last executing test programs: 2.400592955s ago: executing program 2 (id=9058): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x12, 0x1, 0x0, "ff3a55f32eb68900d10052d0002000000000000400f3f7ffffffffffff00ffe8"}) 2.310858657s ago: executing program 2 (id=9061): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 2.186489399s ago: executing program 2 (id=9065): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x21, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") lsetxattr$security_ima(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), 0x0, 0x0, 0x3) 1.874914513s ago: executing program 2 (id=9073): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cccab400360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e10bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100000000", 0xd8}], 0x1}, 0x0) 1.676617576s ago: executing program 2 (id=9079): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000180)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x31, 0x4456, &(0x7f0000004480)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.134179054s ago: executing program 1 (id=9090): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 1.042413976s ago: executing program 1 (id=9092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x10}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 955.581157ms ago: executing program 1 (id=9093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xfffff}, 0x2}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 924.832747ms ago: executing program 1 (id=9095): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 916.553407ms ago: executing program 4 (id=9096): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0x541b, 0x0) 864.167998ms ago: executing program 0 (id=9097): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc058560f, &(0x7f0000000180)={0xff, 0x8, 0x3}) 863.644208ms ago: executing program 3 (id=9098): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x6) 812.763318ms ago: executing program 0 (id=9099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 778.896559ms ago: executing program 1 (id=9100): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) 764.261849ms ago: executing program 3 (id=9101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="17000000680001"], 0xd8}}, 0x0) 721.35378ms ago: executing program 4 (id=9102): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 719.55602ms ago: executing program 2 (id=9103): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="ae7a0dadf24984174336c19bd4f6eb98b0c50f5a9bd5286d2e7f0e4f054a25414aa32fdeef450696d15e128704af022de14173ebb760e32e889e14da2357898d351e050f1f225943a3c36490490da55de4e8c8ab43db748d9f9b003303df9de176b1b3daf0236cbae146c6350db7b278a26de50afdfce6537d0db2e2bf4981b5867c58dd2482d0aed80e28cdfc25086a2ee544803ddea6f5114b1f40a2e0ab2d3521b833cbea05551041bca8bf1f55c4e1f71c12512edcbfe00ab970afffd12d82e24cc27a826f541121bf02e1676ca028699487710fd312eb", @ANYRES64=0x0], 0x21, 0x9e86, &(0x7f0000014040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 703.83484ms ago: executing program 0 (id=9104): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r0, 0xc6c3, 0x0) 639.881791ms ago: executing program 3 (id=9105): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) 549.065573ms ago: executing program 1 (id=9106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x22000406, &(0x7f0000000400)={[{@data_err_abort}, {@noblock_validity}, {@nogrpid}, {@orlov}, {@data_err_abort}, {@grpjquota, 0x2e}, {@sb={'sb', 0x3d, 0x1}}, {@init_itable}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x10000}}], [], 0x2c}, 0x0, 0x4bf, &(0x7f0000001600)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000400)='./file0\x00') 548.847363ms ago: executing program 0 (id=9107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x160, 0x5c, 0x160, 0x160, 0x3e0, 0x270, 0x228, 0x25a, 0x270, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @remote, [], [], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {}, 0x88}, 0x5002, 0x120, 0x160, 0x52020000, {0x0, 0x6802000000000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@dev, @empty, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 526.169023ms ago: executing program 3 (id=9108): creat(&(0x7f00000014c0)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000040)) 476.617664ms ago: executing program 4 (id=9109): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x1, '\x00', @p_u8=0x0}}) 429.041645ms ago: executing program 0 (id=9110): iopl(0x3) times(0xfffffffffffffffe) 322.664575ms ago: executing program 4 (id=9111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14}}, 0xd4}}, 0x0) 322.557576ms ago: executing program 3 (id=9112): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 304.958806ms ago: executing program 0 (id=9113): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 179.781898ms ago: executing program 3 (id=9114): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000180)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x31, 0x4456, &(0x7f0000004480)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 105.974529ms ago: executing program 4 (id=9115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f0000007140)=@can_newroute={0x3c, 0x18, 0x1, 0x70bd2d, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_UID={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "0d2f64b6706daae9"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0xfffffffffffffffe, 0x1, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20004800) 0s ago: executing program 4 (id=9116): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2828da"], 0xe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ock 68) failed [ 800.850055][T21175] FAT-fs (loop2): Directory bread(block 69) failed [ 800.871676][T21182] netlink: 'syz.1.7116': attribute type 1 has an invalid length. [ 800.892680][T21175] FAT-fs (loop2): Directory bread(block 70) failed [ 800.899261][T21175] FAT-fs (loop2): Directory bread(block 71) failed [ 800.947513][T21175] FAT-fs (loop2): Directory bread(block 72) failed [ 800.967573][T21182] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7116'. [ 801.039851][T21175] FAT-fs (loop2): Directory bread(block 73) failed [ 801.127928][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.327279][T21164] loop4: detected capacity change from 0 to 32768 [ 801.403502][ T26] audit: type=1326 audit(1742775010.139:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.7127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f972f50d169 code=0x0 [ 801.527048][T21164] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 801.628825][ T4179] ocfs2: Unmounting device (7,4) on (node local) [ 801.645953][T21214] nft_compat: unsupported protocol 4 [ 801.691404][T21216] netlink: 'syz.2.7134': attribute type 2 has an invalid length. [ 801.759586][T21220] xt_bpf: check failed: parse error [ 802.038803][T21234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7133'. [ 802.098317][T21239] [U]  [ 802.099684][T21242] netlink: 'syz.1.7146': attribute type 2 has an invalid length. [ 802.220393][T21251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7151'. [ 802.224729][T21252] Cannot find add_set index 0 as target [ 802.343909][T21256] loop1: detected capacity change from 0 to 256 [ 802.365618][T21258] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7154'. [ 802.416149][T21256] FAT-fs (loop1): Directory bread(block 1285) failed [ 802.432506][ T4992] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 802.448511][T21256] FAT-fs (loop1): Directory bread(block 1286) failed [ 802.475102][T21256] FAT-fs (loop1): Directory bread(block 1287) failed [ 802.509401][T21256] FAT-fs (loop1): Directory bread(block 1288) failed [ 802.517117][T21256] FAT-fs (loop1): Directory bread(block 1289) failed [ 802.540706][T21269] loop3: detected capacity change from 0 to 64 [ 802.561702][T21256] FAT-fs (loop1): Directory bread(block 1290) failed [ 802.568488][T21256] FAT-fs (loop1): Directory bread(block 1291) failed [ 802.623500][T21256] FAT-fs (loop1): Directory bread(block 1292) failed [ 802.656504][T21256] FAT-fs (loop1): Directory bread(block 1293) failed [ 802.663396][T21256] FAT-fs (loop1): Directory bread(block 1294) failed [ 802.688589][ T4992] usb 3-1: Using ep0 maxpacket: 16 [ 802.706700][T21276] loop4: detected capacity change from 0 to 256 [ 802.816885][ T4992] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 802.820677][T21276] FAT-fs (loop4): Directory bread(block 64) failed [ 802.850957][ T4992] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 802.860399][T21276] FAT-fs (loop4): Directory bread(block 65) failed [ 802.889402][T21276] FAT-fs (loop4): Directory bread(block 66) failed [ 802.894352][ T4992] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 802.903388][T21276] FAT-fs (loop4): Directory bread(block 67) failed [ 802.938007][T21276] FAT-fs (loop4): Directory bread(block 68) failed [ 802.944623][T21276] FAT-fs (loop4): Directory bread(block 69) failed [ 802.974045][T21276] FAT-fs (loop4): Directory bread(block 70) failed [ 803.010854][T21276] FAT-fs (loop4): Directory bread(block 71) failed [ 803.028642][T21276] FAT-fs (loop4): Directory bread(block 72) failed [ 803.050179][T21276] FAT-fs (loop4): Directory bread(block 73) failed [ 803.116244][ T4992] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 803.147167][ T4992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.207101][ T4992] usb 3-1: Product: syz [ 803.211336][ T4992] usb 3-1: Manufacturer: syz [ 803.223142][ T4992] usb 3-1: SerialNumber: syz [ 803.421468][T21295] netlink: 2156 bytes leftover after parsing attributes in process `syz.1.7172'. [ 803.453091][T21295] netlink: 2156 bytes leftover after parsing attributes in process `syz.1.7172'. [ 803.575896][ T4992] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 803.661298][ T4992] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 803.712274][T21281] loop3: detected capacity change from 0 to 32768 [ 803.733445][ T4992] usb 3-1: USB disconnect, device number 22 [ 803.846352][T21281] jfs_strtoUCS: char2uni returned -22. [ 803.852845][T21281] charset = cp949, char = 0xd4 [ 804.004184][T19711] udevd[19711]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.049407][T21315] loop1: detected capacity change from 0 to 256 [ 804.107116][T21291] loop0: detected capacity change from 0 to 32768 [ 804.707224][T21347] dlm: non-version read from control device 36 [ 804.859828][T21359] loop3: detected capacity change from 0 to 256 [ 804.918730][T21361] device batadv1 entered promiscuous mode [ 804.937925][T21359] FAT-fs (loop3): Directory bread(block 64) failed [ 804.945105][T21361] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 804.955116][T21364] kAFS: unparsable volume name [ 804.960878][T21359] FAT-fs (loop3): Directory bread(block 65) failed [ 804.972018][T21359] FAT-fs (loop3): Directory bread(block 66) failed [ 805.024707][T21359] FAT-fs (loop3): Directory bread(block 67) failed [ 805.080668][T21359] FAT-fs (loop3): Directory bread(block 68) failed [ 805.091618][T21359] FAT-fs (loop3): Directory bread(block 69) failed [ 805.098986][T21359] FAT-fs (loop3): Directory bread(block 70) failed [ 805.113285][T21359] FAT-fs (loop3): Directory bread(block 71) failed [ 805.131512][T21359] FAT-fs (loop3): Directory bread(block 72) failed [ 805.201835][T21359] FAT-fs (loop3): Directory bread(block 73) failed [ 805.319272][T21369] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 805.336417][T21371] binder: 21370:21371 ioctl c018620c 2000000002c0 returned -1 [ 805.779308][T21395] device batadv1 entered promiscuous mode [ 805.790061][T21395] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 806.083397][T21417] loop1: detected capacity change from 0 to 256 [ 806.189478][T21417] FAT-fs (loop1): Directory bread(block 64) failed [ 806.210799][T21417] FAT-fs (loop1): Directory bread(block 65) failed [ 806.229244][T21417] FAT-fs (loop1): Directory bread(block 66) failed [ 806.253554][T21417] FAT-fs (loop1): Directory bread(block 67) failed [ 806.283668][T21417] FAT-fs (loop1): Directory bread(block 68) failed [ 806.297293][T21417] FAT-fs (loop1): Directory bread(block 69) failed [ 806.318421][T21417] FAT-fs (loop1): Directory bread(block 70) failed [ 806.348912][T21417] FAT-fs (loop1): Directory bread(block 71) failed [ 806.388234][T21417] FAT-fs (loop1): Directory bread(block 72) failed [ 806.394921][T21417] FAT-fs (loop1): Directory bread(block 73) failed [ 806.464513][T21443] loop4: detected capacity change from 0 to 8 [ 806.519903][T21443] cramfs: Error -3 while decompressing! [ 806.532384][T21447] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7249'. [ 806.568963][T21443] cramfs: ffffffff96bc2268(26)->ffff88802e88f000(4096) [ 806.575950][T21443] cramfs: Error -3 while decompressing! [ 806.592668][T21449] device batadv1 entered promiscuous mode [ 806.609426][T21443] cramfs: ffffffff96bc2282(26)->ffff88802dcc8000(4096) [ 806.617607][T21449] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 806.626219][T21443] cramfs: Error -3 while decompressing! [ 806.638257][T21443] cramfs: ffffffff96bc229c(16)->ffff88805194f000(4096) [ 806.647999][T21443] cramfs: Error -3 while decompressing! [ 806.662599][T21443] cramfs: ffffffff96bc2268(26)->ffff88802e88f000(4096) [ 806.704583][T21451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7250'. [ 806.966912][T21465] loop0: detected capacity change from 0 to 16 [ 807.026267][T21469] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 807.041541][T21465] erofs: (device loop0): mounted with root inode @ nid 36. [ 807.052357][T21469] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 807.074793][T21465] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 807.115049][T19211] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 807.136937][T21465] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 807.167329][T19212] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 807.262102][T21465] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 807.442466][T21455] loop1: detected capacity change from 0 to 32768 [ 807.477302][T19211] usb 3-1: Using ep0 maxpacket: 32 [ 807.511917][T21479] binder: 21478:21479 ioctl c018620c 2000000002c0 returned -1 [ 807.615279][T21455] XFS (loop1): Mounting V5 Filesystem [ 807.621344][T19212] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 807.630704][T19211] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.640997][T19212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.650880][T19211] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 807.664900][T19212] usb 5-1: config 0 descriptor?? [ 807.670536][T19211] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 807.711641][T21495] loop0: detected capacity change from 0 to 512 [ 807.730609][T21455] XFS (loop1): Ending clean mount [ 807.744021][T21455] XFS (loop1): Quotacheck needed: Please wait. [ 807.785421][T19211] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.798716][T21455] XFS (loop1): Quotacheck: Done. [ 807.802105][T19211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 807.831143][T19211] usb 3-1: SerialNumber: syz [ 807.840191][T21495] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.7267: corrupted inode contents [ 807.855065][T21495] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.7267: mark_inode_dirty error [ 807.869644][ T4171] XFS (loop1): Unmounting Filesystem [ 807.877049][T21495] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.7267: corrupted inode contents [ 807.895548][T21495] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.7267: mark_inode_dirty error [ 807.908113][T19056] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 807.966867][T21495] Quota error (device loop0): write_blk: dquota write