769.254590][T18672] warning: `syz.0.5564' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 769.404820][T18674] Trying to free block not in datazone [ 769.415704][T18674] minix_free_block (loop2:21): bit already cleared [ 769.544226][ T28] audit: type=1400 audit(531040.496:53): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=18677 comm="syz.0.5567" [ 769.623943][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 769.630547][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 769.770538][T18686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5570'. [ 770.146661][T18668] loop4: detected capacity change from 0 to 32768 [ 770.281434][T18668] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 770.325472][T18709] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 770.366617][T18709] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 770.517898][T18668] XFS (loop4): Ending clean mount [ 770.545199][T18668] XFS (loop4): Quotacheck needed: Please wait. [ 770.684879][T18722] netlink: 'syz.0.5584': attribute type 1 has an invalid length. [ 770.699058][T18668] XFS (loop4): Quotacheck: Done. [ 770.816355][T18725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5586'. [ 770.860594][T18725] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 771.041871][T18083] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 771.054073][T18733] loop3: detected capacity change from 0 to 256 [ 771.094321][T18733] exfat: Deprecated parameter 'namecase' [ 771.148097][T18735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5591'. [ 771.179217][T18733] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5474c335, utbl_chksum : 0xe619d30d) [ 771.186832][T18735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5591'. [ 771.543226][T18744] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5595'. [ 771.554124][T18744] openvswitch: netlink: Key type 2832 is out of range max 32 [ 771.875537][T18757] openvswitch: netlink: Actions may not be safe on all matching packets [ 772.095272][T18766] loop4: detected capacity change from 0 to 1024 [ 772.664244][ T28] audit: type=1326 audit(531043.854:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b079bf79 code=0x7ffc0000 [ 772.735612][ T28] audit: type=1326 audit(531043.875:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b079bf79 code=0x7ffc0000 [ 772.780624][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5620'. [ 772.799766][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5620'. [ 772.827375][ T28] audit: type=1326 audit(531043.886:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b079bf79 code=0x7ffc0000 [ 772.871700][T18793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5620'. [ 772.886665][ T28] audit: type=1326 audit(531043.886:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b079bf79 code=0x7ffc0000 [ 772.930333][ T28] audit: type=1326 audit(531043.886:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fc2b079bf79 code=0x7ffc0000 [ 772.977086][T18799] xt_connbytes: Forcing CT accounting to be enabled [ 772.998498][ T28] audit: type=1326 audit(531043.886:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b079bf79 code=0x7ffc0000 [ 773.074113][ T28] audit: type=1326 audit(531043.886:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b079bf79 code=0x7ffc0000 [ 773.127739][ T28] audit: type=1326 audit(531043.886:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc2b079bf79 code=0x7ffc0000 [ 773.200463][ T28] audit: type=1326 audit(531043.886:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18790 comm="syz.3.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc2b079bf79 code=0x7ffc0000 [ 773.329650][T18812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 773.530210][T18819] loop4: detected capacity change from 0 to 256 [ 773.585860][T18822] vlan1: entered allmulticast mode [ 773.596992][T18822] veth0_vlan: entered allmulticast mode [ 773.852685][T18832] capability: warning: `syz.0.5638' uses deprecated v2 capabilities in a way that may be insecure [ 773.963776][T18836] loop4: detected capacity change from 0 to 64 [ 774.085869][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5641'. [ 774.103128][T18830] loop3: detected capacity change from 0 to 8192 [ 774.151590][T18830] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 774.200523][T18830] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 774.212318][T18830] REISERFS (device loop3): using ordered data mode [ 774.239370][T18843] netlink: 174 bytes leftover after parsing attributes in process `syz.4.5643'. [ 774.252081][T18830] reiserfs: using flush barriers [ 774.290245][T18830] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 774.379392][T18830] REISERFS (device loop3): checking transaction log (loop3) [ 774.621193][T18830] REISERFS (device loop3): Using tea hash to sort names [ 774.643863][T18830] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 774.999177][ T5817] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 775.197305][ T5817] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 775.206986][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.240558][ T5817] usb 1-1: Product: syz [ 775.249812][ T5817] usb 1-1: Manufacturer: syz [ 775.265525][ T5817] usb 1-1: SerialNumber: syz [ 775.290600][ T5817] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 775.318953][T14627] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 775.718614][ T788] usb 1-1: USB disconnect, device number 56 [ 775.827744][T18893] bridge0: port 1(netdevsim2) entered blocking state [ 775.838563][T18893] bridge0: port 1(netdevsim2) entered disabled state [ 775.845529][T18893] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 775.855011][T18893] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 775.873528][T18893] bridge0: port 1(netdevsim2) entered blocking state [ 775.880968][T18893] bridge0: port 1(netdevsim2) entered forwarding state [ 776.049250][T18901] gretap1: entered promiscuous mode [ 776.309060][T14627] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 776.317714][T14627] ath9k_htc: Failed to initialize the device [ 776.360116][ T788] usb 1-1: ath9k_htc: USB layer deinitialized [ 776.428305][T18916] loop3: detected capacity change from 0 to 64 [ 776.671556][T18921] loop0: detected capacity change from 0 to 2048 [ 776.729785][T18921] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 776.795996][T18927] netlink: 'syz.3.5684': attribute type 1 has an invalid length. [ 776.866207][T18928] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 776.867003][T18921] syz.0.5681: attempt to access beyond end of device [ 776.867003][T18921] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 777.121794][T18921] syz.0.5681: attempt to access beyond end of device [ 777.121794][T18921] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 777.146608][T18921] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 777.167065][ T28] audit: type=1326 audit(531048.682:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18939 comm="syz.2.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 777.244826][ T28] audit: type=1326 audit(531048.725:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18939 comm="syz.2.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 777.323822][ T28] audit: type=1326 audit(531048.735:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18939 comm="syz.2.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 777.375337][ T28] audit: type=1326 audit(531048.735:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18939 comm="syz.2.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 777.611467][ T5838] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 777.795596][ T5838] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 777.845869][T18964] loop2: detected capacity change from 0 to 1024 [ 777.857464][ T5838] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 777.877210][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.886529][ T5838] usb 4-1: Product: syz [ 777.900511][ T5838] usb 4-1: Manufacturer: syz [ 777.913552][ T5838] usb 4-1: SerialNumber: syz [ 777.935315][ T5838] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 778.263774][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5708'. [ 778.279781][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5708'. [ 778.342371][ T5838] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 778.383657][ T5838] usb 4-1: USB disconnect, device number 46 [ 778.895157][ T28] audit: type=1326 audit(531050.516:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18988 comm="syz.4.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 778.969015][ T28] audit: type=1326 audit(531050.516:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18988 comm="syz.4.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 779.043506][ T28] audit: type=1326 audit(531050.527:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18988 comm="syz.4.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 779.131292][ T28] audit: type=1326 audit(531050.527:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18988 comm="syz.4.