last executing test programs: 2m45.911489197s ago: executing program 1 (id=7265): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) 2m45.63546127s ago: executing program 1 (id=7269): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x1c) 2m45.463733163s ago: executing program 1 (id=7273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '\xe8H4[-]\',!@Q*+#+%\x00'}, &(0x7f00000002c0)=""/19, 0x13) 2m45.189631646s ago: executing program 1 (id=7277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="180200002000000000000000000000008500000036000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m45.117348162s ago: executing program 1 (id=7279): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2m44.080273025s ago: executing program 1 (id=7289): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x200002], [0x400000000000001, 0x0, 0x9]}) 2m27.947468821s ago: executing program 32 (id=7289): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x200002], [0x400000000000001, 0x0, 0x9]}) 8.719692755s ago: executing program 3 (id=9229): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) 7.235257855s ago: executing program 3 (id=9248): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x100004, 0x13, {}, {0x0, 0x8, 0x0, 0x0, 0xfd, 0x0, "00a30020"}, 0x0, 0x2, {0x0}}) 7.062842499s ago: executing program 3 (id=9250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.782957372s ago: executing program 3 (id=9253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002980)={0x20, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 6.541072081s ago: executing program 3 (id=9256): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@fat=@check_strict}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) 6.275183153s ago: executing program 3 (id=9260): sync() sync() 3.573034592s ago: executing program 0 (id=9285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000780)="e10ea784d395f5d2e39879420a85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) 3.386757947s ago: executing program 0 (id=9288): syz_mount_image$xfs(&(0x7f0000009680), &(0x7f00000096c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x96a4, &(0x7f0000012d80)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000010000001d"], 0x28a40) 2.316194623s ago: executing program 2 (id=9297): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2e, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.950102003s ago: executing program 2 (id=9301): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 1.775023027s ago: executing program 0 (id=9303): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0xffffffffffffffff, 0x22, 0x40, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="3a1dd60a04000421001f6be54d61fe82c859d8cf9278395dfe1be91a7c0d983767de", 0x0, 0x4, 0x0, 0x2, 0x0}) 1.774908317s ago: executing program 2 (id=9304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700ff"], 0x74}}, 0x0) 1.527188957s ago: executing program 2 (id=9306): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setgid(0x0) 1.311409065s ago: executing program 2 (id=9308): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0xfffff9, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 1.206033133s ago: executing program 2 (id=9310): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010ac0542024000010203010902240001010008050904007f02030102"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 991.015491ms ago: executing program 0 (id=9312): iopl(0x3) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 906.126247ms ago: executing program 0 (id=9314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 755.035859ms ago: executing program 0 (id=9316): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x33, 0x1, [{0x8, 0x8}]}}) 543.245877ms ago: executing program 4 (id=9318): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000007c0)={0x14, 0x15, 0x1, 0x70bd28, 0x25dfdbfe, {0x18, 0x9}}, 0x14}}, 0x10) 398.763309ms ago: executing program 4 (id=9319): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xfffffffb, 0x300}, 0xc) 306.751316ms ago: executing program 4 (id=9320): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) 191.362795ms ago: executing program 4 (id=9321): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c) 107.179872ms ago: executing program 4 (id=9322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) 0s ago: executing program 4 (id=9323): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): descriptor inconsistent: 25 vs 4128793 free clusters [ 870.756962][T27302] xt_hashlimit: max too large, truncated to 1048576 [ 870.897043][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.097593][T27319] netlink: 'syz.0.7335': attribute type 10 has an invalid length. [ 871.124235][T27319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.146172][T27319] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 872.336268][T27380] IPv6: NLM_F_CREATE should be specified when creating new route [ 872.756212][T27400] netlink: 'syz.0.7365': attribute type 2 has an invalid length. [ 873.456656][T27444] binder: 27441:27444 ioctl 40046210 0 returned -14 [ 874.106011][T27466] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7383'. [ 874.345586][T27452] loop2: detected capacity change from 0 to 32768 [ 874.456659][T27452] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 874.696449][T27498] netlink: 'syz.0.7390': attribute type 10 has an invalid length. [ 874.705366][T27499] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 874.713778][T27498] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7390'. [ 874.762373][T27452] XFS (loop2): Ending clean mount [ 874.773012][T27452] XFS (loop2): Quotacheck needed: Please wait. [ 874.902668][T27452] XFS (loop2): Quotacheck: Done. [ 875.161927][ T5795] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 875.794142][T27539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7397'. [ 876.360650][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 876.574692][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 876.582006][ T27] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 876.591947][ T27] usb 1-1: config 6 has no interface number 0 [ 876.598629][ T27] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 876.614061][ T27] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.633552][ T27] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 876.643518][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.652741][ T27] usb 1-1: Product: syz [ 876.657059][ T27] usb 1-1: Manufacturer: syz [ 876.670585][ T27] usb 1-1: SerialNumber: syz [ 876.687422][ T27] hso 1-1:6.2: Failed to find INT IN ep [ 876.903696][ T5873] usb 1-1: USB disconnect, device number 3 [ 877.062801][T27592] loop2: detected capacity change from 0 to 2048 [ 877.094609][T27592] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 877.399845][T27604] loop2: detected capacity change from 0 to 512 [ 877.447288][T27604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.715480][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.930761][T27631] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.7425'. [ 877.940930][T27631] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 879.172948][T27693] bond0: Unable to set up delay as MII monitoring is disabled [ 879.297604][T27701] xt_ecn: cannot match TCP bits for non-tcp packets [ 879.536088][T27711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7451'. [ 879.776941][ T5873] IPVS: starting estimator thread 0... [ 879.878758][T27727] IPVS: using max 20 ests per chain, 48000 per kthread [ 879.950781][T27733] loop0: detected capacity change from 0 to 1024 [ 880.033164][T27740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7460'. [ 880.447465][T27759] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 880.893849][T27782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7473'. [ 880.909947][T27782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7473'. [ 881.903774][T27830] netlink: 'syz.3.7489': attribute type 21 has an invalid length. [ 881.918035][T27830] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7489'. [ 881.929546][T27834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7491'. [ 881.940649][T27834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7491'. [ 881.957791][T27834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7491'. [ 881.996518][T27834] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7491'. [ 882.049207][T27834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7491'. [ 882.277403][T27841] veth1_to_team: entered allmulticast mode [ 883.092308][T27847] loop2: detected capacity change from 0 to 32768 [ 883.207195][ T28] audit: type=1326 audit(528272.843:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.3.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 883.229062][T27847] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 883.229873][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.255823][T27883] comedi comedi4: bad chanlist[0]=0x04080007 chan=7 range length=2 [ 883.288474][ T28] audit: type=1326 audit(528272.881:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.3.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 883.312898][ T28] audit: type=1326 audit(528272.918:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.3.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 883.326104][T27847] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 883.339343][ T28] audit: type=1326 audit(528272.918:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.3.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 883.490354][T27847] XFS (loop2): Ending clean mount [ 883.511928][T27847] XFS (loop2): Quotacheck needed: Please wait. [ 883.715583][T27847] XFS (loop2): Quotacheck: Done. [ 883.766947][T27902] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 883.779653][T27902] bond0: (slave lo): Error: Device can not be enslaved while up [ 883.914696][ T5795] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 885.000144][T26295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 885.041702][T26295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 885.062620][T26295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 885.084877][T26295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 885.097902][T26295] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 885.110797][T26295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 885.308459][T27946] lo speed is unknown, defaulting to 1000 [ 885.326995][T27968] netlink: 'syz.2.7527': attribute type 1 has an invalid length. [ 885.768100][T28035] program syz.3.7533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 886.332507][T27946] chnl_net:caif_netlink_parms(): no params data found [ 886.758790][T27946] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.806266][T27946] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.813938][T27946] bridge_slave_0: entered allmulticast mode [ 886.838175][T27946] bridge_slave_0: entered promiscuous mode [ 886.871696][T27946] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.884779][T27946] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.895874][T27946] bridge_slave_1: entered allmulticast mode [ 886.915967][T27946] bridge_slave_1: entered promiscuous mode [ 887.055476][T28212] bond2: entered allmulticast mode [ 887.251125][T27946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.272980][T27946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.350127][ T5104] Bluetooth: hci4: command tx timeout [ 887.514335][T27946] team0: Port device team_slave_0 added [ 887.539330][T27946] team0: Port device team_slave_1 added [ 887.689723][T28329] loop0: detected capacity change from 0 to 2048 [ 887.768379][T28329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.809347][T27946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.828561][ T28] audit: type=1326 audit(528277.165:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28346 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 887.849088][T27946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.904212][ T28] audit: type=1326 audit(528277.165:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28346 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 887.923718][T27946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.938762][ T28] audit: type=1326 audit(528277.184:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28346 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 887.969610][T27946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.001386][T27946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.052871][ T28] audit: type=1326 audit(528277.184:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28346 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 888.135792][T27946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.137291][ T28] audit: type=1326 audit(528277.184:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28346 comm="syz.3.7560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 888.182036][T28357] delete_channel: no stack [ 888.517750][T27946] hsr_slave_0: entered promiscuous mode [ 888.547766][T27946] hsr_slave_1: entered promiscuous mode [ 888.576861][T27946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.598467][T27946] Cannot create hsr debugfs directory [ 888.761313][T28420] __nla_validate_parse: 1 callbacks suppressed [ 888.761338][T28420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7569'. [ 889.263806][T28485] netlink: 'syz.0.7575': attribute type 1 has an invalid length. [ 889.271628][T28485] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7575'. [ 889.298588][T28482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7574'. [ 889.493308][T27946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 889.540096][T27946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 889.549342][T28503] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 889.574517][ T5104] Bluetooth: hci4: command tx timeout [ 889.597239][T27946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 889.624389][T28506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7579'. [ 889.646074][T27946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 890.016690][T27946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.113373][T27946] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.187796][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.195944][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.271902][T21149] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.279703][T21149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.285683][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 890.300605][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 890.383765][T27946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 890.395261][T27946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 891.030778][T28570] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 891.069628][T27946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.245975][T28578] dvmrp0: entered allmulticast mode [ 891.796986][ T5104] Bluetooth: hci4: command tx timeout [ 891.886442][T28608] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 891.983661][T27946] veth0_vlan: entered promiscuous mode [ 892.078092][T27946] veth1_vlan: entered promiscuous mode [ 892.170436][T27946] veth0_macvtap: entered promiscuous mode [ 892.217052][T27946] veth1_macvtap: entered promiscuous mode [ 892.330097][T27946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.364679][T27946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.395511][T27946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.426449][T27946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.449558][T27946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.473219][T27946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.501110][T27946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.531424][T27946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.546621][T27946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.570536][T27946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.598697][T27946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.608874][T27946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.622998][T27946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.635408][T27946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.647196][T27946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.658298][T27946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.670108][T27946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.691548][T27946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.703213][T28622] lo speed is unknown, defaulting to 1000 [ 892.748618][T11347] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 892.840111][T27946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.860303][T27946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.876731][T27946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.896722][T27946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.964298][T11347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.986225][T11347] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 893.005383][T11347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.030664][T11347] usb 1-1: config 0 descriptor?? [ 893.340529][ T4798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.386173][ T4798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.511530][ T4798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.536306][T12654] usb 1-1: USB disconnect, device number 4 [ 893.543723][ T4798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.764148][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 893.983385][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 894.017244][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 894.025757][ T5104] Bluetooth: hci4: command tx timeout [ 894.047407][ T27] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 894.069723][ T27] usb 4-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.087213][ T27] usb 4-1: config 12 interface 0 has no altsetting 0 [ 894.098052][ T27] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 894.118169][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.126434][ T27] usb 4-1: Product: syz [ 894.131566][ T27] usb 4-1: Manufacturer: syz [ 894.136322][ T27] usb 4-1: SerialNumber: syz [ 894.419585][ T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 894.428191][T28734] loop2: detected capacity change from 0 to 8192 [ 894.458407][ T27] usb 4-1: selecting invalid altsetting 0 [ 894.504295][T28734] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 894.528154][T28734] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 894.550606][T28734] REISERFS (device loop2): using ordered data mode [ 894.558332][T28734] reiserfs: using flush barriers [ 894.566116][T28752] comedi comedi0: adq12b: I/O port conflict (0x5,16) [ 894.569229][T28734] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 894.634778][T28734] REISERFS (device loop2): checking transaction log (loop2) [ 894.674657][T28734] REISERFS (device loop2): Using r5 hash to sort names [ 894.703411][ T27] usb 4-1: USB disconnect, device number 3 [ 894.738794][T28734] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 894.915234][ T8377] udevd[8377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.947440][T28781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7632'. [ 894.993614][T28781] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7632'. [ 895.014120][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.479611][T28806] x_tables: ip_tables: ah match: only valid for protocol 51 [ 895.612896][T28814] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7640'. [ 895.642989][T28814] hsr_slave_0: left promiscuous mode [ 895.663746][T28817] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7642'. [ 895.676713][T28814] hsr_slave_1: left promiscuous mode [ 896.394946][T28850] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7652'. [ 896.421073][T28853] loop4: detected capacity change from 0 to 256 [ 896.533574][T28853] FAT-fs (loop4): Directory bread(block 64) failed [ 896.574178][T28853] FAT-fs (loop4): Directory bread(block 65) failed [ 896.597936][T28853] FAT-fs (loop4): Directory bread(block 66) failed [ 896.605094][T28853] FAT-fs (loop4): Directory bread(block 67) failed [ 896.650436][T28853] FAT-fs (loop4): Directory bread(block 68) failed [ 896.657602][T28853] FAT-fs (loop4): Directory bread(block 69) failed [ 896.703940][T28853] FAT-fs (loop4): Directory bread(block 70) failed [ 896.710737][T28853] FAT-fs (loop4): Directory bread(block 71) failed [ 896.767809][T28853] FAT-fs (loop4): Directory bread(block 72) failed [ 896.774866][T28853] FAT-fs (loop4): Directory bread(block 73) failed [ 897.159438][T28869] loop0: detected capacity change from 0 to 4096 [ 897.435387][T28885] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7662'. [ 897.479359][T28845] loop2: detected capacity change from 0 to 32768 [ 897.490726][T28885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7662'. [ 897.826313][T28895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7665'. [ 897.911750][T28904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7666'. [ 897.972151][T28904] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7666'. [ 898.505727][T28926] loop2: detected capacity change from 0 to 2048 [ 898.565147][T28926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.673394][T28926] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 898.770482][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.726113][T28979] loop2: detected capacity change from 0 to 4096 [ 899.777719][T28979] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 899.789131][T28988] loop0: detected capacity change from 0 to 128 [ 899.880914][T28988] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 899.945265][ T5791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 900.001511][T28979] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 900.100850][ T2960] hfsplus: b-tree write err: -5, ino 4 [ 900.677313][T29024] loop4: detected capacity change from 0 to 2048 [ 900.750249][T29028] loop2: detected capacity change from 0 to 2048 [ 900.786853][T29024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.856059][T29040] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 900.877251][T29024] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 900.943825][T29040] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 901.003545][T29040] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 901.029580][T27946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.071855][T29040] Remounting filesystem read-only [ 901.207094][ T5795] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 901.236536][ T5795] NILFS (loop2): discard dirty page: offset=0, ino=12 [ 901.244154][ T5795] NILFS (loop2): discard dirty block: blocknr=17, size=1024 [ 901.252158][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.261420][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.271212][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.281468][ T5795] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 901.288665][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.301627][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.314997][ T5795] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 901.331101][ T5795] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 901.365873][ T5795] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 901.381867][ T5795] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 901.402110][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.423974][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.447753][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.469362][ T5795] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 901.478697][ T5795] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 901.517986][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.559734][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.580371][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.598506][ T5795] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 901.617137][ T5795] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 901.631930][ T5795] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 901.639676][ T5795] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 901.673318][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.713543][ T5795] NILFS (loop2): discard dirty page: offset=131072, ino=3 [ 901.749056][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.765677][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.792114][ T5795] NILFS (loop2): discard dirty block: blocknr=46, size=1024 [ 901.799679][ T5795] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 901.937580][T29073] loop0: detected capacity change from 0 to 2048 [ 901.980277][T29073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.063342][T29073] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 902.266064][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.543772][T29103] pim6reg: entered allmulticast mode [ 903.185281][T29134] loop4: detected capacity change from 0 to 2048 [ 903.321229][T29134] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.729394][T29154] loop4: detected capacity change from 0 to 2048 [ 903.794509][T29154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.898030][ T28] audit: type=1800 audit(528292.198:2920): pid=29154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7739" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 903.982498][T29117] loop0: detected capacity change from 0 to 32768 [ 904.346832][T29179] syz.3.7746 uses obsolete (PF_INET,SOCK_PACKET) [ 906.030603][T29264] loop4: detected capacity change from 0 to 256 [ 906.169133][T29264] FAT-fs (loop4): Directory bread(block 64) failed [ 906.204037][T29264] FAT-fs (loop4): Directory bread(block 65) failed [ 906.237126][T29264] FAT-fs (loop4): Directory bread(block 66) failed [ 906.270270][T29264] FAT-fs (loop4): Directory bread(block 67) failed [ 906.301444][T29264] FAT-fs (loop4): Directory bread(block 68) failed [ 906.326034][T29264] FAT-fs (loop4): Directory bread(block 69) failed [ 906.332880][T29264] FAT-fs (loop4): Directory bread(block 70) failed [ 906.357397][T29264] FAT-fs (loop4): Directory bread(block 71) failed [ 906.364893][T29264] FAT-fs (loop4): Directory bread(block 72) failed [ 906.410491][T29264] FAT-fs (loop4): Directory bread(block 73) failed [ 906.866143][T29299] loop0: detected capacity change from 0 to 512 [ 906.901481][T29303] loop4: detected capacity change from 0 to 16 [ 906.922373][T29299] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.7777: iget: bad i_size value: 38620345925642 [ 906.981865][T29303] erofs: (device loop4): mounted with root inode @ nid 36. [ 907.038540][T29299] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7777: couldn't read orphan inode 15 (err -117) [ 907.095718][T29303] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 32811 of nid 36 [ 907.109356][T29299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.366437][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.600836][T29322] __nla_validate_parse: 1 callbacks suppressed [ 907.600856][T29322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7781'. [ 907.673812][T29321] netlink: 'syz.0.7780': attribute type 1 has an invalid length. [ 907.721123][T29321] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7780'. [ 907.990319][T29332] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.7785'. [ 908.036513][T29332] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 908.095296][T29329] loop2: detected capacity change from 0 to 4096 [ 908.130402][T29329] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 908.300537][T29342] netlink: 'syz.0.7787': attribute type 21 has an invalid length. [ 908.345232][T29342] netlink: 'syz.0.7787': attribute type 1 has an invalid length. [ 908.353237][T29342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7787'. [ 908.607007][T29353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7791'. [ 909.478468][T28674] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 909.556655][T29402] bond0: Unable to set up delay as MII monitoring is disabled [ 909.581086][T29406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7805'. [ 909.703898][T28674] usb 3-1: Using ep0 maxpacket: 16 [ 909.735281][T28674] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 909.755725][T28674] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 909.767563][T28674] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 909.797707][T28674] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 909.808704][T28674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.838846][T28674] usb 3-1: Product: syz [ 909.843778][T28674] usb 3-1: Manufacturer: syz [ 909.848714][T28674] usb 3-1: SerialNumber: syz [ 909.869408][T28674] usb 3-1: config 0 descriptor?? [ 909.877166][T29382] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 909.910079][T28674] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 909.948661][T28674] mceusb: probe of 3-1:0.0 failed with error -12 [ 909.987170][T29424] 9pnet_fd: p9_fd_create_unix (29424): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 910.196428][T28674] usb 3-1: USB disconnect, device number 3 [ 910.326999][T29438] netlink: 'syz.4.7816': attribute type 1 has an invalid length. [ 910.338414][T29438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7816'. [ 910.718337][T29460] netlink: 'syz.4.7823': attribute type 1 has an invalid length. [ 910.746396][T29460] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7823'. [ 910.847173][T29464] netlink: 'syz.3.7824': attribute type 21 has an invalid length. [ 910.884492][T29464] netlink: 'syz.3.7824': attribute type 1 has an invalid length. [ 910.917170][T29464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7824'. [ 911.247358][T29483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7831'. [ 911.285764][T29484] loop4: detected capacity change from 0 