last executing test programs: 1m34.462902386s ago: executing program 1 (id=10896): personality(0x400000) syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x3, 0x400}, &(0x7f0000000340), &(0x7f0000000180)) 1m34.301791298s ago: executing program 1 (id=10898): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000001f00)=ANY=[], 0x1, 0x210, &(0x7f0000000700)="$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") lstat(&(0x7f0000001380)='./file2\x00', &(0x7f0000000940)) 1m34.037710722s ago: executing program 1 (id=10901): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x3b) 1m33.97734947s ago: executing program 1 (id=10902): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m33.474949146s ago: executing program 1 (id=10908): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x30, 0x60, 0x2, 0xfffff000}, {0x6, 0x4, 0x8, 0x6}]}, 0x10) 1m32.765740808s ago: executing program 1 (id=10914): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r0, &(0x7f0000003740)=[{&(0x7f00000008c0)='deny;', 0x5}], 0x1) 1m32.37006052s ago: executing program 32 (id=10914): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r0, &(0x7f0000003740)=[{&(0x7f00000008c0)='deny;', 0x5}], 0x1) 1m32.363911141s ago: executing program 0 (id=10916): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x10, 0x2) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x9, 0x1}}, 0x87, 0xbf, &(0x7f0000000680)="a0e0dd4d5d9d1a951ed0d1c1fa9abbfb10e5945a80a15c880eb5db2b79a94f4ad076c69884c14f422632d201b86df4c505bc445482ed0e09a217303d1e0f1ca000f5271c179bc7e648d43e0fc6d13f095a6552da124dc7dda664876b2deb1fee803840957e4d12bed99913456a216e4895610d894c929d73fef6066f88ca6fecacc9991ecc54ef"}) 1m32.112332354s ago: executing program 0 (id=10919): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) 1m31.849609038s ago: executing program 0 (id=10922): r0 = semget$private(0x0, 0x4, 0x430) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x2ef}, {0x0, 0x6}], 0x2, &(0x7f0000000100)) 1m31.661805713s ago: executing program 0 (id=10924): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m31.037749594s ago: executing program 0 (id=10927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1m30.165808178s ago: executing program 0 (id=10935): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x80404531, 0x0) 1m29.533280951s ago: executing program 33 (id=10935): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x80404531, 0x0) 2.562954635s ago: executing program 2 (id=11905): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfffffffc, 0x6, 0x80015, 0x1, "4b8b3ea40100dfed0b2f3409000000dd5a9601040049918ae7fd1f0ececfe0f4fcdf997dd52115394d4d0008000000000000020000000000000000000000eaff", "090000001000002000000000000000000000010000000000000300", [0x1000000000000911, 0xc]}) 2.393853497s ago: executing program 2 (id=11906): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x80307) writev(r0, 0x0, 0x0) 2.393704447s ago: executing program 3 (id=11907): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd25, 0x20000000, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x4, 0x5e, 0x6c, 0x1, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1}, 0x2, 0x6, 0x0, 0x0, "1a40a57bf5ece0e9"}, 0x2}}]}, 0x14c}}, 0x0) 2.256023495s ago: executing program 3 (id=11908): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) timer_getoverrun(0x0) 2.22065681s ago: executing program 2 (id=11909): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000280001000000000000000000010100800c0002000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x240088c0}, 0x0) 2.101826725s ago: executing program 3 (id=11910): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000340)="d22eec477542500d45f3558dc6dac1a6b0debfd82e", 0x15) 1.949731735s ago: executing program 3 (id=11911): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) 1.887606523s ago: executing program 2 (id=11912): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 1.768636029s ago: executing program 3 (id=11914): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 1.651739014s ago: executing program 2 (id=11915): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x2, 0x3, "1106f8a563d463b6fc5fa56a2cd49a73e2ecf79445daad2d9ea2ede39203c84e", 0x39555659}) 1.354020613s ago: executing program 2 (id=11919): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 785.662817ms ago: executing program 4 (id=11923): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095", @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 630.862468ms ago: executing program 5 (id=11925): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',no']) 616.05663ms ago: executing program 4 (id=11926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=@deltaction={0x34, 0x18, 0x1, 0x8000000, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x34}}, 0x0) 492.667636ms ago: executing program 5 (id=11927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 394.799569ms ago: executing program 4 (id=11928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, '\x00\x00\x00\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0xd4}}, 0xd4}}, 0x0) 385.69067ms ago: executing program 5 (id=11929): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x1}) 261.233396ms ago: executing program 5 (id=11930): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13b81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 260.628976ms ago: executing program 4 (id=11931): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/43, 0x2b) 190.816455ms ago: executing program 5 (id=11932): r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, 0x0, &(0x7f0000000480)) 129.816973ms ago: executing program 4 (id=11933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="11"], 0x14) 89.579988ms ago: executing program 5 (id=11934): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x2000400, &(0x7f00000001c0)=ANY=[@ANYBLOB="636f6465706167653d63703835322c006fb691d2737b705dc556d65d9df1cb7dba7e22e9401baeb7cec264b4e5364639fd3f79a413496cbbb807f395fd1fa1b9b784390a296f41cd1a0d6fe36ee520f4e84b336e780abd660b52e8e0821bb6db0d3823e1a16d8daa1b5613f213c29a616e2ef7bbce58232e3aa6ed2a6744cf109759d8496b14211ce6643490d484408e16eede91d78ef35b7e90df199605a94fe0527e93cb7b2a98be7d4ddee04c980658d34ab783479a07adc05722c7fc5058352dc1e6ed8f0685e0a3a445d76146412c95e4715118847084a5baa5a7e1eec512c152d9feee0b7cfc2a14a3d980d6a37926d88c7c32c4b2531e78e0c8693ded07ac17c49a8bc4cfe434b818197f66a1cc56b4f14d97aa438500000000000000083020c8347647eda9ce76f38c28d3cd37153352d5efe5785c9f19a9527869f4642d1d29a7ea10e3da51121d309e4a7a7fdaccfa203a1fa4fd61722e386806c161545e2d00c2f6e07081dd61822e8e83bd4f9cab70f728f56f48f597966cc35d2a6d000000004000"/402], 0x1, 0x2f5, &(0x7f00000007c0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) 80.34101ms ago: executing program 4 (id=11935): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff0709050210", @ANYBLOB="11a74b79"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 3 (id=11936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016500000000c0a0103000080b708ef00000100000008000440000000000900010073797a30000000002800038024"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): ink: 8 bytes leftover after parsing attributes in process `syz.0.10374'. [ 1262.638957][T29415] loop1: detected capacity change from 0 to 4096 [ 1262.685612][T29415] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1262.802232][T29415] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1262.914465][T29415] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 1262.914465][T29415] [ 1262.983747][T29428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1263.394048][T29444] netlink: 'syz.1.10386': attribute type 30 has an invalid length. [ 1263.935320][T29465] loop1: detected capacity change from 0 to 8 [ 1264.039172][T29465] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1264.097749][T29465] SQUASHFS error: Failed to read block 0x144: -5 [ 1264.104149][T29465] SQUASHFS error: Unable to read metadata cache entry [142] [ 1264.150627][T29465] SQUASHFS error: Unable to read directory block [142:26] [ 1264.209432][T29473] netlink: 'syz.0.10401': attribute type 1 has an invalid length. [ 1264.235063][T29473] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10401'. [ 1264.753193][T29493] loop1: detected capacity change from 0 to 16 [ 1264.764895][T29494] netlink: 'syz.0.10411': attribute type 1 has an invalid length. [ 1264.770324][T29495] xt_TCPMSS: Only works on TCP SYN packets [ 1264.798069][T29493] erofs: (device loop1): mounted with root inode @ nid 36. [ 1264.837085][T29493] syz.1.10412: attempt to access beyond end of device [ 1264.837085][T29493] loop1: rw=0, sector=34359736320, nr_sectors = 8 limit=16 [ 1265.066898][T29503] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1265.522237][T29522] netlink: 'syz.2.10426': attribute type 1 has an invalid length. [ 1265.541959][T29522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10426'. [ 1266.194992][T29548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10438'. [ 1266.208560][T29545] Cannot find del_set index 286 as target [ 1266.208970][T29548] netlink: 'syz.2.10438': attribute type 8 has an invalid length. [ 1266.524380][T29554] netlink: 'syz.2.10441': attribute type 30 has an invalid length. [ 1266.802098][T29565] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 1266.965321][T29543] loop3: detected capacity change from 0 to 32768 [ 1267.056618][T29543] JBD2: Ignoring recovery information on journal [ 1267.124157][T29578] syz.1.10451: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1267.142849][T29578] CPU: 0 PID: 29578 Comm: syz.1.10451 Not tainted syzkaller #0 [ 1267.150461][T29578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1267.160551][T29578] Call Trace: [ 1267.163869][T29578] [ 1267.166837][T29578] dump_stack_lvl+0x18c/0x250 [ 1267.171566][T29578] ? show_regs_print_info+0x20/0x20 [ 1267.176817][T29578] ? load_image+0x400/0x400 [ 1267.181376][T29578] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1267.187829][T29578] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1267.194349][T29578] warn_alloc+0x246/0x340 [ 1267.198697][T29578] ? stack_trace_save+0xaa/0x100 [ 1267.203649][T29578] ? zone_watermark_ok_safe+0x230/0x230 [ 1267.209222][T29578] ? kasan_set_track+0x5f/0x70 [ 1267.213995][T29578] ? kasan_set_track+0x4e/0x70 [ 1267.218769][T29578] ? __kasan_kmalloc+0x8f/0xa0 [ 1267.223542][T29578] ? xsk_init_queue+0xad/0x100 [ 1267.228321][T29578] ? xsk_setsockopt+0x42e/0x760 [ 1267.233183][T29578] ? do_sock_setsockopt+0x175/0x1a0 [ 1267.238400][T29578] ? __x64_sys_setsockopt+0x182/0x200 [ 1267.243793][T29578] __vmalloc_node_range+0x126/0x1330 [ 1267.249114][T29578] ? free_vm_area+0x50/0x50 [ 1267.253642][T29578] vmalloc_user+0x74/0x80 [ 1267.257991][T29578] ? xskq_create+0xbf/0x170 [ 1267.262506][T29578] xskq_create+0xbf/0x170 [ 1267.266849][T29578] xsk_init_queue+0xad/0x100 [ 1267.271451][T29578] xsk_setsockopt+0x42e/0x760 [ 1267.276151][T29578] ? xsk_poll+0x680/0x680 [ 1267.280498][T29578] ? __fget_files+0x28/0x4b0 [ 1267.285108][T29578] ? __fget_files+0x28/0x4b0 [ 1267.289713][T29578] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1267.295272][T29578] ? security_socket_setsockopt+0x7e/0xa0 [ 1267.301008][T29578] ? xsk_poll+0x680/0x680 [ 1267.305349][T29578] do_sock_setsockopt+0x175/0x1a0 [ 1267.310390][T29578] ? __fdget+0x180/0x210 [ 1267.314651][T29578] __x64_sys_setsockopt+0x182/0x200 [ 1267.319869][T29578] do_syscall_64+0x55/0xa0 [ 1267.324300][T29578] ? clear_bhb_loop+0x40/0x90 [ 1267.328989][T29578] ? clear_bhb_loop+0x40/0x90 [ 1267.333681][T29578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.339582][T29578] RIP: 0033:0x7f7e1ab9aeb9 [ 1267.344009][T29578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.363627][T29578] RSP: 002b:00007f7e1ba3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1267.372055][T29578] RAX: ffffffffffffffda RBX: 00007f7e1ae15fa0 RCX: 00007f7e1ab9aeb9 [ 1267.380039][T29578] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1267.388021][T29578] RBP: 00007f7e1ac08c1f R08: 0000000000000004 R09: 0000000000000000 [ 1267.396003][T29578] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.403981][T29578] R13: 00007f7e1ae16038 R14: 00007f7e1ae15fa0 R15: 00007ffcc6b92bf8 [ 1267.411975][T29578] [ 1267.447671][T29543] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1267.480268][T29578] Mem-Info: [ 1267.485073][T29578] active_anon:13821 inactive_anon:0 isolated_anon:0 [ 1267.485073][T29578] active_file:5276 inactive_file:54043 isolated_file:0 [ 1267.485073][T29578] unevictable:768 dirty:204 writeback:0 [ 1267.485073][T29578] slab_reclaimable:11904 slab_unreclaimable:94434 [ 1267.485073][T29578] mapped:25570 shmem:5470 pagetables:693 [ 1267.485073][T29578] sec_pagetables:0 