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 779.193185][ T28] audit: type=1326 audit(531050.527:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18988 comm="syz.4.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 779.565662][ T5817] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 779.606003][T18987] loop2: detected capacity change from 0 to 32768 [ 779.646514][T18987] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 779.693806][T19017] loop0: detected capacity change from 0 to 1024 [ 779.751080][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 779.808339][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 779.842418][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 779.873889][T18987] XFS (loop2): Ending clean mount [ 779.882280][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 779.899062][ T34] hfsplus: b-tree write err: -5, ino 4 [ 779.913985][T18987] XFS (loop2): Quotacheck needed: Please wait. [ 779.930314][ T5817] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 779.941103][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.988869][ T5817] usb 4-1: Product: syz [ 779.993097][ T5817] usb 4-1: Manufacturer: syz [ 780.036716][ T5817] usb 4-1: SerialNumber: syz [ 780.043896][T18987] XFS (loop2): Quotacheck: Done. [ 780.068792][ T5817] usb 4-1: config 0 descriptor?? [ 780.109075][T19028] ip6tnl1: entered allmulticast mode [ 780.181743][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 780.317910][ T5817] adutux 4-1:0.0: Could not retrieve serial number [ 780.332461][ T5817] adutux: probe of 4-1:0.0 failed with error -5 [ 780.548808][ T5894] usb 4-1: USB disconnect, device number 47 [ 780.630397][T19038] x_tables: duplicate entry at hook 2 [ 780.859637][T19048] comedi comedi0: Cannot bond this driver to itself! [ 781.032644][T19054] loop2: detected capacity change from 0 to 2048 [ 781.092872][T19057] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 781.166923][T19054] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 781.195721][T19054] Remounting filesystem read-only [ 781.387515][T19066] loop2: detected capacity change from 0 to 256 [ 781.448579][T19066] FAT-fs (loop2): Directory bread(block 64) failed [ 781.472297][T19066] FAT-fs (loop2): Directory bread(block 65) failed [ 781.496435][T19066] FAT-fs (loop2): Directory bread(block 66) failed [ 781.511870][T19066] FAT-fs (loop2): Directory bread(block 67) failed [ 781.521598][T19066] FAT-fs (loop2): Directory bread(block 68) failed [ 781.539372][T19066] FAT-fs (loop2): Directory bread(block 69) failed [ 781.556507][T19066] FAT-fs (loop2): Directory bread(block 70) failed [ 781.566509][T19072] xt_HMARK: spi-set and port-set can't be combined [ 781.579349][T19066] FAT-fs (loop2): Directory bread(block 71) failed [ 781.616617][T19074] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5751'. [ 781.640121][T19066] FAT-fs (loop2): Directory bread(block 72) failed [ 781.649681][T19066] FAT-fs (loop2): Directory bread(block 73) failed [ 782.004296][T19085] loop0: detected capacity change from 0 to 1024 [ 782.512780][ T28] audit: type=1326 audit(531054.411:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19101 comm="syz.0.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 782.595306][ T28] audit: type=1326 audit(531054.422:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19101 comm="syz.0.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 782.657504][ T28] audit: type=1326 audit(531054.454:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19101 comm="syz.0.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 782.712267][ T28] audit: type=1326 audit(531054.454:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19101 comm="syz.0.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354df9bf79 code=0x7ffc0000 [ 782.795174][T19109] loop0: detected capacity change from 0 to 256 [ 782.986755][T19089] loop3: detected capacity change from 0 to 32768 [ 783.009381][T19089] [ 783.009381][T19089] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 783.009381][T19089] [ 783.127988][T19089] read_mapping_page failed! [ 783.147826][T19120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5773'. [ 783.164796][T19089] ERROR: (device loop3): txCommit: [ 783.164796][T19089] [ 783.193775][T19089] ERROR: (device loop3): remounting filesystem as read-only [ 783.359768][ T5817] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 783.537465][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 783.549319][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 783.582489][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 783.599656][ T5817] usb 1-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 783.620991][ T968] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 783.630255][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.646203][ T5817] usb 1-1: Product: syz [ 783.650911][ T5817] usb 1-1: Manufacturer: syz [ 783.655528][ T5817] usb 1-1: SerialNumber: syz [ 783.668265][ T5817] usb 1-1: config 0 descriptor?? [ 783.810332][ T968] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 783.833613][ T968] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.853851][ T968] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 783.863963][ T968] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.884428][ T968] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.911228][ T968] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 783.920546][ T968] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 783.932482][ T968] usb 5-1: Product: syz [ 783.936693][ T968] usb 5-1: Manufacturer: syz [ 783.948729][ T5894] usb 1-1: USB disconnect, device number 57 [ 783.956519][ T968] cdc_wdm 5-1:1.0: skipping garbage [ 783.965720][ T968] cdc_wdm 5-1:1.0: skipping garbage [ 784.000112][ T968] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 784.006768][ T5817] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 784.017748][ T968] cdc_wdm 5-1:1.0: Unknown control protocol [ 784.167898][T19126] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 784.183645][ T968] usb 5-1: USB disconnect, device number 3 [ 784.209948][ T5817] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 784.235641][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.257739][ T5817] usb 3-1: config 0 descriptor?? [ 784.284789][ T5817] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 784.379264][T19145] loop3: detected capacity change from 0 to 128 [ 784.398972][T19145] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 784.440102][T19145] System zones: 1-3, 19-19, 35-36 [ 784.477678][T19145] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 784.563290][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 784.654277][ T5817] gspca_stv06xx: I2C: Read error writing address: -71 [ 784.685651][ T5817] usb 3-1: USB disconnect, device number 65 [ 784.922782][T19159] loop0: detected capacity change from 0 to 512 [ 784.935483][T19155] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 785.011041][T19156] loop3: detected capacity change from 0 to 4096 [ 785.017978][T19159] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 785.079187][T19159] EXT4-fs (loop0): orphan cleanup on readonly fs [ 785.095416][T19156] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 785.108581][T19159] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #16: comm syz.0.5790: corrupted inode contents [ 785.121863][T19159] EXT4-fs (loop0): Remounting filesystem read-only [ 785.127708][T19156] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 785.130163][T19159] EXT4-fs (loop0): 1 truncate cleaned up [ 785.142858][ T240] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 785.161621][ T240] Quota error (device loop0): write_blk: dquota write failed [ 785.169280][T19163] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 785.177741][ T240] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 785.188654][T19163] netlink: 'syz.4.5791': attribute type 3 has an invalid length. [ 785.196788][T19163] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5791'. [ 785.206185][ T240] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 785.217273][ T240] Quota error (device loop0): write_blk: dquota write failed [ 785.225122][ T240] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 785.226545][T19163] NCSI netlink: No device for ifindex 0 [ 785.236398][ T240] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 785.262241][ T240] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 785.274823][ T240] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 785.318126][T19159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 785.380848][ T3506] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 785.400715][ T5772] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 785.408969][ T5772] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 785.437979][ T5772] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 785.457563][ T240] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 