failed [ 807.974626][T21495] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 807.985816][T21495] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.7267: Failed to acquire dquot type 0 [ 808.024287][T21495] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.7267: corrupted inode contents [ 808.039176][T21495] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz.0.7267: mark_inode_dirty error [ 808.051195][T21495] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.7267: corrupted inode contents [ 808.063752][T21495] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.7267: mark_inode_dirty error [ 808.076496][T21495] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.7267: corrupted inode contents [ 808.126142][T19213] usb 3-1: USB disconnect, device number 23 [ 808.165393][T21495] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 808.175082][T21495] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.7267: corrupted inode contents [ 808.185331][T19212] ath6kl: Failed to submit usb control message: -71 [ 808.194074][T21495] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.7267: mark_inode_dirty error [ 808.195309][T19212] ath6kl: unable to send the bmi data to the device: -71 [ 808.213642][T19056] usb 4-1: Using ep0 maxpacket: 16 [ 808.219927][T21495] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 808.235090][T21495] EXT4-fs (loop0): 1 truncate cleaned up [ 808.239485][T19212] ath6kl: Unable to send get target info: -71 [ 808.242441][T21495] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 808.259780][T21495] ext4 filesystem being mounted at /1404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.260661][T19212] ath6kl: Failed to init ath6kl core: -71 [ 808.296047][T19212] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 808.307809][T19212] usb 5-1: USB disconnect, device number 124 [ 808.354022][T19056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.381005][T19056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.393542][T19056] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.468858][T19056] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 808.489126][T19056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.523045][T19056] usb 4-1: config 0 descriptor?? [ 808.570941][T19056] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 808.582894][T21505] loop1: detected capacity change from 0 to 8192 [ 808.588460][ T3532] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 808.603788][ T3532] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 808.614258][ T3532] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 808.624959][ T3532] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 808.684268][T21505] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 808.706827][T21505] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 808.715380][T21505] FAT-fs (loop1): Filesystem has been set read-only [ 808.758572][T19620] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 808.799857][ T3532] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 808.841997][T21489] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 808.902995][ T3532] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 808.937860][ T3532] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 808.946610][T19211] usb 4-1: USB disconnect, device number 126 [ 809.035286][T21517] device batadv1 entered promiscuous mode [ 809.067838][T21517] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 809.653718][T21549] loop4: detected capacity change from 0 to 1024 [ 809.785198][T21549] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 809.796381][T21549] EXT4-fs (loop4): orphan cleanup on readonly fs [ 809.814590][T21549] Quota error (device loop4): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 809.864826][T21566] x_tables: unsorted underflow at hook 3 [ 809.864922][T21549] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 809.885796][T21549] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 809.892712][T21549] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.7291: Freeing blocks not in datazone - block = 0, count = 4096 [ 809.910342][T21549] EXT4-fs (loop4): 1 orphan inode deleted [ 809.916220][T21549] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 810.250103][T21590] loop1: detected capacity change from 0 to 1024 [ 810.294049][T21592] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7311'. [ 810.311871][T21596] loop3: detected capacity change from 0 to 64 [ 810.362159][T21590] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,resuid=0x0000000000000000,resuid=0x0000000000000000,norecovery,lazytime,noblock_validity,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 810.401955][T21596] hfs: request for non-existent node 16777216 in B*Tree [ 810.469725][T21596] hfs: request for non-existent node 16777216 in B*Tree [ 810.531489][T21613] device batadv1 entered promiscuous mode [ 810.541922][T21609] loop2: detected capacity change from 0 to 2048 [ 810.575172][T21590] EXT4-fs error (device loop1): __ext4_new_inode:1076: comm syz.1.7310: reserved inode found cleared - inode=1 [ 810.621165][T21613] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 810.644164][T21609] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 811.109451][ T150] block nbd3: Attempted send on invalid socket [ 811.115860][ T150] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 811.143293][T21649] hfsplus: unable to find HFS+ superblock [ 811.333398][T21662] syz.3.7345 uses obsolete (PF_INET,SOCK_PACKET) [ 811.477610][T21673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7350'. [ 811.518513][T21673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7350'. [ 811.534843][T21673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7350'. [ 811.598514][T21683] loop1: detected capacity change from 0 to 128 [ 811.675275][T21683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 811.710175][T21683] ext4 filesystem being mounted at /1439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 811.742168][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.758527][T21683] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.7356: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 811.960096][T21702] netlink: 268 bytes leftover after parsing attributes in process `syz.1.7363'. [ 811.984448][T21704] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7366'. [ 812.022012][T21704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7366'. [ 812.095154][T19054] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 812.411592][T21734] loop1: detected capacity change from 0 to 16 [ 812.426035][T21735] loop3: detected capacity change from 0 to 736 [ 812.467369][T21734] erofs: (device loop1): mounted with root inode @ nid 36. [ 812.479980][T19054] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 812.489083][T19054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.509121][T19054] usb 3-1: config 0 descriptor?? [ 812.704276][ T4992] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 812.725758][T19212] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 812.780261][T21747] xt_nfacct: accounting object `syz0' does not exists [ 812.963145][ T4992] usb 5-1: Using ep0 maxpacket: 8 [ 812.995749][T19054] ath6kl: Failed to submit usb control message: -71 [ 813.002456][T19054] ath6kl: unable to send the bmi data to the device: -71 [ 813.039427][T19054] ath6kl: Unable to send get target info: -71 [ 813.083406][T19054] ath6kl: Failed to init ath6kl core: -71 [ 813.105234][ T4992] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 813.123108][ T4992] usb 5-1: config 0 has no interface number 0 [ 813.140183][ T4992] usb 5-1: config 0 interface 74 has no altsetting 0 [ 813.206804][T19212] usb 1-1: config 0 has an invalid interface number: 137 but max is 0 [ 813.226752][T19054] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 813.237873][T19212] usb 1-1: config 0 has no interface number 0 [ 813.248661][T19212] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1101, bcdDevice=6a.4e [ 813.263715][T19054] usb 3-1: USB disconnect, device number 24 [ 813.290510][T21760] netlink: 'syz.1.7393': attribute type 9 has an invalid length. [ 813.296876][T19212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.324765][T19212] usb 1-1: config 0 descriptor?? [ 813.335153][ T4992] usb 5-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice=81.cd [ 813.347768][ T4992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.368647][ T4992] usb 5-1: Product: syz [ 813.372911][ T4992] usb 5-1: Manufacturer: syz [ 813.391578][ T4992] usb 5-1: SerialNumber: syz [ 813.407230][ T4992] usb 5-1: config 0 descriptor?? [ 813.544742][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7399'. [ 813.605361][T19212] usb 1-1: USB disconnect, device number 18 [ 813.775598][ T4992] snd-usb-caiaq 5-1:0.74: can't set alt interface. [ 813.800102][ T4992] usb 5-1: unable to init card! (ret=-5) [ 813.816939][ T4992] snd-usb-caiaq: probe of 5-1:0.74 failed with error -5 [ 813.842882][ T4992] usb 5-1: USB disconnect, device number 125 [ 813.915967][T21792] netlink: 'syz.2.7409': attribute type 9 has an invalid length. [ 814.219399][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7416'. [ 814.447024][T21826] netlink: 'syz.3.7426': attribute type 9 has an invalid length. [ 814.504021][T21834] loop4: detected capacity change from 0 to 128 [ 814.794568][T19212] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 815.010528][T21864] loop2: detected capacity change from 0 to 1764 [ 815.023635][T21868] netlink: 'syz.0.7446': attribute type 9 has an invalid length. [ 815.070822][T21870] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.7448'. [ 815.169147][T21864] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 815.302065][T19212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 815.398235][T19212] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 815.406518][T19212] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 815.468647][T19212] usb 2-1: config 63 has no interface number 0 [ 815.496840][T19212] usb 2-1: config 63 interface 66 has no altsetting 0 [ 815.669225][T21904] loop4: detected capacity change from 0 to 256 [ 815.690559][T19212] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 815.707426][T19212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.726676][T19212] usb 2-1: Product: syz [ 815.731243][T19212] usb 2-1: Manufacturer: syz [ 815.740031][T19212] usb 2-1: SerialNumber: syz [ 815.856023][T21904] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 815.942168][T21904] exFAT-fs (loop4): invalid start cluster (4278190088) [ 816.186936][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7483'. [ 816.230928][T21942] loop3: detected capacity change from 0 to 256 [ 816.296185][T19212] usb 2-1: Found UVC 0.07 device syz (174f:8a31) [ 816.319364][T19212] usb 2-1: No valid video chain found. [ 816.345953][T19212] usb 2-1: USB disconnect, device number 122 [ 816.360420][T21942] FAT-fs (loop3): Directory bread(block 64) failed [ 816.388279][T21942] FAT-fs (loop3): Directory bread(block 65) failed [ 816.402830][T21942] FAT-fs (loop3): Directory bread(block 66) failed [ 816.423076][T21942] FAT-fs (loop3): Directory bread(block 67) failed [ 816.439312][T21942] FAT-fs (loop3): Directory bread(block 68) failed [ 816.448678][T21954] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.466286][T21942] FAT-fs (loop3): Directory bread(block 69) failed [ 816.481433][T21956] ip6t_srh: unknown srh invflags 92A7 [ 816.484815][T21942] FAT-fs (loop3): Directory bread(block 70) failed [ 816.499150][T21942] FAT-fs (loop3): Directory bread(block 71) failed [ 816.516717][T21942] FAT-fs (loop3): Directory bread(block 72) failed [ 816.541410][T21942] FAT-fs (loop3): Directory bread(block 73) failed [ 817.193879][T19054] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 817.253645][T21982] loop1: detected capacity change from 0 to 4096 [ 817.329922][T21990] loop4: detected capacity change from 0 to 256 [ 817.376502][T21990] exfat: Deprecated parameter 'utf8' [ 817.446432][T21994] loop0: detected capacity change from 0 to 512 [ 817.472391][T21990] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 817.578682][T19054] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 817.586996][T19054] usb 4-1: config 8 has no interface number 0 [ 817.604253][T19054] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 817.617616][T19054] usb 4-1: config 8 interface 177 has no altsetting 0 [ 817.624529][T19054] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 817.646725][T19054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.657609][T21994] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.7510: bad orphan inode 13 [ 817.691807][T21994] ext4_test_bit(bit=12, block=4) = 1 [ 817.697867][T21994] is_bad_inode(inode)=0 [ 817.702886][T21994] NEXT_ORPHAN(inode)=0 [ 817.707415][T21976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 817.714545][T21994] max_ino=32 [ 817.718303][T21994] i_nlink=1 [ 817.721492][T21994] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 817.737980][T21994] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.7510: Unrecognised inode hash code 20 [ 817.768535][T21994] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.7510: Corrupt directory, running e2fsck is recommended [ 817.783660][T21994] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.7510: Unrecognised inode hash code 20 [ 817.795239][T21994] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.7510: Corrupt directory, running e2fsck is recommended [ 817.975328][T22013] loop2: detected capacity change from 0 to 4096 [ 817.979468][T22014] loop4: detected capacity change from 0 to 1024 [ 817.984974][T19054] usb 4-1: string descriptor 0 read error: -71 [ 818.016809][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 818.039419][T22013] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 818.069446][T22022] loop0: detected capacity change from 0 to 128 [ 818.140159][T22014] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 818.148723][T22014] hfsplus: xattr search failed [ 818.371933][T22034] netlink: 'syz.4.7528': attribute type 29 has an invalid length. [ 818.389443][T22036] loop2: detected capacity change from 0 to 64 [ 818.540747][T19054] ir_toy 4-1:8.177: could not write reset command: -110 [ 818.562019][ C0] ir_toy 4-1:8.177: failed to resubmit urb: -1 [ 818.568442][T19054] ir_toy: probe of 4-1:8.177 failed with error -110 [ 818.583572][T19212] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 818.602209][T19054] usb 4-1: USB disconnect, device number 127 [ 818.893587][T19212] usb 2-1: Using ep0 maxpacket: 16 [ 819.022100][T19212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 819.052900][T19212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 819.171794][T19211] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 819.257230][T19212] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 819.272094][T19212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.288564][T19212] usb 2-1: Product: syz [ 819.297889][T19212] usb 2-1: Manufacturer: syz [ 819.308712][T19212] usb 2-1: SerialNumber: syz [ 819.330025][T19212] usb 2-1: config 0 descriptor?? [ 819.386669][T19212] hub 2-1:0.0: bad descriptor, ignoring hub [ 819.405160][T19212] hub: probe of 2-1:0.0 failed with error -5 [ 819.506605][T19212] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 819.521218][T22084] loop4: detected capacity change from 0 to 164 [ 819.565455][T22056] loop2: detected capacity change from 0 to 32768 [ 819.609831][T19211] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 819.636904][T19211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.660825][T19211] usb 4-1: config 0 descriptor?? [ 