bounce:0 [ 1267.485073][T29578] kernel_misc_reclaimable:0 [ 1267.485073][T29578] free:1333369 free_pcp:3947 free_cma:0 [ 1267.574170][T29543] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1267.586093][T29578] Node 0 active_anon:55084kB inactive_anon:0kB active_file:21104kB inactive_file:215968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102380kB dirty:816kB writeback:0kB shmem:20344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11320kB pagetables:2772kB sec_pagetables:0kB all_unreclaimable? no [ 1267.611760][T29543] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1267.664537][T29543] OCFS2: File system is now read-only. [ 1267.665805][T29578] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1267.678213][T29543] (syz.3.10435,29543,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1267.704160][T29578] Node 0 DMA free:15352kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1267.744112][T29543] (syz.3.10435,29543,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1267.763050][T29543] (syz.3.10435,29543,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1267.776438][T29578] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1267.780901][T29543] (syz.3.10435,29543,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1267.783932][T29578] Node 0 DMA32 free:1412732kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:55048kB inactive_anon:0kB active_file:21104kB inactive_file:215140kB unevictable:1536kB writepending:816kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:6380kB local_pcp:3812kB free_cma:0kB [ 1267.794788][T29543] (syz.3.10435,29543,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1267.830350][T29578] lowmem_reserve[]: 0 0 0 0 0 [ 1267.835510][T29543] (syz.3.10435,29543,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1267.847049][T29543] (syz.3.10435,29543,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1267.857107][T29543] (syz.3.10435,29543,1):ocfs2_mknod:385 ERROR: status = -30 [ 1267.871106][T29543] (syz.3.10435,29543,1):ocfs2_mknod:502 ERROR: status = -30 [ 1267.875094][T29578] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1267.915053][T29543] (syz.3.10435,29543,1):ocfs2_mkdir:659 ERROR: status = -30 [ 1267.983983][T29578] lowmem_reserve[]: 0 0 0 0 0 [ 1267.988793][T29578] Node 1 Normal free:3905384kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9628kB local_pcp:7580kB free_cma:0kB [ 1268.067750][T29578] lowmem_reserve[]: 0 0 0 0 0 [ 1268.072946][T29578] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15352kB [ 1268.147627][T29578] Node 0 DMA32: 729*4kB (UME) 545*8kB (UME) 633*16kB (UME) 1056*32kB (UME) 372*64kB (UME) 213*128kB (UME) 167*256kB (UM) 96*512kB (UM) 32*1024kB (UME) 11*2048kB (UM) 284*4096kB (UM) = 1412732kB [ 1268.180009][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 1268.186443][T29578] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1268.221601][T29578] Node 1 Normal: 268*4kB (UE) 73*8kB (UE) 49*16kB (UE) 245*32kB (UE) 87*64kB (UME) 23*128kB (UME) 2*256kB (ME) 0*512kB 1*1024kB (U) 3*2048kB (UME) 947*4096kB (M) = 3905384kB [ 1268.251753][T29595] loop2: detected capacity change from 0 to 512 [ 1268.262757][T29578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1268.280751][T29578] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1268.310644][T29578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1268.314342][T29595] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.10460: Invalid block bitmap block 0 in block_group 0 [ 1268.326817][T29578] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1268.345495][T29578] 60895 total pagecache pages [ 1268.352958][T29578] 0 pages in swap cache [ 1268.358125][T29578] Free swap = 124728kB [ 1268.362324][T29578] Total swap = 124996kB [ 1268.366923][T29578] 2097051 pages RAM [ 1268.372258][T29578] 0 pages HighMem/MovableOnly [ 1268.377410][T29578] 416922 pages reserved [ 1268.381680][T29578] 0 pages cma reserved [ 1268.386610][T29595] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1268.403937][ T965] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1268.448632][T29595] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.10460: attempt to clear invalid blocks 983261 len 1 [ 1268.479458][T29595] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.10460: invalid indirect mapped block 2683928664 (level 0) [ 1268.495257][T29595] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.10460: Invalid inode table block 0 in block_group 0 [ 1268.534124][T29595] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1268.568448][T29595] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1268.577688][T29595] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.10460: Invalid inode table block 0 in block_group 0 [ 1268.597256][T29595] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1268.601794][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 1268.607435][T29595] EXT4-fs error (device loop2): ext4_truncate:4294: inode #13: comm syz.2.10460: mark_inode_dirty error [ 1268.637750][T29595] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1268.657263][ T965] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1268.684226][ T965] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1268.685896][T29595] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.10460: Invalid inode table block 0 in block_group 0 [ 1268.713818][T29595] EXT4-fs (loop2): 1 truncate cleaned up [ 1268.720012][ T965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1268.723989][T29595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1268.743981][ T965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1268.775984][ T965] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1268.823460][ T965] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1268.864712][T29595] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.10460: Invalid inode table block 0 in block_group 0 [ 1268.870168][ T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.890131][T29595] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1268.966626][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.399694][ T5755] usb 1-1: USB disconnect, device number 9 [ 1270.475256][T29663] loop1: detected capacity change from 0 to 16 [ 1270.514447][T29663] erofs: (device loop1): mounted with root inode @ nid 36. [ 1270.577694][T29663] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1270.616817][T29663] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 1270.636816][T29663] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1270.646128][T29669] netlink: 'syz.3.10495': attribute type 1 has an invalid length. [ 1270.872735][T29676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10500'. [ 1271.257602][T29690] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10505'. [ 1271.729331][T29679] loop1: detected capacity change from 0 to 32768 [ 1271.762729][T29679] [ 1271.762729][T29679] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1271.762729][T29679] [ 1271.926958][ T1130] [ 1271.926958][ T1130] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1271.926958][ T1130] [ 1271.965927][ T1130] [ 1271.965927][ T1130] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1271.965927][ T1130] [ 1271.987277][ T5767] [ 1271.987277][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1271.987277][ T5767] [ 1272.026041][ T112] [ 1272.026041][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1272.026041][ T112] [ 1272.042199][T29709] loop2: detected capacity change from 0 to 4096 [ 1272.056971][ T5767] [ 1272.056971][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1272.056971][ T5767] [ 1272.118286][T29712] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1272.186676][T29714] netlink: 'syz.0.10518': attribute type 1 has an invalid length. [ 1272.448847][ T5771] Bluetooth: Wrong link type (-22) [ 1272.452761][T29716] loop1: detected capacity change from 0 to 4096 [ 1272.513835][T29716] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1272.651332][T29716] ntfs3: loop1: failed to convert "c46c" to cp864 [ 1273.668258][T29760] loop2: detected capacity change from 0 to 16 [ 1273.703536][T29760] erofs: (device loop2): mounted with root inode @ nid 36. [ 1273.748597][T29760] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1273.762626][T29760] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 1273.781138][ T965] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1273.793201][T29760] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1273.819125][ T5755] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1273.974034][ T965] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1273.996417][ T965] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1274.012370][ T965] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1274.031935][ T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.040178][ T5755] usb 1-1: Using ep0 maxpacket: 8 [ 1274.054016][ T5755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.076361][ T5755] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1274.086842][T29753] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1274.113541][ T5755] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.126883][ T965] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1274.147153][ T5755] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1274.173535][ T5755] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1274.186541][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.204464][ T5755] usb 1-1: Product: syz [ 1274.208696][ T5755] usb 1-1: Manufacturer: syz [ 1274.229008][ T5755] usb 1-1: SerialNumber: syz [ 1274.258044][ T5755] usb 1-1: config 0 descriptor?? [ 1274.297714][ T5755] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 1274.431352][ T1195] usb 4-1: USB disconnect, device number 13 [ 1274.501730][ T5755] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 1274.532604][ T5755] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 1274.564374][ T5755] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 1274.699160][T29766] loop1: detected capacity change from 0 to 32768 [ 1274.752679][T29766] jfs_strtoUCS: char2uni returned -22. [ 1274.769834][ T1195] usb 1-1: USB disconnect, device number 10 [ 1274.778006][T29766] charset = iso8859-6, char = 0xfc [ 1275.194382][T29789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10554'. [ 1275.208611][T29791] sctp: [Deprecated]: syz.1.10555 (pid 29791) Use of int in max_burst socket option. [ 1275.208611][T29791] Use struct sctp_assoc_value instead [ 1275.860257][ T5755] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1276.064937][ T5755] usb 2-1: Using ep0 maxpacket: 32 [ 1276.072428][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.103814][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.139806][ T5755] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1276.162108][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.199116][ T5755] usb 2-1: config 0 descriptor?? [ 1276.208526][ T5755] hub 2-1:0.0: USB hub found [ 1276.406238][ T5755] hub 2-1:0.0: 1 port detected [ 1276.507835][T29838] netlink: 'syz.3.10578': attribute type 7 has an invalid length. [ 1276.531219][T29838] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10578'. [ 1276.593792][ T5755] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1276.610195][ T5755] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1276.628232][ T5755] usbhid 2-1:0.0: can't add hid device: -71 [ 1276.641023][ T5755] usbhid: probe of 2-1:0.0 failed with error -71 [ 1276.690156][ T5755] usb 2-1: USB disconnect, device number 113 [ 1277.159834][T29840] loop0: detected capacity change from 0 to 32768 [ 1277.183109][T29852] loop3: detected capacity change from 0 to 512 [ 1277.230090][T29852] FAT-fs (loop3): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 1277.263211][T29840] read_mapping_page failed! [ 1277.370633][T29856] loop2: detected capacity change from 0 to 512 [ 1277.404358][T29856] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1277.455609][T29856] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1277.527661][T29856] System zones: 0-1, 15-15, 18-18, 34-34 [ 1277.557031][T29856] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1277.563518][T29856] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1277.608668][T29856] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1277.648318][T29856] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1277.691481][T29856] EXT4-fs (loop2): 1 truncate cleaned up [ 1277.717092][T29856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1277.835967][T29869] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~)V' [ 1277.855230][T29869] ALSA: mixer_oss: invalid OSS volume '*bbX-]OF{T0pc' [ 