785.505529][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 786.244059][T19195] loop0: detected capacity change from 0 to 256 [ 786.328394][T19195] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 786.421612][T19201] loop4: detected capacity change from 0 to 2048 [ 786.478584][T19201] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.487711][T19195] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 786.487858][T19195] exFAT-fs (loop0): Filesystem has been set read-only [ 786.529310][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5808'. [ 786.578535][T19203] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136) [ 786.611901][T19203] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 787.135352][T19225] nfs: Unknown parameter 'ntext' [ 787.177063][T19229] loop4: detected capacity change from 0 to 512 [ 787.247955][T19229] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 787.274596][T19229] EXT4-fs (loop4): orphan cleanup on readonly fs [ 787.334213][T19229] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #16: comm syz.4.5820: corrupted inode contents [ 787.381619][T19229] EXT4-fs (loop4): Remounting filesystem read-only [ 787.388974][T19229] EXT4-fs (loop4): 1 truncate cleaned up [ 787.438811][T19241] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 787.452336][ T3506] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 787.499496][ T3506] Quota error (device loop4): write_blk: dquota write failed [ 787.535444][ T3506] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 787.562828][ T3506] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 787.590772][ T3506] Quota error (device loop4): write_blk: dquota write failed [ 787.610213][ T3506] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 787.646732][ T3506] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 787.677048][ T3506] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 787.712252][ T3506] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 787.762243][T19229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 787.826290][T19253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5831'. [ 787.901309][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 788.548070][T19283] loop3: detected capacity change from 0 to 256 [ 788.752873][T19283] FAT-fs (loop3): Directory bread(block 64) failed [ 788.761253][T19283] FAT-fs (loop3): Directory bread(block 65) failed [ 788.783041][T19283] FAT-fs (loop3): Directory bread(block 66) failed [ 788.803649][T19283] FAT-fs (loop3): Directory bread(block 67) failed [ 788.817385][T19283] FAT-fs (loop3): Directory bread(block 68) failed [ 788.825508][T19283] FAT-fs (loop3): Directory bread(block 69) failed [ 788.863177][T19283] FAT-fs (loop3): Directory bread(block 70) failed [ 788.872393][T19283] FAT-fs (loop3): Directory bread(block 71) failed [ 788.884647][T19283] FAT-fs (loop3): Directory bread(block 72) failed [ 788.900312][T19283] FAT-fs (loop3): Directory bread(block 73) failed [ 788.923940][T19292] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 788.945610][T19295] loop4: detected capacity change from 0 to 256 [ 789.093192][T19295] FAT-fs (loop4): Directory bread(block 64) failed [ 789.099894][T19295] FAT-fs (loop4): Directory bread(block 65) failed [ 789.145376][T19295] FAT-fs (loop4): Directory bread(block 66) failed [ 789.172381][T19295] FAT-fs (loop4): Directory bread(block 67) failed [ 789.189766][T19295] FAT-fs (loop4): Directory bread(block 68) failed [ 789.216300][T19295] FAT-fs (loop4): Directory bread(block 69) failed [ 789.242386][T19295] FAT-fs (loop4): Directory bread(block 70) failed [ 789.248989][T19295] FAT-fs (loop4): Directory bread(block 71) failed [ 789.285854][T19295] FAT-fs (loop4): Directory bread(block 72) failed [ 789.314746][T19295] FAT-fs (loop4): Directory bread(block 73) failed [ 789.641205][T19313] kAFS: unparsable volume name [ 790.501281][T19351] netlink: 'syz.3.5881': attribute type 21 has an invalid length. [ 790.529593][T19351] IPv6: NLM_F_CREATE should be specified when creating new route [ 790.551809][T19351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 790.559782][T19351] IPv6: NLM_F_CREATE should be set when creating new route [ 790.567261][T19351] IPv6: NLM_F_CREATE should be set when creating new route [ 790.574599][T19351] IPv6: NLM_F_CREATE should be set when creating new route [ 790.968267][T19368] loop3: detected capacity change from 0 to 2048 [ 791.776826][T19399] openvswitch: netlink: Missing valid actions attribute. [ 791.783953][T19399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.624029][T19437] loop0: detected capacity change from 0 to 164 [ 792.833535][ T5778] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 793.171368][T19456] loop4: detected capacity change from 0 to 2048 [ 793.198634][T19461] loop2: detected capacity change from 0 to 64 [ 793.301876][T19456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.396807][T19456] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #12: block 2: comm syz.4.5932: lblock 0 mapped to illegal pblock 2 (length 1) [ 793.594668][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.609105][T19519] loop0: detected capacity change from 0 to 128 [ 794.663164][T19519] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 794.788547][T19523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 794.866085][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 795.004526][T19531] netlink: 'syz.0.5964': attribute type 10 has an invalid length. [ 795.012839][T19531] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.5964'. [ 795.036460][T19531] openvswitch: netlink: Flow key attr not present in new flow. [ 795.493375][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5972'. [ 795.708065][T19557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5978'. [ 795.845618][T19565] program syz.2.5982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 795.849436][T19564] netlink: 'syz.3.5981': attribute type 3 has an invalid length. [ 796.140135][T19571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 796.176387][T19577] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5988'. [ 797.006421][T19605] loop2: detected capacity change from 0 to 256 [ 797.049769][T19604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.300260][T19587] loop0: detected capacity change from 0 to 40427 [ 797.328314][T19587] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 797.357225][T19587] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 797.379247][T19587] F2FS-fs (loop0): invalid crc value [ 797.391183][T19587] F2FS-fs (loop0): Found nat_bits in checkpoint [ 797.563216][T19587] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 797.591972][T19587] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 797.922266][T19626] netlink: 'syz.3.6011': attribute type 9 has an invalid length. [ 798.504839][T19621] loop2: detected capacity change from 0 to 32768 [ 798.563960][T19621] ialloc: diAlloc returned -5! [ 798.783763][T19643] netlink: 'syz.0.6019': attribute type 3 has an invalid length. [ 798.809208][T19643] netlink: 'syz.0.6019': attribute type 27 has an invalid length. [ 799.176116][ T968] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 799.202547][T19650] netlink: 'syz.4.6022': attribute type 10 has an invalid length. [ 799.221865][T19650] macvlan1: entered allmulticast mode [ 799.248291][T19650] veth1_vlan: entered allmulticast mode [ 799.287420][T19650] team0: Port device macvlan1 added [ 799.353222][T19650] syz.4.6022 (19650) used greatest stack depth: 20072 bytes left [ 799.388427][ T968] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 799.409593][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.437892][ T968] usb 4-1: Product: syz [ 799.446454][ T968] usb 4-1: Manufacturer: syz [ 799.459912][ T968] usb 4-1: SerialNumber: syz [ 799.476982][ T968] usb 4-1: config 0 descriptor?? [ 799.714578][ T968] usb-storage 4-1:0.0: USB Mass Storage device detected [ 799.941725][ T968] usb 4-1: USB disconnect, device number 48 [ 799.996565][ T5817] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 800.173980][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 800.184818][ T5817] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 800.211731][ T5817] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 800.238480][ T5817] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 800.257222][ T5817] usb 5-1: Product: syz [ 800.262227][ T5817] usb 5-1: Manufacturer: syz [ 800.268492][ T5817] usb 5-1: SerialNumber: syz [ 800.308885][ T28] audit: type=1326 audit(531073.509:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19680 comm="syz.2.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 800.350870][ T28] audit: type=1326 audit(531073.509:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19680 comm="syz.2.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 800.406205][ T28] audit: type=1326 audit(531073.541:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19680 comm="syz.2.