to 1024 [ 911.567430][T11347] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 911.693387][T29507] loop0: detected capacity change from 0 to 256 [ 911.766686][T29507] FAT-fs (loop0): Directory bread(block 64) failed [ 911.784408][T29507] FAT-fs (loop0): Directory bread(block 65) failed [ 911.787898][T11347] usb 4-1: Using ep0 maxpacket: 8 [ 911.798126][T29507] FAT-fs (loop0): Directory bread(block 66) failed [ 911.811878][T29507] FAT-fs (loop0): Directory bread(block 67) failed [ 911.828887][T11347] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 911.841759][T29507] FAT-fs (loop0): Directory bread(block 68) failed [ 911.867955][T11347] usb 4-1: config 6 has no interface number 0 [ 911.906075][T29507] FAT-fs (loop0): Directory bread(block 69) failed [ 911.908669][T11347] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 911.924864][T29507] FAT-fs (loop0): Directory bread(block 70) failed [ 911.924906][T29507] FAT-fs (loop0): Directory bread(block 71) failed [ 911.925017][T29507] FAT-fs (loop0): Directory bread(block 72) failed [ 911.978116][T11347] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 912.006140][T11347] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 912.023309][T11347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.032624][T29507] FAT-fs (loop0): Directory bread(block 73) failed [ 912.053004][T11347] usb 4-1: Product: syz [ 912.073267][T29521] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 912.074618][T11347] usb 4-1: Manufacturer: syz [ 912.112563][T11347] usb 4-1: SerialNumber: syz [ 912.141606][T11347] hso 4-1:6.2: Failed to find INT IN ep [ 912.456208][T29535] loop2: detected capacity change from 0 to 1024 [ 912.471143][ T27] usb 4-1: USB disconnect, device number 4 [ 913.160444][T29576] netlink: 'syz.2.7854': attribute type 21 has an invalid length. [ 913.219712][T29576] __nla_validate_parse: 3 callbacks suppressed [ 913.219730][T29576] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7854'. [ 913.596676][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7859'. [ 913.631965][T29600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7859'. [ 913.668950][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7859'. [ 913.696346][T29600] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7859'. [ 913.733892][T29600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7859'. [ 914.287154][ T28] audit: type=1326 audit(528301.917:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29632 comm="syz.4.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 914.310345][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.337829][T29635] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 914.404508][ T28] audit: type=1326 audit(528301.917:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29632 comm="syz.4.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 914.407024][T29635] bond0: (slave lo): Error: Device can not be enslaved while up [ 914.448526][ T28] audit: type=1326 audit(528301.964:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29632 comm="syz.4.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 914.513264][T29640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7874'. [ 914.523982][ T28] audit: type=1326 audit(528301.964:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29632 comm="syz.4.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 914.566657][T29643] IPv6: NLM_F_CREATE should be specified when creating new route [ 914.592291][ T28] audit: type=1326 audit(528301.983:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29632 comm="syz.4.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 914.804435][T29656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7878'. [ 914.816789][T29657] loop0: detected capacity change from 0 to 64 [ 914.830586][T29656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7878'. [ 914.862672][T29656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7878'. [ 915.216203][T29675] netlink: 'syz.0.7884': attribute type 21 has an invalid length. [ 915.667978][T29701] loop2: detected capacity change from 0 to 64 [ 916.201432][ T28] audit: type=1326 audit(528303.685:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29724 comm="syz.0.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 916.296086][ T28] audit: type=1326 audit(528303.685:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29724 comm="syz.0.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 916.395773][ T28] audit: type=1326 audit(528303.751:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29724 comm="syz.0.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 916.467463][ T28] audit: type=1326 audit(528303.751:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29724 comm="syz.0.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 916.570859][ T28] audit: type=1326 audit(528303.751:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29724 comm="syz.0.7898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 916.779654][T29753] program syz.2.7908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.314464][ T5887] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 917.538598][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 917.564714][ T5887] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 917.596696][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.636793][ T5887] usb 3-1: Product: syz [ 917.649212][ T5887] usb 3-1: Manufacturer: syz [ 917.664778][ T5887] usb 3-1: SerialNumber: syz [ 917.701445][ T5887] r8152-cfgselector 3-1: config 0 descriptor?? [ 917.975595][ T5887] r8152-cfgselector 3-1: Unknown version 0x0000 [ 918.000432][ T5887] r8152-cfgselector 3-1: bad CDC descriptors [ 918.048515][ T5887] r8152-cfgselector 3-1: Unknown version 0x0000 [ 918.093840][ T5887] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 918.533148][T29852] usb usb8: check_ctrlrecip: process 29852 (syz.3.7936) requesting ep 01 but needs 81 [ 918.543812][T29852] usb usb8: usbfs: process 29852 (syz.3.7936) did not claim interface 0 before use [ 918.745156][T29862] __nla_validate_parse: 8 callbacks suppressed [ 918.745175][T29862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7941'. [ 919.036104][T29874] netlink: 'syz.3.7945': attribute type 1 has an invalid length. [ 919.050832][T29874] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7945'. [ 919.245364][T29883] loop4: detected capacity change from 0 to 64 [ 919.290251][T29883] hfs: unable to locate alternate MDB [ 919.313425][T29888] usb usb8: check_ctrlrecip: process 29888 (syz.0.7949) requesting ep 01 but needs 81 [ 919.324224][T29883] hfs: continuing without an alternate MDB [ 919.359218][T29888] usb usb8: usbfs: process 29888 (syz.0.7949) did not claim interface 0 before use [ 919.377898][T29883] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 919.768957][T29911] loop2: detected capacity change from 0 to 64 [ 920.125499][T29927] bridge0: port 4(netdevsim0) entered blocking state [ 920.154986][T29927] bridge0: port 4(netdevsim0) entered disabled state [ 920.179989][T29927] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 920.423187][T29946] loop0: detected capacity change from 0 to 256 [ 920.579048][T29946] FAT-fs (loop0): Directory bread(block 64) failed [ 920.605238][T29946] FAT-fs (loop0): Directory bread(block 65) failed [ 920.628130][T29946] FAT-fs (loop0): Directory bread(block 66) failed [ 920.665837][T29946] FAT-fs (loop0): Directory bread(block 67) failed [ 920.688603][T29946] FAT-fs (loop0): Directory bread(block 68) failed [ 920.697506][T29946] FAT-fs (loop0): Directory bread(block 69) failed [ 920.713558][T29946] FAT-fs (loop0): Directory bread(block 70) failed [ 920.720280][T29946] FAT-fs (loop0): Directory bread(block 71) failed [ 920.741473][T29946] FAT-fs (loop0): Directory bread(block 72) failed [ 920.784597][T29946] FAT-fs (loop0): Directory bread(block 73) failed [ 920.907077][T29963] dvmrp0: entered allmulticast mode [ 921.620377][ T28] audit: type=1326 audit(528308.774:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.0.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 921.686291][ T28] audit: type=1326 audit(528308.774:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.0.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 921.786260][ T28] audit: type=1326 audit(528308.821:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.0.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 921.848041][ T28] audit: type=1326 audit(528308.821:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.0.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 921.865080][T30009] loop2: detected capacity change from 0 to 1024 [ 921.918629][ T28] audit: type=1326 audit(528308.821:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29999 comm="syz.0.7983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 922.136049][ T4798] hfsplus: b-tree write err: -5, ino 4 [ 922.152423][T30016] loop0: detected capacity change from 0 to 4096 [ 922.216040][T30017] loop4: detected capacity change from 0 to 8192 [ 922.230262][T30022] comedi comedi0: adq12b: I/O port conflict (0x5,16) [ 922.256856][T30017] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 922.282598][T30017] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 922.307186][T30017] REISERFS (device loop4): using ordered data mode [ 922.336271][T30017] reiserfs: using flush barriers [ 922.394021][T30017] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 922.479758][T30017] REISERFS (device loop4): checking transaction log (loop4) [ 922.596331][T30017] REISERFS (device loop4): Using r5 hash to sort names [ 922.610330][T30017] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 922.897306][ T28] audit: type=1326 audit(528309.971:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 922.958302][ T28] audit: type=1326 audit(528309.999:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 923.040304][ T28] audit: type=1326 audit(528310.009:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 923.092533][ T28] audit: type=1326 audit(528310.009:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 923.184051][ T28] audit: type=1326 audit(528310.009:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 923.457220][T30071] loop4: detected capacity change from 0 to 1024 [ 923.672774][T21149] hfsplus: b-tree write err: -5, ino 4 [ 924.076648][T30098] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8011'. [ 924.894084][T30141] loop0: detected capacity change from 0 to 512 [ 924.948446][T30141] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.8023: corrupted in-inode xattr: invalid ea_ino [ 924.995153][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 925.030446][T30141] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.8023: couldn't read orphan inode 15 (err -117) [ 925.059955][T30141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.108362][T30141] overlayfs: failed to resolve '/Ææ´': -2 [ 925.132008][T30153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8026'. [ 925.160848][T30153] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8026'. [ 925.198438][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.215664][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 925.228578][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 925.256727][ T27] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 925.283650][ T27] usb 5-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.307054][ T27] usb 5-1: config 12 interface 0 has no altsetting 0 [ 925.318184][ T27] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 925.342955][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.374695][ T27] usb 5-1: Product: syz [ 925.381662][ T27] usb 5-1: Manufacturer: syz [ 925.406470][ T27] usb 5-1: SerialNumber: syz [ 925.414424][T30161] xt_l2tp: v2 doesn't support IP mode [ 925.682512][ T27] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 925.717065][ T27] usb 5-1: selecting invalid altsetting 0 [ 925.814518][ T27] usb 5-1: USB disconnect, device number 2 [ 925.972038][ T8377] udevd[8377]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.322633][T30223] xt_l2tp: v2 doesn't support IP mode [ 926.561442][T30236] loop2: detected capacity change from 0 to 256 [ 926.658525][T30236] FAT-fs (loop2): Directory bread(block 64) failed [ 926.665708][T30236] FAT-fs (loop2): Directory bread(block 65) failed [ 926.688245][T30236] FAT-fs (loop2): Directory bread(block 66) failed [ 926.699835][T28674] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 926.732546][T30236] FAT-fs (loop2): Directory bread(block 67) failed [ 926.739953][T30236] FAT-fs (loop2): Directory bread(block 68) failed [ 926.761895][T30246] syz.4.8047 (30246): /proc/30245/oom_adj is deprecated, please use /proc/30245/oom_score_adj instead. [ 926.763896][T30236] FAT-fs (loop2): Directory bread(block 69) failed [ 926.803509][T30236] FAT-fs (loop2): Directory bread(block 70) failed [ 926.823857][T30236] FAT-fs (loop2): Directory bread(block 71) failed [ 926.845576][T30236] FAT-fs (loop2): Directory bread(block 72) failed [ 926.864923][T30236] FAT-fs (loop2): Directory bread(block 73) failed [ 926.924453][T28674] usb 4-1: Using ep0 maxpacket: 16 [ 926.941514][T28674] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 926.971815][T30253] loop0: detected capacity change from 0 to 256 [ 926.973297][T28674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.007155][T28674] usb 4-1: Product: syz [ 927.022666][T28674] usb 4-1: Manufacturer: syz [ 927.027615][T28674] usb 4-1: SerialNumber: syz [ 927.049442][T30253] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 927.068577][T28674] r8152-cfgselector 4-1: config 0 descriptor?? [ 927.327080][T30259] lo speed is unknown, defaulting to 1000 [ 927.337672][T28674] r8152-cfgselector 4-1: Unknown version 0x0000 [ 927.358112][T28674] r8152-cfgselector 4-1: bad CDC descriptors [ 927.388152][T28674] r8152-cfgselector 4-1: Unknown version 0x0000 [ 927.418168][T28674] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 928.203279][T30327] loop4: detected capacity change from 0 to 256 [ 928.282065][T30327] FAT-fs (loop4): Directory bread(block 64) failed [ 928.301270][T30327] FAT-fs (loop4): Directory bread(block 65) failed [ 928.326179][T30336] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8061'. [ 928.331095][T30327] FAT-fs (loop4): Directory bread(block 66) failed [ 928.353918][T30338] binfmt_misc: register: failed to install interpreter file ./file0 [ 928.370851][T30327] FAT-fs (loop4): Directory bread(block 67) failed [ 928.381785][T30327] FAT-fs (loop4): Directory bread(block 68) failed [ 928.388907][T30336] hsr_slave_0: left promiscuous mode [ 928.395153][T30336] hsr_slave_1: left promiscuous mode [ 928.448831][T30327] FAT-fs (loop4): Directory bread(block 69) failed [ 928.468796][T30327] FAT-fs (loop4): Directory bread(block 70) failed [ 928.498311][T30327] FAT-fs (loop4): Directory bread(block 71) failed [ 928.505250][T30327] FAT-fs (loop4): Directory bread(block 72) failed [ 928.544644][T30327] FAT-fs (loop4): Directory bread(block 73) failed [ 929.027327][T30363] QAT: failed to copy from user. [ 929.417728][T30381] loop0: detected capacity change from 0 to 256 [ 929.476839][T30375] loop2: detected capacity change from 0 to 4096 [ 929.503728][T30381] FAT-fs (loop0): Directory bread(block 64) failed [ 929.510594][T30381] FAT-fs (loop0): Directory bread(block 65) failed [ 929.565000][T30381] FAT-fs (loop0): Directory bread(block 66) failed [ 929.599540][T30381] FAT-fs (loop0): Directory bread(block 67) failed [ 929.619835][T30381] FAT-fs (loop0): Directory bread(block 68) failed [ 929.626550][T30381] FAT-fs (loop0): Directory bread(block 69) failed [ 929.655223][T30381] FAT-fs (loop0): Directory bread(block 70) failed [ 929.669786][T30381] FAT-fs (loop0): Directory bread(block 71) failed [ 929.684237][T30381] FAT-fs (loop0): Directory bread(block 72) failed [ 929.701888][T30381] FAT-fs (loop0): Directory bread(block 73) failed [ 929.757544][ T28] audit: type=1800 audit(528316.389:2941): pid=30375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8074" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 930.239384][T30402] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8078'. [ 930.297458][T30402] hsr_slave_0: left promiscuous mode [ 930.318810][T30402] hsr_slave_1: left promiscuous mode [ 930.932197][T30397] loop2: detected capacity change from 0 to 32768 [ 930.964285][ T28] audit: type=1326 audit(528317.511:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30425 comm="syz.0.