1277.863976][T29856] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 1277.902829][T29869] ALSA: mixer_oss: invalid OSS volume 'gI"4-Z' [ 1277.910259][T29869] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 1277.939333][T29869] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 1277.956108][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.962328][T29869] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 1277.987605][T29869] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 1278.019246][T29869] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 1278.041637][T29869] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 1278.059426][T29869] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 1278.070444][T29869] ALSA: mixer_oss: invalid OSS volume '[' [ 1278.076458][T29869] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 1278.096357][T29869] ALSA: mixer_oss: invalid OSS volume '$ 1 [ 1301.254271][T26600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1301.264605][T26600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1301.280213][T26600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1301.282231][T30557] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1301.302275][T26600] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1301.309818][T26600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1301.391301][T30557] UDF-fs: error (device loop0): udf_count_free_bitmap: udf_count_free failed [ 1301.575128][ T5765] UDF-fs: error (device loop0): udf_read_inode: (ino 104) failed !bh [ 1301.613153][ T5765] UDF-fs: error (device loop0): udf_read_inode: (ino 104) failed !bh [ 1301.632693][ T28] audit: type=1326 audit(2000000181.459:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30571 comm="syz.3.10926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1301.726351][ T28] audit: type=1326 audit(2000000181.459:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30571 comm="syz.3.10926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1301.788180][ T28] audit: type=1326 audit(2000000181.523:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30571 comm="syz.3.10926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1301.837970][ T28] audit: type=1326 audit(2000000181.534:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30571 comm="syz.3.10926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1303.219310][ T5771] Bluetooth: hci1: command tx timeout [ 1303.344045][T30558] chnl_net:caif_netlink_parms(): no params data found [ 1303.936924][ T28] audit: type=1326 audit(2000000183.916:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30627 comm="syz.2.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d599aeb9 code=0x7ffc0000 [ 1304.017763][ T28] audit: type=1326 audit(2000000183.916:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30627 comm="syz.2.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d599aeb9 code=0x7ffc0000 [ 1304.077111][ T28] audit: type=1326 audit(2000000183.927:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30627 comm="syz.2.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d599aeb9 code=0x7ffc0000 [ 1304.114045][ T28] audit: type=1326 audit(2000000183.927:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30627 comm="syz.2.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d599aeb9 code=0x7ffc0000 [ 1304.129819][T26600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1304.136921][ T28] audit: type=1326 audit(2000000183.927:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30627 comm="syz.2.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f94d599aeb9 code=0x7ffc0000 [ 1304.166871][ T28] audit: type=1326 audit(2000000183.927:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30627 comm="syz.2.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d599aeb9 code=0x7ffc0000 [ 1304.185430][T26600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1304.189560][ T28] audit: type=1326 audit(2000000183.927:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30627 comm="syz.2.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d599aeb9 code=0x7ffc0000 [ 1304.225885][ T28] audit: type=1326 audit(2000000183.980:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30627 comm="syz.2.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94d599aeb9 code=0x7ffc0000 [ 1304.226254][T26600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1304.254208][ T28] audit: type=1326 audit(2000000183.980:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30627 comm="syz.2.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f94d599aeb9 code=0x7ffc0000 [ 1304.293943][T26600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1304.306994][T26600] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1304.315373][T26600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1304.359713][T30558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.416975][T30558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.461689][T30558] bridge_slave_0: entered allmulticast mode [ 1304.476677][T30558] bridge_slave_0: entered promiscuous mode [ 1304.598699][T30558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.606222][T30558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.613471][T30558] bridge_slave_1: entered allmulticast mode [ 1304.659984][T30558] bridge_slave_1: entered promiscuous mode [ 1304.680242][T30649] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10952'. [ 1304.998896][T30558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.085562][T30558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.154484][T26600] Bluetooth: hci1: command tx timeout [ 1305.202110][ T1130] hsr_slave_0: left promiscuous mode [ 1305.218300][ T1130] hsr_slave_1: left promiscuous mode [ 1305.345685][ T1130] veth1_macvtap: left promiscuous mode [ 1305.368917][ T1130] veth0_macvtap: left promiscuous mode [ 1305.377185][ T1130] veth1_vlan: left promiscuous mode [ 1305.592988][T30667] loop2: detected capacity change from 0 to 4096 [ 1305.620166][T30667] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1305.635372][ T1130] bond1 (unregistering): Released all slaves [ 1305.804580][T30667] ntfs3: loop2: failed to convert "c46c" to macromanian [ 1306.181257][T30669] loop3: detected capacity change from 0 to 32768 [ 1306.235499][T30669] (syz.3.10962,30669,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1306.256093][T30669] (syz.3.10962,30669,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1306.282280][T26600] Bluetooth: hci0: command tx timeout [ 1306.340499][T30669] (syz.3.10962,30669,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1306.386096][T30669] JBD2: Ignoring recovery information on journal [ 1306.476966][T30669] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1306.498555][T30676] loop2: detected capacity change from 0 to 4096 [ 1306.528091][T30676] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1306.632178][T30676] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 1306.818875][ T5766] ocfs2: Unmounting device (7,3) on (node local) [ 1306.885423][ T5768] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 1307.103009][T26600] Bluetooth: hci1: command tx timeout [ 1307.692939][T30695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1308.211990][T26600] Bluetooth: hci0: command tx timeout [ 1308.478840][ T1130] bond0 (unregistering): Released all slaves [ 1308.682369][T30558] team0: Port device team_slave_0 added [ 1308.727794][T30558] team0: Port device team_slave_1 added [ 1308.902814][T30558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.909823][T30558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.031820][T26600] Bluetooth: hci1: command tx timeout [ 1309.040218][T30558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.124604][T30558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.131602][T30558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.213655][T30558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.415795][T30558] hsr_slave_0: entered promiscuous mode [ 1309.442184][T30558] hsr_slave_1: entered promiscuous mode [ 1309.461914][T30558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1309.475610][T30558] Cannot create hsr debugfs directory [ 1310.022117][ T1130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.128554][T30634] chnl_net:caif_netlink_parms(): no params data found [ 1310.154104][T26600] Bluetooth: hci0: command tx timeout [ 1310.271243][ T1130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.353961][T30762] binfmt_misc: register: failed to install interpreter file ./file0 [ 1310.474467][ T1130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.619368][T30756] loop3: detected capacity change from 0 to 32768 [ 1310.724363][T30756] ea_get: invalid extended attribute [ 1310.737261][T30756] ffff8880510f5fb0: 04 00 00 00 .... [ 1310.914299][T30634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.944030][T30634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.951279][T30634] bridge_slave_0: entered allmulticast mode [ 1310.985184][T30634] bridge_slave_0: entered promiscuous mode [ 1311.011429][T30634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.025297][T30634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.033078][T30634] bridge_slave_1: entered allmulticast mode [ 1311.047999][T30634] bridge_slave_1: entered promiscuous mode [ 1311.075380][T30779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11002'. [ 1311.201767][T30634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.231851][T30634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.243745][T30558] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1311.261536][T30558] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1311.458915][T30558] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1311.478620][T30558] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1311.487460][ T28] audit: type=1107 audit(2000000192.027:182): pid=30789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1311.546188][T30634] team0: Port device team_slave_0 added [ 1311.776511][T30634] team0: Port device team_slave_1 added [ 1311.858020][T30634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.865106][T30634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.891515][T30634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.090993][T26600] Bluetooth: hci0: command tx timeout [ 1312.108286][T30634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.115277][T30634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.145982][T30634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.284448][T30634] hsr_slave_0: entered promiscuous mode [ 1312.295989][T30634] hsr_slave_1: entered promiscuous mode [ 1312.307806][T30634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1312.316384][T30634] Cannot create hsr debugfs directory [ 1313.559426][T30558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.675728][T30847] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11021'. [ 1313.686511][T30558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.700286][T30634] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1313.784021][T30634] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1313.819274][T30634] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1313.964919][ T1130] hsr_slave_0: left promiscuous mode [ 1313.976971][ T1130] hsr_slave_1: left promiscuous mode [ 1314.006258][ T1130] veth1_macvtap: left promiscuous mode [ 1314.017760][ T1130] veth0_macvtap: left promiscuous mode [ 1314.021016][T30857] netlink: 'syz.2.11026': attribute type 1 has an invalid length. [ 1314.024913][ T1130] veth1_vlan: left promiscuous mode [ 1314.044129][ T1130] veth0_vlan: left promiscuous mode [ 1314.226988][ T1130] bond3 (unregistering): Released all slaves [ 1314.276249][T30863] loop2: detected capacity change from 0 to 512 [ 1314.298959][T30863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.316335][T30863] ext4 filesystem being mounted at /2691/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1314.369741][T30863] EXT4-fs error (device loop2): ext4_get_first_dir_block:3584: inode #12: comm syz.2.11029: Attempting to read directory block (0) that is past i_size (3) [ 1314.463026][T30863] EXT4-fs (loop2): Remounting filesystem read-only [ 1314.525186][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.540234][ T60] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1314.575441][ T60] Quota error (device loop2): write_blk: dquota write failed [ 1314.583171][ T60] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 1314.597191][ T1130] bond2 (unregistering): Released all slaves [ 1314.601057][ T60] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1314.616314][ T1130] bond1 (unregistering): Released all slaves [ 