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 800.461283][ T28] audit: type=1326 audit(531073.541:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19680 comm="syz.2.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 800.501067][ T28] audit: type=1326 audit(531073.541:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19680 comm="syz.2.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 800.534755][T19687] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6037'. [ 800.545197][ T5817] usb 5-1: Invalid connection information received from device [ 800.732875][ T968] usb 5-1: USB disconnect, device number 4 [ 801.038301][T19706] loop0: detected capacity change from 0 to 256 [ 801.051061][T19706] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 801.066774][T19706] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 801.092003][T19706] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 801.170775][ T968] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 801.376298][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 801.386069][ T968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 801.440841][ T968] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 801.458656][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.479022][ T968] usb 4-1: Product: syz [ 801.483263][ T968] usb 4-1: Manufacturer: syz [ 801.516335][ T968] usb 4-1: SerialNumber: syz [ 801.532643][ T968] usb 4-1: config 0 descriptor?? [ 801.556908][ T968] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 801.732889][T19728] netlink: 'syz.0.6058': attribute type 2 has an invalid length. [ 801.765108][ T968] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 801.801841][ T968] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 801.995916][ T5894] usb 4-1: USB disconnect, device number 49 [ 802.061600][T19738] Sensor A: ================= START STATUS ================= [ 802.095797][T19738] Sensor A: Test Pattern: 75% Colorbar [ 802.112569][T19740] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6064'. [ 802.122230][T19738] Sensor A: Show Information: All [ 802.127359][T19738] Sensor A: Vertical Flip: false [ 802.148863][T19742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6065'. [ 802.168412][T19738] Sensor A: Horizontal Flip: false [ 802.195729][T19738] Sensor A: Brightness: 128 [ 802.207033][T19738] Sensor A: Contrast: 128 [ 802.215276][T19738] Sensor A: Hue: 0 [ 802.239564][T19738] Sensor A: Saturation: 128 [ 802.251741][T19738] Sensor A: ================== END STATUS ================== [ 802.533301][ T788] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 802.710356][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 802.767386][T19765] netlink: 'syz.2.6077': attribute type 7 has an invalid length. [ 802.783073][ T788] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 802.802309][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.818796][ T788] usb 1-1: Product: syz [ 802.824200][ T788] usb 1-1: Manufacturer: syz [ 802.828945][ T788] usb 1-1: SerialNumber: syz [ 802.841058][ T788] r8152-cfgselector 1-1: config 0 descriptor?? [ 802.952863][T19768] loop4: detected capacity change from 0 to 1764 [ 803.173838][T19776] netlink: 'syz.3.6081': attribute type 1 has an invalid length. [ 803.187071][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6081'. [ 803.246958][ T788] r8152-cfgselector 1-1: Unknown version 0x0000 [ 803.270488][ T788] r8152-cfgselector 1-1: USB disconnect, device number 58 [ 803.962888][T19778] loop4: detected capacity change from 0 to 32768 [ 803.998599][T19778] (syz.4.6082,19778,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 804.039519][T19802] netlink: 'syz.2.6095': attribute type 10 has an invalid length. [ 804.053452][T19778] (syz.4.6082,19778,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 804.088283][T19802] macvlan1: entered allmulticast mode [ 804.126545][T19778] JBD2: Ignoring recovery information on journal [ 804.133867][T19802] veth1_vlan: entered allmulticast mode [ 804.181424][T19802] team0: Port device macvlan1 added [ 804.233981][T19778] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 804.639865][T18083] ocfs2: Unmounting device (7,4) on (node local) [ 804.861553][T14627] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 805.057590][T14627] usb 4-1: Using ep0 maxpacket: 16 [ 805.086140][T14627] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 805.108096][T14627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.131857][T14627] usb 4-1: Product: syz [ 805.141781][T14627] usb 4-1: Manufacturer: syz [ 805.150634][T14627] usb 4-1: SerialNumber: syz [ 805.164967][T14627] r8152-cfgselector 4-1: config 0 descriptor?? [ 805.445106][T19852] __vm_enough_memory: pid: 19852, comm: syz.2.6119, not enough memory for the allocation [ 805.618186][T14627] r8152-cfgselector 4-1: Unknown version 0x0000 [ 805.645542][T14627] r8152-cfgselector 4-1: USB disconnect, device number 50 [ 805.929637][T19869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 806.208344][T19882] loop0: detected capacity change from 0 to 16 [ 806.255622][T19882] erofs: (device loop0): mounted with root inode @ nid 36. [ 806.348563][ T5778] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 806.370380][T19882] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 806.414694][ T28] audit: type=1800 audit(531080.064:81): pid=19882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6134" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 806.569713][T19895] netlink: 'syz.4.6139': attribute type 13 has an invalid length. [ 806.600339][T19895] netlink: 'syz.4.6139': attribute type 27 has an invalid length. [ 806.671296][T19900] @0Ù: renamed from dummy0 (while UP) [ 806.882192][T19911] loop0: detected capacity change from 0 to 16 [ 806.899150][T19912] loop2: detected capacity change from 0 to 512 [ 806.928563][T19911] erofs: (device loop0): mounted with root inode @ nid 36. [ 806.970126][T19912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.122992][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.331322][T19925] loop0: detected capacity change from 0 to 4096 [ 807.349815][T19929] loop4: detected capacity change from 0 to 8 [ 807.367358][T19929] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 807.374560][T19925] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 807.419396][T19929] cramfs: Error -3 while decompressing! [ 807.440123][T19929] cramfs: ffffffff973f4348(18)->ffff88804df84000(4096) [ 807.457516][T19929] cramfs: Error -3 while decompressing! [ 807.473155][T19929] cramfs: ffffffff973f4348(18)->ffff88804df84000(4096) [ 807.535004][ T28] audit: type=1800 audit(531081.255:82): pid=19929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6155" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 807.585749][T19925] ntfs3: loop0: failed to convert "c46c" to cp855 [ 808.336924][T19927] loop2: detected capacity change from 0 to 40427 [ 808.380389][T19927] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 808.393823][T19927] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 808.410779][T19927] F2FS-fs (loop2): invalid crc value [ 808.453391][T19927] F2FS-fs (loop2): Found nat_bits in checkpoint [ 808.620438][T19927] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 808.641752][T19927] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 808.724352][T19967] xt_TCPMSS: Only works on TCP SYN packets [ 808.954005][T19974] netlink: 'syz.3.6176': attribute type 1 has an invalid length. [ 808.973087][T19974] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6176'. [ 809.036408][T19976] xt_connbytes: Forcing CT accounting to be enabled [ 809.046258][T19976] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 809.551215][T19992] loop3: detected capacity change from 0 to 164 [ 809.972999][T20006] loop3: detected capacity change from 0 to 256 [ 810.034971][T20006] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 810.125112][T20009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6192'. [ 810.256847][T20010] loop2: detected capacity change from 0 to 4096 [ 810.346172][T20015] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 810.470476][T20010] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 810.566552][T19990] loop4: detected capacity change from 0 to 40427 [ 810.640214][T19990] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 810.666459][T19990] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 810.681202][T19990] F2FS-fs (loop4): invalid crc value [ 810.710182][T19990] F2FS-fs (loop4): Found nat_bits in checkpoint [ 810.909507][T19990] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 810.942889][T19990] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 811.661070][T20032] loop3: detected capacity change from 0 to 32768 [ 811.696868][T20032] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.6200 (20032) [ 811.755155][T20032] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 811.774991][T20032] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 811.798254][T20032] BTRFS info (device loop3): force