819.795863][T19212] usb 2-1: USB disconnect, device number 123 [ 820.145290][T19211] ath6kl: Failed to submit usb control message: -71 [ 820.151958][T19211] ath6kl: unable to send the bmi data to the device: -71 [ 820.165493][T19211] ath6kl: Unable to send get target info: -71 [ 820.181600][T19211] ath6kl: Failed to init ath6kl core: -71 [ 820.236403][T22056] XFS (loop2): Mounting V5 Filesystem [ 820.296319][T19711] udevd[19711]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.312337][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 820.350238][T22104] SET target dimension over the limit! [ 820.371364][T19211] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 820.394649][T19211] usb 4-1: USB disconnect, device number 2 [ 820.449733][T22056] XFS (loop2): Ending clean mount [ 820.575209][ T4182] XFS (loop2): Unmounting Filesystem [ 820.614772][T22116] device geneve2 entered promiscuous mode [ 820.896890][T22129] loop3: detected capacity change from 0 to 256 [ 820.960992][T22129] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 821.054575][T22129] exFAT-fs (loop3): invalid start cluster (4278190088) [ 821.223346][T22146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7580'. [ 821.276828][T22146] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 821.373198][T19056] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 821.439332][ T26] audit: type=1800 audit(1742775028.877:37): pid=22150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.7582" name="/" dev="sockfs" ino=81437 res=0 errno=0 [ 821.640484][T19056] usb 5-1: Using ep0 maxpacket: 16 [ 821.652839][T22175] loop0: detected capacity change from 0 to 512 [ 821.806378][T22183] loop2: detected capacity change from 0 to 1024 [ 821.809466][T22175] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodelalloc,quota,,errors=continue. Quota mode: writeback. [ 821.830303][T22175] ext4 filesystem being mounted at /1482/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 821.943060][T19056] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 821.943094][T19056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.943118][T19056] usb 5-1: Product: syz [ 821.943134][T19056] usb 5-1: Manufacturer: syz [ 821.943150][T19056] usb 5-1: SerialNumber: syz [ 821.946211][T19056] usb 5-1: config 0 descriptor?? [ 821.984067][T19056] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 822.101588][ T4992] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 822.218040][T19056] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 822.218161][T19056] visor: probe of 5-1:0.0 failed with error -5 [ 822.366541][ T4992] usb 2-1: Using ep0 maxpacket: 16 [ 822.390268][T22206] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7606'. [ 822.444498][T19056] usb 5-1: USB disconnect, device number 126 [ 822.656178][ T4992] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 822.656216][ T4992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.656240][ T4992] usb 2-1: Product: syz [ 822.656259][ T4992] usb 2-1: Manufacturer: syz [ 822.656277][ T4992] usb 2-1: SerialNumber: syz [ 822.660686][ T4992] usb 2-1: config 0 descriptor?? [ 822.707191][ T4992] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 823.137166][T19211] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 823.169130][ T4992] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 823.186368][ T4992] visor: probe of 2-1:0.0 failed with error -71 [ 823.217058][ T4992] usb 2-1: USB disconnect, device number 124 [ 823.370086][T22252] loop0: detected capacity change from 0 to 256 [ 823.425603][T19211] usb 3-1: Using ep0 maxpacket: 16 [ 823.437221][T22252] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 823.510402][T22254] loop4: detected capacity change from 0 to 4096 [ 823.578868][T19211] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.591594][T19211] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 823.789295][T19211] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 823.805821][T19211] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 823.815551][T19211] usb 3-1: Product: syz [ 823.819866][T19211] usb 3-1: Manufacturer: syz [ 823.830882][T19211] usb 3-1: SerialNumber: syz [ 823.840370][T19211] usb 3-1: config 0 descriptor?? [ 823.908359][T19211] usb 3-1: NFC: intf ffff8880239ea000 id ffffffff8d359dc0 [ 824.191424][T19213] usb 3-1: USB disconnect, device number 25 [ 824.284306][T22254] ntfs: (device loop4): parse_options(): NLS character set ií^åÀÒÄeÔKÜö+Uso8ow_sys_films=ŽHš [ 824.284306][T22254] ~Yì˜tc’ÝHye`Íer not found. Using previous one ascii. [ 824.401188][T22254] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 824.426499][T22254] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 824.446383][T22254] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 824.462231][T22254] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 824.519224][T22254] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 824.577716][T22254] ntfs: volume version 3.1. [ 824.584699][T22254] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 824.623010][T22272] xt_connbytes: Forcing CT accounting to be enabled [ 824.633890][T22272] Cannot find set identified by id 0 to match [ 824.640597][T22254] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 824.675313][T22254] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 824.907991][T22286] tmpfs: Bad value for 'mpol' [ 825.012550][T22291] loop0: detected capacity change from 0 to 512 [ 825.128958][T22291] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.7650: corrupted inode contents [ 825.273018][T22305] loop1: detected capacity change from 0 to 1024 [ 825.293975][T22291] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz.0.7650: mark_inode_dirty error [ 825.340357][T19211] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 825.382259][T22291] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.7650: corrupted inode contents [ 825.401750][T22291] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.7650: mark_inode_dirty error [ 825.420319][T22291] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.7650: corrupted inode contents [ 825.469255][T22305] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 825.485275][T22291] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 825.494030][T22305] hfsplus: xattr search failed [ 825.516083][T22291] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.7650: corrupted inode contents [ 825.533277][T22291] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.7650: mark_inode_dirty error [ 825.547874][T22291] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 825.578382][T22291] EXT4-fs (loop0): 1 truncate cleaned up [ 825.584493][T22291] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 825.616992][T22291] ext4 filesystem being mounted at /1502/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.649153][T19211] usb 3-1: Using ep0 maxpacket: 16 [ 825.791353][T19211] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 825.812247][T19211] usb 3-1: config 0 has no interface number 0 [ 825.818406][T19211] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 825.862411][T19211] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 825.911939][T22291] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.7650: inode #59392: comm syz.0.7650: iget: illegal inode # [ 825.948050][T22291] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.7650: error while reading EA inode 59392 err=-117 [ 826.008240][T22340] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7671'. [ 826.076654][T22340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7671'. [ 826.080642][T19211] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 826.098954][T19211] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 826.107686][T22340] netlink: 'syz.4.7671': attribute type 2 has an invalid length. [ 826.118402][T19211] usb 3-1: Manufacturer: syz [ 826.126224][T19211] usb 3-1: SerialNumber: syz [ 826.143213][T19211] usb 3-1: config 0 descriptor?? [ 826.183928][T22296] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 826.189760][T22342] loop3: detected capacity change from 0 to 4096 [ 826.341096][T22342] ntfs: volume version 3.1. [ 826.450822][T19211] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 826.458461][T19211] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 826.492780][T19211] usb 3-1: USB disconnect, device number 26 [ 826.751602][T22361] loop1: detected capacity change from 0 to 4096 [ 826.827539][T22369] binfmt_misc: register: failed to install interpreter file ./file0 [ 826.840924][T22361] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 827.166642][T22384] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 827.173756][T22383] loop4: detected capacity change from 0 to 1024 [ 827.186379][T22384] VFS: Can't find a romfs filesystem on dev nullb0. [ 827.186379][T22384] [ 827.541873][T22389] loop2: detected capacity change from 0 to 4096 [ 827.674309][T22389] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 827.807027][T22389] ntfs3: loop2: failed to convert "c46c" to macceltic [ 827.861763][T22374] loop3: detected capacity change from 0 to 32768 [ 827.963516][T22374] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 828.143302][T22374] (syz.3.7687,22374,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 828.172908][T22374] (syz.3.7687,22374,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 828.229723][T22374] (syz.3.7687,22374,0):ocfs2_mknod:298 ERROR: status = -2 [ 828.250869][T22428] netlink: 'syz.4.7714': attribute type 9 has an invalid length. [ 828.273785][T22374] (syz.3.7687,22374,0):ocfs2_mknod:502 ERROR: status = -2 [ 828.278781][T22428] netlink: 'syz.4.7714': attribute type 7 has an invalid length. [ 828.304348][T22428] netlink: 'syz.4.7714': attribute type 8 has an invalid length. [ 828.306594][T22374] (syz.3.7687,22374,0):ocfs2_create:676 ERROR: status = -2 [ 828.324929][T22421] loop1: detected capacity change from 0 to 4096 [ 829.117140][T22444] loop4: detected capacity change from 0 to 32768 [ 829.153041][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 829.173363][T22446] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.7723'. [ 829.229081][T22421] __ntfs_error: 10 callbacks suppressed [ 829.229103][T22421] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 10) do not match. Run ntfsfix or chkdsk. [ 829.351542][T22421] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 829.422337][T22421] ntfs: (device loop1): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 829.432674][T22421] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 829.479248][T22450] netlink: 'syz.2.7726': attribute type 10 has an invalid length. [ 829.503277][T22450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7726'. [ 829.520430][T22421] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 829.572403][T22450] bridge0: port 3(macvlan1) entered blocking state [ 829.585793][T22421] ntfs: volume version 3.1. [ 829.608150][T22450] bridge0: port 3(macvlan1) entered disabled state [ 829.641133][T22450] device macvlan1 entered promiscuous mode [ 829.818265][T22456] loop3: detected capacity change from 0 to 2048 [ 829.878554][T22460] loop4: detected capacity change from 0 to 256 [ 829.885075][T22456] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 830.188167][T22472] tmpfs: Bad value for 'uid' [ 830.425714][T22454] loop0: detected capacity change from 0 to 32768 [ 830.462408][T22486] loop4: detected capacity change from 0 to 2048 [ 830.503209][T22490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7743'. [ 830.531935][T22454] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 830.569752][T22490] unsupported nlmsg_type 40 [ 830.588565][T22486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 830.616052][T22496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 830.687745][T22454] (syz.0.7728,22454,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 830.689270][T22498] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7747'. [ 830.739747][T22454] (syz.0.7728,22454,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 830.843441][T22454] (syz.0.7728,22454,1):ocfs2_mknod:298 ERROR: status = -2 [ 830.873996][T22454] (syz.0.7728,22454,1):ocfs2_mknod:502 ERROR: status = -2 [ 830.918697][T22454] (syz.0.7728,22454,1):ocfs2_create:676 ERROR: status = -2 [ 831.030862][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 831.122516][T22511] xt_l2tp: missing protocol rule (udp|l2tpip) [ 831.429691][T22526] JFS: discard option not supported on device [ 831.503183][T22526] Mount JFS Failure: -22 [ 831.527991][T22526] jfs_mount failed w/return code = -22 [ 831.624925][T22528] loop0: detected capacity change from 0 to 4096 [ 831.734084][T22506] loop1: detected capacity change from 0 to 32768 [ 832.033627][T22506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7751 (22506) [ 832.048476][T22533] loop2: detected capacity change from 0 to 32768 [ 832.126487][T22528] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 832.142167][T22506] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 832.158454][T22533] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 832.175732][T22506] BTRFS info (device loop1): using free space tree [ 832.188372][T22528] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 832.263968][T22533] (syz.2.7765,22533,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 832.295671][T22506] BTRFS info (device loop1): has skinny extents [ 832.342285][T22528] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 832.351349][T22533] (syz.2.7765,22533,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 832.362353][T22528] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 832.393339][T22528] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 832.411501][T22533] (syz.2.7765,22533,0):ocfs2_mknod:298 ERROR: status = -2 [ 832.418326][T22528] ntfs: volume version 3.1. [ 832.458069][T22533] (syz.2.7765,22533,1):ocfs2_mknod:502 ERROR: status = -2 [ 832.466281][T22533] (syz.2.7765,22533,1):ocfs2_create:676 ERROR: status = -2 [ 832.658523][ T4182] ocfs2: Unmounting device (7,2) on (node local) [ 832.700941][T22506] BTRFS info (device loop1): enabling ssd optimizations [ 832.785099][T22563] loop4: detected capacity change from 0 to 1764 [ 832.975998][T22569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 833.277007][T22577] loop0: detected capacity change from 0 to 2048 [ 833.339364][T22549] loop3: detected capacity change from 0 to 32768 [ 833.385237][T22577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 833.609345][T22583] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7773'. [ 833.618986][T22583] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7773'. [ 833.644680][ T4992] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 833.689144][T22585] netlink: 'syz.1.7781': attribute type 10 has an invalid length. [ 833.715476][T22585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7781'. [ 833.745591][T22585] bridge0: port 3(macvlan1) entered blocking state [ 833.778429][T22585] bridge0: port 3(macvlan1) entered disabled state [ 833.786586][T22585] device macvlan1 entered promiscuous mode [ 833.837012][T22589] overlayfs: workdir and upperdir must be separate subtrees [ 833.955679][ T4992] usb 3-1: Using ep0 maxpacket: 16 [ 834.015814][T22597] loop0: detected capacity change from 0 to 512 [ 834.083139][ T4992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 834.111794][ T4992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 834.155097][T22597] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 834.163991][T22603] loop1: detected capacity change from 0 to 1024 [ 834.201189][T22597] ext4 filesystem being mounted at /1524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.214936][T22610] libceph: resolve 'c' (ret=-3): failed [ 834.228641][T22603] EXT4-fs (loop1): Ignoring removed nobh option [ 834.238009][T22597] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.7787: invalid size [ 834.297207][ T4992] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 834.312536][ T4992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.335303][T22603] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nobh,,errors=continue. Quota mode: writeback. [ 834.377620][ T4992] usb 3-1: Product: syz [ 834.403435][ T4992] usb 3-1: Manufacturer: syz [ 834.426810][ T4992] usb 3-1: SerialNumber: syz [ 834.469196][T22603] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.7789: Failed to acquire dquot type 1 [ 834.490562][ T4992] usb 3-1: config 0 descriptor?? [ 834.564684][ T4992] hub 3-1:0.0: bad descriptor, ignoring hub [ 834.589444][ T4992] hub: probe of 3-1:0.0 failed with error -5 [ 834.729902][ T4992] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 834.855436][T19711] udevd[19711]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.879963][T22628] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7797'. [ 835.034339][T19056] usb 3-1: USB disconnect, device number 27 [ 835.142044][T22638] loop0: detected capacity change from 0 to 64 [ 835.239374][T22642] loop3: detected capacity change from 0 to 16 [ 835.249982][T22638] Trying to free block not in datazone [ 835.273558][T22638] Trying to free block not in datazone [ 835.288680][T22638] Trying to free block not in datazone [ 835.297404][T22638] Trying to free block not in datazone [ 835.311196][T22638] Trying to free block not in datazone [ 835.321789][T22638] minix_free_block (loop0:6): bit already cleared [ 835.336411][T22638] Trying to free block not in datazone [ 835.348631][T22638] Trying to free block not in datazone [ 835.380927][T22642] erofs: (device loop3): mounted with root inode @ nid 36. [ 835.431333][T22642] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 835.446685][T22642] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 835.472587][ T4181] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8843] [ 835.501264][T22642] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 835.515984][T22642] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 835.576117][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 835.576134][ T26] audit: type=1800 audit(1742775042.105:38): pid=22642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7805" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 835.882520][T22650] device bridge2 entered promiscuous mode [ 835.966576][T22661] loop4: detected capacity change from 0 to 128 [ 835.989447][T22662] loop2: detected capacity change from 0 to 128 [ 836.015836][T22664] netlink: 'syz.3.7816': attribute type 4 has an invalid length. [ 836.053345][T22664] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7816'. [ 836.064253][T22661] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 836.083679][T22662] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 836.097098][T22662] sysv_free_block: trying to free block not in datazone [ 836.105101][T22662] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 836.139871][T22662] overlayfs: unrecognized mount option "/—fŸ½„6ʉœV5É©ŸÀUaw(Z¸ždïn8yý"Uþ"h{¼/Ð+¤®ëxÙxì“íò_‚¡Œ’„Q¹0di4á;"G§_ýbƒk×pÛM [ 836.139871][T22662] •ÚVLYóE t{Â=·H´(`PƒËÍó·W`æãXÔvU’QçÌ Zà2írœ³Ñï™à¯¦]Ý[¡9ÖiÅ÷Lvº¤ÛÙª°U¸üà¿R¬u\Ô\ñôyÝd×"ÖO²r~”PX˜S`ǹÏóâ~õñÊG¿hñÞ@g×…ÇSüo‡" or missing value [ 836.144193][T22661] ext4 filesystem being mounted at /1654/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 836.322217][T22661] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 7 (only 1 groups) [ 836.799856][T22691] netlink: 428 bytes leftover after parsing attributes in process `syz.3.7829'. [ 836.867518][T22667] loop0: detected capacity change from 0 to 32768 [ 836.987620][T22703] loop4: detected capacity change from 0 to 64 [ 837.060778][T22667] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 837.105307][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 837.169179][T22703] hfs: unable to locate alternate MDB [ 837.187207][T22703] hfs: continuing without an alternate MDB [ 837.525110][T22713] libceph: resolve '0..' (ret=-3): failed [ 837.674584][T19212] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 837.690161][T22685] loop1: detected capacity change from 0 to 32768 [ 837.845711][T22685] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 837.918593][T22685] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 837.958691][T22685] (syz.1.7826,22685,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=64 [ 837.977982][T19212] usb 3-1: Using ep0 maxpacket: 8 [ 838.007584][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7850'. [ 838.053556][T22685] (syz.1.7826,22685,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 838.068598][T22685] (syz.1.7826,22685,1):ocfs2_symlink:1864 ERROR: status = -2 [ 838.129103][T22685] (syz.1.7826,22685,1):ocfs2_symlink:2065 ERROR: status = -2 [ 838.147446][T22746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7853'. [ 838.155100][T22748] loop3: detected capacity change from 0 to 256 [ 838.273686][ T4171] ocfs2: Unmounting device (7,1) on (node local) [ 838.326866][T19212] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 838.357979][T19212] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 838.433297][T19212] usb 3-1: Product: syz [ 838.437520][T19212] usb 3-1: Manufacturer: syz [ 838.442138][T19212] usb 3-1: SerialNumber: syz [ 838.472310][T22761] loop4: detected capacity change from 0 to 16 [ 838.492234][T19212] usb 3-1: config 0 descriptor?? [ 838.578360][T19212] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 838.617261][T22761] erofs: (device loop4): mounted with root inode @ nid 36. [ 838.642760][T22761] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 838.675100][T22761] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 838.707221][ T4181] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8843] [ 838.732135][T22761] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 838.768857][T22761] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 838.778000][ T26] audit: type=1800 audit(1742775045.108:39): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7872" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 839.062031][T19212] gspca_zc3xx: reg_r err -71 [ 839.070387][T19212] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 839.096348][T19212] usb 3-1: USB disconnect, device number 28 [ 839.134129][T22783] loop3: detected capacity change from 0 to 512 [ 839.157033][T22785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7871'. [ 839.254849][T22783] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 839.266781][T22794] netlink: 'syz.0.7876': attribute type 21 has an invalid length. [ 839.280953][T22783] ext4 filesystem being mounted at /1591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.284784][T22794] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7876'. [ 839.447154][T22783] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.7870: invalid size [ 839.626108][T22814] netlink: 'syz.4.7885': attribute type 10 has an invalid length. [ 840.565972][T22814] device hsr0 entered promiscuous mode [ 840.578021][T22814] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 840.578054][T22814] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 840.578293][T22814] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 840.678297][T22814] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 840.824691][T22835] loop2: detected capacity change from 0 to 512 [ 840.911806][T22835] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 840.911922][T22835] ext4 filesystem being mounted at /1550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.954660][T22846] loop3: detected capacity change from 0 to 64 [ 840.955754][T22842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7900'. [ 841.005023][T22846] hfs: unable to locate alternate MDB [ 841.005040][T22846] hfs: continuing without an alternate MDB [ 841.015688][T22835] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.7897: invalid size [ 841.451734][T22872] loop1: detected capacity change from 0 to 512 [ 841.493273][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 841.499702][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 841.514580][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7916'. [ 841.707156][T22872] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 841.740559][T22872] ext4 filesystem being mounted at /1531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.763539][T22892] loop4: detected capacity change from 0 to 256 [ 841.845492][T22892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 841.863430][T22872] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.7914: invalid size [ 841.897577][T22892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 841.960124][T22892] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 841.975052][T22892] UDF-fs: Scanning with blocksize 512 failed [ 842.045640][T22892] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 842.087908][T22892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 842.392645][T22924] xt_l2tp: wrong L2TP version: 0 [ 842.441891][T19211] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 842.588058][T22936] loop2: detected capacity change from 0 to 1024 [ 842.675344][T22938] loop0: detected capacity change from 0 to 1024 [ 842.719779][T19211] usb 5-1: Using ep0 maxpacket: 16 [ 842.770230][T22938] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000000,nombcache,barrier,norecovery,norecovery,delalloc,nodelalloc,usrquota,max_batch_time=0x0000000000000006,nombcache,init_itable,,errors=continue. Quota mode: writeback. [ 842.776942][T22943] mmap: syz.1.7949 (22943): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 842.869764][T19211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 205, changing to 11 [ 842.907704][T22919] loop3: detected capacity change from 0 to 32768 [ 842.933508][T19211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 57672, setting to 1024 [ 842.934831][T22919] jfs_rename did not expect dtDelete to return rc = -2 [ 842.990409][T22919] ERROR: (device loop3): jfs_rename: [ 842.990409][T22919] [ 843.075683][T22919] ERROR: (device loop3): remounting filesystem as read-only [ 843.205575][T22951] openvswitch: netlink: Message has 8 unknown bytes. [ 843.237549][T19211] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 843.260115][T19211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.294349][T19211] usb 5-1: Product: syz [ 843.321947][T19211] usb 5-1: Manufacturer: syz [ 843.326605][T19211] usb 5-1: SerialNumber: syz [ 843.392384][T19211] usb 5-1: config 0 descriptor?? [ 843.459561][T19211] pegasus_notetaker: probe of 5-1:0.0 failed with error -12 [ 843.471795][T22957] smc: removing ib device syz1 [ 843.675608][T19211] usb 5-1: USB disconnect, device number 127 [ 843.768043][T22974] loop3: detected capacity change from 0 to 1024 [ 843.991909][T19053] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 844.034914][T19207] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 844.248389][T19053] usb 2-1: Using ep0 maxpacket: 16 [ 844.341620][T22978] loop4: detected capacity change from 0 to 512 [ 844.376755][T19053] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.397577][T19053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.412117][T19053] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 844.433850][T19053] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.475820][T22978] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 844.492784][T22978] ext4 filesystem being mounted at /1679/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.514354][T22978] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.7964: invalid size [ 844.633480][T19053] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 844.654755][T19053] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 844.689974][T19053] usb 2-1: Product: syz [ 844.690160][T19207] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 844.694173][T19053] usb 2-1: Manufacturer: syz [ 844.725276][T19207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.757677][T19207] usb 1-1: Product: syz [ 844.759869][T19053] usb 2-1: SerialNumber: syz [ 844.762485][T19207] usb 1-1: Manufacturer: syz [ 844.762507][T19207] usb 1-1: SerialNumber: syz [ 844.764614][T19207] usb 1-1: config 0 descriptor?? [ 844.815844][T19053] usb 2-1: config 0 descriptor?? [ 844.858545][T19053] usb 2-1: NFC: intf ffff888075320000 id ffffffff8d359dc0 [ 844.861403][T19207] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 844.898534][T19207] pctv452e: pctv452e_power_ctrl: 1 [ 844.898534][T19207] [ 844.926069][T19207] usb 1-1: selecting invalid altsetting 3 [ 844.948480][T19207] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 844.948480][T19207] [ 844.971341][T19207] dvb-usb: bulk message failed: -22 (5/0) [ 845.005692][T19207] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 845.059241][T19207] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 845.103168][T23011] netlink: 'syz.4.7979': attribute type 10 has an invalid length. [ 845.124337][T19207] usb 1-1: USB disconnect, device number 19 [ 845.130413][T23011] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7979'. [ 845.144214][ T4973] usb 2-1: USB disconnect, device number 125 [ 845.146920][T23011] device ipvlan1 entered promiscuous mode [ 845.180361][T23011] bridge0: port 3(ipvlan1) entered blocking state [ 845.222658][T23011] bridge0: port 3(ipvlan1) entered disabled state [ 845.282080][T23011] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 845.337804][T23015] loop3: detected capacity change from 0 to 4096 [ 845.404135][T23015] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 845.524072][T23015] ntfs3: loop3: failed to convert "c46c" to cp861 [ 845.876002][T23042] netlink: 'syz.4.7995': attribute type 10 has an invalid length. [ 846.033382][ T4973] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 846.290005][ T4973] usb 1-1: Using ep0 maxpacket: 32 [ 846.418327][ T4973] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 846.427431][ T4973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.464190][ T4973] usb 1-1: config 0 descriptor?? [ 846.506903][ T4973] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state [ 846.525109][ T4973] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 846.531560][ T4973] dvb_usb_anysee: probe of 1-1:0.0 failed with error -22 [ 846.738306][ T4973] usb 1-1: USB disconnect, device number 20 [ 846.777347][T23042] team0: Device hsr_slave_0 failed to register rx_handler [ 847.150622][T23060] x_tables: duplicate underflow at hook 2 [ 847.475419][T23078] netlink: 'syz.4.8013': attribute type 7 has an invalid length. [ 847.578836][T23086] vivid-001: ================= START STATUS ================= [ 847.607943][T23086] vivid-001: Generate PTS: true [ 847.676310][T23086] vivid-001: Generate SCR: true [ 847.706950][T23086] tpg source WxH: 640x360 (Y'CbCr) [ 847.757254][T23086] tpg field: 1 [ 847.760698][T23086] tpg crop: 640x360@0x0 [ 847.764888][T23086] tpg compose: 640x360@0x0 [ 847.779982][T23094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8021'. [ 847.789281][T19053] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 847.802417][T23086] tpg colorspace: 8 [ 847.806264][T23086] tpg transfer function: 0/2 [ 847.830242][T23086] tpg Y'CbCr encoding: 0/1 [ 847.845618][T23086] tpg quantization: 0/2 [ 847.849859][T23086] tpg RGB range: 0/2 [ 847.867224][T23086] vivid-001: ================== END STATUS ================== [ 848.043053][T19053] usb 3-1: Using ep0 maxpacket: 32 [ 848.245813][T23084] loop1: detected capacity