1314.620942][ T60] Quota error (device loop2): write_blk: dquota write failed [ 1314.630216][ T60] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 1314.646690][ T60] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 1314.658128][ T60] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1315.131574][ T28] audit: type=1400 audit(2000000195.933:183): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=30873 comm="syz.2.11033" [ 1316.465612][ T1130] bond0 (unregistering): Released all slaves [ 1316.514432][T30634] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1316.547072][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.554250][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.573835][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.581103][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.006120][T30558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1317.246378][T30634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.284249][T30914] loop3: detected capacity change from 0 to 1024 [ 1317.340982][T30634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.480898][T30881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.488144][T30881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.542097][T30881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.549302][T30881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.664618][ T28] audit: type=1326 audit(2000000198.647:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30923 comm="syz.3.11049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1317.787751][ T28] audit: type=1326 audit(2000000198.679:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30923 comm="syz.3.11049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1317.850122][ T28] audit: type=1326 audit(2000000198.690:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30923 comm="syz.3.11049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1317.904378][ T28] audit: type=1326 audit(2000000198.690:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30923 comm="syz.3.11049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1317.906440][T30558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.960869][ T28] audit: type=1326 audit(2000000198.690:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30923 comm="syz.3.11049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1318.391184][T30634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.501802][ T5810] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 1318.740505][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.771195][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1318.802065][ T5810] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1318.827607][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.851080][ T5810] usb 4-1: config 0 descriptor?? [ 1319.014531][T30558] veth0_vlan: entered promiscuous mode [ 1319.054332][T30558] veth1_vlan: entered promiscuous mode [ 1319.093298][ T5810] usb 4-1: string descriptor 0 read error: -71 [ 1319.109895][ T5810] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 1319.142103][ T5810] usb 4-1: USB disconnect, device number 15 [ 1319.181023][T30558] veth0_macvtap: entered promiscuous mode [ 1319.242895][T30558] veth1_macvtap: entered promiscuous mode [ 1319.266781][T30634] veth0_vlan: entered promiscuous mode [ 1319.301642][T30634] veth1_vlan: entered promiscuous mode [ 1319.360650][T30558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.422075][T30558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.442032][T30558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.479142][T30558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1319.497790][T30558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.521978][T30558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.544233][T30558] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.572884][T30558] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.597154][T30558] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.613805][T30558] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.746944][T30634] veth0_macvtap: entered promiscuous mode [ 1319.836079][T30634] veth1_macvtap: entered promiscuous mode [ 1319.915123][T30634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.936107][T30634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.968242][T30634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.011403][T30634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.036539][T30634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.125174][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.128859][T30634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.169419][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.216541][T30634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.230426][T30634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.253286][T30634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.284049][T30634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.326590][T30634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.356360][T30634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.365115][T30634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.417030][T30634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.513363][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.536116][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.800071][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.845160][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.966835][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.996261][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.009733][T31018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10915'. [ 1321.466367][T31031] loop5: detected capacity change from 0 to 2048 [ 1321.590702][T31031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1321.821323][T31042] loop4: detected capacity change from 0 to 1024 [ 1322.576945][T31067] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11088'. [ 1323.674196][T20806] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1323.689572][ T28] audit: type=1326 audit(2000000205.117:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31111 comm="syz.5.11107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1323.712782][ C1] vkms_vblank_simulate: vblank timer overrun [ 1323.732921][ T28] audit: type=1326 audit(2000000205.117:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31111 comm="syz.5.11107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1323.785948][ T28] audit: type=1326 audit(2000000205.127:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31111 comm="syz.5.11107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1323.808395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1323.863836][T20806] usb 4-1: Using ep0 maxpacket: 16 [ 1323.888872][T31119] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1323.892805][T20806] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1323.908045][ T28] audit: type=1326 audit(2000000205.127:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31111 comm="syz.5.11107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1323.912912][T31120] loop4: detected capacity change from 0 to 512 [ 1323.932086][ C1] vkms_vblank_simulate: vblank timer overrun [ 1323.943400][T31119] overlayfs: missing 'lowerdir' [ 1323.971498][T20806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.989005][T20806] usb 4-1: Product: syz [ 1323.990982][ T28] audit: type=1326 audit(2000000205.127:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31111 comm="syz.5.11107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1324.006926][T20806] usb 4-1: Manufacturer: syz [ 1324.082518][T20806] usb 4-1: SerialNumber: syz [ 1324.112664][T20806] usb 4-1: config 0 descriptor?? [ 1324.364310][T20806] speedtch 4-1:0.0: speedtch_bind: wrong device class 68 [ 1324.371418][T20806] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1324.638660][ T965] usb 4-1: USB disconnect, device number 16 [ 1325.039208][T31151] netlink: 'syz.4.11121': attribute type 1 has an invalid length. [ 1325.064063][T31151] netlink: 'syz.4.11121': attribute type 1 has an invalid length. [ 1325.340250][T31161] tmpfs: Bad value for 'mpol' [ 1325.654379][T31177] loop3: detected capacity change from 0 to 128 [ 1325.752798][T31177] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1325.784439][T31180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11133'. [ 1325.905129][T31177] ext4 filesystem being mounted at /2848/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.046616][T31177] EXT4-fs warning (device loop3): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 1326.117962][T31187] loop5: detected capacity change from 0 to 4096 [ 1326.162614][T31187] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1326.183590][ T5766] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1326.407306][T31187] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 1327.205166][T31171] loop4: detected capacity change from 0 to 40427 [ 1327.249667][T31171] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1327.272124][T31171] F2FS-fs (loop4): Image doesn't support compression [ 1327.289011][T31171] F2FS-fs (loop4): Image doesn't support compression [ 1327.304501][T31171] F2FS-fs (loop4): invalid crc value [ 1327.327386][T31171] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1327.521525][T31171] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1327.861847][T31236] netlink: 'syz.5.11153': attribute type 10 has an invalid length. [ 1327.904334][T31236] netlink: 156 bytes leftover after parsing attributes in process `syz.5.11153'. [ 1328.231332][T31250] netlink: 'syz.5.11158': attribute type 12 has an invalid length. [ 1329.620681][ T965] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1329.836513][ T965] usb 3-1: config 0 has no interfaces? [ 1329.876682][ T965] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1329.909828][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.917887][ T965] usb 3-1: Product: syz [ 1329.928208][ T28] audit: type=1326 audit(2000000211.790:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31314 comm="syz.3.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1329.965686][ T965] usb 3-1: Manufacturer: syz [ 1329.970563][ T965] usb 3-1: SerialNumber: syz [ 1329.997486][ T965] r8152-cfgselector 3-1: config 0 descriptor?? [ 1330.004643][ T28] audit: type=1326 audit(2000000211.790:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31314 comm="syz.3.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1330.025248][T31317] IPv6: Can't replace route, no match found [ 1330.086581][ T28] audit: type=1326 audit(2000000211.801:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31314 comm="syz.3.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1330.199726][ T28] audit: type=1326 audit(2000000211.801:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31314 comm="syz.3.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1330.247510][ T965] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1330.276658][ T28] audit: type=1326 audit(2000000211.801:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31314 comm="syz.3.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1330.326605][ T28] audit: type=1326 audit(2000000211.801:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31314 comm="syz.3.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1330.384736][ T28] audit: type=1326 audit(2000000211.801:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31314 comm="syz.3.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1330.438665][ T28] audit: type=1326 audit(2000000211.801:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31314 comm="syz.3.