zlib compression, level 3 [ 811.824510][T20032] BTRFS info (device loop3): turning on flush-on-commit [ 811.831588][T20032] BTRFS info (device loop3): max_inline at 4096 [ 811.863185][T20032] BTRFS info (device loop3): using free space tree [ 811.904711][T20038] loop0: detected capacity change from 0 to 32768 [ 811.951033][T20050] cgroup: name respecified [ 811.998098][T20038] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 812.103480][T20032] BTRFS info (device loop3): enabling ssd optimizations [ 812.110672][T20032] BTRFS info (device loop3): auto enabling async discard [ 812.225942][T20038] XFS (loop0): Ending clean mount [ 812.257588][T20038] XFS (loop0): Quotacheck needed: Please wait. [ 812.268256][ T5772] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 812.359496][T20038] XFS (loop0): Quotacheck: Done. [ 812.496602][T20084] __vm_enough_memory: pid: 20084, comm: syz.4.6215, not enough memory for the allocation [ 812.558481][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 812.608986][T20088] geneve2: entered promiscuous mode [ 812.995990][T20098] loop4: detected capacity change from 0 to 256 [ 813.013159][T20098] exfat: Deprecated parameter 'utf8' [ 813.069018][T20098] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 813.289485][T20106] (null): rxe_set_mtu: Set mtu to 4096 [ 813.305486][T20106] lo speed is unknown, defaulting to 1000 [ 813.328649][T20106] lo speed is unknown, defaulting to 1000 [ 813.344429][T20106] lo speed is unknown, defaulting to 1000 [ 813.359947][T20108] loop3: detected capacity change from 0 to 4096 [ 813.417734][T20111] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 813.473034][T20108] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 813.887107][ T5817] lo speed is unknown, defaulting to 1000 [ 813.903536][T20106] infiniband syz0: set active [ 813.908711][T20106] infiniband syz0: added lo [ 814.034722][T20106] RDS/IB: syz0: added [ 814.039990][T20106] smc: adding ib device syz0 with port count 1 [ 814.061705][T20106] smc: ib device syz0 port 1 has pnetid [ 814.071708][ T5894] lo speed is unknown, defaulting to 1000 [ 814.085763][T20106] lo speed is unknown, defaulting to 1000 [ 814.424242][T20113] loop2: detected capacity change from 0 to 32768 [ 814.444122][T20113] (syz.2.6229,20113,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 814.478280][T20113] (syz.2.6229,20113,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 814.517788][T20113] JBD2: Ignoring recovery information on journal [ 814.597246][T20113] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 814.699590][T20106] lo speed is unknown, defaulting to 1000 [ 814.907609][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 815.082939][T20144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6243'. [ 815.293244][T20106] lo speed is unknown, defaulting to 1000 [ 815.329032][T20152] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6246'. [ 815.772257][T20106] lo speed is unknown, defaulting to 1000 [ 815.832152][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 816.018397][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 816.047583][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 816.067175][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 816.094212][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 816.139856][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.147947][ T9] usb 4-1: Product: syz [ 816.161906][ T9] usb 4-1: Manufacturer: syz [ 816.166684][ T9] usb 4-1: SerialNumber: syz [ 816.201054][ T9] usb 4-1: config 0 descriptor?? [ 816.236059][T20106] lo speed is unknown, defaulting to 1000 [ 816.474867][ T5894] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 816.611632][ T5817] usb 4-1: USB disconnect, device number 51 [ 816.687876][ T5894] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 816.707768][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.715807][ T5894] usb 1-1: Product: syz [ 816.737535][ T5894] usb 1-1: Manufacturer: syz [ 816.742908][ T5894] usb 1-1: SerialNumber: syz [ 816.759551][ T5894] usb 1-1: config 0 descriptor?? [ 816.881874][T20184] loop2: detected capacity change from 0 to 32768 [ 816.922040][T20184] jfs_lookup: iget failed on inum 4 [ 816.976936][ T5894] hso 1-1:0.0: Can't find BULK IN endpoint [ 816.986271][ T5894] usb-storage 1-1:0.0: USB Mass Storage device detected [ 817.233503][ T5894] usb 1-1: USB disconnect, device number 59 [ 817.866246][T20228] bond0: Unable to set up delay as MII monitoring is disabled [ 818.481299][T20249] loop2: detected capacity change from 0 to 164 [ 818.853382][T20259] netlink: 'syz.0.6295': attribute type 8 has an invalid length. [ 819.081538][T20270] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 819.356669][T20282] netlink: 'syz.3.6308': attribute type 10 has an invalid length. [ 819.398684][T20282] team0: Device veth1_macvtap failed to register rx_handler [ 819.410705][T20284] tmpfs: Bad value for 'mpol' [ 819.575017][T20291] loop0: detected capacity change from 0 to 256 [ 819.659461][T20291] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 819.677231][T20291] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 819.698678][T20294] binfmt_misc: register: failed to install interpreter file ./bus [ 819.728830][T20296] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 819.745104][T20296] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 820.076224][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6320'. [ 820.090540][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6320'. [ 820.147894][ T5817] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 820.361145][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 820.383517][T20320] netlink: 'syz.0.6326': attribute type 12 has an invalid length. [ 820.412278][ T5817] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 820.436986][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.445111][ T5817] usb 5-1: Product: syz [ 820.473336][ T5817] usb 5-1: Manufacturer: syz [ 820.482088][ T5817] usb 5-1: SerialNumber: syz [ 820.501284][ T5817] usb 5-1: config 0 descriptor?? [ 820.516565][ T5817] usbtouchscreen: probe of 5-1:0.0 failed with error -12 [ 820.585483][T20324] loop3: detected capacity change from 0 to 512 [ 820.630746][T20328] netlink: 'syz.2.6331': attribute type 6 has an invalid length. [ 820.652952][T20324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.775317][ T9] usb 5-1: USB disconnect, device number 5 [ 820.806428][T20324] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 820.897810][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.062007][T20344] netlink: 'syz.2.6337': attribute type 10 has an invalid length. [ 821.091714][T20344] team0: Device veth1_macvtap failed to register rx_handler [ 821.334038][T20352] netlink: 'syz.0.6350': attribute type 10 has an invalid length. [ 821.370914][T20355] loop3: detected capacity change from 0 to 256 [ 821.382195][T20352] team0: Device veth1_macvtap failed to register rx_handler [ 821.442610][T20355] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 821.508660][T20355] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 822.151114][T20377] libceph: resolve 'c' (ret=-3): failed [ 822.189175][T20381] netlink: 'syz.2.6355': attribute type 8 has an invalid length. [ 822.400037][T20363] loop4: detected capacity change from 0 to 32768 [ 822.446095][T20363] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 822.509096][T20363] XFS (loop4): Ending clean mount [ 822.529144][T20363] XFS (loop4): Quotacheck needed: Please wait. [ 822.627172][ T5839] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 822.649809][ T28] audit: type=1326 audit(531097.477:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 822.705033][T20363] XFS (loop4): Quotacheck: Done. [ 822.711562][ T28] audit: type=1326 audit(531097.477:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 822.735193][ T28] audit: type=1326 audit(531097.477:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 822.759595][ T28] audit: type=1326 audit(531097.477:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 822.782238][ T28] audit: type=1326 audit(531097.509:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f65b3d9bf79 code=0x7ffc0000 [ 822.807317][ T28] audit: type=1326 audit(531097.531:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b3d5c84e code=0x7ffc0000 [ 822.851783][ T28] audit: type=1326 audit(531097.542:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b3d5c84e code=0x7ffc0000 [ 822.884401][ T28] audit: type=1326 audit(531097.542:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b3d5c84e code=0x7ffc0000 [ 822.886623][ T5839] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 822.915712][ T28] audit: type=1326 audit(531097.542:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b3d5c84e code=0x7ffc0000 [ 822.944907][ T28] audit: type=1326 audit(531097.552:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.2.