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 930.964593][T30397] (syz.2.8080,30397,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 931.047120][T30397] (syz.2.8080,30397,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 931.055608][ T28] audit: type=1326 audit(528317.511:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30425 comm="syz.0.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 931.145023][T30397] JBD2: Ignoring recovery information on journal [ 931.179924][ T28] audit: type=1326 audit(528317.567:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30425 comm="syz.0.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 931.203744][ T28] audit: type=1326 audit(528317.567:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30425 comm="syz.0.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 931.226987][ T28] audit: type=1326 audit(528317.567:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30425 comm="syz.0.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 931.228564][T30397] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 931.392071][T30397] (syz.2.8080,30397,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 931.489097][T30444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8091'. [ 931.623699][T30397] (syz.2.8080,30397,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 931.782176][T30397] (syz.2.8080,30397,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 931.835914][T30397] (syz.2.8080,30397,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 931.881003][T30397] (syz.2.8080,30397,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 931.917986][T30397] (syz.2.8080,30397,1):ocfs2_quota_read:201 ERROR: status = -5 [ 931.925740][T30397] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6 [ 931.960278][T30397] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 931.990940][T30397] (syz.2.8080,30397,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 932.007401][T30397] (syz.2.8080,30397,1):ocfs2_mknod:314 ERROR: status = -5 [ 932.032429][ T28] audit: type=1326 audit(528318.512:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30466 comm="syz.3.8099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 932.057613][T30397] (syz.2.8080,30397,1):ocfs2_mknod:502 ERROR: status = -5 [ 932.073591][T30397] (syz.2.8080,30397,1):ocfs2_mkdir:659 ERROR: status = -5 [ 932.118293][ T28] audit: type=1326 audit(528318.512:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30466 comm="syz.3.8099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73c18ebe9 code=0x7ffc0000 [ 932.330751][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 932.378220][T30480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8103'. [ 932.910807][T12654] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 933.127986][T12654] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 933.138589][T12654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.149574][T12654] usb 1-1: config 0 descriptor?? [ 933.322736][T28674] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 933.536691][T28674] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.551424][T28674] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 933.560732][T28674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.571891][T28674] usb 5-1: config 0 descriptor?? [ 933.607963][T12654] ath6kl: Failed to submit usb control message: -71 [ 933.615133][T12654] ath6kl: unable to send the bmi data to the device: -71 [ 933.623762][T12654] ath6kl: Unable to send get target info: -71 [ 933.644941][T12654] ath6kl: Failed to init ath6kl core: -71 [ 933.652917][T12654] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 933.667729][T12654] usb 1-1: USB disconnect, device number 5 [ 934.036006][ T27] usb 5-1: USB disconnect, device number 3 [ 935.212812][T30585] netlink: 'syz.3.8125': attribute type 12 has an invalid length. [ 935.265779][T30553] loop0: detected capacity change from 0 to 32768 [ 935.998003][T30623] netlink: 'syz.4.8138': attribute type 12 has an invalid length. [ 936.507558][T30648] deleting an unspecified loop device is not supported. [ 936.738325][T30661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8149'. [ 936.776502][T30661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8149'. [ 937.845703][T30714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.341520][T30740] netlink: 'syz.0.8177': attribute type 1 has an invalid length. [ 938.567105][T30754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8181'. [ 938.642091][T30756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.231327][T30741] 9pnet_fd: p9_fd_create_tcp (30741): problem connecting socket to 127.0.0.1 [ 939.346576][T30786] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8192'. [ 939.356304][T30786] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8192'. [ 939.397780][T30789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8193'. [ 939.927678][T30816] netlink: 'syz.3.8202': attribute type 1 has an invalid length. [ 940.144729][T30828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8204'. [ 940.155862][T30828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8204'. [ 940.435073][T30834] loop0: detected capacity change from 0 to 4096 [ 940.611497][T30834] ntfs3: loop0: ino=5, "/" directory corrupted [ 940.632472][T30834] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 940.682613][T30845] tmpfs: Bad value for 'mpol' [ 940.999431][T30826] 9pnet_fd: p9_fd_create_tcp (30826): problem connecting socket to 127.0.0.1 [ 941.257178][T30874] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 941.569052][T30920] loop4: detected capacity change from 0 to 64 [ 941.641704][T30920] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 941.760064][T30931] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 942.164465][T30982] tmpfs: Bad value for 'mpol' [ 942.656553][T30933] 9pnet_fd: p9_fd_create_tcp (30933): problem connecting socket to 127.0.0.1 [ 942.676423][T31007] loop2: detected capacity change from 0 to 128 [ 942.704688][T31007] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 942.738701][T31010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8242'. [ 942.765791][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 942.780895][T31007] FAT-fs (loop2): Filesystem has been set read-only [ 942.799616][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 942.809340][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 942.849359][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 942.869774][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 942.914943][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 942.959374][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 942.996103][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 943.027636][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 943.051533][T31007] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 943.079402][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 943.079422][ T28] audit: type=1800 audit(528328.849:2961): pid=31007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8241" name="file2" dev="loop2" ino=1048651 res=0 errno=0 [ 943.111456][T31007] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 943.295268][T31034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8249'. [ 943.327410][T31034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 943.540132][T11347] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 943.576426][T31043] loop2: detected capacity change from 0 to 4096 [ 943.742829][T31043] ntfs3: loop2: ino=5, "/" directory corrupted [ 943.749130][T31043] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 943.778954][T11347] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 943.792066][T11347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.828202][T11347] usb 1-1: config 0 descriptor?? [ 943.858784][T11347] cp210x 1-1:0.0: cp210x converter detected [ 944.231804][T12654] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 944.354667][T11347] usb 1-1: cp210x converter now attached to ttyUSB0 [ 944.438406][T11347] usb 1-1: USB disconnect, device number 6 [ 944.459212][T12654] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 944.470071][T12654] usb 5-1: config 1 has no interface number 1 [ 944.476915][T12654] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 944.499560][T11347] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 944.525745][T12654] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 944.538976][T11347] cp210x 1-1:0.0: device disconnected [ 944.572787][T12654] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.614151][T12654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.637748][T12654] usb 5-1: Product: syz [ 944.653201][T12654] usb 5-1: Manufacturer: syz [ 944.658092][T12654] usb 5-1: SerialNumber: syz [ 944.953825][T12654] usb 5-1: 2:1 : unsupported format bits 0x80 [ 945.017815][T12654] usb 5-1: USB disconnect, device number 4 [ 945.103179][ T8374] udevd[8374]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.180773][T31173] loop0: detected capacity change from 0 to 128 [ 945.199579][T31173] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 945.246192][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.272935][T31173] FAT-fs (loop0): Filesystem has been set read-only [ 945.290947][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.311157][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.320262][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.353638][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.369349][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.379314][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.397491][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.407332][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.416138][T31173] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 945.459287][ T28] audit: type=1800 audit(528331.075:2962): pid=31173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8269" name="file2" dev="loop0" ino=1048652 res=0 errno=0 [ 945.469618][T31173] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 945.556027][T31181] loop2: detected capacity change from 0 to 2048 [ 945.581618][T31181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 945.870305][T31196] loop4: detected capacity change from 0 to 256 [ 946.001400][T31193] loop0: detected capacity change from 0 to 4096 [ 946.466406][T31221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8279'. [ 947.242725][T31246] loop4: detected capacity change from 0 to 4096 [ 947.778889][T31275] loop4: detected capacity change from 0 to 2048 [ 947.809878][T31275] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 947.868818][T31275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 948.365833][ T28] audit: type=1326 audit(528333.797:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31304 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 948.416144][ T28] audit: type=1326 audit(528333.797:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31304 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 948.440142][ T28] audit: type=1326 audit(528333.844:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31304 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 948.463258][ T28] audit: type=1326 audit(528333.844:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31304 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 948.492720][ T28] audit: type=1326 audit(528333.844:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31304 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9add8ebe9 code=0x7ffc0000 [ 948.524935][T31303] loop2: detected capacity change from 0 to 4096 [ 950.576485][T31402] bpf: Bad value for 'mode' [ 950.614637][T31370] loop0: detected capacity change from 0 to 32768 [ 950.805168][T31412] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 950.813303][T31412] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 951.395269][T31436] comedi comedi0: fl512: I/O port conflict (0xee,16) [ 951.693192][T31451] qrtr: Invalid version 195 [ 952.225536][T31481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8361'. [ 952.262069][T31481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8361'. [ 952.288285][T31481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8361'. [ 952.308317][T31483] loop4: detected capacity change from 0 to 256 [ 952.333170][T31483] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 952.509180][T31492] bpf: Bad value for 'mode' [ 953.259291][T31524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8374'. [ 953.269042][T31524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8374'. [ 953.315302][T31524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8374'. [ 954.225165][T31557] netlink: 'syz.0.8385': attribute type 21 has an invalid length. [ 954.449056][T31533] loop4: detected capacity change from 0 to 32768 [ 954.534369][T31533] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 954.729366][T31533] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 74 has 8388607 used bits but only 2048 total [ 954.793502][T31533] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 954.857404][T31533] OCFS2: File system is now read-only. [ 954.863265][T31533] (syz.4.8377,31533,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 954.912964][T31533] (syz.4.8377,31533,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 954.945436][T31533] (syz.4.8377,31533,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 954.975300][T31533] (syz.4.8377,31533,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 