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1330.462820][T31323] loop3: detected capacity change from 0 to 4096 [ 1330.508309][ T5755] usb 3-1: USB disconnect, device number 3 [ 1330.511309][T31323] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1330.540845][ T28] audit: type=1326 audit(2000000211.801:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31314 comm="syz.3.11183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1330.676207][T31323] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1331.080789][T31343] loop3: detected capacity change from 0 to 256 [ 1331.140270][T31343] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1331.177701][T31343] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1332.143561][T31346] loop4: detected capacity change from 0 to 32768 [ 1332.173917][T31346] (syz.4.11195,31346,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1332.223886][T31346] (syz.4.11195,31346,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1332.261639][T31377] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1332.302050][T31346] JBD2: Ignoring recovery information on journal [ 1332.400769][T31382] netlink: 'syz.5.11206': attribute type 1 has an invalid length. [ 1332.444222][T31346] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1332.987224][T30558] ocfs2: Unmounting device (7,4) on (node local) [ 1333.198091][T31403] netlink: 'syz.5.11213': attribute type 1 has an invalid length. [ 1333.721455][T31380] loop3: detected capacity change from 0 to 32768 [ 1334.961818][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1335.163475][ T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1335.185309][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.211164][ T8] usb 3-1: config 0 descriptor?? [ 1335.319036][T31473] netlink: 'syz.3.11238': attribute type 10 has an invalid length. [ 1335.435886][T31473] team0: Port device syz_tun added [ 1335.651470][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 1335.709409][ T8] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1335.734716][ T8] [drm] Initialized udl on minor 2 [ 1335.770022][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1335.798188][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1335.808918][T20806] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1335.846560][T20806] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1335.854593][T20806] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1335.862645][ T8] usb 3-1: USB disconnect, device number 4 [ 1337.330438][T31493] loop4: detected capacity change from 0 to 40427 [ 1337.401374][T31493] F2FS-fs (loop4): invalid crc value [ 1337.429385][T31540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11263'. [ 1337.449096][T31493] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1337.667901][T31493] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1337.955238][T31555] loop5: detected capacity change from 0 to 8 [ 1337.962367][T31555] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1337.967827][T31557] xt_TCPMSS: Only works on TCP SYN packets [ 1338.035244][ T5880] udevd[5880]: incorrect cramfs checksum on /dev/loop5 [ 1338.139151][ T5880] udevd[5880]: incorrect cramfs checksum on /dev/loop5 [ 1338.762702][T31580] tmpfs: Bad value for 'mpol' [ 1339.535938][T31606] Cannot find map_set index 0 as target [ 1339.539080][T31604] loop4: detected capacity change from 0 to 8 [ 1339.559908][T31608] loop2: detected capacity change from 0 to 64 [ 1340.331012][T31633] xt_hashlimit: size too large, truncated to 1048576 [ 1340.810644][T31649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11303'. [ 1341.261672][T31664] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1341.281037][T31663] binder: Bad value for 'stats' [ 1341.485193][T31669] netlink: 'syz.2.11310': attribute type 15 has an invalid length. [ 1341.739472][T31640] loop5: detected capacity change from 0 to 32768 [ 1341.905668][T31640] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1341.951512][ T28] audit: type=1326 audit(2000000224.708:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.3.11314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1342.043934][ T28] audit: type=1326 audit(2000000224.708:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.3.11314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1342.081950][T31690] Timeout policy `syz0' can only be used by L3 protocol number 37120 [ 1342.154559][ T28] audit: type=1326 audit(2000000224.740:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.3.11314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1342.221756][ T28] audit: type=1326 audit(2000000224.740:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.3.11314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1342.298288][T30634] ocfs2: Unmounting device (7,5) on (node local) [ 1342.302425][ T28] audit: type=1326 audit(2000000224.740:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.3.11314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a79aeb9 code=0x7ffc0000 [ 1342.480708][T31701] xt_ecn: cannot match TCP bits for non-tcp packets [ 1342.511520][T31702] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11318'. [ 1343.086199][T31722] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1343.415792][T31736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1343.601514][ T965] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1343.720771][T31749] libceph: resolve '0.' (ret=-3): failed [ 1343.791236][ T965] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1343.810682][ T965] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.822744][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1343.832306][ T965] usb 6-1: config 220 has no interface number 2 [ 1343.846692][ T965] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1343.873771][ T965] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1343.887874][ T965] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1343.909379][ T965] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1343.930710][ T965] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1343.940934][ T965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.959417][ T965] usb 6-1: Product: syz [ 1343.968097][ T965] usb 6-1: Manufacturer: syz [ 1343.979753][ T965] usb 6-1: SerialNumber: syz [ 1344.015897][ T8] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1344.036184][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.060421][ T8] usb 5-1: config 0 has no interface number 0 [ 1344.066684][ T8] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1344.083688][ T8] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.106400][ T8] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1344.119561][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.129544][ T8] usb 5-1: Product: syz [ 1344.138346][ T8] usb 5-1: Manufacturer: syz [ 1344.145369][ T8] usb 5-1: SerialNumber: syz [ 1344.166027][ T8] usb 5-1: config 0 descriptor?? [ 1344.228028][ T965] usb 6-1: selecting invalid altsetting 0 [ 1344.249078][ T965] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1344.275932][ T965] usb 6-1: No valid video chain found. [ 1344.336495][ T965] usb 6-1: selecting invalid altsetting 0 [ 1344.352748][ T965] usbtest: probe of 6-1:220.1 failed with error -22 [ 1344.364307][ T965] usb 6-1: USB disconnect, device number 2 [ 1344.372352][T31767] loop2: detected capacity change from 0 to 512 [ 1344.485887][T31767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1344.619070][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.631600][ T8] usbtouchscreen: probe of 5-1:0.117 failed with error -71 [ 1344.672127][ T8] usb 5-1: USB disconnect, device number 2 [ 1344.801489][T31780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11347'. [ 1345.062440][T31788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11350'. [ 1345.681669][T31810] geneve2: entered promiscuous mode [ 1345.934255][T31819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11367'. [ 1346.417051][T31841] ipt_rpfilter: unknown options [ 1346.806128][T31858] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11382'. [ 1346.888471][T31855] loop4: detected capacity change from 0 to 4096 [ 1347.067078][T31855] ntfs: (device loop4): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 1347.108023][T31855] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1347.193609][T31855] ntfs: volume version 3.1. [ 1347.233005][T31855] ntfs: (device loop4): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 1347.261062][T31855] ntfs: (device loop4): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 1347.295183][T31855] ntfs: (device loop4): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 1347.320919][T31855] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1347.373207][T31855] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 1347.394621][T31876] Cannot find add_set index 0 as target [ 1347.408734][T31855] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1347.523100][T31878] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 1347.698964][T31883] comedi comedi0: Minor 47 could not be opened [ 1348.575605][T31912] tmpfs: Bad value for 'mpol' [ 1349.103865][T31933] netlink: 'syz.2.11407': attribute type 4 has an invalid length. [ 1349.141222][T31934] netlink: 'syz.5.11410': attribute type 7 has an invalid length. [ 1349.184859][T31934] netlink: 'syz.5.11410': attribute type 8 has an invalid length. [ 1349.192731][T31934] netlink: 'syz.5.11410': attribute type 9 has an invalid length. [ 1349.684985][T31946] loop4: detected capacity change from 0 to 4096 [ 1349.743763][T31946] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1349.753589][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1349.759929][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1349.879481][T31946] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1350.302311][T31972] i2c i2c-0: Invalid block read size 255 [ 1351.170194][T32007] ax25_connect(): syz.2.11438 uses autobind, please contact jreuter@yaina.de [ 1351.263116][ T5810] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1351.437228][T32017] loop5: detected capacity change from 0 to 1024 [ 1351.467585][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 1351.481614][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1351.521090][ T5810] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1351.547467][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.579722][ T5810] usb 4-1: Product: syz [ 1351.584006][ T5810] usb 4-1: Manufacturer: syz [ 1351.613646][ T5810] usb 4-1: SerialNumber: syz [ 1351.634510][ T5810] usb 4-1: config 0 descriptor?? [ 1351.657263][ T5810] hub 4-1:0.0: bad descriptor, ignoring hub [ 1351.675216][ T5810] hub: probe of 4-1:0.0 failed with error -5 [ 1351.684119][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1351.696047][ T5810] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input69 [ 1352.670479][T32048] loop4: detected capacity change from 0 to 1024 [ 1353.491834][T32075] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 1353.752511][T32084] netlink: 'syz.3.11461': attribute type 7 has an invalid length. [ 1353.795104][T32084] netlink: 'syz.3.11461': attribute type 8 has an invalid length. [ 1353.817029][ T965] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1353.844618][T32084] netlink: 'syz.3.11461': attribute type 9 has an invalid length. [ 1354.022184][ T965] usb 6-1: Using ep0 maxpacket: 8 [ 1354.040437][ T965] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1354.049539][ T965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.082148][ T965] usb 6-1: Product: syz [ 1354.086375][ T965] usb 6-1: Manufacturer: syz [ 1354.091181][ T965] usb 6-1: SerialNumber: syz [ 1354.121623][ T965] usb 6-1: config 0 descriptor?? [ 1354.138547][ T965] gspca_main: se401-2.14.0 probing 047d:5003 [ 1354.566717][ T965] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1354.597900][ T965] se401: probe of 6-1:0.0 failed with error -71 [ 1354.629236][ T965] usb 6-1: USB disconnect, device number 3 [ 1354.657038][T32113] ieee802154 phy0 wpan0: encryption failed: -22 [ 1354.718540][T32116] loop3: detected capacity change from 0 to 1764 [ 1355.315050][T32140] loop2: detected capacity change from 0 to 64 [ 1355.422022][T32140] syz.2.11480: attempt to access beyond end of device [ 1355.422022][T32140] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1355.495062][T32140] Buffer I/O error on dev loop2, logical block 1295, async page read [ 1355.579897][T32140] syz.2.11480: attempt to access beyond end of device [ 1355.579897][T32140] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1355.658833][T32140] Buffer I/O error on dev loop2, logical block 1295, async page read [ 1355.689086][ T28] audit: type=1800 audit(2000000239.449:208): pid=32140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11480" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 1356.106313][T32164] bond1: entered allmulticast mode [ 1356.497824][ T5755] usb 4-1: USB disconnect, device number 17 [ 1356.609058][T32187] netlink: 'syz.2.11497': attribute type 8 has an invalid length. [ 1356.685476][T32187] bridge0: entered promiscuous mode [ 1356.805141][T32193] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1358.034746][T32242] netlink: 640 bytes leftover after parsing attributes in process `syz.4.11519'. [ 1358.049134][T32234] loop2: detected capacity change from 0 to 4096 [ 1358.073582][T32234] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1358.859780][T32269] netlink: 'syz.2.11529': attribute type 5 has an invalid length. [ 1358.905465][T32269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11529'. [ 1358.989714][T32271] netlink: 13 bytes leftover