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65b3d5c84e code=0x7ffc0000 [ 822.967030][ T5839] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 822.967055][ T5839] usb 1-1: config 220 has no interface number 2 [ 822.967121][ T5839] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 822.967147][ T5839] usb 1-1: config 220 interface 0 has no altsetting 0 [ 822.967165][ T5839] usb 1-1: config 220 interface 76 has no altsetting 0 [ 822.967183][ T5839] usb 1-1: config 220 interface 1 has no altsetting 0 [ 823.027204][ T5839] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 823.052914][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.081118][ T5839] usb 1-1: Product: syz [ 823.095327][ T5839] usb 1-1: Manufacturer: syz [ 823.099986][ T5839] usb 1-1: SerialNumber: syz [ 823.118561][T18083] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 823.363103][ T5839] usb 1-1: selecting invalid altsetting 0 [ 823.389793][ T5839] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 823.413237][ T5839] usb 1-1: No valid video chain found. [ 823.443041][ T5839] usb 1-1: selecting invalid altsetting 0 [ 823.452933][ T5839] usbtest: probe of 1-1:220.1 failed with error -22 [ 823.472650][ T5839] usb 1-1: USB disconnect, device number 60 [ 823.899896][T20423] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6373'. [ 823.910767][T20423] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 824.598652][ T5838] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 824.782483][T20463] netlink: 'syz.3.6392': attribute type 5 has an invalid length. [ 824.789563][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 824.799908][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 824.819849][ T5838] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 824.845216][ T5838] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 824.869802][ T5838] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 824.891282][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.908910][ T5838] usb 1-1: Product: syz [ 824.913240][ T5838] usb 1-1: Manufacturer: syz [ 824.917904][ T5838] usb 1-1: SerialNumber: syz [ 824.930643][ T5838] usb 1-1: config 0 descriptor?? [ 824.936769][T20443] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 824.967542][T20443] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 824.979795][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 824.986242][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 824.994940][ T5838] port100 1-1:0.0: NFC: Could not get supported command types [ 825.021835][T14627] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 825.238991][ T5839] usb 1-1: USB disconnect, device number 61 [ 825.252792][T14627] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 825.266074][T14627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.290249][T14627] usb 3-1: config 0 has no interface number 0 [ 825.297526][T14627] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 825.331503][T14627] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 825.345788][T14627] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.359221][T14627] usb 3-1: config 0 interface 52 has no altsetting 0 [ 825.369854][T14627] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 825.385869][T14627] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 825.414453][T14627] usb 3-1: Product: syz [ 825.418678][T14627] usb 3-1: Manufacturer: syz [ 825.436231][T14627] usb 3-1: SerialNumber: syz [ 825.458124][T14627] usb 3-1: config 0 descriptor?? [ 825.569709][T20486] sctp: [Deprecated]: syz.4.6401 (pid 20486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 825.569709][T20486] Use struct sctp_sack_info instead [ 825.673655][T14627] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 825.685780][T14627] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 825.903861][T14627] usb 3-1: USB disconnect, device number 66 [ 826.007571][T20502] loop4: detected capacity change from 0 to 512 [ 826.093078][T20502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.119615][T20502] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 826.165716][T18083] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.252229][ T5817] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 826.336086][T20514] loop3: detected capacity change from 0 to 2048 [ 826.375636][T20514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.466481][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 826.492360][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 826.513830][ T5817] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 826.531384][ T5817] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 826.546605][ T5817] usb 1-1: Product: syz [ 826.558975][ T5817] usb 1-1: Manufacturer: syz [ 826.569092][ T5817] usb 1-1: SerialNumber: syz [ 826.812221][ T5817] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 826.820556][ T5817] usb 1-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 826.861992][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 826.862420][ T5817] usb 1-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 826.868569][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 826.892332][ T5817] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 827.022925][ T5817] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 827.045818][ T5817] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 827.077596][ T5817] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 827.097802][ T5817] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 827.122919][ T5817] usb 1-1: USB disconnect, device number 62 [ 827.163661][ T5817] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 827.201985][ T5817] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 827.219890][ T5817] visor 1-1:1.0: device disconnected [ 827.337724][T20541] netlink: 'syz.2.6427': attribute type 6 has an invalid length. [ 827.362195][T20541] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6427'. [ 827.839545][T20561] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 828.344887][T20584] netlink: 'syz.3.6448': attribute type 7 has an invalid length. [ 828.400639][T20587] netlink: 'syz.2.6450': attribute type 3 has an invalid length. [ 828.422032][T20587] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6450'. [ 828.432371][T20588] netlink: 'syz.4.6449': attribute type 10 has an invalid length. [ 828.470738][T20588] team0: Device veth1_macvtap failed to register rx_handler [ 828.787479][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 828.811565][T20599] loop0: detected capacity change from 0 to 4096 [ 828.993132][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 829.003787][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 829.034826][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 829.063866][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.083403][ T9] usb 4-1: config 0 descriptor?? [ 829.337434][ T9] usb 4-1: string descriptor 0 read error: -71 [ 829.385761][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55 [ 829.417367][ T5123] bcm5974 4-1:0.0: could not read from device [ 829.450655][ T5123] bcm5974 4-1:0.0: could not read from device [ 829.459405][ T5123] bcm5974 4-1:0.0: could not read from device [ 829.486970][ T9] usb 4-1: USB disconnect, device number 52 [ 829.750401][T20630] loop2: detected capacity change from 0 to 512 [ 829.995214][T20637] (null): rxe_set_mtu: Set mtu to 4096 [ 830.015632][T20637] rdma_rxe: rxe_newlink: failed to add lo [ 830.352655][T20653] loop0: detected capacity change from 0 to 64 [ 830.376569][T20653] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 830.535683][T20658] netlink: 'syz.4.6485': attribute type 5 has an invalid length. [ 831.142954][ T28] kauditd_printk_skb: 177 callbacks suppressed [ 831.142970][ T28] audit: type=1800 audit(531106.586:270): pid=20653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6484" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 831.192512][ T5839] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 831.387795][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 831.398080][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.423785][ T5839] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 831.443180][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.455876][ T5839] usb 4-1: Product: syz [ 831.460092][ T5839] usb 4-1: Manufacturer: syz [ 831.468202][ T5839] usb 4-1: SerialNumber: syz [ 831.477689][ T5839] usb 4-1: config 0 descriptor?? [ 831.490526][T20690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6501'. [ 831.504191][ T5839] usb 4-1: bad CDC descriptors [ 831.513004][ T5839] usb 4-1: unsupported MDLM descriptors [ 831.521250][T20690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6501'. [ 831.739110][ T5839] usb 4-1: USB disconnect, device number 53 [ 831.955149][T20706] loop0: detected capacity change from 0 to 65 [ 831.973294][T20706] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 831.983890][T20706] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 832.077583][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 832.225886][T20711] loop0: detected capacity change