change from 0 to 32768 [ 848.342680][T19053] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 848.378365][T19053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.400268][T19053] usb 3-1: Product: syz [ 848.404508][T19053] usb 3-1: Manufacturer: syz [ 848.459965][T19053] usb 3-1: SerialNumber: syz [ 848.481033][T19053] usb 3-1: config 0 descriptor?? [ 848.517101][T23092] loop0: detected capacity change from 0 to 32768 [ 848.573696][T23092] XFS: attr2 mount option is deprecated. [ 848.583456][T23092] XFS: ikeep mount option is deprecated. [ 848.728003][T23092] XFS (loop0): Mounting V5 Filesystem [ 848.896284][T23141] loop1: detected capacity change from 0 to 2048 [ 848.939723][T23092] XFS (loop0): Ending clean mount [ 848.963698][T23092] XFS (loop0): Quotacheck needed: Please wait. [ 849.015886][T19053] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 849.023068][T19053] airspy 3-1:0.0: Could not detect board [ 849.069797][T19053] airspy: probe of 3-1:0.0 failed with error -71 [ 849.073314][T23141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.096034][T19053] usb 3-1: USB disconnect, device number 29 [ 849.134563][T23092] XFS (loop0): Quotacheck: Done. [ 849.156032][T23127] loop4: detected capacity change from 0 to 32768 [ 849.200114][T23143] netlink: 'syz.3.8042': attribute type 39 has an invalid length. [ 849.208991][ T4168] XFS (loop0): Unmounting Filesystem [ 849.250066][T23127] [ 849.250066][T23127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 849.250066][T23127] [ 849.328198][T23127] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 849.328198][T23127] [ 849.488051][T23145] loop1: detected capacity change from 0 to 4096 [ 849.497932][ T9] read_mapping_page failed! [ 849.505536][ T9] ERROR: (device loop4): txCommit: [ 849.505536][ T9] [ 849.513358][ T9] jfs_write_inode: jfs_commit_inode failed! [ 849.519931][ T4179] [ 849.519931][ T4179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 849.519931][ T4179] [ 849.534620][ T4179] [ 849.534620][ T4179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 849.534620][ T4179] [ 849.577664][T23145] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 849.719555][T23145] ntfs3: loop1: failed to convert "c46c" to cp861 [ 850.822973][T23223] netlink: 'syz.4.8080': attribute type 1 has an invalid length. [ 850.892111][T23229] netlink: 'syz.1.8083': attribute type 39 has an invalid length. [ 850.935780][T23229] device veth0_macvtap left promiscuous mode [ 850.977613][T23232] xt_hashlimit: Unknown mode mask 1000000, kernel too old? [ 851.054741][T23233] loop3: detected capacity change from 0 to 2048 [ 851.072549][T23235] netlink: 'syz.0.8086': attribute type 1 has an invalid length. [ 851.103900][T23235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8086'. [ 851.178281][T23233] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 851.429822][T23257] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.519078][T23194] loop2: detected capacity change from 0 to 32768 [ 851.678131][T23194] XFS (loop2): Mounting V5 Filesystem [ 851.718906][T23282] netlink: 'syz.3.8106': attribute type 1 has an invalid length. [ 851.993112][T23194] XFS (loop2): Ending clean mount [ 852.029698][T23194] XFS (loop2): Quotacheck needed: Please wait. [ 852.172125][T23306] loop0: detected capacity change from 0 to 16 [ 852.175037][T23194] XFS (loop2): Quotacheck: Done. [ 852.258343][T23306] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 852.404500][T23313] cgroup: name respecified [ 852.406060][ T4182] XFS (loop2): Unmounting Filesystem [ 852.683270][T23323] loop1: detected capacity change from 0 to 512 [ 852.829018][T23323] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 852.879445][T23323] ext4 filesystem being mounted at /1569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.920240][T23338] loop3: detected capacity change from 0 to 256 [ 853.565554][T23360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8122'. [ 853.605496][T23360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8122'. [ 853.935252][T23380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8152'. [ 854.093289][T23388] netlink: 'syz.3.8156': attribute type 1 has an invalid length. [ 854.250215][T23397] binder: BC_ACQUIRE_RESULT not supported [ 854.270504][T23397] binder: 23395:23397 ioctl c0306201 200000000580 returned -22 [ 854.527616][T23409] netlink: 'syz.0.8167': attribute type 7 has an invalid length. [ 854.569547][T23409] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8167'. [ 854.869528][T23369] loop4: detected capacity change from 0 to 32768 [ 854.917508][T23369] XFS: attr2 mount option is deprecated. [ 854.932703][T23369] XFS: ikeep mount option is deprecated. [ 855.194931][T23443] loop2: detected capacity change from 0 to 16 [ 855.204978][T23369] XFS (loop4): Mounting V5 Filesystem [ 855.216159][T23443] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 855.288690][T23443] cramfs: empty filesystem [ 855.395741][T23369] XFS (loop4): Ending clean mount [ 855.405958][T23369] XFS (loop4): Quotacheck needed: Please wait. [ 855.566626][T23369] XFS (loop4): Quotacheck: Done. [ 855.578080][T23463] loop3: detected capacity change from 0 to 1024 [ 855.629041][ T4179] XFS (loop4): Unmounting Filesystem [ 855.656484][T23467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8192'. [ 855.760180][T23469] netlink: 'syz.1.8193': attribute type 10 has an invalid length. [ 855.950313][T23469] team0: Device hsr_slave_0 failed to register rx_handler [ 856.677256][T23505] netlink: 'syz.3.8211': attribute type 1 has an invalid length. [ 856.719606][T23505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8211'. [ 857.059051][T23529] loop3: detected capacity change from 0 to 1764 [ 857.141421][T23529] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 857.143480][T23539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8228'. [ 857.235815][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 857.627296][T23575] loop1: detected capacity change from 0 to 8 [ 857.633787][ T4992] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 857.680150][T23579] xt_connbytes: Forcing CT accounting to be enabled [ 857.706240][T23579] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 857.771520][T23575] SQUASHFS error: lzo decompression failed, data probably corrupt [ 857.779971][T23575] SQUASHFS error: Failed to read block 0x1c0: -5 [ 857.829893][T23575] SQUASHFS error: Unable to read metadata cache entry [1be] [ 857.947126][T23591] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8254'. [ 858.016159][ T4992] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 858.035464][ T4992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.089461][ T4992] usb 3-1: config 0 has no interface number 0 [ 858.142469][ T4992] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 858.210007][ T4992] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 858.240975][T23597] device bridge_slave_1 left promiscuous mode [ 858.276952][ T4992] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.312395][T23597] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.339149][ T4992] usb 3-1: config 0 interface 52 has no altsetting 0 [ 858.486759][ T4992] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 858.501875][ T4992] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 858.523559][ T4992] usb 3-1: Product: syz [ 858.537207][ T4992] usb 3-1: SerialNumber: syz [ 858.564865][ T4992] usb 3-1: config 0 descriptor?? [ 858.663382][T23613] netlink: 'syz.1.8264': attribute type 13 has an invalid length. [ 858.760725][T23616] loop4: detected capacity change from 0 to 1024 [ 858.857498][ T4992] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input53 [ 859.034861][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8271'. [ 859.087737][T19054] usb 3-1: USB disconnect, device number 30 [ 859.250152][ T4992] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 859.277286][T23634] netlink: 'syz.4.8275': attribute type 1 has an invalid length. [ 859.279868][T23634] netlink: 'syz.4.8275': attribute type 9 has an invalid length. [ 859.498188][T23620] loop1: detected capacity change from 0 to 32768 [ 859.630464][ T4992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.652248][T23648] loop0: detected capacity change from 0 to 2048 [ 859.699898][T23652] dlm: no locking on control device [ 859.730685][T23648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 859.833548][ T4992] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 859.851504][ T4992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.892855][ T4992] usb 4-1: Product: syz [ 859.897088][ T4992] usb 4-1: Manufacturer: syz [ 859.915111][ T4992] usb 4-1: SerialNumber: syz [ 859.951886][ T4992] usb 4-1: config 0 descriptor?? [ 860.257109][ T4992] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 860.297239][T23681] device bond2 entered promiscuous mode [ 860.303180][T23681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 860.378247][T23682] IPv6: sit1: Disabled Multicast RS [ 860.458598][ T4992] usb 4-1: USB disconnect, device number 3 [ 860.463061][T19618] udevd[19618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.615426][T23689] loop1: detected capacity change from 0 to 1764 [ 860.732175][T23689] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 860.831723][T23705] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 861.321011][T23731] netlink: 'syz.2.8323': attribute type 3 has an invalid length. [ 861.362348][T23731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8323'. [ 861.389221][T23735] tmpfs: Bad value for 'mpol' [ 861.400257][T23731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8323'. [ 861.438753][T23737] netlink: 'syz.1.8326': attribute type 3 has an invalid length. [ 861.478400][T23737] netlink: 'syz.1.8326': attribute type 1 has an invalid length. [ 861.750748][T23697] loop4: detected capacity change from 0 to 32768 [ 861.798738][T23755] loop3: detected capacity change from 0 to 1024 [ 861.847149][T23757] netlink: 'syz.1.8336': attribute type 3 has an invalid length. [ 861.867810][T23697] (syz.4.8306,23697,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 861.900052][T23697] (syz.4.8306,23697,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 861.994416][T23697] JBD2: Ignoring recovery information on journal [ 862.141675][T23759] loop0: detected capacity change from 0 to 4096 [ 862.157872][T23697] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 862.169377][T23765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8339'. [ 862.188256][T23743] loop2: detected capacity change from 0 to 32768 [ 862.236559][T23759] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 862.251022][T23759] ntfs3: loop0: Failed to load $Bitmap. [ 862.406842][ T4179] ocfs2: Unmounting device (7,4) on (node local) [ 862.642283][T23779] device bond1 entered promiscuous mode [ 862.669011][T23779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 862.815336][T23792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8352'. [ 862.898211][T23795] loop4: detected capacity change from 0 to 8 [ 863.020173][ T26] audit: type=1800 audit(1742775067.785:40): pid=23795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8355" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 863.202766][T23810] netlink: 'syz.3.8363': attribute type 10 has an invalid length. [ 863.234193][T23814] loop1: detected capacity change from 0 to 8 [ 863.251233][T23810] device veth1_macvtap left promiscuous mode [ 863.949118][T23846] device bond2 entered promiscuous mode [ 863.987042][T23859] netlink: 'syz.1.8387': attribute type 1 has an invalid length. [ 863.995377][T23859] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8387'. [ 864.004469][T23846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 864.052239][T23863] loop2: detected capacity change from 0 to 64 [ 864.207962][T23869] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 864.231665][T23871] loop3: detected capacity change from 0 to 1024 [ 864.373519][T23871] hfsplus: Filesystem is marked locked, mounting read-only. [ 864.423230][T23871] hfsplus: invalid catalog entry type in lookup [ 864.654321][ T4973] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 864.712797][T23896] device bond2 entered promiscuous mode [ 864.792946][T23896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 864.898194][T23911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 864.942794][ T4973] usb 2-1: Using ep0 maxpacket: 8 [ 864.952450][T23914] netlink: 'syz.2.8412': attribute type 4 has an invalid length. [ 864.961374][T23914] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8412'. [ 865.071127][T23916] loop3: detected capacity change from 0 to 2048 [ 865.071248][ T4973] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 865.115589][ T4973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.136818][ T4973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 865.146024][ T4973] usb 2-1: config 1 has no interface number 0 [ 865.156307][ T4973] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.166932][T23916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 865.188749][ T4973] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.209443][T23926] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8417'. [ 865.386322][ T4973] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.424767][ T4973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.432912][ T4973] usb 2-1: Product: syz [ 865.457121][ T4973] usb 2-1: Manufacturer: syz [ 865.461831][ T4973] usb 2-1: SerialNumber: syz [ 865.532667][ T4973] cdc_wdm 2-1:1.128: skipping garbage [ 865.546612][ T4973] cdc_wdm 2-1:1.128: cdc-wdm0: USB WDM device [ 865.567053][ T4973] cdc_wdm 2-1:1.128: Unknown control protocol [ 865.802569][T19054] usb 2-1: USB disconnect, device number 126 [ 865.869602][T23956] loop3: detected capacity change from 0 to 4096 [ 865.872899][ T4973] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 865.898420][T19211] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 865.997506][T23956] ntfs: volume version 3.1. [ 866.040571][T23956] ntfs: (device loop3): ntfs_nlstoucs(): Name using character set cp936 contains characters that cannot be converted to Unicode. [ 866.075974][T23956] ntfs: (device loop3): ntfs_lookup(): Failed to convert name to Unicode. [ 866.140108][ T4973] usb 5-1: Using ep0 maxpacket: 8 [ 866.219377][T19211] usb 1-1: Using ep0 maxpacket: 8 [ 866.268448][ T4973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 866.279788][ T4973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 866.291223][ T4973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.300949][ T4973] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 866.310662][ T4973] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 241 [ 866.320692][ T4973] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 866.330225][ T4973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.347189][ T4973] usb 5-1: config 0 descriptor?? [ 866.364857][T23947] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 866.375593][T23947] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 866.487751][T23972] device bond1 entered promiscuous mode [ 866.499622][T23972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 866.562031][T19211] usb 1-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 866.571489][T19211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.579881][T19211] usb 1-1: Product: syz [ 866.584251][T19211] usb 1-1: Manufacturer: syz [ 866.589623][T19211] usb 1-1: SerialNumber: syz [ 866.596613][T19211] usb 1-1: config 0 descriptor?? [ 866.619760][T23986] loop3: detected capacity change from 0 to 1024 [ 866.717528][ T144] hfsplus: b-tree write err: -5, ino 4 [ 866.781561][ T4973] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 866.898415][T19053] usb 5-1: USB disconnect, device number 2 [ 866.921070][T23996] mkiss: ax0: crc mode is auto. [ 866.932954][T19211] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 866.975898][T19618] udevd[19618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.038113][ T4973] usb 3-1: Using ep0 maxpacket: 32 [ 867.115357][ T4992] usb 1-1: USB disconnect, device number 21 [ 867.134192][T19212] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 867.167503][ T4973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.183365][ T4973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.194935][ T4973] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 867.205649][ T4973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.217121][ T4973] usb 3-1: config 0 descriptor?? [ 867.263539][ T4973] hub 3-1:0.0: USB hub found [ 867.499107][ T4973] hub 3-1:0.0: 9 ports detected [ 867.519122][ T4973] hub 3-1:0.0: insufficient power available to use all downstream ports [ 867.591070][T19212] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 867.605273][T19212] usb 4-1: config 0 has no interface number 0 [ 867.611422][T19212] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 867.629546][T19212] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 867.642231][T19212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.663376][T19212] usb 4-1: config 0 descriptor?? [ 867.725210][T19212] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input55 [ 867.733039][ T4973] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 867.767863][ T4973] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 867.903808][ T26] audit: type=1326 audit(1742775072.351:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24041 comm="syz.0.8469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5092aa6169 code=0x0 [ 867.931690][ T4973] usbhid 3-1:0.0: can't add hid device: -71 [ 867.938986][ T4973] usbhid: probe of 3-1:0.0 failed with error -71 [ 868.000684][ T4973] usb 3-1: USB disconnect, device number 31 [ 868.206582][ T4992] usb 4-1: USB disconnect, device number 4 [ 868.433377][T24056] device geneve2 entered promiscuous mode [ 868.500523][T24062] loop4: detected capacity change from 0 to 8 [ 868.520919][T24064] loop2: detected capacity change from 0 to 1024 [ 868.553684][T24066] tc_dump_action: action bad kind [ 868.635478][ T5852] hfsplus: b-tree write err: -5, ino 4 [ 868.983943][T24089] loop3: detected capacity change from 0 to 8 [ 869.056515][T24089] SQUASHFS error: Unable to read directory block [629:0] [ 869.154583][T24101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8497'. [ 869.161513][T24094] loop4: detected capacity change from 0 to 4096 [ 869.249535][T24094] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 869.279788][T24107] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 869.282862][T24094] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 869.353357][T24094] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 869.422111][T24094] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 869.460085][T24119] loop2: detected capacity change from 0 to 256 [ 869.470321][T24094] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 869.515796][T24094] ntfs: volume version 3.1. [ 869.525726][T24119] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84977, utbl_chksum : 0xe619d30d) [ 869.564516][T24094] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 869.598615][T24094] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 869.651477][T24094] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 869.691130][T24094] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 869.710164][T24094] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 869.987221][T24143] loop3: detected capacity change from 0 to 8192 [ 870.012822][T24151] Scaler: ================= START STATUS ================= [ 870.062117][T24151] Scaler: ================== END STATUS ================== [ 870.103167][T24143] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 870.132271][ T150] block nbd1: Attempted send on invalid socket [ 870.138631][ T150] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 870.150371][T24143] REISERFS (device loop3): using ordered data mode [ 870.151242][T24159] qnx6: unable to read the first superblock [ 870.164140][ T150] block nbd1: Attempted send on invalid socket [ 870.170534][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 870.182858][T24159] qnx6: unable to read the first superblock [ 870.189010][T24159] qnx6: unable to read the first superblock [ 870.200229][T24143] reiserfs: using flush barriers [ 870.249072][T24143] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 870.327839][T24143] REISERFS (device loop3): checking transaction log (loop3) [ 870.330429][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8530'. [ 870.565042][T24143] REISERFS (device loop3): Using tea hash to sort names [ 870.602912][T24143] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 870.860497][T24203] tmpfs: Bad value for 'mpol' [ 870.945302][T24207] tmpfs: Bad value for 'mpol' [ 871.118410][T24215] loop2: detected capacity change from 0 to 1024 [ 871.158335][T24215] EXT4-fs (loop2): Test dummy encryption mode enabled [ 871.173763][T24215] EXT4-fs (loop2): Ignoring removed orlov option [ 871.241018][T24215] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,auto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 871.313744][T19212] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 871.527097][T24229] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 871.752739][T19212] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 871.766515][T19212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.870486][T19212] usb 1-1: config 0 descriptor?? [ 871.924566][T19212] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 871.974982][T24250] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (4) [ 872.158410][T19212] usb 1-1: Detected FT232BM [ 872.218255][T24268] netlink: 'syz.1.8577': attribute type 5 has an invalid length. [ 872.295834][T24272] netlink: 'syz.4.8579': attribute type 21 has an invalid length. [ 872.332005][T24272] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8579'. [ 872.357266][T24278] netlink: 420 bytes leftover after parsing attributes in process `syz.1.8581'. [ 872.399463][T19212] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 872.436259][T19212] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 872.461964][T19212] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 872.506985][T19212] usb 1-1: USB disconnect, device number 22 [ 872.536082][T19212] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 872.563592][T24288] tmpfs: Bad value for 'size' [ 872.569130][T19212] ftdi_sio 1-1:0.0: device disconnected [ 872.599737][T24291] netlink: 'syz.1.8588': attribute type 21 has an invalid length. [ 872.847471][T24306] loop1: detected capacity change from 0 to 1024 [ 872.911727][T24312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8598'. [ 872.943707][T24312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8598'. [ 872.965940][T24306] EXT4-fs (loop1): Test dummy encryption mode enabled [ 873.015603][T24318] loop4: detected capacity change from 0 to 256 [ 873.018876][T24306] EXT4-fs (loop1): Ignoring removed orlov option [ 873.106450][T24306] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,auto_da_alloc,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 873.179246][T24318] FAT-fs (loop4): Directory bread(block 64) failed [ 873.221694][T24318] FAT-fs (loop4): Directory bread(block 65) failed [ 873.258659][T24318] FAT-fs (loop4): Directory bread(block 66) failed [ 873.305704][T24318] FAT-fs (loop4): Directory bread(block 67) failed [ 873.318115][T24335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 873.362915][T24318] FAT-fs (loop4): Directory bread(block 68) failed [ 873.380931][T24318] FAT-fs (loop4): Directory bread(block 69) failed [ 873.395852][T24335] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8608'. [ 873.402663][T24318] FAT-fs (loop4): Directory bread(block 70) failed [ 873.442658][T24335] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 873.462204][T24318] FAT-fs (loop4): Directory bread(block 71) failed [ 873.468889][T24318] FAT-fs (loop4): Directory bread(block 72) failed [ 873.499960][T24318] FAT-fs (loop4): Directory bread(block 73) failed [ 873.554836][T24343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8612'. [ 873.675406][T24318] overlayfs: filesystem on './file0' not supported [ 873.951596][T24361] loop0: detected capacity change from 0 to 256 [ 874.056214][T24357] loop2: detected capacity change from 0 to 4096 [ 874.097808][T24372] Cannot find add_set index 0 as target [ 874.193596][T24357] ntfs: volume version 3.1. [ 874.504026][T24391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8635'. [ 874.720995][T24402] netlink: 'syz.2.8641': attribute type 1 has an invalid length. [ 874.770302][T24402] netlink: 'syz.2.8641': attribute type 2 has an invalid length. [ 875.516856][T24373] loop3: detected capacity change from 0 to 32768 [ 875.535230][T24445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8663'. [ 875.560911][T24373] gfs2: fsid=[(: Trying to join cluster "lock_nolock", "[(" [ 875.586040][T24373] gfs2: fsid=[(: Now mounting FS (format 0)... [ 875.595860][T24448] ipt_REJECT: TCP_RESET invalid for non-tcp [ 875.661058][T24373] gfs2: fsid=[(.0: journal 0 mapped with 20 extents in 0ms [ 875.675702][T24451] No such timeout policy "syz0" [ 875.689878][T19213] gfs2: fsid=[(.0: jid=0, already locked for use [ 875.697054][T19213] gfs2: fsid=[(.0: jid=0: Looking at journal... [ 875.717974][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8668'. [ 875.842308][T24462] Sensor A: ================= START STATUS ================= [ 875.843618][T19213] gfs2: fsid=[(.0: jid=0: Journal head lookup took 137ms [ 875.883525][T19213] gfs2: fsid=[(.0: jid=0: Done [ 875.888696][T24462] Sensor A: Test Pattern: 75% Colorbar [ 875.895297][T24373] gfs2: fsid=[(.0: first mount done, others may mount [ 875.897356][T24462] Sensor A: Show Information: All [ 875.936849][T24462] Sensor A: Vertical Flip: false [ 875.979127][T24462] Sensor A: Horizontal Flip: true [ 876.007958][T24462] Sensor A: Brightness: 128 [ 876.012545][T24462] Sensor A: Contrast: 128 [ 876.034279][T24462] Sensor A: Hue: 0 [ 876.038101][T24462] Sensor A: Saturation: 128 [ 876.074517][T24462] Sensor A: ================== END STATUS ================== [ 876.277231][T24477] No such timeout policy "syz0" [ 876.292556][T24479] loop4: detected capacity change from 0 to 512 [ 876.442507][T24479] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.8679: inode #0: comm syz.4.8679: iget: illegal inode # [ 876.474534][T24479] EXT4-fs (loop4): Remounting filesystem read-only [ 876.510654][T24479] EXT4-fs (loop4): get orphan inode failed [ 876.517611][T24479] EXT4-fs (loop4): mount failed [ 876.596102][T24497] loop0: detected capacity change from 0 to 256 [ 877.031611][T24512] loop1: detected capacity change from 0 to 8192 [ 877.059399][T24512] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 877.085925][T24512] REISERFS (device loop1): using ordered data mode [ 877.092553][T24512] reiserfs: using flush barriers [ 877.121351][T24512] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 877.183076][T24512] REISERFS (device loop1): checking transaction log (loop1) [ 877.447016][T24512] REISERFS (device loop1): Using tea hash to sort names [ 877.474486][T24512] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 877.541212][T24541] netlink: 'syz.2.8709': attribute type 3 has an invalid length. [ 877.561971][T24541] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8709'. [ 877.862597][T24549] loop2: detected capacity change from 0 to 2048 [ 877.915136][T24549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504 [ 877.922774][T24529] loop3: detected capacity change from 0 to 32768 [ 878.028918][T24549] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 878.113264][T24529] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 878.113264][T24529] [ 878.144277][T19053] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 878.153505][T24529] ERROR: (device loop3): remounting filesystem as read-only [ 878.180610][T24529] ialloc: diAlloc returned -5! [ 878.529076][T19053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 139, changing to 11 [ 878.564869][T19053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 34695, setting to 1024 [ 878.584445][T24580] netlink: 'syz.3.8728': attribute type 61 has an invalid length. [ 878.598591][T24575] loop2: detected capacity change from 0 to 4096 [ 878.623972][T24581] netlink: 'syz.1.8729': attribute type 10 has an invalid length. [ 878.676425][T24581] batman_adv: batadv0: Adding interface: wlan1 [ 878.683548][T24575] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 878.739911][T24581] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.773071][T24581] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 878.805360][T24575] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 878.807117][T19053] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 878.821823][T24575] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 878.837347][T19053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.841312][T24575] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 878.857739][T19053] usb 5-1: Product: syz [ 878.871104][T19053] usb 5-1: Manufacturer: syz [ 878.886671][T19053] usb 5-1: SerialNumber: syz [ 878.919102][T19053] usb 5-1: config 0 descriptor?? [ 878.956883][T24479] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 879.248596][T19053] usb 5-1: USB disconnect, device number 3 [ 879.339848][T24609] loop0: detected capacity change from 0 to 1024 [ 879.373592][ T4973] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 879.500997][T19711] udevd[19711]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.545250][T24609] hfsplus: request for non-existent node 65280 in B*Tree [ 879.562145][T24609] hfsplus: request for non-existent node 65280 in B*Tree [ 879.607280][ T5852] hfsplus: b-tree write err: -5, ino 4 [ 879.640817][ T4973] usb 4-1: Using ep0 maxpacket: 32 [ 879.822569][ T4973] usb 4-1: unable to get BOS descriptor or descriptor too short [ 879.918608][ T4973] usb 4-1: config 2 has an invalid interface number: 165 but max is 1 [ 879.929664][ T4973] usb 4-1: config 2 has no interface number 0 [ 879.952018][ T4973] usb 4-1: config 2 interface 1 has no altsetting 0 [ 879.958671][ T4973] usb 4-1: config 2 interface 165 has no altsetting 0 [ 880.089842][T24640] loop0: detected capacity change from 0 to 8192 [ 880.116752][T24640] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 880.129348][T24640] REISERFS (device loop0): using ordered data mode [ 880.135947][T24640] reiserfs: using flush barriers [ 880.142409][T24640] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 880.160813][T24640] REISERFS (device loop0): checking transaction log (loop0) [ 880.164619][ T4973] usb 4-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=3d.59 [ 880.214151][ T4973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.265101][ T4973] usb 4-1: Product: syz [ 880.292619][ T4973] usb 4-1: Manufacturer: syz [ 880.297336][ T4973] usb 4-1: SerialNumber: syz [ 880.387458][T24640] REISERFS (device loop0): Using tea hash to sort names [ 880.423426][T24640] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 880.480947][T24667] loop4: detected capacity change from 0 to 128 [ 880.664264][T24667] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 880.668130][ T4973] ftdi_sio 4-1:2.1: FTDI USB Serial Device converter detected [ 