after parsing attributes in process `syz.5.11530'. [ 1359.493934][T32293] trusted_key: encrypted_key: master key parameter is missing [ 1360.145829][T30344] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1360.360969][T30344] usb 6-1: Using ep0 maxpacket: 16 [ 1360.390975][T30344] usb 6-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 1360.434509][T30344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 125, changing to 7 [ 1360.471445][T30344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 42438, setting to 1024 [ 1360.518248][T30344] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1360.590879][T30344] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1360.631431][T30344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.657876][T30344] usb 6-1: Product: syz [ 1360.662092][T30344] usb 6-1: Manufacturer: syz [ 1360.691191][T30344] usb 6-1: SerialNumber: syz [ 1360.715468][T30344] usb 6-1: config 0 descriptor?? [ 1360.747922][T30344] peak_usb 6-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1360.789373][T30344] peak_usb 6-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1360.833801][T32336] loop4: detected capacity change from 0 to 512 [ 1360.941830][T32336] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.11555: inode has both inline data and extents flags [ 1360.967295][T30344] peak_usb: probe of 6-1:0.0 failed with error -22 [ 1361.027767][T32336] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.11555: couldn't read orphan inode 15 (err -117) [ 1361.059062][T30344] usb 6-1: USB disconnect, device number 4 [ 1361.075172][T32336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.289445][T32349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11558'. [ 1361.319308][T30558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.342511][T32347] bond6: entered allmulticast mode [ 1362.352888][T32387] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1362.520048][T32394] netlink: 'syz.5.11576': attribute type 1 has an invalid length. [ 1362.567651][T32394] netlink: 244 bytes leftover after parsing attributes in process `syz.5.11576'. [ 1362.583522][T32394] NCSI netlink: No device for ifindex 0 [ 1362.978682][T32401] loop2: detected capacity change from 0 to 4096 [ 1363.014175][T32401] ntfs3: loop2: ino=3, Correct links count -> 2. [ 1363.042848][T32413] loop4: detected capacity change from 0 to 47 [ 1363.129909][T32417] program syz.3.11585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1363.533935][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11587'. [ 1363.554018][T32429] delete_channel: no stack [ 1365.014602][T32481] netlink: 'syz.2.11608': attribute type 1 has an invalid length. [ 1365.033804][T32481] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11608'. [ 1365.788881][T32496] loop4: detected capacity change from 0 to 8192 [ 1365.865546][T32496] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1365.868169][T32509] loop3: detected capacity change from 0 to 1024 [ 1365.903838][T32496] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1365.924676][T32496] REISERFS (device loop4): using ordered data mode [ 1365.931236][T32496] reiserfs: using flush barriers [ 1365.939097][T32496] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1365.976386][T32496] REISERFS (device loop4): checking transaction log (loop4) [ 1365.985382][T32509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.182920][T32509] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz.3.11618: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=695563, rec_len=0, size=1024 fake=1 [ 1366.311751][T32509] EXT4-fs (loop3): Remounting filesystem read-only [ 1366.334619][T32509] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz.3.11618: directory missing '.' [ 1366.356374][T32526] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11621'. [ 1366.443400][T32496] REISERFS (device loop4): Using tea hash to sort names [ 1366.464007][T32496] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1366.498212][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.786897][T32538] loop5: detected capacity change from 0 to 256 [ 1366.901192][T32538] FAT-fs (loop5): Directory bread(block 64) failed [ 1366.958490][T32538] FAT-fs (loop5): Directory bread(block 65) failed [ 1366.965336][T32538] FAT-fs (loop5): Directory bread(block 66) failed [ 1367.020080][T32538] FAT-fs (loop5): Directory bread(block 67) failed [ 1367.032843][T32538] FAT-fs (loop5): Directory bread(block 68) failed [ 1367.040015][T32538] FAT-fs (loop5): Directory bread(block 69) failed [ 1367.071275][T32538] FAT-fs (loop5): Directory bread(block 70) failed [ 1367.077857][T32538] FAT-fs (loop5): Directory bread(block 71) failed [ 1367.113361][T32538] FAT-fs (loop5): Directory bread(block 72) failed [ 1367.135049][T32538] FAT-fs (loop5): Directory bread(block 73) failed [ 1367.257582][T32548] tmpfs: Bad value for 'mpol' [ 1367.602424][T32559] netlink: 112 bytes leftover after parsing attributes in process `syz.4.11633'. [ 1367.631870][T32559] netlink: 'syz.4.11633': attribute type 1 has an invalid length. [ 1367.638915][T32560] netlink: 'syz.5.11634': attribute type 21 has an invalid length. [ 1367.648101][T32560] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11634'. [ 1367.704730][T32560] netlink: 'syz.5.11634': attribute type 1 has an invalid length. [ 1369.130113][T32622] loop5: detected capacity change from 0 to 512 [ 1369.207566][T32622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 1369.254683][T32622] System zones: 1-12 [ 1369.259640][T32622] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.11658: invalid indirect mapped block 8 (level 2) [ 1369.326286][T32622] EXT4-fs (loop5): Remounting filesystem read-only [ 1369.333112][T32622] EXT4-fs (loop5): 1 truncate cleaned up [ 1369.383160][T32622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.614540][T30634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.963896][T32656] loop2: detected capacity change from 0 to 8 [ 1370.022768][T32656] SQUASHFS error: Failed to read block 0x636: -5 [ 1370.041577][T32656] SQUASHFS error: Unable to read metadata cache entry [634] [ 1370.052846][ T965] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1370.089072][T32656] SQUASHFS error: Unable to read metadata cache entry [634] [ 1370.108764][T32656] SQUASHFS error: Unable to read directory block [629:0] [ 1370.239610][ T965] usb 5-1: Using ep0 maxpacket: 16 [ 1370.270936][ T965] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1370.287890][ T965] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1370.309839][ T965] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1370.365897][ T965] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1370.397763][ T965] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1370.417599][ T965] usb 5-1: config 0 has no interface number 0 [ 1370.423767][ T965] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1370.473474][ T965] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1370.503410][ T965] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1370.523592][ T965] usb 5-1: too many endpoints for config 0 interface 125 altsetting 48: 120, using maximum allowed: 30 [ 1370.556120][ T965] usb 5-1: config 0 interface 125 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1370.606065][ T965] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1370.631428][ T965] usb 5-1: config 0 interface 125 has no altsetting 1 [ 1370.661226][ T965] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1370.677879][ T965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.703963][ T965] usb 5-1: Product: syz [ 1370.713893][ T965] usb 5-1: Manufacturer: syz [ 1370.738222][ T965] usb 5-1: SerialNumber: syz [ 1370.767811][ T965] usb 5-1: config 0 descriptor?? [ 1370.883985][T32685] loop5: detected capacity change from 0 to 512 [ 1370.949396][T32685] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1370.998985][T32685] System zones: 0-2, 18-18, 34-34 [ 1371.023198][ T5755] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1371.062942][T32685] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.11682: bg 0: block 248: padding at end of block bitmap is not set [ 1371.135486][T32685] Quota error (device loop5): write_blk: dquota write failed [ 1371.143007][T32685] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1371.186201][T32685] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.11682: Failed to acquire dquot type 1 [ 1371.245322][T30344] usb 5-1: USB disconnect, device number 3 [ 1371.262658][T32685] EXT4-fs (loop5): 1 truncate cleaned up [ 1371.271491][ T5755] usb 3-1: config 0 has an invalid interface number: 170 but max is 0 [ 1371.285695][ T5755] usb 3-1: config 0 has no interface number 0 [ 1371.301997][ T5755] usb 3-1: config 0 interface 170 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1371.317145][T32685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.339527][ T5755] usb 3-1: config 0 interface 170 has no altsetting 0 [ 1371.346368][ T5755] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1371.355651][T32685] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.394997][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.415120][ T5755] usb 3-1: config 0 descriptor?? [ 1371.452915][T32685] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.11682: deleted inode referenced: 12 [ 1371.568875][T30634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.618406][ T5755] usb 3-1: string descriptor 0 read error: -71 [ 1371.645672][ T5755] ums-realtek 3-1:0.170: USB Mass Storage device detected [ 1371.754402][ T5755] usb 3-1: unknown interface protocol 0x83, assuming v1 [ 1371.774102][ T5755] usb 3-1: cannot find UAC_HEADER [ 1371.817294][T32676] loop3: detected capacity change from 0 to 32768 [ 1371.878543][ T5755] snd-usb-audio: probe of 3-1:0.170 failed with error -22 [ 1371.906366][T32676] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1371.938396][ T5755] usb 3-1: USB disconnect, device number 5 [ 1372.173829][T32722] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 1372.186688][T32676] XFS (loop3): Ending clean mount [ 1372.538017][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1373.451030][T32735] loop2: detected capacity change from 0 to 32768 [ 1373.575191][T32735] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1373.666120][T30344] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1373.728457][T32735] XFS (loop2): Ending clean mount [ 1373.759621][T32735] XFS (loop2): Quotacheck needed: Please wait. [ 1373.901941][T30344] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1373.916810][T30344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.939861][T32735] XFS (loop2): Quotacheck: Done. [ 1373.946599][T30344] usb 4-1: Product: syz [ 1373.952746][ T305] ufs: You didn't specify the type of your ufs filesystem [ 1373.952746][ T305] [ 1373.952746][ T305] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1373.952746][ T305] [ 1373.952746][ T305] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1373.958540][T30344] usb 4-1: Manufacturer: syz [ 1373.997075][T30344] usb 4-1: SerialNumber: syz [ 1374.017227][ T305] ufs: ufstype=old is supported read-only [ 1374.030235][T30344] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1374.045620][ T305] syz.5.11702: attempt to access beyond end of device [ 1374.045620][ T305] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1374.065961][ T965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1374.149199][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1374.318233][ T307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11704'. [ 1374.363495][T32764] loop4: detected capacity change from 0 to 40427 [ 1374.468921][T32764] F2FS-fs (loop4): invalid crc value [ 1374.519505][T32764] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1374.634666][ T5755] usb 4-1: USB disconnect, device number 18 [ 1374.657496][T32764] F2FS-fs (loop4): Start checkpoint disabled! [ 1374.680708][T32764] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1375.104497][ T965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1375.145788][ T965] ath9k_htc: Failed to initialize the device [ 1375.165184][ T5755] usb 4-1: ath9k_htc: USB layer deinitialized [ 1375.360376][ T321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1375.613559][ T311] loop5: detected capacity change from 0 to 32768 [ 1375.698124][ T311] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 1375.698124][ T311] [ 1375.741447][ T311] ialloc: diAlloc returned -5! [ 1375.781414][ T335] netlink: 'syz.2.11715': attribute type 1 has an invalid length. [ 1375.868976][T30916] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1376.048366][T30916] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1376.083867][T30916] usb 