955.005026][T31533] (syz.4.8377,31533,1):ocfs2_mknod:385 ERROR: status = -30 [ 955.042048][T31533] (syz.4.8377,31533,1):ocfs2_mknod:502 ERROR: status = -30 [ 955.068929][T31533] (syz.4.8377,31533,1):ocfs2_create:676 ERROR: status = -30 [ 955.165186][T27946] (syz-executor,27946,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 955.237746][T27946] ocfs2: Unmounting device (7,4) on (node local) [ 955.942832][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.949768][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 956.712320][T31647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 957.034678][T31629] loop2: detected capacity change from 0 to 32768 [ 957.086708][T31629] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 957.359043][T31629] XFS (loop2): Ending clean mount [ 957.522766][T31674] xt_hashlimit: max too large, truncated to 1048576 [ 957.535592][ T5795] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 957.583806][T31674] xt_bpf: check failed: parse error [ 958.770867][ T5840] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 958.994375][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 959.010602][ T5840] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 959.042449][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.070335][ T5840] usb 1-1: Product: syz [ 959.074681][ T5840] usb 1-1: Manufacturer: syz [ 959.079453][ T5840] usb 1-1: SerialNumber: syz [ 959.119758][ T5840] usb 1-1: config 0 descriptor?? [ 959.364936][ T5840] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 959.381377][T31754] loop2: detected capacity change from 0 to 1024 [ 959.446279][T31754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.589771][ T5840] usb write operation failed. (-71) [ 959.612568][T31763] loop4: detected capacity change from 0 to 4096 [ 959.616386][T31754] EXT4-fs error (device loop2): __ext4_remount:6741: comm syz.2.8439: Abort forced by user [ 959.638989][ T5840] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 959.672094][ T5840] dvbdev: DVB: registering new adapter (Terratec H7) [ 959.674915][T31754] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 959.682871][ T5840] usb 1-1: media controller created [ 959.705457][ T5840] usb read operation failed. (-71) [ 959.712828][ T5840] usb write operation failed. (-71) [ 959.730942][ T5840] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 959.772957][ T5840] usb 1-1: USB disconnect, device number 7 [ 959.794397][T31763] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 959.833090][T31763] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 959.855773][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.218040][T31793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 960.670346][T31830] loop4: detected capacity change from 0 to 1024 [ 960.727474][T31830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.033402][T31846] loop0: detected capacity change from 0 to 1024 [ 961.047437][T31830] EXT4-fs error (device loop4): __ext4_remount:6741: comm syz.4.8453: Abort forced by user [ 961.131308][T31830] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 961.241195][T11659] hfsplus: b-tree write err: -5, ino 4 [ 961.302709][T27946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.112953][T31897] loop4: detected capacity change from 0 to 256 [ 962.159689][T31898] loop0: detected capacity change from 0 to 64 [ 962.847115][T31924] netlink: 'syz.2.8479': attribute type 1 has an invalid length. [ 963.099551][T31932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8482'. [ 963.175268][T31907] loop4: detected capacity change from 0 to 32768 [ 963.214687][T31907] [ 963.214687][T31907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 963.214687][T31907] [ 963.284243][T31907] [ 963.284243][T31907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 963.284243][T31907] [ 963.320460][T31907] [ 963.320460][T31907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 963.320460][T31907] [ 963.342824][T31907] [ 963.342824][T31907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 963.342824][T31907] [ 963.388084][T31907] [ 963.388084][T31907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 963.388084][T31907] [ 963.442081][ T110] [ 963.442081][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 963.442081][ T110] [ 963.503659][T27946] [ 963.503659][T27946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 963.503659][T27946] [ 963.533868][T27946] [ 963.533868][T27946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 963.533868][T27946] [ 964.045855][T31927] loop0: detected capacity change from 0 to 32768 [ 964.314408][T31927] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 964.334814][T31965] ip6gre1: entered promiscuous mode [ 964.593624][T31927] XFS (loop0): Ending clean mount [ 964.741827][ T5791] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 965.563836][T32032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8504'. [ 965.772943][T32043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8507'. [ 966.016157][T32052] loop4: detected capacity change from 0 to 512 [ 966.062694][T32052] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 966.139719][T32052] EXT4-fs (loop4): 1 truncate cleaned up [ 966.148212][T32052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.174195][T32052] EXT4-fs error (device loop4): ext4_get_parent:1910: comm syz.4.8510: inode #2: comm syz.4.8510: iget: illegal inode # [ 966.288385][T27946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.437827][T32071] loop0: detected capacity change from 0 to 32768 [ 967.475149][T32071] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 967.520087][T32071] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 967.572676][T32071] (syz.0.8515,32071,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 967.584064][T32071] (syz.0.8515,32071,1):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 967.631010][ T5791] ocfs2: Unmounting device (7,0) on (node local) [ 968.548631][T32155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8549'. [ 968.805951][T32168] loop0: detected capacity change from 0 to 512 [ 968.840784][T32168] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 968.878074][T32168] EXT4-fs (loop0): 1 truncate cleaned up [ 968.933352][T32168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.032250][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 969.073800][T32168] EXT4-fs error (device loop0): ext4_get_parent:1910: comm syz.0.8543: inode #2: comm syz.0.8543: iget: illegal inode # [ 969.191776][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.264799][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 969.283578][ T5873] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 969.314267][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.331750][ T5873] usb 5-1: Product: syz [ 969.342530][ T5873] usb 5-1: Manufacturer: syz [ 969.351569][ T5873] usb 5-1: SerialNumber: syz [ 969.377815][ T5873] usb 5-1: config 0 descriptor?? [ 969.608770][T32173] loop2: detected capacity change from 0 to 32768 [ 969.661011][ T5873] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 969.671132][T32173] [ 969.671132][T32173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 969.671132][T32173] [ 969.734126][T32173] [ 969.734126][T32173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 969.734126][T32173] [ 969.754515][T32173] [ 969.754515][T32173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 969.754515][T32173] [ 969.768021][T32173] [ 969.768021][T32173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 969.768021][T32173] [ 969.780382][T32173] [ 969.780382][T32173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 969.780382][T32173] [ 969.793069][T12654] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 969.818608][ T111] [ 969.818608][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 969.818608][ T111] [ 969.873992][ T5873] usb write operation failed. (-71) [ 969.918055][ T5873] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 969.959744][ T5795] [ 969.959744][ T5795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 969.959744][ T5795] [ 969.963150][ T5873] dvbdev: DVB: registering new adapter (Terratec H7) [ 969.999662][ T5795] [ 969.999662][ T5795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 969.999662][ T5795] [ 970.008313][ T5873] usb 5-1: media controller created [ 970.027088][T12654] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 970.036683][T12654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.045942][ T5873] usb read operation failed. (-71) [ 970.066953][ T5873] usb write operation failed. (-71) [ 970.074891][T12654] usb 1-1: config 0 descriptor?? [ 970.096148][ T5873] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 970.106623][T12654] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 970.145577][ T5873] usb 5-1: USB disconnect, device number 5 [ 970.546632][T12654] gp8psk: usb in 137 operation failed. [ 970.570412][T12654] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 970.620398][T12654] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 970.656048][T12654] usb 1-1: USB disconnect, device number 8 [ 971.575860][T32285] loop0: detected capacity change from 0 to 512 [ 971.632620][T32285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 971.672435][T32285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 971.820983][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.849441][T32298] binder: 32297:32298 ioctl c0306201 200000000080 returned -14 [ 971.954488][T32302] loop4: detected capacity change from 0 to 8 [ 971.998726][T32306] loop2: detected capacity change from 0 to 256 [ 972.076482][T32302] unable to read id index table [ 974.540991][T32420] loop0: detected capacity change from 0 to 1024 [ 974.692990][T31993] hfsplus: b-tree write err: -5, ino 4 [ 975.904214][T32476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8630'. [ 975.914936][T32476] openvswitch: netlink: Message has 8 unknown bytes. [ 977.122054][T32497] loop4: detected capacity change from 0 to 32768 [ 977.179896][T32485] loop2: detected capacity change from 0 to 32768 [ 977.199804][T32497] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 977.297085][T32497] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 977.308569][T32485] ea_get: invalid extended attribute [ 977.327800][T32485] ffff88805ffabab0: 04 00 00 00 .... [ 977.414647][T32497] (syz.4.8635,32497,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 977.437901][T32497] (syz.4.8635,32497,1):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 977.703146][T27946] ocfs2: Unmounting device (7,4) on (node local) [ 978.373675][T32569] batadv0: entered promiscuous mode [ 978.395546][T32569] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 978.656130][T32581] autofs4:pid:32581:autofs_fill_super: called with bogus options [ 978.958708][T32599] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8666'. [ 979.128081][T32608] loop0: detected capacity change from 0 to 256 [ 979.559795][T32628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8673'. [ 979.859579][T32645] loop0: detected capacity change from 0 to 512 [ 979.881020][T32645] EXT4-fs: Ignoring removed bh option [ 979.901449][T32645] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 979.913313][T32645] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 979.955038][T32645] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 979.983888][T32653] sctp: [Deprecated]: syz.3.8681 (pid 32653) Use of int in max_burst socket option. [ 979.983888][T32653] Use struct sctp_assoc_value instead [ 979.989649][T32645] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 980.094135][T32645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.107888][T32659] tunl0: entered promiscuous mode [ 980.125179][T32659] netlink: 'syz.3.8684': attribute type 4 has an invalid length. [ 980.153158][T32659] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8684'. [ 980.195960][T32645] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 980.260664][T32655] loop4: detected capacity change from 0 to 4096 [ 980.284406][T32655] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 980.324826][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.349390][T32655] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 980.379241][T32655] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 980.389108][T32655] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 980.450949][T32655] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 980.612478][T32655] ntfs: volume version 3.1. [ 980.665666][T32655] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 980.706308][T32655] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 981.102538][T32692] ieee802154 phy0 wpan0: encryption failed: -22 [ 981.174454][T32699] tunl0: entered promiscuous mode [ 981.190236][T32699] netlink: 'syz.0.8694': attribute type 4 has an invalid length. [ 981.206391][T32700] loop2: detected capacity change from 0 to 512 [ 981.219239][T32699] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8694'. [ 981.273633][T32700] EXT4-fs: Ignoring removed bh option [ 981.304648][T32700] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 981.314042][T32700] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 981.390603][T32700] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 981.481373][T32700] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 981.520599][T32713] tunl0: left promiscuous mode [ 981.554794][T32700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.613125][T32700] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 981.652447][T32713] ipvlan1: left promiscuous mode [ 981.664242][T32713] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 981.700620][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.707501][T32713] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 981.728643][T32713] bridge1: left promiscuous mode [ 981.764780][T32713] ip6erspan0: left promiscuous mode [ 981.784256][T32713] bridge2: left promiscuous mode [ 982.226306][T32743] netlink: 'syz.3.8709': attribute type 21 has an invalid length. [ 982.245244][T32743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8709'. [ 983.068348][ T319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8721'. [ 983.318381][ T330] loop0: detected capacity change from 0 to 1024 [ 983.866538][ T357] loop0: detected capacity change from 0 to 2048 [ 983.923619][ T362] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 983.986926][ T357] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 984.050337][ T357] Remounting filesystem read-only [ 984.189797][ T5791] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 984.211335][ T5791] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 984.232401][ T5791] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 984.265532][ T5791] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 984.308982][ T5791] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 984.331571][ T377] netlink: 'syz.2.8737': attribute type 3 has an invalid length. [ 984.336772][ T5791] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 984.391037][ T5791] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 984.402285][ T5791] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 984.423980][ T5791] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 984.431962][ T5791] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 984.439946][ T5791] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 984.632377][ T28] audit: type=1326 audit(528367.717:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=387 comm="syz.0.8739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 984.707239][ T28] audit: type=1326 audit(528367.717:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=387 comm="syz.0.8739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 984.808349][ T397] x_tables: duplicate underflow at hook 2 [ 984.833194][ T28] audit: type=1326 audit(528367.754:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=387 comm="syz.0.8739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fb00818ebe9 code=0x7ffc0000 [ 984.898545][ T401] loop0: detected capacity change from 0 to 512 [ 984.989599][ T405] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 985.000902][ T401] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 985.013164][ T405] overlayfs: conflicting options: metacopy=off,verity=on [ 985.121989][ T401] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 985.173344][ T401] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.8745: Corrupt directory, running e2fsck is recommended [ 985.235246][ T401] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 985.267398][ T401] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.8745: corrupted in-inode xattr: invalid ea_ino [ 985.300123][ T401] EXT4-fs (loop0): Remounting filesystem read-only [ 985.324108][ T401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.349900][ T425] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8751'. [ 985.409343][ T5840] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 985.457240][ T401] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 985.581744][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.618544][ T5840] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 985.629034][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.682994][ T5840] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 985.708197][ T5840] usb 4-1: config 1 has no interface number 1 [ 985.725160][ T5840] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 985.773170][ T5840] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 985.810896][ T5840] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 985.831566][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.859693][ T5840] usb 4-1: Product: syz [ 985.865523][ T5840] usb 4-1: Manufacturer: syz [ 985.871965][ T5840] usb 4-1: SerialNumber: syz [ 986.111488][ T454] loop0: detected capacity change from 0 to 1024 [ 986.147821][ T5840] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 986.156189][ T5840] usb 4-1: MIDIStreaming interface descriptor not found [ 986.176420][ T454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 986.228515][ T454] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 986.293411][ T5840] usb 4-1: USB disconnect, device number 6 [ 986.398908][ T454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.576650][ T8377] udevd[8377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 986.663047][ T454] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.8758: missing EA_INODE flag [ 986.714219][ T454] EXT4-fs (loop0): Remounting filesystem read-only [ 986.861962][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.106629][ T525] loop0: detected capacity change from 0 to 164 [ 987.771126][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 987.771144][ T28] audit: type=1400 audit(528370.654:2973): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=558 comm="syz.3.8781" [ 988.435852][ T542] loop0: detected capacity change from 0 to 32768 [ 988.485944][ T588] loop2: detected capacity change from 0 to 8 [ 988.496814][ T542] (syz.0.8775,542,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 988.562236][ T542] (syz.0.8775,542,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 988.741051][ T542] JBD2: Ignoring recovery information on journal [ 988.907661][ T542] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 989.349078][ T5791] ocfs2: Unmounting device (7,0) on (node local) [ 989.474470][ T625] loop2: detected capacity change from 0 to 2048 [ 989.513913][ T625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 989.741269][ T640] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8805'. [ 989.795889][ T640] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 990.215210][ T663] netlink: 'syz.3.8810': attribute type 4 has an invalid length. [ 990.252363][ T666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8812'. [ 990.291253][ T668] Cannot find set identified by id 65535 to match [ 990.642644][ T686] syz.2.8818[686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 990.646374][ T686] syz.2.8818[686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.430391][ T718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8829'. [ 991.846293][ T738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8837'. [ 992.190466][T12654] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 992.390073][T12654] usb 3-1: Using ep0 maxpacket: 8 [ 992.424210][T12654] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 992.448231][T12654] usb 3-1: config 2 has no interface number 0 [ 992.475790][T12654] usb 3-1: config 2 interface 31 has no altsetting 0 [ 992.504908][T12654] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 992.529307][T12654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.561080][T12654] usb 3-1: Product: syz [ 992.571987][T12654] usb 3-1: Manufacturer: syz [ 992.591205][T12654] usb 3-1: SerialNumber: syz [ 992.709476][ T788] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 992.764261][ T788] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 993.109595][T12654] ch9200: probe of 3-1:2.31 failed with error -22 [ 993.163848][T12654] usb 3-1: USB disconnect, device number 5 [ 993.186267][ T805] program syz.0.8855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 993.561780][ T826] loop0: detected capacity change from 0 to 256 [ 993.690361][ T826] FAT-fs (loop0): Directory bread(block 64) failed [ 993.712845][ T826] FAT-fs (loop0): Directory bread(block 65) failed [ 993.724520][ T826] FAT-fs (loop0): Directory bread(block 66) failed [ 993.734404][ T826] FAT-fs (loop0): Directory bread(block 67) failed [ 993.754255][ T826] FAT-fs (loop0): Directory bread(block 68) failed [ 993.784269][ T826] FAT-fs (loop0): Directory bread(block 69) failed [ 993.801757][ T826] FAT-fs (loop0): Directory bread(block 70) failed [ 993.811294][ T826] FAT-fs (loop0): Directory bread(block 71) failed [ 993.819096][ T826] FAT-fs (loop0): Directory bread(block 72) failed [ 993.828544][ T826] FAT-fs (loop0): Directory bread(block 73) failed [ 993.897358][ T5887] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 994.132469][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 994.145917][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 994.176159][ T5887] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 994.207302][ T5887] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 994.217625][ T5887] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 994.243041][ T5887] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 994.261043][ T5887] usb 4-1: config 1 interface 0 has no altsetting 0 [ 994.276533][ T5887] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 994.298413][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.329522][ T5887] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 994.602178][ T5887] scsi host1: usb-storage 4-1:1.0 [ 994.628380][ T878] IPVS: length: 250 != 8 [ 994.650639][ T882] loop0: detected capacity change from 0 to 256 [ 994.752814][ T882] FAT-fs (loop0): Directory bread(block 64) failed [ 994.759471][ T882] FAT-fs (loop0): Directory bread(block 65) failed [ 994.774054][ T882] FAT-fs (loop0): Directory bread(block 66) failed [ 994.784094][ T882] FAT-fs (loop0): Directory bread(block 67) failed [ 994.803316][ T882] FAT-fs (loop0): Directory bread(block 68) failed [ 994.847190][ T5873] usb 4-1: USB disconnect, device number 7 [ 994.854101][ T882] FAT-fs (loop0): Directory bread(block 69) failed [ 994.866026][ T882] FAT-fs (loop0): Directory bread(block 70) failed [ 994.891596][ T882] FAT-fs (loop0): Directory bread(block 71) failed [ 994.898670][ T882] FAT-fs (loop0): Directory bread(block 72) failed [ 994.912801][ T882] FAT-fs (loop0): Directory bread(block 73) failed [ 994.932857][ T886] loop2: detected capacity change from 0 to 4096 [ 995.375116][ T926] loop2: detected capacity change from 0 to 512 [ 995.417337][ T926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.610146][ T926] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.8882: Directory hole found for htree leaf block 0 [ 995.672573][ T926] EXT4-fs (loop2): Remounting filesystem read-only [ 995.822614][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.843031][ T2947] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 995.875507][ T2947] Quota error (device loop2): write_blk: dquota write failed [ 995.886455][ T2947] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 995.918754][ T2947] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 995.951762][ T2947] Quota error (device loop2): write_blk: dquota write failed [ 995.992409][ T2947] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 996.194188][ T972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8894'. [ 996.212303][ T972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 996.219674][ T972] IPv6: NLM_F_CREATE should be set when creating new route [ 996.227013][ T972] IPv6: NLM_F_CREATE should be set when creating new route [ 996.604359][ T991] netlink: 'syz.4.8899': attribute type 13 has an invalid length. [ 996.671580][ T996] program syz.2.8901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.743356][ T5104] Bluetooth: hci1: command tx timeout [ 997.121287][ T1016] loop2: detected capacity change from 0 to 2048 [ 997.139350][ T1022] batadv1: entered promiscuous mode [ 997.157000][ T1022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 997.200028][ T1016] syz.2.8904: attempt to access beyond end of device [ 997.200028][ T1016] loop2: rw=0, sector=562949953421392, nr_sectors = 2 limit=2048 [ 997.270120][ T1016] NILFS (loop2): I/O error reading meta-data file (ino=4, block-offset=0) [ 997.307471][ T1016] NILFS (loop2): error -5 while loading last checkpoint (checkpoint number=2) [ 997.434849][ T8374] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 997.900453][ T1055] loop0: detected capacity change from 0 to 4096 [ 998.296772][ T1073] loop2: detected capacity change from 0 to 256 [ 998.364998][ T1074] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.8916'. [ 998.444143][ T1073] FAT-fs (loop2): Directory bread(block 64) failed [ 998.465285][ T1073] FAT-fs (loop2): Directory bread(block 65) failed [ 998.483507][ T1073] FAT-fs (loop2): Directory bread(block 66) failed [ 998.490309][ T1073] FAT-fs (loop2): Directory bread(block 67) failed [ 998.526235][ T1073] FAT-fs (loop2): Directory bread(block 68) failed [ 998.547594][ T1073] FAT-fs (loop2): Directory bread(block 69) failed [ 998.569050][ T1073] FAT-fs (loop2): Directory bread(block 70) failed [ 998.575892][ T1073] FAT-fs (loop2): Directory bread(block 71) failed [ 998.622816][ T1073] FAT-fs (loop2): Directory bread(block 72) failed [ 998.644694][ T1073] FAT-fs (loop2): Directory bread(block 73) failed [ 998.855856][ T1051] loop4: detected capacity change from 0 to 32768 [ 998.942130][ T1051] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 999.205905][ T1051] XFS (loop4): Ending clean mount [ 999.253851][ T1051] XFS (loop4): Quotacheck needed: Please wait. [ 999.364376][ T1051] XFS (loop4): Quotacheck: Done. [ 999.413307][T11347] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 999.510397][ T5873] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 999.581063][T27946] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 999.638695][T11347] usb 3-1: Using ep0 maxpacket: 16 [ 999.680555][T11347] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 999.689896][T11347] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 999.709929][ T1129] loop0: detected capacity change from 0 to 64 [ 999.744661][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 999.769450][ T5873] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 999.779302][T11347] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 999.788727][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.800671][ T1129] syz.0.8928: attempt to access beyond end of device [ 999.800671][ T1129] loop0: rw=0, sector=3072, nr_sectors = 2 limit=64 [ 999.827770][T11347] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 999.836829][ T5873] usb 4-1: Product: syz [ 999.847678][ T5873] usb 4-1: Manufacturer: syz [ 999.849786][T11347] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 999.874209][ T5873] usb 4-1: SerialNumber: syz [ 999.915755][T11347] usb 3-1: config 1 interface 0 has no altsetting 0 [ 999.916601][ T5873] usb 4-1: config 0 descriptor?? [ 999.922517][T11347] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1000.012831][T11347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.091240][T11347] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1000.189108][ T5873] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 1000.204607][ T5873] eb 9a 47 80 9b f8 7a f0 [ 1000.209518][ T5873] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 1000.239200][ T5104] Bluetooth: hci1: command tx timeout [ 1000.336262][T11347] scsi host1: usb-storage 3-1:1.0 [ 1000.410093][ T5873] usb 4-1: USB disconnect, device number 8 [ 1000.479964][ T1170] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 1000.622955][ T8] usb 3-1: USB disconnect, device number 6 [ 1000.785436][ T1193] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8937'. [ 1001.016600][ T1207] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1001.191857][ T1216] loop4: detected capacity change from 0 to 1024 [ 1001.230701][ T1216] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1001.285247][ T1216] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1001.400809][ T1216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.521870][ T1216] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.8941: missing EA_INODE flag [ 1001.624480][ T1216] EXT4-fs (loop4): Remounting filesystem read-only [ 1001.742342][T27946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.138083][ T1258] netlink: 'syz.3.8954': attribute type 15 has an invalid length. [ 1002.158584][ T1258] netlink: 25 bytes leftover after parsing attributes in process `syz.3.8954'. [ 1002.335705][ T1267] loop4: detected capacity change from 0 to 8 [ 1002.896040][ T1302] batadv1: entered