from 0 to 1764 [ 832.265196][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 832.292979][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 832.303921][ T9] usb 5-1: config 179 has no interface number 0 [ 832.310256][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 832.338023][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 832.383400][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 832.411461][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 832.440925][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 832.477429][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 832.504450][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 832.527581][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.549767][T20715] loop3: detected capacity change from 0 to 4096 [ 832.635923][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input56 [ 832.866889][ T5839] usb 5-1: USB disconnect, device number 6 [ 832.867149][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 832.906526][ T5839] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 833.149999][T20731] loop2: detected capacity change from 0 to 4096 [ 833.305605][T20731] ntfs: volume version 3.1. [ 833.460481][T20731] ntfs: (device loop2): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 834.706818][T20790] tmpfs: Bad value for 'mpol' [ 834.943551][T20796] loop0: detected capacity change from 0 to 4096 [ 834.972979][T20796] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 835.077583][T20796] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 835.135909][T20796] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 835.135909][T20796] [ 835.348996][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6559'. [ 835.897134][T20832] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 836.011474][ T788] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 836.206590][ T788] usb 5-1: Using ep0 maxpacket: 8 [ 836.219734][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 836.261495][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 836.294110][ T788] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 836.312068][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 836.325685][ T788] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 836.347362][ T788] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 836.360843][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.373583][ T788] usb 5-1: config 0 descriptor?? [ 836.384320][T20828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 836.774933][T20839] loop3: detected capacity change from 0 to 32768 [ 836.786074][T20839] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.6572 (20839) [ 836.803213][ T5778] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 836.814556][ T9] usb 5-1: USB disconnect, device number 7 [ 836.822983][ T788] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 836.844897][T20839] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 836.859481][T20839] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 836.877587][T20839] BTRFS info (device loop3): setting nodatasum [ 836.884607][T20839] BTRFS info (device loop3): using free space tree [ 837.005138][T20839] BTRFS info (device loop3): enabling ssd optimizations [ 837.029172][ T788] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 837.042794][T20839] BTRFS info (device loop3): auto enabling async discard [ 837.050341][ T788] usb 1-1: config 0 has no interface number 0 [ 837.057297][ T788] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 837.073348][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.090564][ T788] usb 1-1: Product: syz [ 837.103255][ T788] usb 1-1: Manufacturer: syz [ 837.110025][ T788] usb 1-1: SerialNumber: syz [ 837.117824][ T788] usb 1-1: config 0 descriptor?? [ 837.129566][ T788] hub 1-1:0.132: bad descriptor, ignoring hub [ 837.135814][ T788] hub: probe of 1-1:0.132 failed with error -5 [ 837.161685][ T788] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input58 [ 837.466623][ T5772] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 837.659345][ T5762] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5762) [ 838.417961][T20904] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 838.466493][T20904] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 838.485832][T20904] overlayfs: missing 'lowerdir' [ 838.526093][T20908] tmpfs: Bad value for 'mpol' [ 838.779957][T20916] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6601'. [ 838.877653][T20922] C: renamed from lo (while UP) [ 838.958292][T20922] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 839.418204][T20950] loop4: detected capacity change from 0 to 64 [ 839.465126][T20950] hfs: unable to locate alternate MDB [ 839.486688][T20950] hfs: continuing without an alternate MDB [ 839.738890][T20959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6621'. [ 839.759051][T20959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6621'. [ 839.796200][T20959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6621'. [ 839.852367][T20961] netdevsim netdevsim2 ªªªªªª: set [1, 1] type 2 family 0 port 20000 - 0 [ 839.873585][T20961] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 839.893288][T20961] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 839.905990][T20961] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 839.916417][T20961] geneve3: entered promiscuous mode [ 839.921693][T20961] geneve3: entered allmulticast mode [ 839.991757][T20961] netdevsim netdevsim2 ªªªªªª: unset [1, 1] type 2 family 0 port 20000 - 0 [ 840.003046][T20964] loop0: detected capacity change from 0 to 4096 [ 840.020204][T20961] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 840.044050][T20961] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 840.049089][T20964] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 840.074659][T20961] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 840.077431][T20964] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 840.119753][T20964] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 840.166071][T20964] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 840.260666][T20964] ntfs: volume version 3.1. [ 840.289162][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 840.484623][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 840.498488][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 840.520594][T20979] xt_ecn: cannot match TCP bits for non-tcp packets [ 840.526913][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 840.539159][T20977] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 840.564572][T20977] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 840.590513][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 840.605736][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.616454][ T9] usb 5-1: Product: syz [ 840.620769][ T9] usb 5-1: Manufacturer: syz [ 840.626317][ T9] usb 5-1: SerialNumber: syz [ 840.643466][ T9] usb 5-1: config 0 descriptor?? [ 840.656477][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 840.674634][ T9] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 840.904848][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 840.991785][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 841.020161][ T9] em28xx 5-1:0.0: board has no eeprom [ 841.053778][T20993] loop3: detected capacity change from 0 to 1024 [ 841.092436][T20993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.127762][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 841.141042][ T9] em28xx 5-1:0.0: dvb set to isoc mode. [ 841.161606][T21000] netlink: 'syz.2.6639': attribute type 21 has an invalid length. [ 841.222696][ T788] em28xx 5-1:0.0: Binding DVB extension [ 841.249429][ T9] usb 5-1: USB disconnect, device number 8 [ 841.306208][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 841.410225][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.459040][ T788] em28xx 5-1:0.0: Registering input extension [ 841.483483][ T9] em28xx 5-1:0.0: Closing input extension [ 841.548411][ T9] em28xx 5-1:0.0: Freeing device [ 841.882973][T21020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6648'. [ 841.916869][T21022] loop3: detected capacity change from 0 to 1764 [ 841.953026][ T5817] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 841.970102][ T5839] usb 1-1: USB disconnect, device number 63 [ 842.110084][T21026] netlink: 'syz.0.6651': attribute type 3 has an invalid length. [ 842.183034][ T5817] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 842.208809][ T5817] usb 3-1: config 0 has no interface number 0 [ 842.266275][ T5817] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 842.288822][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.321319][ T5817] usb 3-1: Product: syz [ 842.327524][ T5817] usb 3-1: Manufacturer: syz [ 842.335218][T21032] loop0: detected capacity change from 0 to 8 [ 842.349174][ T5817] usb 3-1: SerialNumber: syz [ 842.369154][ T5817] usb 3-1: config 0 descriptor?? [ 842.376232][T21032] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 