880.716127][ T4973] usb 4-1: Detected FT2232C [ 880.736916][T24667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 880.757597][ T4973] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 880.784408][ T4973] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 880.809325][ T4973] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 880.882379][ T4973] usb 4-1: USB disconnect, device number 5 [ 880.916144][T24686] loop0: detected capacity change from 0 to 16 [ 880.926683][ T4973] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 880.954326][ T4973] ftdi_sio 4-1:2.1: device disconnected [ 880.978020][T24686] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 880.994169][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8781'. [ 881.031906][T24686] erofs: (device loop0): mounted with root inode @ nid 36. [ 881.327092][T24705] loop4: detected capacity change from 0 to 512 [ 881.393590][T19053] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 881.422821][T24709] netlink: 288 bytes leftover after parsing attributes in process `syz.2.8792'. [ 881.564208][T24719] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 881.681471][T24727] mip6: mip6_destopt_init_state: state's mode is not 2: 1 [ 881.810638][ T4992] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 881.960477][T19053] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 881.973460][T24742] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8808'. [ 881.982624][T19053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.990982][T19053] usb 2-1: Product: syz [ 881.993964][T24742] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 881.999555][T19053] usb 2-1: Manufacturer: syz [ 882.004430][T24742] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 882.015791][T19053] usb 2-1: SerialNumber: syz [ 882.057398][T19053] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 882.227754][ T4992] usb 5-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 882.238967][ T4992] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 882.247887][ T4992] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 882.261696][ T4973] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 882.291876][T19207] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 882.431219][ T4992] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 882.441382][ T4992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.449654][ T4992] usb 5-1: Product: syz [ 882.455200][ T4992] usb 5-1: Manufacturer: syz [ 882.459884][ T4992] usb 5-1: SerialNumber: syz [ 882.467790][ T4992] usb 5-1: config 0 descriptor?? [ 882.516349][ T4973] usb 1-1: Using ep0 maxpacket: 8 [ 882.601584][T19207] usb 4-1: Using ep0 maxpacket: 8 [ 882.644584][ T4973] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 882.652896][ T4973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.663056][ T4973] usb 1-1: config 0 has no interface number 0 [ 882.669365][ T4973] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 29, changing to 8 [ 882.680597][ T4973] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 33040, setting to 1024 [ 882.692027][T19053] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 882.701061][ T4973] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 882.716466][ T4973] usb 1-1: config 0 interface 52 has no altsetting 0 [ 882.726202][ T4992] usb 5-1: USB disconnect, device number 4 [ 882.795069][T19207] usb 4-1: unable to get BOS descriptor or descriptor too short [ 882.804653][ T4973] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 882.813990][ T4973] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 882.826643][ T4973] usb 1-1: Manufacturer: syz [ 882.833602][ T4973] usb 1-1: config 0 descriptor?? [ 882.890477][T19207] usb 4-1: config 9 has an invalid interface number: 206 but max is 0 [ 882.903013][T19207] usb 4-1: config 9 has no interface number 0 [ 882.909149][T19207] usb 4-1: config 9 interface 206 has no altsetting 0 [ 883.120719][ T4973] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input56 [ 883.143924][T19212] usb 2-1: USB disconnect, device number 127 [ 883.150566][T19207] usb 4-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 883.163103][T19207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.173017][T19207] usb 4-1: Product: syz [ 883.177309][T19207] usb 4-1: Manufacturer: syz [ 883.183401][T19207] usb 4-1: SerialNumber: syz [ 883.346241][ T4973] usb 1-1: USB disconnect, device number 23 [ 883.352359][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 883.576467][T19207] go7007: probe of 4-1:9.206 failed with error -12 [ 883.590395][T19207] usb 4-1: USB disconnect, device number 6 [ 883.596453][T19213] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 883.670384][T19211] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 883.820023][T19053] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 883.829589][T19053] ath9k_htc: Failed to initialize the device [ 883.850184][T19212] usb 2-1: ath9k_htc: USB layer deinitialized [ 883.949466][T19211] usb 3-1: Using ep0 maxpacket: 16 [ 884.002449][T19213] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.093328][T19211] usb 3-1: config 0 has no interfaces? [ 884.203855][T24796] tc_dump_action: action bad kind [ 884.216027][T19213] usb 5-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 884.225198][T19213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.252880][T19213] usb 5-1: Product: syz [ 884.264419][T19213] usb 5-1: Manufacturer: syz [ 884.279770][T19213] usb 5-1: SerialNumber: syz [ 884.301296][T19211] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 884.323298][T19211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.356753][T19211] usb 3-1: Product: syz [ 884.361057][T19211] usb 3-1: Manufacturer: syz [ 884.382036][T19211] usb 3-1: SerialNumber: syz [ 884.421375][T24809] loop0: detected capacity change from 0 to 256 [ 884.444999][T19211] r8152-cfgselector 3-1: config 0 descriptor?? [ 884.458298][T24809] exfat: Deprecated parameter 'namecase' [ 884.458375][T24809] exfat: Deprecated parameter 'utf8' [ 884.477138][T24809] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 884.571644][T24814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8843'. [ 884.618413][T19213] qmi_wwan 5-1:1.0: skipping garbage [ 884.634068][T19213] qmi_wwan 5-1:1.0: invalid descriptor buffer length [ 884.672031][T19213] qmi_wwan: probe of 5-1:1.0 failed with error -22 [ 884.704349][T19213] usb 5-1: USB disconnect, device number 5 [ 884.734595][T19211] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 884.762300][ T144] usb 3-1: config 0 descriptor?? [ 884.971484][T19213] usb 3-1: USB disconnect, device number 32 [ 884.996177][ T144] usb 3-1: can't set config #0, error -71 [ 885.255750][T24850] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 885.676476][T24880] device geneve2 entered promiscuous mode [ 885.899073][T24890] (unnamed net_device) (uninitialized): option lacp_active: invalid value (6) [ 885.924754][T24891] loop2: detected capacity change from 0 to 256 [ 886.015756][T24891] FAT-fs (loop2): bogus sectors per cluster 0 [ 886.034270][T24891] FAT-fs (loop2): Can't find a valid FAT filesystem [ 886.362997][T24914] loop2: detected capacity change from 0 to 256 [ 886.469280][T24866] loop1: detected capacity change from 0 to 32768 [ 886.593049][T24928] loop4: detected capacity change from 0 to 512 [ 886.791868][T19211] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 886.822867][T24928] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.8900: bg 0: block 205: padding at end of block bitmap is not set [ 886.852173][T24928] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 886.887934][T24928] EXT4-fs (loop4): 1 orphan inode deleted [ 886.893723][T24928] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 886.923324][T24928] ext4 filesystem being mounted at /1853/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 887.060205][T24941] loop0: detected capacity change from 0 to 4096 [ 887.092696][T19211] usb 4-1: Using ep0 maxpacket: 16 [ 887.124336][T24941] __ntfs_error: 11 callbacks suppressed [ 887.124356][T24941] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 887.232391][T24941] ntfs: volume version 3.1. [ 887.248390][T19211] usb 4-1: config 0 has an invalid interface number: 164 but max is 2 [ 887.256959][T19211] usb 4-1: config 0 has an invalid interface number: 158 but max is 2 [ 887.272140][T24941] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 887.294171][T19211] usb 4-1: config 0 has an invalid interface number: 16 but max is 2 [ 887.312603][T24941] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 887.328237][T19211] usb 4-1: config 0 has no interface number 0 [ 887.343944][T19211] usb 4-1: config 0 has no interface number 1 [ 887.350454][T24941] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 887.363965][T19211] usb 4-1: config 0 has no interface number 2 [ 887.371001][T19211] usb 4-1: config 0 interface 164 has no altsetting 0 [ 887.378160][T19211] usb 4-1: config 0 interface 158 has no altsetting 0 [ 887.399541][T19211] usb 4-1: config 0 interface 16 has no altsetting 0 [ 887.414074][T24941] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 887.448551][T24941] ntfs: (device loop0): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 887.604462][T19207] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 887.627319][T19211] usb 4-1: New USB device found, idVendor=413c, idProduct=8171, bcdDevice=6f.81 [ 887.663650][T19211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.695441][T19211] usb 4-1: Product: syz [ 887.699710][T19211] usb 4-1: Manufacturer: syz [ 887.710900][T19211] usb 4-1: SerialNumber: syz [ 887.742806][T19211] usb 4-1: config 0 descriptor?? [ 887.765515][T24972] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 887.903371][T19207] usb 3-1: Using ep0 maxpacket: 16 [ 888.085194][T19207] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 888.093802][T19207] usb 3-1: config 0 has no interface number 0 [ 888.107708][T19211] usb 4-1: USB disconnect, device number 7 [ 888.289179][T24974] loop0: detected capacity change from 0 to 32768 [ 888.305085][T19207] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 888.320015][T19207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.337083][T19207] usb 3-1: Product: syz [ 888.343881][T19207] usb 3-1: Manufacturer: syz [ 888.352836][T19207] usb 3-1: SerialNumber: syz [ 888.361556][T19207] usb 3-1: config 0 descriptor?? [ 888.365636][T24980] loop1: detected capacity change from 0 to 32768 [ 888.453222][T24980] JBD2: Ignoring recovery information on journal [ 888.647774][T24980] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 888.668865][T24996] loop3: detected capacity change from 0 to 128 [ 888.796739][T24998] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8932'. [ 888.908410][T19207] usb 3-1: Found UVC 9.07 device syz (046d:08d3) [ 888.926323][T19207] usb 3-1: No valid video chain found. [ 888.935576][ T4171] ocfs2: Unmounting device (7,1) on (node local) [ 888.951173][T19207] usb 3-1: USB disconnect, device number 33 [ 888.959343][T25003] binder: binder_mmap: 25002 200000001000-20000000b000 bad vm_flags failed -1 [ 888.997797][T25006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8936'. [ 889.274317][T25011] loop3: detected capacity change from 0 to 4096 [ 889.372047][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8944'. [ 889.516320][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8945'. [ 889.718494][T25036] loop0: detected capacity change from 0 to 1024 [ 889.744255][T25042] netlink: 332 bytes leftover after parsing attributes in process `syz.2.8954'. [ 889.812025][ C0] sd 0:0:1:0: tag#6060 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 889.822093][ C0] sd 0:0:1:0: tag#6060 CDB: Test Unit Ready [ 889.822563][T25036] EXT4-fs (loop0): Ignoring removed orlov option [ 889.828075][ C0] sd 0:0:1:0: tag#6060 CDB[00]: 00 00 00 00 00 00 c8 62 b7 79 b6 eb b7 bd 33 12 [ 889.828100][ C0] sd 0:0:1:0: tag#6060 CDB[10]: ba b8 5b e5 50 f7 67 9d 8e 9d 88 b8 86 ed d2 6b [ 889.828118][ C0] sd 0:0:1:0: tag#6060 CDB[20]: 0f 5d 53 d0 6b 1d [ 889.845977][T25039] loop3: detected capacity change from 0 to 4096 [ 889.963067][T25039] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 889.967625][T25036] EXT4-fs (loop0): Test dummy encryption mode enabled [ 890.026403][T25036] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 890.047824][T25039] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 890.073497][T25036] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 890.085179][T25036] EXT4-fs (loop0): invalid journal inode [ 890.091052][T25036] EXT4-fs (loop0): can't get journal size [ 890.139207][T25036] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 890.238259][T25054] CIFS: VFS: Malformed UNC in devname [ 890.372873][ T9] ntfs3: loop3: ino=1e, Internal error [ 890.388026][ T9] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 890.416674][ T4169] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 890.632450][T25072] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8966'. [ 890.636507][T25037] loop4: detected capacity change from 0 to 32768 [ 890.664826][T25072] ksmbd: Unknown IPC event: 1, ignore. [ 890.748951][T25037] (syz.4.8950,25037,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 890.801473][T25037] (syz.4.8950,25037,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 890.900428][T25037] JBD2: Ignoring recovery information on journal [ 891.026144][T25037] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 891.181932][T25092] loop2: detected capacity change from 0 to 4096 [ 891.214177][ T4179] ocfs2: Unmounting device (7,4) on (node local) [ 891.224800][T25092] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 891.239451][T25100] loop1: detected capacity change from 0 to 512 [ 891.313397][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8979'. [ 891.365276][T25100] EXT4-fs (loop1): Test dummy encryption mode enabled [ 891.385181][T25100] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 891.506851][T25100] EXT4-fs (loop1): 1 truncate cleaned up [ 891.512589][T25100] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,noblock_validity,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 891.656019][T25119] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 891.713486][T25124] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8985'. [ 891.732091][T25119] blk_update_request: I/O error, dev loop2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 891.793222][T25119] Mount JFS Failure: -5 [ 891.816863][T25119] jfs_mount failed w/return code = -5 [ 892.523354][T25167] netlink: 'syz.4.9008': attribute type 1 has an invalid length. [ 892.730665][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9013'. [ 892.767583][T25177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9013'. [ 892.777181][T25183] loop3: detected capacity change from 0 to 256 [ 892.859940][T25183] FAT-fs (loop3): Directory bread(block 64) failed [ 892.899914][T25183] FAT-fs (loop3): Directory bread(block 65) failed [ 892.929886][T25183] FAT-fs (loop3): Directory bread(block 66) failed [ 892.948730][T25183] FAT-fs (loop3): Directory bread(block 67) failed [ 892.955487][T25183] FAT-fs (loop3): Directory bread(block 68) failed [ 892.981346][T25183] FAT-fs (loop3): Directory bread(block 69) failed [ 892.983551][T25139] loop0: detected capacity change from 0 to 32768 [ 892.989413][T25183] FAT-fs (loop3): Directory bread(block 70) failed [ 893.023191][T25183] FAT-fs (loop3): Directory bread(block 71) failed [ 893.045028][T25183] FAT-fs (loop3): Directory bread(block 72) failed [ 893.062595][T25183] FAT-fs (loop3): Directory bread(block 73) failed [ 893.144400][T25139] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 