promiscuous mode [ 1002.920381][ T1302] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1003.271318][ T1318] loop4: detected capacity change from 0 to 4096 [ 1003.293937][ T5887] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1003.313523][ T1324] xt_TCPMSS: Only works on TCP SYN packets [ 1003.499382][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 1003.516514][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1003.541151][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.572407][ T5887] usb 1-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1003.607844][ T5887] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1003.640138][ T5887] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1003.660897][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.683579][ T5887] usb 1-1: Product: syz [ 1003.687940][ T5887] usb 1-1: Manufacturer: syz [ 1003.700743][ T5887] usb 1-1: SerialNumber: syz [ 1003.721930][T11347] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1003.745729][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input44 [ 1003.930535][T11347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1003.954664][ T5144] bcm5974 1-1:1.0: could not read from device [ 1003.968246][T11347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1003.986143][ T5144] bcm5974 1-1:1.0: could not read from device [ 1004.000857][T11347] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1004.036527][T11347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.053272][ T5887] bcm5974 1-1:1.0: could not read from device [ 1004.067889][T11347] usb 3-1: Product: syz [ 1004.077518][T11347] usb 3-1: Manufacturer: syz [ 1004.095004][T11347] usb 3-1: SerialNumber: syz [ 1004.114654][ T5887] input: failed to attach handler mousedev to device input44, error: -5 [ 1004.135516][T11347] usb 3-1: config 0 descriptor?? [ 1004.151480][ T5144] bcm5974 1-1:1.0: could not read from device [ 1004.153984][T11347] snd-usb-audio: probe of 3-1:0.0 failed with error -90 [ 1004.176021][ T5144] bcm5974 1-1:1.0: could not read from device [ 1004.197383][ T5887] usb 1-1: USB disconnect, device number 9 [ 1004.394880][ T5840] usb 3-1: USB disconnect, device number 7 [ 1004.692862][ T1391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1005.192778][ T1412] netlink: 'syz.2.8989': attribute type 2 has an invalid length. [ 1005.207425][ T1412] netlink: 'syz.2.8989': attribute type 1 has an invalid length. [ 1006.119039][ T1455] loop0: detected capacity change from 0 to 1024 [ 1006.155497][ T1460] loop2: detected capacity change from 0 to 8 [ 1006.874109][ T1495] loop2: detected capacity change from 0 to 256 [ 1006.980532][ T1495] FAT-fs (loop2): Directory bread(block 64) failed [ 1007.003452][ T1495] FAT-fs (loop2): Directory bread(block 65) failed [ 1007.010472][ T1495] FAT-fs (loop2): Directory bread(block 66) failed [ 1007.067448][ T1495] FAT-fs (loop2): Directory bread(block 67) failed [ 1007.079918][ T1503] 9pnet_fd: p9_fd_create_unix (1503): problem connecting socket: ./file1: -111 [ 1007.089198][ T1495] FAT-fs (loop2): Directory bread(block 68) failed [ 1007.089235][ T1495] FAT-fs (loop2): Directory bread(block 69) failed [ 1007.089336][ T1495] FAT-fs (loop2): Directory bread(block 70) failed [ 1007.139467][ T1495] FAT-fs (loop2): Directory bread(block 71) failed [ 1007.169042][ T1495] FAT-fs (loop2): Directory bread(block 72) failed [ 1007.190594][ T1495] FAT-fs (loop2): Directory bread(block 73) failed [ 1007.371069][ T1495] syz.2.9015: attempt to access beyond end of device [ 1007.371069][ T1495] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 1007.421289][ T1495] syz.2.9015: attempt to access beyond end of device [ 1007.421289][ T1495] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 1007.474528][ T28] audit: type=1800 audit(528389.083:2974): pid=1495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9015" name="file0" dev="loop2" ino=1048657 res=0 errno=0 [ 1007.494911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.858781][ T1534] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1007.887021][ T1534] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1007.907119][ T1534] veth0_to_bridge: entered allmulticast mode [ 1007.927238][ T1534] veth0_to_bridge: entered promiscuous mode [ 1007.948308][ T1534] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1007.948491][ T1534] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 1008.222162][ T5887] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1008.425950][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 1008.449487][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1008.477555][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.509064][ T5887] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1008.533378][ T5887] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1008.562130][ T5887] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1008.587368][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.648261][ T5887] usb 5-1: Product: syz [ 1008.678873][ T5887] usb 5-1: Manufacturer: syz [ 1008.703464][ T5887] usb 5-1: SerialNumber: syz [ 1008.778080][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input45 [ 1008.994153][ T5144] bcm5974 5-1:1.0: could not read from device [ 1009.042307][ T5887] bcm5974 5-1:1.0: could not read from device [ 1009.091081][ T5144] bcm5974 5-1:1.0: could not read from device [ 1009.152888][ T1588] loop2: detected capacity change from 0 to 4096 [ 1009.162082][ T5887] input: failed to attach handler mousedev to device input45, error: -5 [ 1009.185547][ T5144] bcm5974 5-1:1.0: could not read from device [ 1009.191659][ T1588] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1009.212302][ T5887] usb 5-1: USB disconnect, device number 6 [ 1009.405340][ T1588] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1009.545479][ T1588] ntfs3: loop2: failed to convert "c46c" to macceltic [ 1009.943100][ T1629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9050'. [ 1009.952336][ T1629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9050'. [ 1010.033012][ T1632] loop0: detected capacity change from 0 to 2048 [ 1010.081002][ T1639] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1010.244850][ T1645] bridge0: port 5(veth0_to_bridge) entered blocking state [ 1010.252625][ T1645] bridge0: port 5(veth0_to_bridge) entered disabled state [ 1010.290703][ T1645] veth0_to_bridge: entered allmulticast mode [ 1010.335340][ T1645] veth0_to_bridge: entered promiscuous mode [ 1010.363720][ T1645] bridge0: port 5(veth0_to_bridge) entered blocking state [ 1010.371672][ T1645] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 1010.440902][ T1646] geneve3: entered promiscuous mode [ 1011.153986][ T1687] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9067'. [ 1011.204535][ T1687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9067'. [ 1011.566217][ T28] audit: type=1326 audit(528392.899:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1701 comm="syz.0.9072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb00818ebe9 code=0x0 [ 1011.827800][ T1714] netlink: 'syz.3.9076': attribute type 5 has an invalid length. [ 1011.911567][ T1714] ip6erspan0: entered promiscuous mode [ 1012.025704][ T1679] loop2: detected capacity change from 0 to 32768 [ 1012.110727][ T1679] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1012.374429][ T1679] XFS (loop2): Ending clean mount [ 1012.394367][ T1679] XFS (loop2): Quotacheck needed: Please wait. [ 1012.513704][ T1679] XFS (loop2): Quotacheck: Done. [ 1012.959761][ T5795] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1013.148451][ T1787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9095'. [ 1013.250975][ T1787] veth8: entered promiscuous mode [ 1013.256157][ T1787] veth8: entered allmulticast mode [ 1013.557444][T12654] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1013.628685][ T1815] sctp: [Deprecated]: syz.2.9094 (pid 1815) Use of int in maxseg socket option. [ 1013.628685][ T1815] Use struct sctp_assoc_value instead [ 1013.641627][ T1814] libceph: resolve '40.' (ret=-3): failed [ 1013.797678][T12654] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.845575][T12654] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1013.885377][T12654] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1013.906247][T12654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.920291][T12654] usb 5-1: Product: syz [ 1013.927919][T12654] usb 5-1: Manufacturer: syz [ 1013.960394][T12654] usb 5-1: SerialNumber: syz [ 1013.992158][T12654] cdc_ncm 5-1:1.0: skipping garbage [ 1014.027070][T12654] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 1014.051673][T12654] cdc_ncm 5-1:1.0: bind() failure [ 1014.071281][T12654] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1014.090053][T12654] cdc_ncm 5-1:1.1: bind() failure [ 1014.277004][ T1842] vlan0: entered promiscuous mode [ 1014.324559][T11347] usb 5-1: USB disconnect, device number 7 [ 1014.359045][ T1847] netlink: 'syz.0.9110': attribute type 10 has an invalid length. [ 1014.401628][ T1847] bridge0: port 3(dummy0) entered disabled state [ 1014.408476][ T1847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.418971][ T1847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.478623][ T1847] bridge0: port 3(dummy0) entered blocking state [ 1014.485273][ T1847] bridge0: port 3(dummy0) entered forwarding state [ 1014.492443][ T1847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.500113][ T1847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.520376][ T1847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.528586][ T1847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.584908][ T1847] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1015.363785][ T1900] program syz.4.9125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1015.596400][ T1906] loop4: detected capacity change from 0 to 2048 [ 1015.665091][ T1918] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1015.754202][ T1906] NILFS (loop4): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 1015.867527][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1016.113850][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.174016][ T8] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1016.191420][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1016.207644][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.220085][ T8] usb 3-1: Product: syz [ 1016.224681][ T8] usb 3-1: Manufacturer: syz [ 1016.238208][ T8] usb 3-1: SerialNumber: syz [ 1016.257040][ T8] cdc_ncm 3-1:1.0: skipping garbage [ 1016.268027][ T8] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 1016.287586][ T8] cdc_ncm 3-1:1.0: bind() failure [ 1016.309967][ T8] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1016.330907][ T8] cdc_ncm 3-1:1.1: bind() failure [ 1016.365226][ T1946] loop4: detected capacity change from 0 to 512 [ 1016.428280][ T1946] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1016.493210][T27946] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1016.518311][ T8] usb 3-1: USB disconnect, device number 8 [ 1016.807337][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1016.884763][ T1977] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1017.578137][ T5840] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1017.824447][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.853596][ T2026] program syz.3.9157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1017.854411][ T5840] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.901908][ T5840] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1017.920615][ T5840] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1017.931178][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.948761][ T5840] usb 3-1: Product: syz [ 1017.979673][ T5840] usb 3-1: Manufacturer: syz [ 1017.993731][ T5840] usb 3-1: SerialNumber: syz [ 1018.043604][ T5840] usb 3-1: selecting invalid altsetting 1 [ 1018.071721][ T5840] usb 3-1: selecting invalid altsetting 0 [ 1018.110709][ T5840] usb 3-1: selecting invalid altsetting 0 [ 1018.128290][ T5840] cdc_ncm 3-1:1.0: bind() failure [ 1018.157103][ T5840] usb 3-1: selecting invalid altsetting 0 [ 1018.175372][ T5840] usbtest: probe of 3-1:1.1 failed with error -22 [ 1018.352600][T12654] usb 3-1: USB disconnect, device number 9 [ 1018.370399][ T5104] Bluetooth: hci4: command 0x0406 tx timeout [ 1019.349157][ T2102] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9176'. [ 1020.007052][ T2137] sctp: [Deprecated]: syz.3.9188 (pid 2137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1020.007052][ T2137] Use struct sctp_sack_info instead [ 1020.011254][ T2140] loop0: detected capacity change from 0 to 512 [ 1020.108007][ T2140] EXT4-fs: Ignoring removed orlov option [ 1020.167077][ T2140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.354439][ T2163] loop2: detected capacity change from 0 to 512 [ 1020.431190][ T2163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.469453][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.536902][T11347] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1020.634274][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.752274][T11347] usb 5-1: Using ep0 maxpacket: 8 [ 1020.787632][T11347] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1020.826919][T11347] usb 5-1: config 9 has an invalid interface number: 5 but max is 1 [ 1020.836018][T11347] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.868177][T11347] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1020.888037][T11347] usb 5-1: config 9 has no interface number 0 [ 1020.905369][T11347] usb 5-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 1020.927883][T11347] usb 5-1: config 9 interface 5 has no altsetting 0 [ 1020.946674][T11347] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 1020.967392][T11347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.017972][T11347] usb 5-1: Product: syz [ 1021.022307][T11347] usb 5-1: Manufacturer: syz [ 1021.038040][T11347] usb 5-1: SerialNumber: syz [ 1021.153852][ T2197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1021.329192][T11347] usb 5-1: USB disconnect, device number 8 [ 1021.621498][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1021.634661][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1022.188008][ T2238] loop4: detected capacity change from 0 to 512 [ 1022.231743][ T2238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1022.301420][ T2238] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1022.359427][ T2238] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.9215: bg 0: block 248: padding at end of block bitmap is not set [ 1022.400342][ T2238] Quota error (device loop4): write_blk: dquota write failed [ 1022.409389][ T2238] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1022.424333][ T2238] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.9215: Failed to acquire dquot type 1 [ 1022.453289][ T2238] EXT4-fs (loop4): 1 truncate cleaned up [ 1022.472421][ T2238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1022.538075][ T2238] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1022.573051][ T2238] EXT4-fs error (device loop4): __ext4_remount:6741: comm syz.4.9215: Abort forced by user [ 1022.601434][ T2238] EXT4-fs (loop4): Remounting filesystem read-only [ 1022.620496][ T2238] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1022.783181][T27946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.913447][ T2268] loop0: detected capacity change from 0 to 1024 [ 1022.944220][ T2268] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1022.992017][ T2268] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1023.072912][ T2268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.357182][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.014819][ T2329] befs: (loop2): No write support. Marking filesystem read-only [ 1024.042432][ T2329] syz.2.9240: attempt to access beyond end of device [ 1024.042432][ T2329] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1024.067285][ T2329] befs: (loop2): unable to read superblock [ 1024.214592][T28674] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1024.432924][T28674] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1024.470708][T28674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.480912][T28674] usb 1-1: Product: syz [ 1024.492597][T28674] usb 1-1: Manufacturer: syz [ 1024.503803][T28674] usb 1-1: SerialNumber: syz [ 1024.526234][T28674] usb 1-1: config 0 descriptor?? [ 1024.559469][T28674] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1024.907095][ T2359] loop2: detected capacity change from 0 to 2048 [ 1024.985773][ T2359] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1024.998497][T28674] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1025.016281][ T2359] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1025.016969][T28674] sq905c 1-1:0.0: Reading version command failed [ 1025.048193][T28674] sq905c: probe of 1-1:0.0 failed with error -71 [ 1025.058853][ T2359] UDF-fs: Scanning with blocksize 512 failed [ 1025.090923][T28674] usb 1-1: USB disconnect, device number 10 [ 1025.174166][ T2359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.211957][T26295] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1025.807207][ T2412] netlink: 'syz.0.9259': attribute type 6 has an invalid length. [ 1026.266185][ T2443] loop0: detected capacity change from 0 to 512 [ 1026.330143][ T2443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.481086][ T2443] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 18: comm syz.0.9268: lblock 23 mapped to illegal pblock 18 (length 1) [ 1026.550684][ T2443] EXT4-fs (loop0): Remounting filesystem read-only [ 1026.751040][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.844605][ T2470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9273'. [ 1027.069184][ T2470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9273'. [ 1028.803611][ T2536] loop4: detected capacity change from 0 to 2048 [ 1028.860672][ T2536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.106024][T27946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.334915][ T2560] loop2: detected capacity change from 0 to 256 [ 1029.424717][ T2560] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1029.611424][ T2527] loop0: detected capacity change from 0 to 32768 [ 1029.683300][ T2527] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1029.781202][ T2582] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1029.906488][ T2527] XFS (loop0): Starting recovery (logdev: internal) [ 1029.997134][ T2527] XFS (loop0): Ending recovery (logdev: internal) [ 1030.148712][ T5791] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1030.233212][ T2606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9304'. [ 1030.249949][ T2606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9304'. [ 1031.088000][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1031.217464][ T2662] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 1031.237582][ T2662] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 1031.301672][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1031.312755][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1031.331228][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.344039][ T8] usb 3-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1031.379074][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1031.404101][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1031.419191][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.427600][ T8] usb 3-1: Product: syz [ 1031.441057][ T8] usb 3-1: Manufacturer: syz [ 1031.445805][ T8] usb 3-1: SerialNumber: syz [ 1031.463390][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input46 [ 1031.698289][ T8] bcm5974 3-1:1.0: could not read from device [ 1031.726268][ T5144] bcm5974 3-1:1.0: could not read from device [ 1031.753646][ T8] input: failed to attach handler mousedev to device input46, error: -5 [ 1031.769469][ T5144] bcm5974 3-1:1.0: could not read from device [ 1031.782422][ T8] usb 3-1: USB disconnect, device number 10 [ 1031.879968][ T29] INFO: task syz-executor:5787 blocked for more than 143 seconds. [ 1031.921540][ T29] Not tainted 6.6.101-syzkaller #0 [ 1031.938788][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1031.963261][ T29] task:syz-executor state:D stack:20968 pid:5787 ppid:1 flags:0x00004004 [ 1031.985718][ T29] Call Trace: [ 1031.989291][ T29] [ 1031.992661][ T29] __schedule+0x14d2/0x44d0 [ 1031.993854][ T2711] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9323'. [ 1031.998307][ T29] ? asan.module_dtor+0x20/0x20 [ 1032.018177][ T29] ? mark_lock+0x94/0x320 [ 1032.026378][ T29] ? lock_chain_count+0x20/0x20 [ 1032.033590][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1032.039783][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1032.045619][ T29] schedule+0xbd/0x170 [ 1032.050606][ T29] io_schedule+0x80/0xd0 [ 1032.055057][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 1032.061120][ T29] ? folio_wait_bit+0x30/0x30 [ 1032.068682][ T29] ? filemap_get_entry+0x35c/0x3c0 [ 1032.085342][ T29] ? _compound_head+0x120/0x120 [ 1032.110757][ T29] ? find_lock_entries+0xc38/0xfe0 [ 1032.118691][ T29] __filemap_get_folio+0xbc/0xbc0 [ 1032.124369][ T29] truncate_inode_pages_range+0x40a/0xf00 [ 1032.132551][ T29] ? mapping_evict_folio+0x510/0x510 [ 1032.138855][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1032.144291][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.150957][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1032.157703][ T29] evict+0x499/0x870 [ 1032.162317][ T29] ? proc_nr_inodes+0x230/0x230 [ 1032.177339][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1032.188120][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1032.196665][ T29] evict_inodes+0x5fe/0x690 [ 1032.202472][ T29] ? clear_inode+0x150/0x150 [ 1032.214175][ T29] generic_shutdown_super+0x97/0x2b0 [ 1032.232314][ T29] kill_block_super+0x44/0x90 [ 1032.248429][ T29] deactivate_locked_super+0x97/0x100 [ 1032.265415][ T29] cleanup_mnt+0x429/0x4c0 [ 1032.275691][ T29] task_work_run+0x1ce/0x250 [ 1032.284848][ T29] ? task_work_cancel+0x240/0x240 [ 1032.292026][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1032.312579][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 1032.321321][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 1032.376097][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1032.421460][ T29] do_syscall_64+0x61/0xb0 [ 1032.502936][ T29] ? clear_bhb_loop+0x40/0x90 [ 1032.626064][ T29] ? clear_bhb_loop+0x40/0x90 [ 1032.641253][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1032.692005][ T29] RIP: 0033:0x7fba7f98ff17 [ 1032.734792][ T29] RSP: 002b:00007ffd3cee5a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1032.817059][ T29] RAX: 0000000000000000 RBX: 00007fba7fa11c05 RCX: 00007fba7f98ff17 [ 1032.875009][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3cee5b00 [ 1032.907698][ T29] RBP: 00007ffd3cee5b00 R08: 0000000000000000 R09: 0000000000000000 [ 1032.930339][ T29] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3cee6b90 [ 1032.957136][ T29] R13: 00007fba7fa11c05 R14: 00000000000cf6ee R15: 00007ffd3cee6bd0 [ 1033.036296][ T29] [ 1033.042687][ T29] [ 1033.042687][ T29] Showing all locks held in the system: [ 1033.063168][ T29] 1 lock held by khungtaskd/29: [ 1033.081988][ T29] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1033.105671][ T29] 3 locks held by kworker/u4:3/48: [ 1033.117334][ T29] 5 locks held by kworker/u4:8/2960: [ 1033.133298][ T29] #0: ffff8880b8f3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1033.162279][ T29] #1: ffffc9000bd27d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1033.189049][ T29] #2: ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 1033.235112][ T29] #3: ffffffff970b2f68 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x4b0 [ 1033.256309][ T29] #4: ffff8880b8e288c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xe5/0x250 [ 1033.275116][ T29] 2 locks held by getty/5553: [ 1033.289303][ T29] #0: ffff88802d7540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1033.317377][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 1033.338418][ T29] 1 lock held by syz-executor/5787: [ 1033.349264][ T29] #0: ffff88807f9820e0 (&type->s_umount_key#57){++++}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1033.370878][ T29] 1 lock held by syz.3.9260/2413: [ 1033.388887][ T29] #0: ffff88807f9820e0 (&type->s_umount_key#57){++++}-{3:3}, at: super_lock+0x167/0x360 [ 1033.407097][ T29] 1 lock held by syz.3.9260/2415: [ 1033.421274][ T29] #0: ffff88807f9820e0 (&type->s_umount_key#57){++++}-{3:3}, at: super_lock+0x167/0x360 [ 1033.440887][ T29] [ 1033.448224][ T29] ============================================= [ 1033.448224][ T29] [ 1033.476911][ T29] NMI backtrace for cpu 1 [ 1033.484835][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 1033.497288][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1033.514022][ T29] Call Trace: [ 1033.518350][ T29] [ 1033.522014][ T29] dump_stack_lvl+0x16c/0x230 [ 1033.529712][ T29] ? show_regs_print_info+0x20/0x20 [ 1033.537254][ T29] ? load_image+0x3b0/0x3b0 [ 1033.543511][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 1033.553627][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1033.561469][ T29] ? _printk+0xd0/0x110 [ 1033.565761][ T29] ? load_image+0x3b0/0x3b0 [ 1033.571390][ T29] ? load_image+0x3b0/0x3b0 [ 1033.577547][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1033.585966][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1033.592537][ T29] watchdog+0xf41/0xf80 [ 1033.596736][ T29] ? watchdog+0x1e1/0xf80 [ 1033.601278][ T29] kthread+0x2fa/0x390 [ 1033.608655][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1033.614273][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1033.619132][ T29] ret_from_fork+0x48/0x80 [ 1033.623787][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1033.628588][ T29] ret_from_fork_asm+0x11/0x20 [ 1033.633572][ T29] [ 1033.638047][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1033.644089][ C0] NMI backtrace for cpu 0 [ 1033.644109][ C0] CPU: 0 PID: 2960 Comm: kworker/u4:8 Not tainted 6.6.101-syzkaller #0 [ 1033.644128][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1033.644140][ C0] Workqueue: bat_events batadv_nc_worker [ 1033.644168][ C0] RIP: 0010:__lock_acquire+0xeae/0x7c80 [ 1033.644192][ C0] Code: c6 f8 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 c0 0f 85 51 5d 00 00 8b 1b 48 8b 44 24 48 42 0f b6 04 00 84 c0 0f 85 64 5d 00 00 <48> 8b 44 24 10 33 18 f7 c3 00 60 00 00 74 11 49 c7 c7 ff ff ff ff [ 1033.644208][ C0] RSP: 0018:ffffc9000bd277c0 EFLAGS: 00000046 [ 1033.644222][ C0] RAX: 0000000000000000 RBX: 00000000000406cf RCX: ffffffff81671b10 [ 1033.644234][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90da3520 [ 1033.644245][ C0] RBP: ffffc9000bd27a08 R08: dffffc0000000000 R09: 1ffffffff21b46a4 [ 1033.644258][ C0] R10: dffffc0000000000 R11: fffffbfff21b46a5 R12: 0000000000000000 [ 1033.644372][ C0] R13: ffff88802c7b3c00 R14: ffff88802c7b46e0 R15: b98d254c0818c18a [ 1033.644386][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1033.644400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1033.644412][ C0] CR2: 00007fb008384198 CR3: 000000007ad7c000 CR4: 00000000003506f0 [ 1033.644428][ C0] Call Trace: [ 1033.644437][ C0] [ 1033.644456][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1033.644479][ C0] ? verify_lock_unused+0x140/0x140 [ 1033.644500][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1033.644530][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1033.644555][ C0] ? mark_lock+0x94/0x320 [ 1033.644574][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1033.644595][ C0] lock_acquire+0x197/0x410 [ 1033.644614][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1033.644639][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1033.644660][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1033.644678][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1033.644702][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1033.644722][ C0] batadv_nc_worker+0xef/0x610 [ 1033.644743][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1033.644765][ C0] ? process_scheduled_works+0x957/0x15b0 [ 1033.644786][ C0] process_scheduled_works+0xa45/0x15b0 [ 1033.644821][ C0] ? assign_work+0x400/0x400 [ 1033.644844][ C0] ? assign_work+0x39e/0x400 [ 1033.644866][ C0] worker_thread+0xa55/0xfc0 [ 1033.644899][ C0] kthread+0x2fa/0x390 [ 1033.644914][ C0] ? pr_cont_work+0x560/0x560 [ 1033.644935][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1033.644950][ C0] ret_from_fork+0x48/0x80 [ 1033.644981][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1033.644997][ C0] ret_from_fork_asm+0x11/0x20 [ 1033.645028][ C0] [ 1033.653401][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1033.653421][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 1033.653445][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1033.653458][ T29] Call Trace: [ 1033.653469][ T29] [ 1033.653480][ T29] dump_stack_lvl+0x16c/0x230 [ 1033.653527][ T29] ? show_regs_print_info+0x20/0x20 [ 1033.653555][ T29] ? load_image+0x3b0/0x3b0 [ 1033.653606][ T29] panic+0x2c0/0x710 [ 1033.653637][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1033.653673][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1033.653704][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1033.653736][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1033.653774][ T29] watchdog+0xf80/0xf80 [ 1033.653806][ T29] ? watchdog+0x1e1/0xf80 [ 1033.653843][ T29] kthread+0x2fa/0x390 [ 1033.653863][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1033.653892][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1033.653914][ T29] ret_from_fork+0x48/0x80 [ 1033.653941][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1033.653962][ T29] ret_from_fork_asm+0x11/0x20 [ 1033.654009][ T29] [ 1033.658344][ T29] Kernel Offset: disabled [ 1034.040968][ T29] Rebooting in 86400 seconds..