842.395706][ T5817] hub 3-1:0.132: bad descriptor, ignoring hub [ 842.401860][ T5817] hub: probe of 3-1:0.132 failed with error -5 [ 842.419274][ T5762] udevd[5762]: incorrect cramfs checksum on /dev/loop0 [ 842.435795][ T5817] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input60 [ 842.445506][ T968] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 842.478598][ T5762] udevd[5762]: incorrect cramfs checksum on /dev/loop0 [ 842.486960][T21032] cramfs: Error -3 while decompressing! [ 842.494173][T21032] cramfs: ffffffff973f8368(1306)->ffff88804d502000(4096) [ 842.506279][T21032] cramfs: bad data blocksize 3221485966 [ 842.522991][T21032] cramfs: Error -3 while decompressing! [ 842.538559][T21032] cramfs: ffffffff973f8368(1306)->ffff88804d502000(4096) [ 842.567671][ T28] audit: type=1800 audit(531118.849:271): pid=21032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6654" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 842.661778][ T968] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 842.699085][ T968] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 842.721357][T21036] loop4: detected capacity change from 0 to 64 [ 842.731267][ T968] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 842.766651][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.805369][T21028] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 842.818620][ T968] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 843.057980][ T968] usb 3-1: USB disconnect, device number 67 [ 843.277889][ T5817] usb 4-1: USB disconnect, device number 54 [ 843.449082][T21056] cgroup: Name too long [ 843.909960][ T28] audit: type=1326 audit(531120.287:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 843.989363][ T28] audit: type=1326 audit(531120.287:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 844.075687][ T28] audit: type=1326 audit(531120.287:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 844.138070][ T28] audit: type=1326 audit(531120.287:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 844.170788][ T28] audit: type=1326 audit(531120.287:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.6674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fce0199bf79 code=0x7ffc0000 [ 844.202336][T21083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 844.381700][ T5817] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 844.427126][T21091] netlink: 'syz.3.6681': attribute type 29 has an invalid length. [ 844.600343][ T5817] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 844.623838][ T5817] usb 5-1: config 0 has no interface number 0 [ 844.643524][ T5817] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 844.667175][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.685064][ T5817] usb 5-1: Product: syz [ 844.695586][ T5817] usb 5-1: Manufacturer: syz [ 844.701068][ T5817] usb 5-1: SerialNumber: syz [ 844.713506][ T5817] usb 5-1: config 0 descriptor?? [ 844.740384][T21103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6688'. [ 844.754351][ T5817] hub 5-1:0.132: bad descriptor, ignoring hub [ 844.760496][ T5817] hub: probe of 5-1:0.132 failed with error -5 [ 844.786002][ T5817] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input61 [ 844.804855][T21103] openvswitch: netlink: Missing key (keys=40, expected=100) [ 845.089133][ T23] usb 5-1: USB disconnect, device number 9 [ 845.181120][T21113] netlink: 'syz.0.6693': attribute type 2 has an invalid length. [ 845.480162][ T968] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 845.549441][T21117] loop3: detected capacity change from 0 to 40427 [ 845.574177][T21117] F2FS-fs (loop3): invalid crc value [ 845.659894][ T968] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.684937][ T968] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 845.710372][T21123] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 845.716263][ T968] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 845.728014][T21123] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 845.744817][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 845.767511][T21117] F2FS-fs (loop3): Start checkpoint disabled! [ 845.773945][ T968] usb 3-1: SerialNumber: syz [ 845.781643][T21117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 845.813631][T21123] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 845.855869][T21117] F2FS-fs (loop3): disabling checkpoint not compatible with read-only [ 846.014982][ T968] usb 3-1: 0:2 : does not exist [ 846.074675][ T968] usb 3-1: USB disconnect, device number 68 [ 846.112268][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.335085][T21121] loop0: detected capacity change from 0 to 32768 [ 846.410999][T21121] find_entry called with index = 0 [ 846.734170][T21138] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 847.100639][T21151] loop4: detected capacity change from 0 to 1024 [ 847.196861][T21151] hfsplus: catalog name length corrupted [ 847.441166][T21155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 847.448483][T21155] IPv6: NLM_F_CREATE should be set when creating new route [ 847.762992][T21149] loop2: detected capacity change from 0 to 32768 [ 847.826610][T21149] [ 847.826610][T21149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 847.826610][T21149] [ 848.009263][ T1131] [ 848.009263][ T1131] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.009263][ T1131] [ 848.044367][ T1131] [ 848.044367][ T1131] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.044367][ T1131] [ 848.100148][ T5773] [ 848.100148][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.100148][ T5773] [ 848.142233][ T5773] [ 848.142233][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.142233][ T5773] [ 848.196995][T21177] libceph: resolve '0' (ret=-3): failed [ 848.202771][ T113] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 848.214539][ T113] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 848.222975][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 848.230198][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 848.240280][ T113] RIP: 0010:lmLogSync+0x112/0x9f0 [ 848.245341][ T113] Code: 2d 81 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 8c 56 d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 70 56 d9 fe 49 8b 3f e8 a8 0a af fe [ 848.264978][ T113] RSP: 0018:ffffc90002ca7c40 EFLAGS: 00010202 [ 848.271111][ T113] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 848.279111][ T113] RDX: ffff8880197b8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 848.287092][ T113] RBP: ffffc90002ca7d48 R08: 0000000000000003 R09: 0000000000000000 [ 848.295071][ T113] R10: ffffc90002ca7ca0 R11: fffff52000594f98 R12: ffff88801f3a2000 [ 848.303061][ T113] R13: ffffc90002ca7ca0 R14: ffff888051dbd838 R15: 0000000000000040 [ 848.311059][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 848.319997][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 848.326599][ T113] CR2: 0000001b2d623ffc CR3: 000000005dd46000 CR4: 00000000003506e0 [ 848.334585][ T113] Call Trace: [ 848.337876][ T113] [ 848.340845][ T113] ? jfs_syncpt+0x25/0x90 [ 848.345197][ T113] ? lmWriteRecord+0x1ac0/0x1ac0 [ 848.350142][ T113] ? __rwlock_init+0x150/0x150 [ 848.354929][ T113] jfs_syncpt+0x7b/0x90 [ 848.359107][ T113] txEnd+0x2e5/0x520 [ 848.363024][ T113] jfs_lazycommit+0x5a4/0xa70 [ 848.367744][ T113] ? txFreelock+0x5a0/0x5a0 [ 848.372290][ T113] ? do_task_dead+0xd0/0xd0 [ 848.376827][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 848.381785][ T113] kthread+0x2fa/0x390 [ 848.385863][ T113] ? txFreelock+0x5a0/0x5a0 [ 848.390386][ T113] ? kthread_blkcg+0xd0/0xd0 [ 848.394983][ T113] ret_from_fork+0x48/0x80 [ 848.399423][ T113] ? kthread_blkcg+0xd0/0xd0 [ 848.404024][ T113] ret_from_fork_asm+0x11/0x20 [ 848.408804][ T113] [ 848.411831][ T113] Modules linked in: [ 848.415793][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.443876][ T113] ---[ end trace 0000000000000000 ]--- [ 848.450839][ T113] RIP: 0010:lmLogSync+0x112/0x9f0 [ 848.456435][ T113] Code: 2d 81 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 8c 56 d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 70 56 d9 fe 49 8b 3f e8 a8 0a af fe [ 848.477063][ T113] RSP: 0018:ffffc90002ca7c40 EFLAGS: 00010202 [ 848.485556][ T113] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 848.493778][ T113] RDX: ffff8880197b8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 848.502243][ T113] RBP: ffffc90002ca7d48 R08: 0000000000000003 R09: 0000000000000000 [ 848.510459][ T113] R10: ffffc90002ca7ca0 R11: fffff52000594f98 R12: ffff88801f3a2000 [ 848.518494][ T113] R13: ffffc90002ca7ca0 R14: ffff888051dbd838 R15: 0000000000000040 [ 848.527147][ T113] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 848.539585][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 848.546180][ T113] CR2: 00007fc2b09e7198 CR3: 000000003035b000 CR4: 00000000003506f0 [ 848.554214][ T113] Kernel panic - not syncing: Fatal exception [ 848.560864][ T113] Kernel Offset: disabled [ 848.565190][ T113] Rebooting in 86400 seconds..