893.202929][T25139] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 893.329999][T25139] (syz.0.8993,25139,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=1296, name_len=0 [ 893.376313][T25139] (syz.0.8993,25139,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 893.451188][T25139] (syz.0.8993,25139,1):ocfs2_symlink:1864 ERROR: status = -2 [ 893.458800][T25139] (syz.0.8993,25139,1):ocfs2_symlink:2065 ERROR: status = -2 [ 893.607628][ T4168] ocfs2: Unmounting device (7,0) on (node local) [ 893.685054][T25219] tmpfs: Unknown parameter ',0' [ 893.898109][T25224] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 893.921554][T19212] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 893.968282][T25226] loop4: detected capacity change from 0 to 256 [ 894.103212][T25226] FAT-fs (loop4): Directory bread(block 64) failed [ 894.109805][T25226] FAT-fs (loop4): Directory bread(block 65) failed [ 894.145983][T25226] FAT-fs (loop4): Directory bread(block 66) failed [ 894.159139][T25238] __nla_validate_parse: 1 callbacks suppressed [ 894.159160][T25238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9042'. [ 894.163563][T25226] FAT-fs (loop4): Directory bread(block 67) failed [ 894.204637][T25226] FAT-fs (loop4): Directory bread(block 68) failed [ 894.239364][T25226] FAT-fs (loop4): Directory bread(block 69) failed [ 894.252453][T25226] FAT-fs (loop4): Directory bread(block 70) failed [ 894.290314][T25226] FAT-fs (loop4): Directory bread(block 71) failed [ 894.317210][T25226] FAT-fs (loop4): Directory bread(block 72) failed [ 894.323851][T25226] FAT-fs (loop4): Directory bread(block 73) failed [ 894.336555][T19212] usb 4-1: not running at top speed; connect to a high speed hub [ 894.355093][T25235] loop1: detected capacity change from 0 to 8192 [ 894.426424][T19212] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 894.447059][T19212] usb 4-1: config 95 has no interface number 0 [ 894.453543][T25235] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 894.463409][T19212] usb 4-1: config 95 interface 1 has no altsetting 0 [ 894.508499][T25235] REISERFS (device loop1): using ordered data mode [ 894.532636][T25235] reiserfs: using flush barriers [ 894.597966][T25235] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 894.661297][T19212] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 894.686800][T19212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.717916][T25235] REISERFS (device loop1): checking transaction log (loop1) [ 894.723846][T19212] usb 4-1: Product: syz [ 894.740616][T19212] usb 4-1: Manufacturer: syz [ 894.750948][T25235] REISERFS (device loop1): Using r5 hash to sort names [ 894.773085][T19212] usb 4-1: SerialNumber: syz [ 894.780525][T25235] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 894.817995][T25235] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 895.217543][T25286] loop2: detected capacity change from 0 to 24 [ 895.278127][T25286] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 895.299204][T25292] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9068'. [ 895.338135][T25286] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 895.353992][T19212] usb 4-1: USB disconnect, device number 8 [ 895.553119][T25305] netlink: 'syz.2.9073': attribute type 21 has an invalid length. [ 895.567705][T25305] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9073'. [ 895.689947][T25313] netlink: 'syz.1.9078': attribute type 3 has an invalid length. [ 895.715214][T25317] loop0: detected capacity change from 0 to 512 [ 895.735195][T25318] loop4: detected capacity change from 0 to 512 [ 895.802521][T25322] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9083'. [ 895.819198][T25317] EXT4-fs (loop0): Test dummy encryption mode enabled [ 895.826259][T25317] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 895.853117][T25318] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 895.878993][T25317] EXT4-fs (loop0): 1 truncate cleaned up [ 895.916347][T25317] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,noblock_validity,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 896.022608][T25318] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 896.054590][T25318] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.9081: invalid indirect mapped block 2683928664 (level 1) [ 896.098832][T25315] loop2: detected capacity change from 0 to 32768 [ 896.133324][T19618] udevd[19618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.149668][T25318] EXT4-fs (loop4): Remounting filesystem read-only [ 896.163309][T25318] EXT4-fs (loop4): 1 truncate cleaned up [ 896.178092][T25318] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 896.207036][T25315] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 896.277492][T25315] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 896.299876][T25344] netlink: 'syz.1.9092': attribute type 2 has an invalid length. [ 896.307845][T25344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9092'. [ 896.370598][T25315] (syz.2.9079,25315,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=1296, name_len=0 [ 896.426069][T25315] (syz.2.9079,25315,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 896.447701][T25315] (syz.2.9079,25315,1):ocfs2_symlink:1864 ERROR: status = -2 [ 896.468717][T25315] (syz.2.9079,25315,1):ocfs2_symlink:2065 ERROR: status = -2 [ 896.495702][T25356] syz.3.9098 (25356): drop_caches: 0 [ 896.621823][ T4182] ocfs2: Unmounting device (7,2) on (node local) [ 896.810652][T25374] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 896.818529][T25373] loop1: detected capacity change from 0 to 512 [ 896.857935][T25376] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 896.908127][T25376] Error parsing options; rc = [-22] [ 896.908273][T25373] EXT4-fs (loop1): Ignoring removed orlov option [ 896.961498][T25382] loop2: detected capacity change from 0 to 128 [ 896.972814][T25373] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 896.989356][T25373] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 897.027374][T25373] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.9106: Corrupt directory, running e2fsck is recommended [ 897.196281][T25373] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 897.214726][T25382] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 897.233864][T25373] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.9106: corrupted in-inode xattr [ 897.290087][T25373] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.9106: couldn't read orphan inode 15 (err -117) [ 897.324216][T25382] ================================================================== [ 897.333080][T25382] BUG: KASAN: use-after-free in sysv_new_block+0x788/0x960 [ 897.340338][T25382] Read of size 4 at addr ffff888071ecd0c8 by task syz.2.9103/25382 [ 897.348343][T25382] [ 897.350693][T25382] CPU: 0 PID: 25382 Comm: syz.2.9103 Not tainted 5.15.179-syzkaller #0 [ 897.358964][T25382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 897.369050][T25382] Call Trace: [ 897.372360][T25382] [ 897.375317][T25382] dump_stack_lvl+0x1e3/0x2d0 [ 897.380035][T25382] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 897.385706][T25382] ? _printk+0xd1/0x120 [ 897.389900][T25382] ? __wake_up_klogd+0xcc/0x100 [ 897.394782][T25382] ? panic+0x860/0x860 [ 897.398883][T25382] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 897.404385][T25382] print_address_description+0x63/0x3b0 [ 897.409978][T25382] ? sysv_new_block+0x788/0x960 [ 897.414863][T25382] kasan_report+0x16b/0x1c0 [ 897.419414][T25382] ? sysv_new_block+0x788/0x960 [ 897.424316][T25382] sysv_new_block+0x788/0x960 [ 897.429050][T25382] get_block+0x2e7/0x1790 [ 897.433443][T25382] ? create_page_buffers+0x1d4/0x330 [ 897.438774][T25382] ? sysv_truncate+0x1050/0x1050 [ 897.443744][T25382] ? alloc_buffer_head+0xd3/0xf0 [ 897.448731][T25382] ? create_page_buffers+0x24b/0x330 [ 897.454054][T25382] __block_write_begin_int+0x60b/0x1650 [ 897.459674][T25382] ? sysv_truncate+0x1050/0x1050 [ 897.464656][T25382] ? page_zero_new_buffers+0x510/0x510 [ 897.470148][T25382] ? sysv_free_inode+0x840/0x840 [ 897.475115][T25382] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 897.481144][T25382] sysv_make_empty+0x8a/0x730 [ 897.485869][T25382] ? __mark_inode_dirty+0x3dd/0xd60 [ 897.491120][T25382] sysv_mkdir+0x7b/0x120 [ 897.495408][T25382] vfs_mkdir+0x3b6/0x590 [ 897.499696][T25382] do_mkdirat+0x260/0x520 [ 897.504062][T25382] ? vfs_mkdir+0x590/0x590 [ 897.508517][T25382] ? getname_flags+0x1ec/0x4e0 [ 897.513326][T25382] __x64_sys_mkdirat+0x85/0x90 [ 897.518134][T25382] do_syscall_64+0x3b/0xb0 [ 897.522589][T25382] ? clear_bhb_loop+0x15/0x70 [ 897.527317][T25382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 897.533266][T25382] RIP: 0033:0x7fa64dd3f169 [ 897.537708][T25382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.557337][T25382] RSP: 002b:00007fa64bba8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 897.565790][T25382] RAX: ffffffffffffffda RBX: 00007fa64df57fa0 RCX: 00007fa64dd3f169 [ 897.573798][T25382] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 897.581811][T25382] RBP: 00007fa64ddc02a0 R08: 0000000000000000 R09: 0000000000000000 [ 897.589816][T25382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.597819][T25382] R13: 0000000000000000 R14: 00007fa64df57fa0 R15: 00007ffdfcdb6ee8 [ 897.605851][T25382] [ 897.608900][T25382] [ 897.611254][T25382] The buggy address belongs to the page: [ 897.616904][T25382] page:ffffea0001c7b340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x100 pfn:0x71ecd [ 897.627278][T25382] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 897.634439][T25382] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 897.643057][T25382] raw: 0000000000000100 0000000000000000 00000000ffffffff 0000000000000000 [ 897.651666][T25382] page dumped because: kasan: bad access detected [ 897.658109][T25382] page_owner tracks the page as freed [ 897.663515][T25382] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 19592, ts 760803777829, free_ts 761909348816 [ 897.678392][T25382] get_page_from_freelist+0x3b78/0x3d40 [ 897.683981][T25382] __alloc_pages+0x272/0x700 [ 897.688620][T25382] alloc_pages_vma+0x39a/0x800 [ 897.693424][T25382] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 897.699123][T25382] shmem_getpage_gfp+0x17b1/0x3190 [ 897.704273][T25382] shmem_write_begin+0xce/0x1a0 [ 897.709159][T25382] generic_perform_write+0x2bf/0x5b0 [ 897.714480][T25382] __generic_file_write_iter+0x243/0x4f0 [ 897.720141][T25382] generic_file_write_iter+0xa7/0x1b0 [ 897.725550][T25382] vfs_write+0xacd/0xe50 [ 897.729943][T25382] ksys_write+0x1a2/0x2c0 [ 897.734312][T25382] do_syscall_64+0x3b/0xb0 [ 897.738761][T25382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 897.744699][T25382] page last free stack trace: [ 897.749397][T25382] free_unref_page_prepare+0xc34/0xcf0 [ 897.754899][T25382] free_unref_page_list+0x1f7/0x8e0 [ 897.760136][T25382] release_pages+0x1bb9/0x1f40 [ 897.764941][T25382] __pagevec_release+0x80/0xf0 [ 897.769735][T25382] shmem_undo_range+0x67a/0x1b50 [ 897.774702][T25382] shmem_evict_inode+0x21b/0xa00 [ 897.779675][T25382] evict+0x529/0x930 [ 897.783609][T25382] __dentry_kill+0x436/0x650 [ 897.788236][T25382] dentry_kill+0xbb/0x290 [ 897.792613][T25382] dput+0xd8/0x1a0 [ 897.796378][T25382] __fput+0x636/0x8e0 [ 897.800391][T25382] task_work_run+0x129/0x1a0 [ 897.805035][T25382] do_exit+0x6a3/0x2480 [ 897.809239][T25382] do_group_exit+0x144/0x310 [ 897.813864][T25382] get_signal+0xc66/0x14e0 [ 897.818305][T25382] arch_do_signal_or_restart+0xc3/0x1890 [ 897.823968][T25382] [ 897.826312][T25382] Memory state around the buggy address: [ 897.832053][T25382] ffff888071eccf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 897.840152][T25382] ffff888071ecd000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 897.848251][T25382] >ffff888071ecd080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 897.856336][T25382] ^ [ 897.862777][T25382] ffff888071ecd100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 897.870868][T25382] ffff888071ecd180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 897.878951][T25382] ================================================================== [ 897.887028][T25382] Disabling lock debugging due to kernel taint [ 897.893255][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.954061][T25373] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,nogrpid,orlov,data_err=abort,grpjquota=.sb=0x0000000000000001,init_itable,jqfmt=vfsold,stripe=0x0000000000010000,,,errors=continue. Quota mode: writeback. [ 897.977722][ C0] vkms_vblank_simulate: vblank timer overrun [ 898.143707][T25391] loop3: detected capacity change from 0 to 32768 [ 898.158885][T25382] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 898.166119][T25382] CPU: 1 PID: 25382 Comm: syz.2.9103 Tainted: G B 5.15.179-syzkaller #0 [ 898.175908][T25382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 898.185980][T25382] Call Trace: [ 898.189269][T25382] [ 898.192221][T25382] dump_stack_lvl+0x1e3/0x2d0 [ 898.196902][T25382] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 898.202555][T25382] ? panic+0x860/0x860 [ 898.206619][T25382] ? preempt_schedule_common+0xa6/0xd0 [ 898.212088][T25382] ? preempt_schedule+0xd9/0xe0 [ 898.216972][T25382] panic+0x318/0x860 [ 898.220870][T25382] ? check_panic_on_warn+0x1d/0xa0 [ 898.225988][T25382] ? fb_is_primary_device+0xd0/0xd0 [ 898.231219][T25382] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 898.237226][T25382] ? _raw_spin_unlock+0x40/0x40 [ 898.242168][T25382] ? print_memory_metadata+0xe2/0x140 [ 898.247546][T25382] check_panic_on_warn+0x7e/0xa0 [ 898.252490][T25382] ? sysv_new_block+0x788/0x960 [ 898.257360][T25382] end_report+0x6d/0xf0 [ 898.261607][T25382] kasan_report+0x18e/0x1c0 [ 898.266222][T25382] ? sysv_new_block+0x788/0x960 [ 898.271073][T25382] sysv_new_block+0x788/0x960 [ 898.275756][T25382] get_block+0x2e7/0x1790 [ 898.280098][T25382] ? create_page_buffers+0x1d4/0x330 [ 898.285386][T25382] ? sysv_truncate+0x1050/0x1050 [ 898.290328][T25382] ? alloc_buffer_head+0xd3/0xf0 [ 898.295287][T25382] ? create_page_buffers+0x24b/0x330 [ 898.300602][T25382] __block_write_begin_int+0x60b/0x1650 [ 898.306164][T25382] ? sysv_truncate+0x1050/0x1050 [ 898.311132][T25382] ? page_zero_new_buffers+0x510/0x510 [ 898.316621][T25382] ? sysv_free_inode+0x840/0x840 [ 898.321586][T25382] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 898.327573][T25382] sysv_make_empty+0x8a/0x730 [ 898.332257][T25382] ? __mark_inode_dirty+0x3dd/0xd60 [ 898.337466][T25382] sysv_mkdir+0x7b/0x120 [ 898.341741][T25382] vfs_mkdir+0x3b6/0x590 [ 898.346008][T25382] do_mkdirat+0x260/0x520 [ 898.350338][T25382] ? vfs_mkdir+0x590/0x590 [ 898.354749][T25382] ? getname_flags+0x1ec/0x4e0 [ 898.359523][T25382] __x64_sys_mkdirat+0x85/0x90 [ 898.364307][T25382] do_syscall_64+0x3b/0xb0 [ 898.368723][T25382] ? clear_bhb_loop+0x15/0x70 [ 898.373410][T25382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 898.379300][T25382] RIP: 0033:0x7fa64dd3f169 [ 898.383755][T25382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.403358][T25382] RSP: 002b:00007fa64bba8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 898.411772][T25382] RAX: ffffffffffffffda RBX: 00007fa64df57fa0 RCX: 00007fa64dd3f169 [ 898.419734][T25382] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 898.427698][T25382] RBP: 00007fa64ddc02a0 R08: 0000000000000000 R09: 0000000000000000 [ 898.435663][T25382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.443638][T25382] R13: 0000000000000000 R14: 00007fa64df57fa0 R15: 00007ffdfcdb6ee8 [ 898.451630][T25382] [ 898.454937][T25382] Kernel Offset: disabled [ 898.467178][T25382] Rebooting in 86400 seconds..