5-1: config 0 has no interface number 0 [ 1376.090065][T30916] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1376.138545][T30916] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1376.168927][T30916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.184821][T30916] usb 5-1: Product: syz [ 1376.195822][T30916] usb 5-1: Manufacturer: syz [ 1376.204843][T30916] usb 5-1: SerialNumber: syz [ 1376.221600][T30916] usb 5-1: config 0 descriptor?? [ 1376.251931][T30916] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 1376.290494][ T347] netlink: 'syz.2.11722': attribute type 32 has an invalid length. [ 1376.512351][ T5755] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1376.520692][ C0] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1376.712640][ T5755] usb 4-1: not running at top speed; connect to a high speed hub [ 1376.713683][T30916] usb 5-1: USB disconnect, device number 4 [ 1376.732018][ T5755] usb 4-1: config 1 has an invalid interface number: 78 but max is 0 [ 1376.750686][ T5755] usb 4-1: config 1 has no interface number 0 [ 1376.750755][T30916] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 1376.772917][ T5755] usb 4-1: config 1 interface 78 has no altsetting 0 [ 1376.805415][ T5755] usb 4-1: string descriptor 0 read error: -22 [ 1376.820128][ T5755] usb 4-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1376.838472][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.864281][ T5755] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1376.883094][ T5755] usb 4-1: selecting invalid altsetting 0 [ 1377.104728][ T369] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1377.122642][ T5755] usb 4-1: USB disconnect, device number 19 [ 1377.124012][ T2320] pvrusb2: control-write URB failure, status=-71 [ 1377.163220][ T2320] pvrusb2: Device being rendered inoperable [ 1377.184055][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1377.209546][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1377.425518][ T378] tipc: Can't bind to reserved service type 0 [ 1377.435986][ T372] loop5: detected capacity change from 0 to 8192 [ 1377.477086][ T372] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1377.536567][ T372] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1377.575190][ T372] REISERFS (device loop5): using ordered data mode [ 1377.588508][ T372] reiserfs: using flush barriers [ 1377.602136][ T372] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1377.640669][ T372] REISERFS (device loop5): checking transaction log (loop5) [ 1377.989756][ T372] REISERFS (device loop5): Using tea hash to sort names [ 1378.005339][ T372] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1378.348843][ T5755] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1378.571891][ T5755] usb 5-1: Using ep0 maxpacket: 32 [ 1378.584411][ T5755] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1378.606185][ T5755] usb 5-1: config 0 has no interface number 0 [ 1378.666672][ T5755] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 1378.681939][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.700721][ T5755] usb 5-1: Product: syz [ 1378.705126][ T5755] usb 5-1: Manufacturer: syz [ 1378.709752][ T5755] usb 5-1: SerialNumber: syz [ 1378.729899][ T5755] usb 5-1: config 0 descriptor?? [ 1378.765063][ T5755] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1378.902352][ T422] loop3: detected capacity change from 0 to 1024 [ 1378.921366][ T424] netlink: 'syz.2.11755': attribute type 3 has an invalid length. [ 1378.930532][ T422] EXT4-fs: Ignoring removed orlov option [ 1378.943437][ T422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1378.958831][ T424] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.11755'. [ 1379.016809][ T422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.178436][ T5755] gspca_sn9c2028: read1 error -71 [ 1379.187099][ T5755] gspca_sn9c2028: read1 error -71 [ 1379.192241][ T5755] sn9c2028: probe of 5-1:0.119 failed with error -71 [ 1379.209093][ T5755] usb 5-1: USB disconnect, device number 5 [ 1379.249721][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.258218][ T433] loop5: detected capacity change from 0 to 164 [ 1379.354779][ T433] Unable to read rock-ridge attributes [ 1379.403479][ T433] Unable to read rock-ridge attributes [ 1379.409167][ T433] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1379.928877][ T454] netlink: 'syz.2.11767': attribute type 46 has an invalid length. [ 1380.008370][ T458] loop5: detected capacity change from 0 to 128 [ 1380.029622][ T458] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1380.724990][ T965] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1380.873031][ T28] audit: type=1326 audit(2000000266.465:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=485 comm="syz.5.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1380.930060][ T28] audit: type=1326 audit(2000000266.497:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=485 comm="syz.5.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1380.952402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1380.977674][ T965] usb 5-1: config 0 has an invalid interface number: 170 but max is 0 [ 1380.985906][ T965] usb 5-1: config 0 has no interface number 0 [ 1381.004215][ T28] audit: type=1326 audit(2000000266.497:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=485 comm="syz.5.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1381.026510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1381.026967][ T965] usb 5-1: config 0 interface 170 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1381.027004][ T965] usb 5-1: config 0 interface 170 has no altsetting 0 [ 1381.027042][ T965] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1381.027070][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.041702][ T965] usb 5-1: config 0 descriptor?? [ 1381.146140][ T28] audit: type=1326 audit(2000000266.497:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=485 comm="syz.5.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1381.168412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1381.307888][ T496] loop3: detected capacity change from 0 to 4096 [ 1381.325694][ T496] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1381.346851][ T965] usb 5-1: string descriptor 0 read error: -71 [ 1381.365048][ T965] ums-realtek 5-1:0.170: USB Mass Storage device detected [ 1381.465330][ T965] usb 5-1: unknown interface protocol 0x83, assuming v1 [ 1381.499373][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1381.499496][ T965] usb 5-1: cannot find UAC_HEADER [ 1381.625830][ T965] snd-usb-audio: probe of 5-1:0.170 failed with error -22 [ 1381.654040][ T965] usb 5-1: USB disconnect, device number 6 [ 1381.694185][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1381.721265][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1381.758827][ T8] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 1381.787283][ T8] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.820848][ T8] usb 3-1: config 4 has no interface number 0 [ 1381.834548][ T8] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1381.849423][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.867287][ T8] usb 3-1: Product: syz [ 1381.880745][ T8] usb 3-1: Manufacturer: syz [ 1381.885394][ T8] usb 3-1: SerialNumber: syz [ 1382.149456][ T8] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 1382.171597][ T8] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 1382.183359][ T8] usb 3-1: No valid video chain found. [ 1382.207378][ T8] usb 3-1: USB disconnect, device number 6 [ 1382.277916][ T523] loop3: detected capacity change from 0 to 2048 [ 1382.313209][ T523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1382.344543][ T28] audit: type=1326 audit(2000000268.031:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=524 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1382.413642][ T28] audit: type=1326 audit(2000000268.031:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=524 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1382.464574][ T28] audit: type=1326 audit(2000000268.074:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=524 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1382.514602][ T28] audit: type=1326 audit(2000000268.085:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=524 comm="syz.5.11801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d79aeb9 code=0x7ffc0000 [ 1382.582213][ T28] audit: type=1800 audit(2000000268.149:217): pid=523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11800" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 1383.164602][ T552] netlink: 11 bytes leftover after parsing attributes in process `syz.3.11815'. [ 1383.372501][ T559] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1383.665020][ T571] netlink: 'syz.3.11826': attribute type 1 has an invalid length. [ 1383.880068][ T579] xt_CONNSECMARK: invalid mode: 66 [ 1384.183409][ T592] program syz.4.11834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1384.218572][ T592] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1384.297390][ T595] loop3: detected capacity change from 0 to 164 [ 1384.345043][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1384.374544][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1384.397387][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1384.418216][ T601] loop4: detected capacity change from 0 to 256 [ 1384.426172][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1384.466490][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1384.505955][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1384.538395][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1384.551237][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1384.563778][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1384.576189][ T597] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1385.484275][ T621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11849'. [ 1385.493818][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1385.712786][ T8] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1385.722831][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.735236][ T8] usb 5-1: Product: syz [ 1385.739451][ T8] usb 5-1: Manufacturer: syz [ 1385.755122][ T8] usb 5-1: SerialNumber: syz [ 1385.765263][ T8] usb 5-1: config 0 descriptor?? [ 1385.779118][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1386.159099][ T5755] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1386.170539][ T8] gspca_sunplus: reg_w_riv err -71 [ 1386.177414][ T8] sunplus: probe of 5-1:0.0 failed with error -71 [ 1386.194903][ T8] usb 5-1: USB disconnect, device number 7 [ 1386.214565][ T623] loop3: detected capacity change from 0 to 32768 [ 1386.334166][ T639] tmpfs: Bad value for 'mpol' [ 1386.373378][ T5755] usb 6-1: Using ep0 maxpacket: 32 [ 1386.383817][ T5755] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1386.415290][ T5755] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1386.440834][ T5755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.458279][ T5755] usb 6-1: Product: syz [ 1386.464112][ T5755] usb 6-1: Manufacturer: syz [ 1386.476119][ T5755] usb 6-1: SerialNumber: syz [ 1386.483510][ T5755] usb 6-1: config 0 descriptor?? [ 1386.493766][ T631] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1386.509746][ T5755] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input70 [ 1386.811635][ T631] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1386.818238][ T631] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1386.876512][ T631] vhci_hcd vhci_hcd.0: Device attached [ 1386.927537][ T646] vhci_hcd: connection closed [ 1386.928138][T30881] vhci_hcd: stop threads [ 1386.937517][T30881] vhci_hcd: release socket [ 1386.945498][T30916] usb 6-1: USB disconnect, device number 5 [ 1386.945549][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1386.957782][T30881] vhci_hcd: disconnect device [ 1387.003487][ T651] netlink: 800 bytes leftover after parsing attributes in process `syz.2.11864'. [ 1387.033344][ T651] netlink: 1301 bytes leftover after parsing attributes in process `syz.2.11864'. [ 1387.476305][ T664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11869'. [ 1387.486654][ T664] netlink: 312 bytes leftover after parsing attributes in process `syz.3.11869'. [ 1387.680531][ T666] loop4: detected capacity change from 0 to 4096 [ 1387.694189][ T666] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1388.102471][ T684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11878'. [ 1388.140715][ T684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11878'. [ 1388.534616][ T699] loop2: detected capacity change from 0 to 2048 [ 1388.564391][ T699] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1388.634577][ T705] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1388.638709][ T699] syz.2.11883: attempt to access beyond end of device [ 1388.638709][ T699] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1388.784021][ T711] veth0_macvtap: left promiscuous mode [ 1388.831431][ T711] macvtap0: refused to change device tx_queue_len [ 1388.918161][ T699] syz.2.11883: attempt to access beyond end of device [ 1388.918161][ T699] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 1388.947267][ T699] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 1388.986439][ T715] loop5: detected capacity change from 0 to 64 [ 1389.179657][ T719] 9pnet_fd: Insufficient options for proto=fd [ 1389.202169][ T721] loop2: detected capacity change from 0 to 764 [ 1389.290761][T30916] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1389.354206][ T725] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11894'. [ 1389.486848][T30916] usb 5-1: Using ep0 maxpacket: 32 [ 1389.506103][T30916] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1389.514242][T30916] usb 5-1: config 0 has no interface number 0 [ 1389.545199][T30916] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1389.580433][T30916] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1389.614417][T30916] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1389.644172][T30916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.665029][T30916] usb 5-1: Product: syz [ 1389.669243][T30916] usb 5-1: Manufacturer: syz [ 1389.687034][T30916] usb 5-1: SerialNumber: syz [ 1389.711797][T30916] usb 5-1: config 0 descriptor?? [ 1390.127201][T30916] radio-si470x 5-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1390.148764][T30916] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 1390.200732][T30916] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1390.240891][T30916] usb 5-1: USB disconnect, device number 8 [ 1390.359588][ T732] loop5: detected capacity change from 0 to 32768 [ 1390.393468][ T732] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.11898 (732) [ 1390.444768][ T753] netlink: 'syz.2.11909': attribute type 1 has an invalid length. [ 1390.460002][ T732] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1390.468647][ T753] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11909'. [ 1390.491865][ T732] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1390.503062][ T732] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1390.503809][ T753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11909'. [ 1390.513905][ T732] BTRFS info (device loop5): use lzo compression, level 0 [ 1390.538458][ T732] BTRFS info (device loop5): max_inline at 0 [ 1390.551434][ T732] BTRFS info (device loop5): using free space tree [ 1390.644950][ T732] BTRFS info (device loop5): enabling ssd optimizations [ 1390.652269][ T732] BTRFS info (device loop5): auto enabling async discard [ 1390.795948][ T776] netlink: 'syz.2.11912': attribute type 6 has an invalid length. [ 1390.867675][ T732] BTRFS error (device loop5: state M): unrecognized mount option '0x000000000000000018446744073709551615' [ 1390.908935][ T781] netlink: 'syz.4.11913': attribute type 1 has an invalid length. [ 1390.988391][T30634] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1391.151581][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1391.351273][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1391.369500][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1391.394433][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1391.414230][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.454891][ T780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1391.494049][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1391.982361][T30344] usb 4-1: USB disconnect, device number 20 [ 1392.044195][ T803] fuse: Unknown parameter 'no' [ 1392.081948][ T805] IPv6: NLM_F_CREATE should be specified when creating new route [ 1392.564978][ T823] loop5: detected capacity change from 0 to 64 [ 1392.603608][ T823] [ 1392.605988][ T823] ====================================================== [ 1392.613025][ T823] WARNING: possible circular locking dependency detected [ 1392.618943][ T825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11936'. [ 1392.620039][ T823] syzkaller #0 Not tainted [ 1392.633493][ T823] ------------------------------------------------------ [ 1392.640525][ T823] syz.5.11934/823 is trying to acquire lock: [ 1392.646526][ T823] ffff888054b940b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 1392.655888][ T823] [ 1392.655888][ T823] but task is already holding lock: [ 1392.663240][ T823] ffff888059c46278 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 1392.674017][ T823] [ 1392.674017][ T823] which lock already depends on the new lock. [ 1392.674017][ T823] [ 1392.684411][ T823] [ 1392.684411][ T823] the existing dependency chain (in reverse order) is: [ 1392.693413][ T823] [ 1392.693413][ T823] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 1392.702622][ T823] __mutex_lock+0x136/0xcc0 [ 1392.707670][ T823] hfs_extend_file+0xff/0x1380 [ 1392.712946][ T823] hfs_bmap_reserve+0x107/0x430 [ 1392.718306][ T823] __hfs_ext_write_extent+0x1fa/0x470 [ 1392.724204][ T823] hfs_ext_write_extent+0x17f/0x210 [ 1392.729915][ T823] hfs_write_inode+0xdc/0x880 [ 1392.735117][ T823] __writeback_single_inode+0x705/0xec0 [ 1392.741195][ T823] writeback_sb_inodes+0x7cd/0xf50 [ 1392.746820][ T823] wb_writeback+0x46a/0xbf0 [ 1392.751839][ T823] wb_workfn+0x400/0xe60 [ 1392.756596][ T823] process_scheduled_works+0xa5d/0x15d0 [ 1392.762663][ T823] worker_thread+0xa55/0xfc0 [ 1392.767778][ T823] kthread+0x2fa/0x390 [ 1392.772361][ T823] ret_from_fork+0x48/0x80 [ 1392.777296][ T823] ret_from_fork_asm+0x11/0x20 [ 1392.782577][ T823] [ 1392.782577][ T823] -> #0 (&tree->tree_lock/1){+.+.}-{3:3}: [ 1392.790484][ T823] __lock_acquire+0x2df1/0x7d40 [ 1392.795851][ T823] lock_acquire+0x19e/0x420 [ 1392.800868][ T823] __mutex_lock+0x136/0xcc0 [ 1392.805889][ T823] hfs_find_init+0x17e/0x1f0 [ 1392.810995][ T823] hfs_extend_file+0x361/0x1380 [ 1392.816361][ T823] hfs_bmap_reserve+0x107/0x430 [ 1392.821721][ T823] hfs_cat_create+0x1fe/0x6b0 [ 1392.826915][ T823] hfs_create+0x66/0xd0 [ 1392.831586][ T823] path_openat+0x12a0/0x3230 [ 1392.836687][ T823] do_filp_open+0x1f5/0x430 [ 1392.841702][ T823] do_sys_openat2+0x134/0x1d0 [ 1392.846900][ T823] __x64_sys_creat+0x90/0xb0 [ 1392.852003][ T823] do_syscall_64+0x55/0xa0 [ 1392.856934][ T823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1392.863349][ T823] [ 1392.863349][ T823] other info that might help us debug this: [ 1392.863349][ T823] [ 1392.873583][ T823] Possible unsafe locking scenario: [ 1392.873583][ T823] [ 1392.881023][ T823] CPU0 CPU1 [ 1392.886381][ T823] ---- ---- [ 1392.891738][ T823] lock(&HFS_I(tree->inode)->extents_lock); [ 1392.897730][ T823] lock(&tree->tree_lock/1); [ 1392.904934][ T823] lock(&HFS_I(tree->inode)->extents_lock); [ 1392.913449][ T823] lock(&tree->tree_lock/1); [ 1392.918143][ T823] [ 1392.918143][ T823] *** DEADLOCK *** [ 1392.918143][ T823] [ 1392.926290][ T823] 4 locks held by syz.5.11934/823: [ 1392.931391][ T823] #0: ffff88803038e418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1392.940630][ T823] #1: ffff888059c45db8 (&type->i_mutex_dir_key#25){++++}-{3:3}, at: path_openat+0x7dc/0x3230 [ 1392.950889][ T823] #2: ffff88807b57c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 1392.960453][ T823] #3: ffff888059c46278 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 1392.971669][ T823] [ 1392.971669][ T823] stack backtrace: [ 1392.977546][ T823] CPU: 1 PID: 823 Comm: syz.5.11934 Not tainted syzkaller #0 [ 1392.984911][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1392.994958][ T823] Call Trace: [ 1392.998249][ T823] [ 1393.001176][ T823] dump_stack_lvl+0x18c/0x250 [ 1393.005855][ T823] ? load_image+0x400/0x400 [ 1393.010354][ T823] ? show_regs_print_info+0x20/0x20 [ 1393.015989][ T823] ? print_circular_bug+0x12b/0x1a0 [ 1393.021194][ T823] check_noncircular+0x2fc/0x400 [ 1393.026149][ T823] ? look_up_lock_class+0x75/0x140 [ 1393.031254][ T823] ? print_deadlock_bug+0x5d0/0x5d0 [ 1393.036450][ T823] ? lockdep_lock+0xf5/0x230 [ 1393.041076][ T823] ? _find_first_zero_bit+0xd3/0x100 [ 1393.046356][ T823] __lock_acquire+0x2df1/0x7d40 [ 1393.051229][ T823] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1393.057132][ T823] ? verify_lock_unused+0x140/0x140 [ 1393.062348][ T823] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1393.068249][ T823] ? _raw_spin_unlock+0x40/0x40 [ 1393.073104][ T823] ? stack_trace_save+0xaa/0x100 [ 1393.078039][ T823] ? stack_trace_snprint+0xf0/0xf0 [ 1393.083147][ T823] lock_acquire+0x19e/0x420 [ 1393.087645][ T823] ? hfs_find_init+0x17e/0x1f0 [ 1393.092418][ T823] ? hfs_extend_file+0x361/0x1380 [ 1393.097444][ T823] ? hfs_bmap_reserve+0x107/0x430 [ 1393.102466][ T823] ? __x64_sys_creat+0x90/0xb0 [ 1393.107234][ T823] ? __might_sleep+0xe0/0xe0 [ 1393.112515][ T823] ? read_lock_is_recursive+0x20/0x20 [ 1393.117885][ T823] __mutex_lock+0x136/0xcc0 [ 1393.122388][ T823] ? hfs_find_init+0x17e/0x1f0 [ 1393.127154][ T823] ? hfs_find_init+0x17e/0x1f0 [ 1393.131919][ T823] ? mutex_lock_nested+0x20/0x20 [ 1393.136862][ T823] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1393.142496][ T823] ? hfs_find_init+0xa7/0x1f0 [ 1393.147180][ T823] ? hfs_find_init+0xa7/0x1f0 [ 1393.151866][ T823] ? __kmalloc+0xe2/0x230 [ 1393.156205][ T823] hfs_find_init+0x17e/0x1f0 [ 1393.160794][ T823] hfs_extend_file+0x361/0x1380 [ 1393.165644][ T823] ? hfs_get_block+0xc50/0xc50 [ 1393.170404][ T823] ? rcu_is_watching+0x15/0xb0 [ 1393.175184][ T823] ? trace_contention_end+0x39/0xe0 [ 1393.180375][ T823] ? __mutex_lock+0x315/0xcc0 [ 1393.185054][ T823] ? mutex_lock_nested+0x20/0x20 [ 1393.189991][ T823] hfs_bmap_reserve+0x107/0x430 [ 1393.194840][ T823] hfs_cat_create+0x1fe/0x6b0 [ 1393.199512][ T823] ? hfs_cat_build_key+0x170/0x170 [ 1393.204622][ T823] ? _raw_spin_unlock+0x28/0x40 [ 1393.209464][ T823] ? hfs_new_inode+0x92d/0xc00 [ 1393.214231][ T823] hfs_create+0x66/0xd0 [ 1393.218382][ T823] ? hfs_lookup+0x320/0x320 [ 1393.222884][ T823] path_openat+0x12a0/0x3230 [ 1393.227501][ T823] ? do_filp_open+0x430/0x430 [ 1393.232171][ T823] ? __virt_addr_valid+0x18c/0x540 [ 1393.237279][ T823] do_filp_open+0x1f5/0x430 [ 1393.241779][ T823] ? vfs_tmpfile+0x490/0x490 [ 1393.246369][ T823] ? _raw_spin_unlock+0x28/0x40 [ 1393.251215][ T823] ? alloc_fd+0x58f/0x630 [ 1393.255547][ T823] do_sys_openat2+0x134/0x1d0 [ 1393.260224][ T823] ? do_sys_open+0xe0/0xe0 [ 1393.264644][ T823] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1393.270657][ T823] ? lock_chain_count+0x20/0x20 [ 1393.275502][ T823] __x64_sys_creat+0x90/0xb0 [ 1393.280097][ T823] do_syscall_64+0x55/0xa0 [ 1393.284512][ T823] ? clear_bhb_loop+0x40/0x90 [ 1393.289187][ T823] ? clear_bhb_loop+0x40/0x90 [ 1393.293859][ T823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1393.299756][ T823] RIP: 0033:0x7f149d79aeb9 [ 1393.304181][ T823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.324317][ T823] RSP: 002b:00007f149e5f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1393.332768][ T823] RAX: ffffffffffffffda RBX: 00007f149da15fa0 RCX: 00007f149d79aeb9 [ 1393.340768][ T823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1393.348766][ T823] RBP: 00007f149d808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1393.356770][ T823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1393.364771][ T823] R13: 00007f149da16038 R14: 00007f149da15fa0 R15: 00007ffef0c4d3e8 [ 1393.372786][ T823] [ 1393.384604][ T823] hfs: request for non-existent node 327680 in B*Tree [ 1393.391632][ T823] hfs: request for non-existent node 327680 in B*Tree [ 1393.521882][T30344] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1393.702155][T30344] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1393.713046][T30344] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64 [ 1393.724065][T30344] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1393.732703][T30344] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1393.741958][T30344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.749997][T30344] usb 5-1: Product: syz [ 1393.754150][T30344] usb 5-1: Manufacturer: syz [ 1393.758804][T30344] usb 5-1: SerialNumber: syz [ 1393.764919][T30344] usb 5-1: config 0 descriptor?? [ 1393.772265][T30344] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1393.968704][T30344] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1393.977748][T30344] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 1394.185861][T30344] usb 5-1: USB disconnect, device number 9